Creation of mappings with a Windows Security ID (SID)

After you enable the lookup-failure tuning parameter, you must use a group’s SID instead of its name when you configure a mapping for a local Windows group. Use PI SMT to determine the SID, and then use piconfig to create the mapping based on that SID.

We recommend that you enable the lookup-failure tuning parameter only when you create mappings. After you create mappings and the primary server replicates the mappings to the Data Archive collective, you can disable the parameter to protect against the accidental creation of invalid mappings.