The SID is the security Identifier in Windows NT and 2000. Each machine which is a part of a domain has a SID, as does each user account. Permissions are actually set for a SID, which is why you can change account names without hosing permissions.