System Preparation Tool for Windows NT 4.0 Does Not Change SIDs for Built-In Local Groups

ID: Q185274

The information in this article applies to:

Microsoft Windows NT Workstation version 4.0
Microsoft Windows NT Server version 4.0
Microsoft Windows NT Server, Enterprise Edition version 4.0

SYMPTOMS

If you use the System Preparation Tool for Windows NT 4.0 to duplicate a Windows NT installation from one computer to another, the Security Identifier (SID) values for local user accounts are changed, but the SID values for built-in local groups are not changed.

CAUSE

This behavior occurs because the Relative Identifier (RID) value for built-in local groups is the same across all duplicate installations of Windows NT. Only the SID values must be unique for all newly created users and groups.

STATUS

This behavior is by design.

MORE INFORMATION

The default built-in local groups include the following:

Administrators

Backup Operators

Guests

Power Users

Replicator

Users

ARTICLE-ID: Q163846
TITLE : SID Values For Default Windows NT Installations

Additional query words: image clone sysrep


Keywords          : kbenv kbtool ntsecurity NTSrvWkst ntutil 
Version           : WinNT:4.0
Platform          : winnt 
Issue type        : kbprb

Last Reviewed: February 6, 1999