---

for /f "delims=" %%S in (
    'powershell.exe -NoProfile -Command "([System.Security.Principal.NTAccount]::new(''%TARGET_USER%'')).Translate([System.Security.Principal.SecurityIdentifier]).Value" 2^>nul'
) do set "USER_SID=%%S"