USER SID vs USER profile name

[Al B..]

Whe using the ' Remove only if the account on the Domain Controller user database has been deleted: ' option..
Is it possible to compare the user's SID id to determine if that user has been deleted from the domain controller?

The issue is... we have some user profile names that have been modified in AD, but of course the workstation still uses the profile name that was first created becase the SID is the same. Currently, if I enable this option, it would delete a valid profile. (due to different profile name and domain user name)

I notice that the log file shows the SID id for the currently logged on user, so it appears to be feasible.

Thanks.

[msis]

It should be possible to compare the SID on the domain controller and workstation besides the user name versus profile name. As long as the user account still exists it will return valid information. Question is what will happen if the user account no longer exists or if the user account SID has been altered.

I'm also not quite sure this will work if the actual user account is not present on the workstation (server account), I have to look up (source code) if RPC retrieves the SID from the user account database or from the NTuser.dat. This is something that needs our attention.

In short, we will look into it; don't expect a working solution within the next couple of weeks.