Check Microsoft Active directory for duplicate SID's

From the command prompt of a Windows DC

ntdsutil "sec acc man" "co to se rwsmhdc" "check dup sid" q q

The log will be created in the folder where you ran the command from.