use SIDs to identify default groups

[k0478git]

The groups should be identified by their default SIDs, as the names are region-specific. You can find the groups at https://support.microsoft.com/de-de/help/243330/well-known-security-identifiers-in-windows-operating-systems as suggested at https://www.reddit.com/r/sysadmin/comments/a31c5v/powershell_create_an_interactive_active_directory/eb4jq0u/