Diagnosing automatic login issues (ActiveDirectory) using the DDGetSID CLI tool

Andy Chen Updated by Andy Chen

The new DDGetSID CLI tool is a command-line interface app developed to help you diagnose Windows client Active Directory login. Use this tool to:

  • Find out a user's company SID
  • Diagnose auto-login issues
The tool can be downloaded from here.

Check out our Logging in with Active Directory knowledge base article for more information on getting this feature setup.

Run the DeskDirector SID Test Tool
  1. Execute the downloaded tool by double-clicking the exe program on a user's machine. The tool will print out the diagnostic logs and test results.
  1. Copy the SID in the test result to setup the user's company domain SID if it has not been done. Detail instructions: Logging in with Active Directory
  2. Test the desktop client automatic login with users from this company.
Setup a custom domain SID (Advanced)

In some rare cases, you may have multiple companies using the same domain SID. This means contacts could be created under the wrong companies.

DD Portal for windows supports custom domain SIDs from version 1.84.0.

The custom domain SID can be setup in two ways:

  • Windows Registry or
  • Custom Active Directory attribute.

Windows Registry

Note that all desktops in the company will need to be setup with the same registry key & value.

1. Create a string value DeskDirectorSID under:

HKEY_LOCAL_MACHINE\SOFTWARE\DeskDirectorPortal

for 32-bit device, or

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\DeskDirectorPortal

for 64-bit device.

2. Set the value to a unique SID.

You can generate a random SID with the DDGetSid CLI tool.

Parameter

Command

-g

Generates a random SID.

-g -s

Generates a random SID and set it to registry.

Administrator permission required.

-h

Prints usage help.

Custom Active Directory attribute

1. Create a Unicode string attribute named deskDirectorSID or deskDirectorGUID in Active Directory Schema.

2. Associate the attribute to the domain class in the property dialogue.

3. Restart the Active Directory Domain Services.

4. Generate a SID and set it to the custom attribute.

5. Verify the custom domain SID is being used in the CLI tool.

References

How to Create a Custom Attribute in Active Directory

Generate an unique X500 Object ID for AD custom attribute

How did we do?

Diagnosing DeskDirector Desktop Portal Issues

Antivirus Blocking DeskDirector Portal Installation

Contact