IV34461: ADMIN PRIVILEGE OF DOMAIN USER RETURNS "FALSE" ALSO IF THE DOMAIN USER HAS ADMIN PRIVILEGE

APAR status

• Closed as suggestion for future release.

Error description

• Trying to see if a domain account has local admin rights.
  
  My domain account ?tlr\u01302632? does have local admin rights,
  but the
  ?admin privilege? inspector reports back False.
  
  q: (name of it, sid of it, admin privilege of it) of domain user
  "u0130262"
  
  A: U0130262, TLR\u0130262, False
  

Local fix

• The following relevance works fine:
  exists member whose ((sid of domain user "tlr\u01302632" as
  string) = (it as
  string)) of local group "Administrators"
  

Problem summary

Problem conclusion

Temporary fix

Comments

• This change will be considered for a future release of IBM
  Endpoint Manager.
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  TIV EP MGR AGEN

• Fixed component ID

  5725C43AG

Applicable component levels