I am sorry for being understanding the question if full.
But i don't think LDAP and
SQL works like that, please refer and research this filtering mechanism
https://learn.microsoft.com/en-us/wi...-filter-syntax
Might be better to use something like the following for specific SID
Code:
1.2.840.113556.1.4.1941:=(
As for the empty but not so empty result, it might be the Null SID
https://learn.microsoft.com/en-us/wi...ell-known-sids
I might be wrong though, and sorry for that.