Article ID: 248842
Article Last Modified on 3/20/2004
APPLIES TO
- Microsoft Windows 2000 Server
- Microsoft Windows 2000 Advanced Server
- Microsoft Windows 2000 Professional Edition
- Microsoft Windows Management Instrumentation 1.0
- Microsoft Windows Management Instrumentation 1.1
- Microsoft Windows Management Instrumentation 1.5
This article was previously published under Q248842
SYMPTOMS
When upgrading a Microsoft Windows NT domain controller to a Windows 2000 domain controller, the access control list for %SystemRoot%\System32\Wbem\MOF may show a strange entry that appears as "S-1-5-32-547". This represents the "Power Users" group and should not be included in the access control list.
CAUSE
The "Powers Users" group does not exist on domain controllers.
RESOLUTION
You can safely remove the "S-1-5-32-547" entry from the access control list of the MOF folder.
STATUS
Microsoft has confirmed that this is a bug in the Microsoft products that are listed at the beginning of this article.
For additional information about the MOF folder, click the following article number to view the article in the Microsoft Knowledge Base:
245773 INFO: Recommended Methods for Compiling Managed Object Format (MOF) Files
REFERENCES
For more information about Windows Management Instrumentation, please refer to the section titled "Windows Management Instrumentation" in the Management Services section of the Platform SDK documentation.
Additional query words: ACL hotmof folder automof self-install
Keywords: kbbug kbwbem kbdswmanage2003swept KB248842
