Diagnosing login problems using the new DDGetSID CLI tool

Andy Chen Updated by Andy Chen

The new DDGetSID CLI tool is a command-line interface app developed to help you diagnose Windows client Active Directory login. Use this tool to:

  • Find out a user's company SID
  • Diagnose auto-login issues
The tool can be downloaded from here.

Run the SID Test

  1. Execute the downloaded tool by double-click the exe program on a user's machine. The tool will print out the diagnose logs and a test result.
  1. Copy the SID in the test result to setup the user's company domain SID if it has not been done. Detail instructions: Logging in with Active Directory
  2. Test the desktop client automatic login with users from this company.

Setup a custom domain SID (Advanced)

In some rare cases, you may have multiple companies using the same domain SID. This means contacts could be created under the wrong companies.

DD Portal for windows supports custom domain SID's from version 1.84.0.

The custom domain SID can be setup in two ways:

  • Windows Registry or
  • Custom Active Directory attribute.

Windows Registry

Note that all desktops in the company will need to be setup with the same registry key & value.

1. Create a string value DeskDirectorSID under:

HKEY_LOCAL_MACHINE\SOFTWARE\DeskDirectorPortal

for 32-bit device, or

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\DeskDirectorPortal

for 64-bit device.

2. Set the value to a unique SID.

You can generate a random SID with the DDGetSid CLI tool.

Parameter

Command

-g

Generates a random SID.

-g -s

Generates a random SID and set it to registry.

Administrator permission required.

-h

Prints usage help.

Custom Active Directory attribute

1. Create a Unicode string attribute named deskDirectorSID or deskDirectorGUID in Active Directory Schema.

2. Associate the attribute to the domain class in the property dialogue.

3. Restart the Active Directory Domain Services.

4. Generate a SID and set it to the custom attribute.

5. Verify the custom domain SID is being used in the CLI tool.

References

How to Create a Custom Attribute in Active Directory

Generate an unique X500 Object ID for AD custom attribute

How did we do?

Installing DD Portal

Antivirus Issues

Contact