{% hint style="warning" %}
To use this command, sid::patch
must be executed first.
{% endhint %}
sid::clear
can be used to clear the sIDHistory
of a target object. The command must be executed directly on a domain controller. It has the following command line argument:
/sam
: thesAMAccountName
.
mimikatz # sid::clear /sam:username