SIDs of local groups (fwd)

[Luke Kenneth Casson Leighton]

<a href="mailto:lkcl at samba.anu.edu.au" > Luke Kenneth Casson Leighton  </a>
<a href="http://mailhost.cb1.com/~lkcl"> Samba and Network Development </a>
<a href="http://www.samba.co.uk"       > Samba and Network Consultancy </a>

---------- Forwarded message ----------
Date: Mon, 6 Apr 1998 14:47:21 -0700
From: "McGregor, Byron" <BMcGregor at BCBC.BC.CA>
To: NTBUGTRAQ at LISTSERV.NTBUGTRAQ.COM
Subject: Re: SIDs of local groups

Scott said:
> the article quoted is in error.  The identifier authority is
> SECURITY_NT_AUTHORITY { 0,0,0,0,0,5 }, with the first subauthority
being
> SECURITY_BUILTIN_DOMAIN_RID 0x20 (32).  Consult the winnt.h header
file in
> the Win32/Platform SDK.
>
> We will have the error in the article corrected.

Which does not explain Evgenii's observation that getsid.exe (from the
RK) reports "The SID for account BUILTIN\administrators is
S-1-2-32-544".  (This observation is confirmed - the quote is a direct
paste from the output.)