Clarification for those that have an interest in the details of the SidToName() implementation.
SidToName() does resolve remote sids to names but only those that visible via a trust relation. In other words, you can resolve accounts and groups sids of your domain or a trusted domain but not those of a member server, workstation, or untrusted domain.
