You can run ADFind from any box as long as it can reach a domain controller. Obviously you would replace domaincontroller01 with the name or IP of a domain controller and change the "CN=Users,DC=domain,DC=com" to reflect the path to the users in question.
psgetsid
from SysInternalsPSTools
will do this. Put a SID on the command line it will give you the user/group name, and visa-versa.ADFind can do this. The list of options is here. For example, you might do something like this to export a list of users with their SID:
You can run ADFind from any box as long as it can reach a domain controller. Obviously you would replace domaincontroller01 with the name or IP of a domain controller and change the "CN=Users,DC=domain,DC=com" to reflect the path to the users in question.
Fire up windows powershell and run:
the output should look something like this,
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList
S-1-5-19
)ProfileImagePath
(it'll have something like%SystemDrive%\Documents and Settings\LocalService
).So in this example SID S-1-5-19 is LocalService