Microsoft KB Archive/248842

= BUG: Access Control List Changes in MOF Directory on Windows 2000 Domain Controllers =

Article ID: 248842

Article Last Modified on 3/20/2004

-

APPLIES TO


 * Microsoft Windows 2000 Server
 * Microsoft Windows 2000 Advanced Server
 * Microsoft Windows 2000 Professional Edition
 * Microsoft Windows Management Instrumentation 1.0
 * Microsoft Windows Management Instrumentation 1.1
 * Microsoft Windows Management Instrumentation 1.5

-



This article was previously published under Q248842



SYMPTOMS
When upgrading a Microsoft Windows NT domain controller to a Windows 2000 domain controller, the access control list for %SystemRoot%\System32\Wbem\MOF may show a strange entry that appears as "S-1-5-32-547". This represents the "Power Users" group and should not be included in the access control list.



CAUSE
The "Powers Users" group does not exist on domain controllers.



RESOLUTION
You can safely remove the "S-1-5-32-547" entry from the access control list of the MOF folder.



STATUS
Microsoft has confirmed that this is a bug in the Microsoft products that are listed at the beginning of this article.

For additional information about the MOF folder, click the following article number to view the article in the Microsoft Knowledge Base:

245773 INFO: Recommended Methods for Compiling Managed Object Format (MOF) Files

