PowerShell: Security-related

powershell_security.ps1

#Requires -Version 5.1
# Reference: 1) https://docs.microsoft.com/en-us/dotnet/api/system.security.principal

# Example 1: Retrieve security identifier value (SID) for an NT account
# Adapted from https://devblogs.microsoft.com/scripting/use-powershell-to-translate-a-users-sid-to-an-active-directory-account-name/
$DomainName = ""   # Domain of account, commonly $Env:USERDOMAIN
$AccountName = ""  # Name of account, commonly $Env:USERNAME

$NTAccount = [Security.Principal.NTAccount]::New($DomainName, $AccountName)
$Sid = ($NTAccount.Translate([Security.Principal.SecurityIdentifier])).Value

# Example 2: Retrieve account domain and name for a security identifier (SID) value
$Sid = "" # String representation of security identifier (SID) value

$SecurityIdentifier = [Security.Principal.SecurityIdentifier]::New($Sid)
$NTAccount = $SecurityIdentifier.Translate([Security.Principal.NTAccount])