dsccommunity
xGroup: How to handle built-in groups
Hey,
let's assume I got a user [email protected] and I got three servers. One server is German, one is English, one is French.
Now I'd like to add [email protected] to "BUILT-IN\Remote Desktop Users" aka "BUILT-IN\Remotedektopbenutzer" aka "BUILT-IN(French here)".
Do you see the possibility, that you enable SIDs as group names - at least for the "well known groups"?
It seems SIDs are (on purpose or not) supported. Perhaps you can make sure, that using SID for local Groups will not break in the future?
@glatzert Do you have a configuration that shows this? That could be used for unit test and integration test to make sure this is still supported when changes occurs.
I use this snippet, to add my IIS-Agent as Admin:
Group AddAgentAsAdmin { GroupName = "S-1-5-32-544" MembersToInclude = "myDomain\myAgentAcccount" }