System Preparation Tool for Windows NT 4.0 Does Not Change SIDs for Built-In Local Groups

ID: Q185274

The information in this article applies to:

Microsoft Windows NT Workstation version 4.0
Microsoft Windows NT Server version 4.0
Microsoft Windows NT Server, Enterprise Edition version 4.0
Microsoft Windows 2000 Professional
Microsoft Windows 2000 Server
Microsoft Windows 2000 Advanced Server

SYMPTOMS

If you use the System Preparation Tool for Windows NT 4.0 to duplicate a Windows NT installation from one computer to another, the Security Identifier (SID) values for local user accounts are changed, but the SID values for built-in local groups are not changed.

CAUSE

This behavior occurs because the Relative Identifier (RID) value for built-in local groups is the same across all duplicate installations of Windows NT. Only the SID values must be unique for all newly created users and groups.

STATUS

This behavior is by design.

MORE INFORMATION

The default built-in local groups include the following:

Administrators

Backup Operators

Guests

Power Users

Replicator

Users

For more information about SID and RID values, please see the following article in the Microsoft Knowledge Base:

ARTICLE-ID: Q163846
TITLE : SID Values For Default Windows NT Installations

Additional query words: image clone sysrep

Keywords : kbenv kbtool ntsecurity NTSrvWkst ntutil
Version : WINDOWS:2000; winnt:4.0
Platform : WINDOWS winnt
Issue type : kbprb