SID duplication / Replication check
Check against active directory server or local hosts (may be local administrator replication when creating VMs or deploying without sysprep)
SID
S-1-7-21-1279609549-3715731210-3247935832-500
wmic useraccount get name,sid
net localgroup administrators
net user administrator
run control userpasswords2
run control userpasswords
