“The SDDL string contains an invalid sid or a sid that cannot be translated” error in SharePoint 2013

If you plan to install standalone SharePoint 2013 server on workgroup machine (not part of domain), there is additional prerequisite you need to do, or you will have error in SharePoint configuration wizard with comment “The SDDL string contains an invalid sid or a sid that cannot be translated”.

Steps are:

1. Add the account for search service you are using to install SharePoint in WSS_Admin_WPG group. Built in administrator account is already member.
2. Open SharePoint Management Shell console and execute this command:

$SearchService = Get-Credential <computername>\UserName

1. You will be prompted for password
2. Then run following command:

New-SPManagedAccount -Credential $SearchService

1. Open Explorer and browse to “C:\Program Files\Microsoft Office Servers\15.0\Data\Office Server” and you will see the folder that starts with Analytics with a guid.
2. Right-click folder > Properties > Sharing >Advanced Sharing
3. Check the “Share this folder’ check box and click on Permissions
4. Add the WSS_ADMIN_WPG and Search Service accounts created in step 2 and select Full Control.
5. Run the SharePoint Configuration Wizard again.