Skip to content

[Feature] - Document all the SIDs in the policy description for User Rights configuration policy (Win) #245

Description

@CyberChelonian

Is your feature request related to a problem? Please describe.
Using *SIDs does not make it easy to understand what the policy is doing. Adding all the well-known SIDs to the description would then allow users to much more easily understand what is being applied, and to use AI tools to translate it into human readable form as required.

Describe the solution you'd like
Add the following table to the configuration policy Description:

SID Reference

 
 *S-1-5-32-544  = Administrators
 *S-1-5-32-545  = Users
 *S-1-5-32-546  = Guests
 *S-1-5-32-555  = Remote Desktop Users
 
 *S-1-5-19      = LOCAL SERVICE
 *S-1-5-20      = NETWORK SERVICE
 *S-1-5-6       = SERVICE
 
 *S-1-5-113     = Local Account
 *S-1-5-114     = Local Account and Member of Administrators Group
 
 *S-1-5-80      = SERVICE\WdiServiceHost
 
 *S-1-5-83-0    = NT VIRTUAL MACHINE\Virtual Machines
 
 *S-1-5-90-0    = Window Manager\Window Manager Group
 
 *S-1-5-99      = RESTRICTED SERVICES
 
 *S-1-5-99-0    = RESTRICTED SERVICES\ALL RESTRICTED SERVICES
 
 *S-1-5-99-216390572-1995538116-3857911515-2404958512-2623887229
               = RESTRICTED SERVICES\PrintSpoolerService
                 (Restricted Service SID)
 
 (<![CDATA[]]>)   = Null (No One)

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions