diecknet

function Get-MachineSID {
    # Going for the local SID by finding a local account and removing its Relative ID (RID)
    $LocalAccountSID = Get-WmiObject -Query "SELECT SID FROM Win32_UserAccount WHERE LocalAccount = 'True'" |Select-Object -First 1 -ExpandProperty SID
    $MachineSID      = $LocalAccountSID -replace '-[^-]+$'
    return $MachineSID
}