Is your feature request related to a problem? Please describe.
Using *SIDs does not make it easy to understand what the policy is doing. Adding all the well-known SIDs to the description would then allow users to much more easily understand what is being applied, and to use AI tools to translate it into human readable form as required.
Describe the solution you'd like
Add the following table to the configuration policy Description:
SID Reference
*S-1-5-32-544 = Administrators
*S-1-5-32-545 = Users
*S-1-5-32-546 = Guests
*S-1-5-32-555 = Remote Desktop Users
*S-1-5-19 = LOCAL SERVICE
*S-1-5-20 = NETWORK SERVICE
*S-1-5-6 = SERVICE
*S-1-5-113 = Local Account
*S-1-5-114 = Local Account and Member of Administrators Group
*S-1-5-80 = SERVICE\WdiServiceHost
*S-1-5-83-0 = NT VIRTUAL MACHINE\Virtual Machines
*S-1-5-90-0 = Window Manager\Window Manager Group
*S-1-5-99 = RESTRICTED SERVICES
*S-1-5-99-0 = RESTRICTED SERVICES\ALL RESTRICTED SERVICES
*S-1-5-99-216390572-1995538116-3857911515-2404958512-2623887229
= RESTRICTED SERVICES\PrintSpoolerService
(Restricted Service SID)
(<![CDATA[]]>) = Null (No One)
Is your feature request related to a problem? Please describe.
Using *SIDs does not make it easy to understand what the policy is doing. Adding all the well-known SIDs to the description would then allow users to much more easily understand what is being applied, and to use AI tools to translate it into human readable form as required.
Describe the solution you'd like
Add the following table to the configuration policy Description: