--- a/windows.rst	Fri Jun 09 13:56:41 2017 +0300
+++ b/windows.rst	Mon Jun 26 11:12:55 2017 +0300
@@ -437,28 +437,22 @@
   http://support.microsoft.com/kb/253597
                 Automating Disk Cleanup Tool in Windows
 
-Schedule Tasks in Windows.
-==========================
+Schedule Tasks in Windows
+=========================
 
-List registered of task.
-------------------------
-::
+List registered of task::
 
   $ schtasks /query
 
-Create task.
-------------
-::
+Create task::
 
   $ schtasks /create /tn %TASK_NAME% /ru %ROOT% /sc daily /st 23:00:00 /tr "rundll32.exe user32.dll,LockWorkStation"
 
-/sc can be one of::
+``/sc`` can be one of::
 
   MINUTE HOURLY DAILY WEEKLY MONTHLY ONCE ONSTART ONLOGON ONIDLE
 
-Delete task.
-------------
-::
+Delete task::
 
   schtasks /delete /tn %TASK_NAME% /f
 
@@ -528,45 +522,72 @@
 Well-known security identifiers (SID).
 ======================================
 
-  S-1-0-0
-                Null SID. A group with no members. This is often used when a SID
-                value is not known.
-  S-1-1-0
-                World/Everyone. A group that includes all users.
-  S-1-3-0
-                Creator Owner ID. A security identifier to be replaced by the
-                security identifier of the user who created a new object. This
-                SID is used in inheritable ACEs.
-  S-1-3-1
-                Creator Group ID. A security identifier to be replaced by the
-                primary-group SID of the user who created a new object. Use this
-                SID in inheritable ACEs.
-  S-1-5-6
-                Service. A group that includes all security principals that have
-                logged on as a service. Membership is controlled by the
-                operating system.
-  S-1-5-7
-                Anonymous. A group that includes all users that have logged on
-                anonymously. Membership is controlled by the operating system.
-  S-1-5-32-544
-                Administrators group.
-  S-1-5-32-545
-                Users group.
-  S-1-5-32-546
-                Guests. By default, the only member is the Guest account. The
-                Guests group allows occasional or one-time users to log on with
-                limited privileges to a computer's built-in Guest account.
-  S-1-5-32-547
-                Power Users. Power users can create local users and groups;
-                modify and delete accounts that they have created; and remove
-                users from the Power Users, Users, and Guests groups. Power
-                users also can install programs; create, manage, and delete
-                local printers; and create and delete file shares.
+Pring SIDs of groups::
+
+  cmd> whoami /groups
+
+Print current user SID::
+
+  cmd> whoami /user
+
+Get name from SID::
+
+  cmd> PsGetsid.exe S-1-0-0
+
+Get SID from name::
+
+  cmd> PsGetsid.exe "NT AUTHORITY\System"
+  cmd> PsGetsid.exe "NT AUTHORITY\LocalService"
+
+Well known users/groups:
+
+``S-1-0-0``
+  Null SID. A group with no members. This is often used when a SID
+  value is not known.
+``S-1-1-0``
+  World/Everyone. A group that includes all users.
+``S-1-3-0``
+  Creator Owner ID. A security identifier to be replaced by the
+  security identifier of the user who created a new object. This
+  SID is used in inheritable ACEs.
+``S-1-3-1``
+  Creator Group ID. A security identifier to be replaced by the
+  primary-group SID of the user who created a new object. Use this
+  SID in inheritable ACEs.
+``S-1-5-6``
+  Service. A group that includes all security principals that have
+  logged on as a service. Membership is controlled by the
+  operating system.
+``S-1-5-7``
+  Anonymous. A group that includes all users that have logged on
+  anonymously. Membership is controlled by the operating system.
+``S-1-5-18``
+  ``NT AUTHORITY\SYSTEM``
+``S-1-5-19``
+  ``NT AUTHORITY\LocalService``
+``S-1-5-32-544``
+  Administrators group.
+``S-1-5-32-545``
+  Users group.
+``S-1-5-32-546``
+  Guests. By default, the only member is the Guest account. The
+  Guests group allows occasional or one-time users to log on with
+  limited privileges to a computer's built-in Guest account.
+``S-1-5-32-547``
+  Power Users. Power users can create local users and groups;
+  modify and delete accounts that they have created; and remove
+  users from the Power Users, Users, and Guests groups. Power
+  users also can install programs; create, manage, and delete
+  local printers; and create and delete file shares.
+
+See:
 
 https://msdn.microsoft.com/en-us/library/aa379649.aspx
   Well-known SIDs
 https://support.microsoft.com/en-us/help/243330/
   Well-known security identifiers in Windows operating systems.
+https://msdn.microsoft.com/en-us/library/ms686005.aspx
+  Service User Accounts.
 http://en.wikipedia.org/wiki/Security_Identifier
   Security Identifier