Interesting tweet from Mathias:
https://twitter.com/IISResetMe/status/1116344879624392704
Your periodic reminder that the ADSI LDAP provider supports any distinguished name value (not just the actual DN) in its path when binding to an object:
[adsi]"LDAP://<SID=1-5-21-485916533-229056652-338576073-3519>"
or
[adsi]"LDAP://<GUID=7e1246dd-307e-4417-98ca-2e1b2666e0c8>"