Carbon Black Cloud: How do I find the user or group SID for use in RepCLI Authentication?

[#1]

Environment

• Microsoft Windows: All Supported Versions

Objective

How do I find the user or group SID for use in RepCLI Authentication?

Resolution

• Command Prompt

Run one of the the following commands

whoami /user

or

whoami /groups

• Powershell

Run command

Get-ADGroup [Group Name]

NOTE: Replace [Group Name] with actual name of group. e.g. Get-ADGroup Domain Users

• Microsoft Security identifiers Page
  • Well-Known-Sid's

Additional Notes

Recommendation would be to create a domain CBC-Admins security group for only the CBC admins to have access to limit access to CBC commands. 

Related Content

Carbon Black Cloud: What is the RepCLI Utility?
Carbon Black Cloud: Why is Support requesting RepCLI Authentication to be enabled?
Carbon Black Cloud: How to Enable Authentication for RepCLI Utility During Sensor Install
Carbon Black Cloud: How to Enable RepCLI Authentication on Existing Sensors
https://community.carbonblack.com/t5/Knowledge-Base/Cb-Defense-How-to-verify-RepCLI-Authentication-W...
Carbon Black Cloud: What are some RepCLI Commands that Require Authentication?
Security identifiers