vbscript security ldap sid wmi

This is a bit of code I wish I’d found sooner. There is a – it seems mostly undocumented – feature of the ldap provider in Server 2003 that allows you to form an ldap query just on the SID of an account: bindSid = "LDAP://<sid =" & SID & ">" set oVal = GetObject(bindSid)…