Microsoft KB Archive/248842

From BetaArchive Wiki
Knowledge Base

BUG: Access Control List Changes in MOF Directory on Windows 2000 Domain Controllers

Article ID: 248842

Article Last Modified on 3/20/2004


  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Professional Edition
  • Microsoft Windows Management Instrumentation 1.0
  • Microsoft Windows Management Instrumentation 1.1
  • Microsoft Windows Management Instrumentation 1.5

This article was previously published under Q248842


When upgrading a Microsoft Windows NT domain controller to a Windows 2000 domain controller, the access control list for %SystemRoot%\System32\Wbem\MOF may show a strange entry that appears as "S-1-5-32-547". This represents the "Power Users" group and should not be included in the access control list.


The "Powers Users" group does not exist on domain controllers.


You can safely remove the "S-1-5-32-547" entry from the access control list of the MOF folder.


Microsoft has confirmed that this is a bug in the Microsoft products that are listed at the beginning of this article.

For additional information about the MOF folder, click the following article number to view the article in the Microsoft Knowledge Base:

245773 INFO: Recommended Methods for Compiling Managed Object Format (MOF) Files


For more information about Windows Management Instrumentation, please refer to the section titled "Windows Management Instrumentation" in the Management Services section of the Platform SDK documentation.

Additional query words: ACL hotmof folder automof self-install

Keywords: kbbug kbwbem kbdswmanage2003swept KB248842