Does this reference help?
https://msdn.microsoft.com/en-us/library/windows/desktop/aa370656%28v=vs.85%29.aspx
Is the computer where the SID is requested domain joined? If it is domain joined, is it a domain controller or a member server? And are both the Windows Server 2008 and 2016 machines DC's or member servers?
I don't know of any reason why Windows Server 2016 would behave differently from Windows Server 2008. The error you report should depend only on the security applied to the object (the access control list, or ACL, of the server object).
You might try other methods to retrieve the SID, as mentioned in the article I linked, for example iADSDomain methods. Or use the NetUserModalsGet function to retrieve the SID of the domain. Then you would only be missing the RID of the server (the last
part of the SID). But if level is 2, I think the function just retrieves the SID of the domain anyway.
If you can use PowerShell (Version 2 with the Active Directory module), try the following to see if you can retrieve the SID:
Get-ADComputer -Identity my_ip | Select SID
Or to retrieve the SID of the domain use:
Get-ADDomain
where the DomainSID property will be the SID of the domain.
Richard Mueller - MVP Enterprise Mobility (Identity and Access)
