I recenlty encountered exception in Distributed Cache services, When i looked at the logs i found out certain user account had timed out while trying to access App fabric services.

In Sharepoint logs File say s: Token Cache: Failed to get token from distributed cache for '0).w|s-1-5-21-1569013132-2106423733-3135404513-303780'.

How do i decrypt Encoded Claims Identifier to find out what account was affected?

What does this mean: 0).w|s-1-5-21-1569013132-2106423733-3135404513-303780

Thank You


It is claims form of user info stored in SharePoint .w means that it's windows account and after the | character is either login name or SID. SID is typically used for groups. You can try to use PowerShell to translate it to something meaningful:

$objSID = New-Object System.Security.Principal.SecurityIdentifier("s-1-5-21-1569013132-2106423733-3135404513-303780")
$objUser = $objSID.Translate( [System.Security.Principal.NTAccount])
  • Where am i running this powershell code, i am a sharepoint admin, but i dont have access to AD? – allegro octopus Nov 10 '14 at 20:48
  • You don't need any special permissions to AD. Resolving SID is common operation. – Jan Vanek Nov 10 '14 at 22:37

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.