Active Directory Security Identifier manipulation
