group SID

(is | is not) SID

Purpose

Warns when the specified AD group's type is/is not the specified SID (read more information on AD object names and identities).

Example configuration

# Warns when a matching group's SID is not the listed value.
[group:"Field Consultants" "CN=Field Services OU Admins,OU=FC Groups,OU=Field Consulting,OU=Delegated,OU=TechServices,OU=Urbana,DC=ad,DC=uillinois,DC=edu" "CN=Tech Services FC Tech\*,OU=FC Groups,OU=Field Consulting,OU=Delegated,OU=TechServices,OU=Urbana,DC=ad,DC=uillinois,DC=edu" "03efc439-b0dc-4615-afed-646fd22dfe34"]
group SID is S-1-5-21-2509641344-1052565914-3260824488-788578

Example output

Line 8: 3 AD groups with SIDs that are not “S-1-5-21-2509641344-1052565914-3260824488-788578”:

Group SID	Group Name	Group sAMAccountName
S-1-5-21-2509641344-1052565914-3260824488-782725	Field Services OU Admins	Field Services OU Admins
S-1-5-21-2509641344-1052565914-3260824488-784551	Tech Services FC TechOps	FCTechOps
S-1-5-21-2509641344-1052565914-3260824488-1307695	FC-Unix	FC-Unix

Example configuration

# Warns when a matching group's SID is not the listed value.
[group:"Field Consultants" "CN=Field Services OU Admins,OU=FC Groups,OU=Field Consulting,OU=Delegated,OU=TechServices,OU=Urbana,DC=ad,DC=uillinois,DC=edu" "CN=Tech Services FC Tech\*,OU=FC Groups,OU=Field Consulting,OU=Delegated,OU=TechServices,OU=Urbana,DC=ad,DC=uillinois,DC=edu" "03efc439-b0dc-4615-afed-646fd22dfe34"]
group SID is not S-1-5-21-2509641344-1052565914-3260824488-788578

Example output

Line 8: 1 AD group with a SID that is “S-1-5-21-2509641344-1052565914-3260824488-788578”:

Group SID	Group Name	Group sAMAccountName
S-1-5-21-2509641344-1052565914-3260824488-788578	Field Consultants	Field Consultants