Understanding The Sid - Novell ZENWORKS 10 CONFIGURATION MANAGEMENT SP3 - PREBOOT SERVICES AND IMAGING REFERENCE 10.3 16-04-2010 User Manual

only the device ID and the device GUID. However, this does not have any impact on the
functionality of ZENworks Configuration Management. Other device data are retrieved on the
subsequent reboot (manual or automatic) of the device.
If a device is new and does not contain a unique network identity, the default settings that you have
configured for the Management Zone are applied when you image the device by using a Preboot
Services Imaging bundle.
The data that the Imaging Agent saves to (or restores from) the image-safe area includes the
following:
Whether a static IP address or DHCP is used
If a static IP address is used:
IP address
Subnet mask
Default gateway (router)
DNS settings
DNS suffix
DNS hostname
DNS servers
Novell-ziswin usually runs automatically.
The ZENworks SIDchanger runs automatically after the image restoration on the Vista and
Windows Server 2008 managed device. It runs within the ZENworks imaging distro, which is a
Linux environment. Consequently, the SIDchanger changes the Windows SID within the Linux
environment.
Review the following sections for detailed information:
Section E.3.1, "Understanding the SID," on page 196
Section E.3.2, "Understanding the ZENworks SIDchanger," on page 197
Section E.3.3, "Disabling the SIDchanger," on page 198
E.3.1 Understanding the SID
The Security Identifier (SID) is generated by a security authority, which is Windows on a local
computer and the Domain Controller on a domain or Active Directory network.
Windows grants or denies access and privileges to resources based on ACLs that use SIDs to
uniquely identify users and their group memberships. When a user requests access to a resource, the
user's SID is checked by the ACL to determine if the user is allowed to perform the action or if the
user is part of a group that is allowed to perform that action.
The SID of a machine is a unique 96-bit number. The machine SID prefixes the SIDs of user
accounts and group accounts that are created on the computer. The machine SID is concatenated
with the relative ID (RID) of the account to create the account's unique identifier.
SID has the following format: S-1-5-12-7623811015-3361044348-030300820-1013.
S indicates that the string is a SID.
196 ZENworks 10 Configuration Management Preboot Services and Imaging Reference