Microsoft KB Archive/277752

= Security Identifiers for Built-In Groups Are Unresolved When Modifying Group Policy =

Article ID: 277752

Article Last Modified on 2/28/2007

-

APPLIES TO


 * Microsoft Windows 2000 Server
 * Microsoft Windows 2000 Advanced Server
 * Microsoft Windows 2000 Professional Edition

-



This article was previously published under Q277752



SUMMARY
This article discusses how some security identifiers (SIDs) for well-known built-in groups are unresolved when you modify the user rights assignment in the Default Domain Controllers Group Policy object.



MORE INFORMATION
The preceding behavior is expected if the built-in group does not exist on the computer where the Group Policy snap-in is run.

As an example, the following SIDs can be unresolved when you modify Domain Group Policy from a Microsoft Windows 2000 Professional-based workstation because these built-in groups do not exist locally:

Builtin\Account Operators S-1-5-32-548

Builtin\Server Operators S-1-5-32-549

Builtin\Print Operators S-1-5-32-550

For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

243330 Well Known Security Identifiers in Windows Server Operating Systems

Keywords: kbenv kbinfo KB277752

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.