Richard, could you reiterate your end goal again?
1) You want to identify the current name of the builtin\administrators or other Builtin group regardless of local language or renaming.
2) You wan this to run as a non-Admin.
3) You want this to run as a logon script on clients using only native KiXtart.
You do not need to know the domain sid for various domains and hard coded anything that is not a constant as I see it.
local administrators group = "S-1–5-32-500"
Domain Admins = "S-1–5-32-544"
Well-Known SIDs : http://support.microsoft.com/default.aspx?scid=kb;en-us;243330
I am not sure why this tool must tbe run locally. I can provide you a DLL which you can remotely obtain this information without admin permissions. You would only need to install it in one location.
SidToName() does not seem to be a good choice for this as it only works in the local context.
Edited by Howard Bullock (2004-11-03 01:35 PM)