BUG: Access Control List Changes in MOF Directory on Windows 2000 Domain Controllers (248842)


The information in this article applies to:

  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Professional
  • Microsoft Windows Management Instrumentation 1.0
  • Microsoft Windows Management Instrumentation 1.1
  • Microsoft Windows Management Instrumentation 1.5
This article was previously published under Q248842

SYMPTOMS

When upgrading a Microsoft Windows NT domain controller to a Windows 2000 domain controller, the access control list for %SystemRoot%\System32\Wbem\MOF may show a strange entry that appears as "S-1-5-32-547". This represents the "Power Users" group and should not be included in the access control list.

CAUSE

The "Powers Users" group does not exist on domain controllers.

RESOLUTION

You can safely remove the "S-1-5-32-547" entry from the access control list of the MOF folder.

STATUS

Microsoft has confirmed that this is a bug in the Microsoft products that are listed at the beginning of this article.

For additional information about the MOF folder, click the following article number to view the article in the Microsoft Knowledge Base:

245773 INFO: Recommended Methods for Compiling Managed Object Format (MOF) Files

REFERENCES

For more information about Windows Management Instrumentation, please refer to the section titled "Windows Management Instrumentation" in the Management Services section of the Platform SDK documentation.
Modification Type:MinorLast Reviewed:3/20/2004
Keywords:kbDSWManage2003Swept kbBug kbWBEM KB248842 kbAudDeveloper
©2004 Microsoft Corporation. All rights reserved.