reidmv / reidmv-puppet_run_scheduler

Puppet module to configure scheduled agent runtimes
0 stars 5 forks source link

Using SID instead of "display" name doesn't break for Windows ACL groups #9

Open AardvarKOlogY opened 7 months ago

AardvarKOlogY commented 7 months ago

Windows systems that have been set up with an image with a base language that is not English will not have BUILTIN\Administrators but localised groups instead. Language packs will not fix this, this will stay forever.

However, Microsoft also uses well-known SIDs, this group among them, which we can use independent of any localisation (see: https://learn.microsoft.com/en-us/windows/win32/secauthz/well-known-sids).

This code will fix issue https://github.com/reidmv/reidmv-puppet_run_scheduler/issues/7 for non-US systems (thanks for the hint, Dominik!)