Normalization Troubleshooting ‘ERROR: Could Not Find The Following SIDS’

[#1]

Normalization Troubleshooting ‘ERROR: Could Not Find The Following SIDS’

Description: This article outlines troubleshooting errors pertaining to LDAP queries, specifically around the error 'could not find the following sids'.

Steps:

1. Navigate to the server hosting the Permission Collection Engine associated application of the failing folder

   1. To find the Engine:
      1. Login to the Admin Client
      2. Find the application from the Business Resource Tree > right-click > Edit
      3. Click Configuration from the top menu bar
      4. Note the name of the Central Permission Collection Service
      5. Click Cancel > Yes
      6. Click Health Center under the Navigation menu
      7. Click Permission Collection tab
      8. Click on the name of the Central Permission Collection Service
      9. The server will be listed across from Server Name

2. Install Active Directory Lightweight Directory Service (If you already have this role installed, skip to next step)
   1. Run Server Manager
   2. Click Manage > Add Roles and Features
   3. Navigate to the Server Roles (Next 3x)
   4. Select ‘Active Directory Lightweight Directory Service’ and Install (next 3x -> Install)
      1.     
   5. Once Installation is complete, click close
3. Open your command prompt and run ldp.exe
   1. This should open a Ldp window
   2. 
4. Connect domain and user
   1. Click Connection > Connect…
   2. Enter the DC’s server name or domain name into Server Name, adjust port as needed > OK
   3. Click Connection > Bind…
   4. Select Bind with Credentials
   5. Enter the FAM Service Account configured for the application > OK
      1.      If the FAM Service Account is the same user logged in, you can select ‘Bind as currently logged on user’ > OK
   6. 
   7. Now you are ready to search of the SID
5. Search for desired SID
   1. Click Browse > Search
   2. In the Filter selection:
      1.      Select desired Base DN
      2.      For Filter enter (objectSid={{enter your side here}} )
         1. **NOTE** make sure there are NO spaces between objectSid=SIDnumber, if there are you will not see correct results returned
      3. Select ‘Subtree’
      4.     
      5. Click Run

6. Results should display detailing information to help troubleshoot why the sid is unable to be found
   1. This example displays a working sid
   2.