your home for end-user virtualization!
Find Active Directory object name from SID using Windows Powershell
Found some erroneous SID’s within a procmon capture, trying to figure out who they belonged to.
What else to use, PowerShell!
$objSID = New-Object System.Security.Principal.SecurityIdentifier `
("s-1-5-21-1220945662-573735546-1417001333-500")
$objUser = $objSID.Translate( [System.Security.Principal.NTAccount])
$objUser.Value