Closed itpro-tips closed 4 years ago
I fixed this yesterday
It wasn't committed as I started adding support for different forests. It should be either Domain Users or Domain Guests (I guess only for 1 account).
But maybe it's just better to exclude guest user and not whole Group SID.
The 'Primary Group shouldn't be changed from default Domain Users' test always fails.
The reason is guest user has, by default, PrimaryGroupID=514 (GROUP_RID_GUEST) and not 513. Maybe you had a good reason to not excluded the guest user of this test ?
If not, exclusion can be made with SID to be independant of AD language S-1-5-21-501