Sid Command

Use Sid to update or list either all or specified registered security identifiers (SIDs).

Required Permissions

To use the Sid command, you must be a member of the Team Foundation Administrators security group on the Team Foundation application-tier server and a member of the sysadmin security group for the SQL Server on the Team Foundation data-tier server. For more information, see Team Foundation Server Permissions.

Sid [/noprompt | /i] [/Change source target] [account]

Parameters

Argument	Description
source	Used with /Change option to instruct the Sid command to change the SIDs for users currently in the Team Foundation Server integration database that are in the domain or computer in a work group specified by source.
target	Used with /Change option to instruct the Sid command to change the SIDs in the Active Directory of the domain or computer in a work group specified by target.
account	Used with /Change option to instruct the command to update the SIDs for the account specified by account.

Option	Description
/Change	Synchronizes the SID in the Team Foundation Server database with the SID from Windows. If they are different, updates the Team Foundation Server SIDs for all (/All) or a specific user account. This option only works in workgroup environments. If /Change is not specified Sid command defaults to listing the SIDs.

Remarks

Important

We recommend that you back up the databases in the Team Foundation Server data tier server.

Team Foundation Server uses SIDs for identifying users and associating them to permissions. Team Foundation source control stores the users’ information in the identity table where the user's SID is registered as the authenticationKey.

The TFSAdminUtil Sid command is used by an administrator to update user accounts to respond to renaming users, or reinstalling Team Foundation onto a different computer. For example, if the administrator wants to move the Team Foundation installation to a new computer, the administrator must follow these steps:

1. Restore the data backups and create the application tier.

2. Use the TFSAdminUtil Sid command to list all of the accounts.

3. Use the list generated in step two (2) to create all the user accounts.

4. Run TFSAdminUtil Sid /Change source target command to update the SIDs of the user accounts in the Team Foundation Server.

   This results in the user accounts retaining all of their previous permissions and ownerships.

   Note

   After you use the Sid command, you can expect unpredictable behavior until Team Foundation Server synchronizes with Active Directory. It is recommended that the migrated users do not use the system for at least an hour after the Sid command has been run.

Example

The following command instructs the Sid command of the TFSAdminUtil utility to list all registered security identifiers.

>TFSAdminUtil.exe Sid

See Also

Other Resources

Using Team Foundation Server Command-Line Tools
Administering Team Foundation Server
Managing Team Foundation Server Services and Service Accounts