Microsoft KB Archive/248842

From BetaArchive Wiki
The printable version is no longer supported and may have rendering errors. Please update your browser bookmarks and please use the default browser print function instead.
Knowledge Base


BUG: Access Control List Changes in MOF Directory on Windows 2000 Domain Controllers

Article ID: 248842

Article Last Modified on 3/20/2004



APPLIES TO

  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Professional Edition
  • Microsoft Windows Management Instrumentation 1.0
  • Microsoft Windows Management Instrumentation 1.1
  • Microsoft Windows Management Instrumentation 1.5



This article was previously published under Q248842

SYMPTOMS

When upgrading a Microsoft Windows NT domain controller to a Windows 2000 domain controller, the access control list for %SystemRoot%\System32\Wbem\MOF may show a strange entry that appears as "S-1-5-32-547". This represents the "Power Users" group and should not be included in the access control list.

CAUSE

The "Powers Users" group does not exist on domain controllers.

RESOLUTION

You can safely remove the "S-1-5-32-547" entry from the access control list of the MOF folder.

STATUS

Microsoft has confirmed that this is a bug in the Microsoft products that are listed at the beginning of this article.

For additional information about the MOF folder, click the following article number to view the article in the Microsoft Knowledge Base:

245773 INFO: Recommended Methods for Compiling Managed Object Format (MOF) Files


REFERENCES

For more information about Windows Management Instrumentation, please refer to the section titled "Windows Management Instrumentation" in the Management Services section of the Platform SDK documentation.


Additional query words: ACL hotmof folder automof self-install

Keywords: kbbug kbwbem kbdswmanage2003swept KB248842