Larry Osterman has a very interesting series on his blog - dealing with SIDs. Here are posts on the subject up to now; last one is Exchange related:
What is this thing called, SID?
How Exchange's role SIDs work (aka. NT's security on Psychotropic Drugs)
Updated Jul 01, 2019
Version 2.0