Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

Sidwkr.dll: Security Migration Editor Snap-In

The Security Migration Editor is a Microsoft Management Console (MMC) snap-in that provides a graphical user interface (GUI) for mapping old security identifiers (SIDs) (listed in a mapping file created by ShowAccs), to new security identifiers. The "migration" referred to is from old SIDs to corresponding new SIDs, which are mapped by selecting from the list of user and group accounts in target domains or computers. The snap-in also gives options to ignore or delete these SIDs as they show up in access-control lists (ACLs). The Security Migration Editor updates the mapping file, which is then used as input to SIDWalk.


Corresponding UI

Security Migration Editor provides its own user interface. See the MMC snap-in for more information.


Access control is implemented by access control lists (ACLs). Every file in the NTFS file system and every registry key has a unique ACL, granting access rights to file resources to users and groups, and defining what specific access rights each is granted. Each user and group is identified in the ACL by a security identifier (SID).

System Requirements

Security Migration Editor does not have to run on the same computer on which ShowAccs or SIDWalk runs. An administrator can schedule ShowAccs to run remotely on one server in the network, can transfer the resulting files to a local workstation for analysis and update using Security Migration Editor, and then can copy the mapping file back to one or more target systems and run SIDWalk on them.

Files Required

  • Sidwalk.msc

  • Msvcrt50.dll (found in the \System32 directory)

  • Sidwkr.dll (the snap-in file for Security Migration Editor)

See Also


Sidwkr Remarks
Alphabetical List of Tools
Xcacls Overview
Sidwalker Security Administration Tools
Sidwalk Overview
Showaccs Overview
Sdcheck Overview
Ktpass Overview
Ksetup Overview
Getsid Overview