AD Quieries when not a member of the domain

i working on assessment scripts.  example collecting dacl's ad object , reporting on them.  able authenticate , query acl's, when try resolve sid using code:

$id = new-object system.security.principal.securityidentifier($sid)
$user = $id.translate( [system.security.principal.ntaccount])
$user.value

the above code works champ if run domain member system.

my guess there enviromental varbiles or namespace varibles not setting, ideas on be?

 

thanks

 

hi,

 

thanks posting here.

 

so error prompt did when try form non-domain joined host ?

 

thanks.

 

tiger li

---

please remember click “mark answer” on post helps you, , click “unmark answer” if marked post not answer question. can beneficial other community members reading thread.

Windows Server  >  Windows PowerShell