I realised there is an easier way to get the data
|
1 2 3 4 5 6 7 8 9 10 11 12 13 |
<span style="color:#00008b;">function</span> <span style="color:#8a2be2;">get-SID</span> <span style="color:#000000;">{</span> <span style="color:#00008b;">param</span> <span style="color:#000000;">(</span> <span style="color:#008080;">[string]</span><span style="color:#ff4500;">$computername</span> <span style="color:#a9a9a9;">=</span> <span style="color:#ff4500;">$env:COMPUTERNAME</span> <span style="color:#000000;">)</span> <span style="color:#0000ff;">Get-WmiObject</span> <span style="color:#000080;">-Class</span> <span style="color:#8a2be2;">Win32_AccountSID</span> <span style="color:#000080;">-ComputerName</span> <span style="color:#ff4500;">$computername</span> <span style="color:#a9a9a9;">|</span> <span style="color:#0000ff;">foreach</span> <span style="color:#000000;">{</span> <span style="color:#ff4500;">$exp</span> <span style="color:#a9a9a9;">=</span> <span style="color:#8b0000;">"[wmi]'"</span> <span style="color:#a9a9a9;">+</span> <span style="color:#000000;">$(</span><span style="color:#ff4500;">$_</span><span style="color:#a9a9a9;">.</span><span style="color:#000000;">Element</span><span style="color:#000000;">)</span> <span style="color:#a9a9a9;">+</span> <span style="color:#8b0000;">"'"</span> <span style="color:#0000ff;">Invoke-Expression</span> <span style="color:#000080;">-Command</span> <span style="color:#ff4500;">$exp</span> <span style="color:#a9a9a9;">|</span> <span style="color:#0000ff;">select</span> <span style="color:#8a2be2;">Domain</span><span style="color:#a9a9a9;">,</span> <span style="color:#8a2be2;">Name</span><span style="color:#a9a9a9;">,</span> <span style="color:#8a2be2;">SID</span><span style="color:#a9a9a9;">,</span> <span style="color:#8a2be2;">LocalAccount</span> <span style="color:#000000;">}</span> <span style="color:#000000;">}</span> |
Use the wmi type accelerator with the path from the Element and you can just select the data you want. As a bonus you can discover if the account is local or not
