Sysprep Does Not Change ACLs on Registry Keys (251042)


The information in this article applies to:

  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Professional
This article was previously published under Q251042

SYMPTOMS

When you clone a system by using the System Preparation tool (Sysprep.exe), Access Control Lists (ACLs) applied to registry keys are not changed during the mini-Setup wizard. When you view the permissions on keys on which the ACLs were modified, you may receive an "Account unknown" error message or the old Security ID may be displayed.

NOTE: This applies to ACLs that have been modified from the defaults before you ran Sysprep. For example, you created a local group and applied ACLs on the registry keys using this group.

CAUSE

The current versions of Sysprep do not change the ACL list applied to the registry.

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.
Modification Type:MinorLast Reviewed:9/26/2005
Keywords:kbHotfixServer kbQFE kbprb KB251042
©2004 Microsoft Corporation. All rights reserved.