Different builtin group names

  • Thread starter Thread starter Mykhaylo Khodorev
  • Start date Start date
M

Mykhaylo Khodorev

Hi, all!
Here is question. I have english windows in my organization and
localized ones. In english windows Administrators group is calling
Administrators :-), but in localized ones Administrators' name is different.
How can I use some security settings (for example Local logon right) for
local administrators on domain computers? Is it inserting of both group
names (Administrators and localized one) only option?
I tried to use in GPO SID of this group (S-1-5-32-544), but there was no
success.
Thanks
Mykhaylo Khodorev
 
You should use builtin\administrators when defining something in the policy.
It will be saved using the group SID, which is the same and not dependent on
the localized group name. E.g. just select any administrators group into the
policy.

--
Dmitry Korolyov [[email protected]]
MVP: Windows Server - Active Directory


Hi, all!
Here is question. I have english windows in my organization and
localized ones. In english windows Administrators group is calling
Administrators :-), but in localized ones Administrators' name is
different.
How can I use some security settings (for example Local logon right) for
local administrators on domain computers? Is it inserting of both group
names (Administrators and localized one) only option?
I tried to use in GPO SID of this group (S-1-5-32-544), but there was
no
success.
Thanks
Mykhaylo Khodorev
 
This helped just for couple days. After that all localized Windows blamed on unknown group name Administrators :-(

You should use builtin\administrators when defining something in the policy. It will be saved using the group SID, which is the same and not dependent on the localized group name. E.g. just select any administrators group into the policy.

--
Dmitry Korolyov [[email protected]]
MVP: Windows Server - Active Directory


Hi, all!
Here is question. I have english windows in my organization and
localized ones. In english windows Administrators group is calling
Administrators :-), but in localized ones Administrators' name is different.
How can I use some security settings (for example Local logon right) for
local administrators on domain computers? Is it inserting of both group
names (Administrators and localized one) only option?
I tried to use in GPO SID of this group (S-1-5-32-544), but there was no
success.
Thanks
Mykhaylo Khodorev
 
Back
Top