[SAMSRV][INF] Add missing aliases and privileges

- Add the 'Backup Operators', 'Replicator', 'RemoteDesktop Users' and 'Network Configuration Operators' aliases. - Add missing privileges for the aliases. Happy new year 2021! :-)
2025-04-04 04:26:32 +00:00 · 2021-01-01 10:24:36 +01:00 · 2021-01-01 10:24:36 +01:00 · f1e768c070
commit f1e768c070
parent b570fac18b
18 changed files with 180 additions and 16 deletions
--- a/dll/win32/samsrv/lang/de-DE.rc
+++ b/dll/win32/samsrv/lang/de-DE.rc
@ -13,6 +13,14 @@ BEGIN
    IDS_ALIAS_POWER_USERS_COMMENT "Hauptbenutzer besitzen die meisten Rechte mit einigen Einschränkungen."
    IDS_ALIAS_USERS_NAME "Benutzer"
    IDS_ALIAS_USERS_COMMENT "Benutzer können keine Änderungen am System vornehmen."
+    IDS_ALIAS_BACKUP_OPS_NAME "Sicherungs-Operator"
+    IDS_ALIAS_BACKUP_OPS_COMMENT "Sicherungs-Operatoren können Sicherheitseinschränkungen nur zum Sichern und Wiederherstellen von Dateien außer Kraft setzen."
+    IDS_ALIAS_REPLICATOR_NAME "Replikations-Operator"
+    IDS_ALIAS_REPLICATOR_COMMENT "Unterstützt Dateireplikation in Domänen."
+    IDS_ALIAS_REMOTE_DESKTOP_USERS_NAME "Remotedesktopbenutzer"
+    IDS_ALIAS_REMOTE_DESKTOP_USERS_COMMENT "Mitglieder dieser Gruppe haben die Berechtigung, sich remote anzumelden."
+    IDS_ALIAS_NETWORK_CONFIGURATION_OPS_NAME "Netzwerkkonfigurations-Operator"
+    IDS_ALIAS_NETWORK_CONFIGURATION_OPS_COMMENT "Mitglieder dieser Gruppe verfügen über einige Administratorrechte zum Verwalten der Konfiguration von Netzwerkfunktionen."
    /*
     * ATTENTION: 
     *   If you translate the administrator account name, keep IDS_USER_ADMINISTRATOR_NAME and
--- a/dll/win32/samsrv/lang/en-US.rc
+++ b/dll/win32/samsrv/lang/en-US.rc
@ -13,6 +13,14 @@ BEGIN
    IDS_ALIAS_POWER_USERS_COMMENT "Power Users have most administrative rights with some restrictions."
    IDS_ALIAS_USERS_NAME "Users"
    IDS_ALIAS_USERS_COMMENT "Users are prevented from making system-wide changes."
+    IDS_ALIAS_BACKUP_OPS_NAME "Backup Operators"
+    IDS_ALIAS_BACKUP_OPS_COMMENT "Backup Operators can override security restrictions for the sole purpose of backing up or resoring files"
+    IDS_ALIAS_REPLICATOR_NAME "Replicator"
+    IDS_ALIAS_REPLICATOR_COMMENT "Supports file replication in a domain"
+    IDS_ALIAS_REMOTE_DESKTOP_USERS_NAME "Remote Desktop Users"
+    IDS_ALIAS_REMOTE_DESKTOP_USERS_COMMENT "Members in this group are granted the right to logon remotely"
+    IDS_ALIAS_NETWORK_CONFIGURATION_OPS_NAME "Network Configuration Operators"
+    IDS_ALIAS_NETWORK_CONFIGURATION_OPS_COMMENT "Members in this group can have some administrative privileges to manage configuration of networking features"
    /*
     * ATTENTION: 
     *   If you translate the administrator account name, keep IDS_USER_ADMINISTRATOR_NAME and
--- a/dll/win32/samsrv/lang/es-ES.rc
+++ b/dll/win32/samsrv/lang/es-ES.rc
@ -14,6 +14,14 @@ BEGIN
    IDS_ALIAS_POWER_USERS_COMMENT "Los usuarios avanzados obtienen la mayor parte de los derechos administrativos con algunas restricciones."
    IDS_ALIAS_USERS_NAME "Usuarios"
    IDS_ALIAS_USERS_COMMENT "Los usuarios no pueden hacer cambios que afecten al sistema."
+    IDS_ALIAS_BACKUP_OPS_NAME "Backup Operators"
+    IDS_ALIAS_BACKUP_OPS_COMMENT "Backup Operators can override security restrictions for the sole purpose of backing up or resoring files"
+    IDS_ALIAS_REPLICATOR_NAME "Replicator"
+    IDS_ALIAS_REPLICATOR_COMMENT "Supports file replication in a domain"
+    IDS_ALIAS_REMOTE_DESKTOP_USERS_NAME "Remote Desktop Users"
+    IDS_ALIAS_REMOTE_DESKTOP_USERS_COMMENT "Members in this group are granted the right to logon remotely"
+    IDS_ALIAS_NETWORK_CONFIGURATION_OPS_NAME "Network Configuration Operators"
+    IDS_ALIAS_NETWORK_CONFIGURATION_OPS_COMMENT "Members in this group can have some administrative privileges to manage configuration of networking features"
    /*
     * ATTENTION: 
     *   If you translate the administrator account name, keep IDS_USER_ADMINISTRATOR_NAME and
--- a/dll/win32/samsrv/lang/hi-IN.rc
+++ b/dll/win32/samsrv/lang/hi-IN.rc
@ -20,6 +20,14 @@ BEGIN
    IDS_ALIAS_POWER_USERS_COMMENT "पावर उपयोगकर्ताओं के पास कुछ प्रतिबंधों के साथ अधिकांश प्रशासनिक अधिकार हैं।"
    IDS_ALIAS_USERS_NAME "उपयोगकर्ता"
    IDS_ALIAS_USERS_COMMENT "उपयोगकर्ताओं को सिस्टम-व्यापी परिवर्तन करने से रोका जाता है।"
+    IDS_ALIAS_BACKUP_OPS_NAME "Backup Operators"
+    IDS_ALIAS_BACKUP_OPS_COMMENT "Backup Operators can override security restrictions for the sole purpose of backing up or resoring files"
+    IDS_ALIAS_REPLICATOR_NAME "Replicator"
+    IDS_ALIAS_REPLICATOR_COMMENT "Supports file replication in a domain"
+    IDS_ALIAS_REMOTE_DESKTOP_USERS_NAME "Remote Desktop Users"
+    IDS_ALIAS_REMOTE_DESKTOP_USERS_COMMENT "Members in this group are granted the right to logon remotely"
+    IDS_ALIAS_NETWORK_CONFIGURATION_OPS_NAME "Network Configuration Operators"
+    IDS_ALIAS_NETWORK_CONFIGURATION_OPS_COMMENT "Members in this group can have some administrative privileges to manage configuration of networking features"
    /*
     * ATTENTION: 
     *   If you translate the administrator account name, keep IDS_USER_ADMINISTRATOR_NAME and
--- a/dll/win32/samsrv/lang/hu-HU.rc
+++ b/dll/win32/samsrv/lang/hu-HU.rc
@ -13,6 +13,14 @@ BEGIN
    IDS_ALIAS_POWER_USERS_COMMENT "A haladó felhasználók a legtöbb adminisztrációs joggal rendelkeznek, bizonyos korlátozásokkal."
    IDS_ALIAS_USERS_NAME "Felhasználók"
    IDS_ALIAS_USERS_COMMENT "A felhasználók nem tudnak rendszerszintű változtatásokat végrehajtani."
+    IDS_ALIAS_BACKUP_OPS_NAME "Backup Operators"
+    IDS_ALIAS_BACKUP_OPS_COMMENT "Backup Operators can override security restrictions for the sole purpose of backing up or resoring files"
+    IDS_ALIAS_REPLICATOR_NAME "Replicator"
+    IDS_ALIAS_REPLICATOR_COMMENT "Supports file replication in a domain"
+    IDS_ALIAS_REMOTE_DESKTOP_USERS_NAME "Remote Desktop Users"
+    IDS_ALIAS_REMOTE_DESKTOP_USERS_COMMENT "Members in this group are granted the right to logon remotely"
+    IDS_ALIAS_NETWORK_CONFIGURATION_OPS_NAME "Network Configuration Operators"
+    IDS_ALIAS_NETWORK_CONFIGURATION_OPS_COMMENT "Members in this group can have some administrative privileges to manage configuration of networking features"
    /*
     * ATTENTION: 
     *   If you translate the administrator account name, keep IDS_USER_ADMINISTRATOR_NAME and
--- a/dll/win32/samsrv/lang/it-IT.rc
+++ b/dll/win32/samsrv/lang/it-IT.rc
@ -13,6 +13,14 @@ BEGIN
    IDS_ALIAS_POWER_USERS_COMMENT "Gli utenti avanzati hanno la maggior parte dei diritti amministrativi con alcune restrizioni."
    IDS_ALIAS_USERS_NAME "Utente"
    IDS_ALIAS_USERS_COMMENT "Gli utenti non possono apportare modifiche a livello di sistema."
+    IDS_ALIAS_BACKUP_OPS_NAME "Backup Operators"
+    IDS_ALIAS_BACKUP_OPS_COMMENT "Backup Operators can override security restrictions for the sole purpose of backing up or resoring files"
+    IDS_ALIAS_REPLICATOR_NAME "Replicator"
+    IDS_ALIAS_REPLICATOR_COMMENT "Supports file replication in a domain"
+    IDS_ALIAS_REMOTE_DESKTOP_USERS_NAME "Remote Desktop Users"
+    IDS_ALIAS_REMOTE_DESKTOP_USERS_COMMENT "Members in this group are granted the right to logon remotely"
+    IDS_ALIAS_NETWORK_CONFIGURATION_OPS_NAME "Network Configuration Operators"
+    IDS_ALIAS_NETWORK_CONFIGURATION_OPS_COMMENT "Members in this group can have some administrative privileges to manage configuration of networking features"
    /*
     * ATTENTION: 
     *   If you translate the administrator account name, keep IDS_USER_ADMINISTRATOR_NAME and
--- a/dll/win32/samsrv/lang/ja-JP.rc
+++ b/dll/win32/samsrv/lang/ja-JP.rc
@ -13,6 +13,14 @@ BEGIN
    IDS_ALIAS_POWER_USERS_COMMENT "パワーユーザーは、いくつかの制限付きでほとんどの管理権限を持ちます。"
    IDS_ALIAS_USERS_NAME "ユーザー"
    IDS_ALIAS_USERS_COMMENT "ユーザーは、システム規模の変更をすることができません。"
+    IDS_ALIAS_BACKUP_OPS_NAME "Backup Operators"
+    IDS_ALIAS_BACKUP_OPS_COMMENT "Backup Operators can override security restrictions for the sole purpose of backing up or resoring files"
+    IDS_ALIAS_REPLICATOR_NAME "Replicator"
+    IDS_ALIAS_REPLICATOR_COMMENT "Supports file replication in a domain"
+    IDS_ALIAS_REMOTE_DESKTOP_USERS_NAME "Remote Desktop Users"
+    IDS_ALIAS_REMOTE_DESKTOP_USERS_COMMENT "Members in this group are granted the right to logon remotely"
+    IDS_ALIAS_NETWORK_CONFIGURATION_OPS_NAME "Network Configuration Operators"
+    IDS_ALIAS_NETWORK_CONFIGURATION_OPS_COMMENT "Members in this group can have some administrative privileges to manage configuration of networking features"
    /*
     * ATTENTION: 
     *   If you translate the administrator account name, keep IDS_USER_ADMINISTRATOR_NAME and
--- a/dll/win32/samsrv/lang/pl-PL.rc
+++ b/dll/win32/samsrv/lang/pl-PL.rc
@ -13,6 +13,14 @@ BEGIN
    IDS_ALIAS_POWER_USERS_COMMENT "Użytkownicy zaawansowani maja większość uprawnień administracyjnych, z kilkoma wyjątkami."
    IDS_ALIAS_USERS_NAME "Użytkownicy"
    IDS_ALIAS_USERS_COMMENT "Użytkownicy nie mogą dokonywać istotnych zmian w systemie."
+    IDS_ALIAS_BACKUP_OPS_NAME "Backup Operators"
+    IDS_ALIAS_BACKUP_OPS_COMMENT "Backup Operators can override security restrictions for the sole purpose of backing up or resoring files"
+    IDS_ALIAS_REPLICATOR_NAME "Replicator"
+    IDS_ALIAS_REPLICATOR_COMMENT "Supports file replication in a domain"
+    IDS_ALIAS_REMOTE_DESKTOP_USERS_NAME "Remote Desktop Users"
+    IDS_ALIAS_REMOTE_DESKTOP_USERS_COMMENT "Members in this group are granted the right to logon remotely"
+    IDS_ALIAS_NETWORK_CONFIGURATION_OPS_NAME "Network Configuration Operators"
+    IDS_ALIAS_NETWORK_CONFIGURATION_OPS_COMMENT "Members in this group can have some administrative privileges to manage configuration of networking features"
    /*
     * ATTENTION: 
     *   If you translate the administrator account name, keep IDS_USER_ADMINISTRATOR_NAME and
--- a/dll/win32/samsrv/lang/pt-PT.rc
+++ b/dll/win32/samsrv/lang/pt-PT.rc
@ -13,6 +13,14 @@ BEGIN
    IDS_ALIAS_POWER_USERS_COMMENT "Utilizadores avançados têm a maioria dos direitos administrativos com algumas restrições."
    IDS_ALIAS_USERS_NAME "Utilizadores"
    IDS_ALIAS_USERS_COMMENT "Os utilizadores são impedidos de fazer alterações em todo o sistema."
+    IDS_ALIAS_BACKUP_OPS_NAME "Backup Operators"
+    IDS_ALIAS_BACKUP_OPS_COMMENT "Backup Operators can override security restrictions for the sole purpose of backing up or resoring files"
+    IDS_ALIAS_REPLICATOR_NAME "Replicator"
+    IDS_ALIAS_REPLICATOR_COMMENT "Supports file replication in a domain"
+    IDS_ALIAS_REMOTE_DESKTOP_USERS_NAME "Remote Desktop Users"
+    IDS_ALIAS_REMOTE_DESKTOP_USERS_COMMENT "Members in this group are granted the right to logon remotely"
+    IDS_ALIAS_NETWORK_CONFIGURATION_OPS_NAME "Network Configuration Operators"
+    IDS_ALIAS_NETWORK_CONFIGURATION_OPS_COMMENT "Members in this group can have some administrative privileges to manage configuration of networking features"
    /*
     * ATTENTION: 
     *   If you translate the administrator account name, keep IDS_USER_ADMINISTRATOR_NAME and
--- a/dll/win32/samsrv/lang/ro-RO.rc
+++ b/dll/win32/samsrv/lang/ro-RO.rc
@ -15,6 +15,14 @@ BEGIN
    IDS_ALIAS_POWER_USERS_COMMENT "Utilizatorii avansați posedă majoritatea drepturilor administrative cu unele restricții."
    IDS_ALIAS_USERS_NAME "Utilizatori"
    IDS_ALIAS_USERS_COMMENT "Utilizatorilor le este limitată capacitatea de a aduce modificări în sistem."
+    IDS_ALIAS_BACKUP_OPS_NAME "Backup Operators"
+    IDS_ALIAS_BACKUP_OPS_COMMENT "Backup Operators can override security restrictions for the sole purpose of backing up or resoring files"
+    IDS_ALIAS_REPLICATOR_NAME "Replicator"
+    IDS_ALIAS_REPLICATOR_COMMENT "Supports file replication in a domain"
+    IDS_ALIAS_REMOTE_DESKTOP_USERS_NAME "Remote Desktop Users"
+    IDS_ALIAS_REMOTE_DESKTOP_USERS_COMMENT "Members in this group are granted the right to logon remotely"
+    IDS_ALIAS_NETWORK_CONFIGURATION_OPS_NAME "Network Configuration Operators"
+    IDS_ALIAS_NETWORK_CONFIGURATION_OPS_COMMENT "Members in this group can have some administrative privileges to manage configuration of networking features"
    /*
     * ATTENTION: 
     *   If you translate the administrator account name, keep IDS_USER_ADMINISTRATOR_NAME and
--- a/dll/win32/samsrv/lang/ru-RU.rc
+++ b/dll/win32/samsrv/lang/ru-RU.rc
@ -15,6 +15,14 @@ BEGIN
    IDS_ALIAS_POWER_USERS_COMMENT "Категория опытных пользователей обладает ограниченными административными правами."
    IDS_ALIAS_USERS_NAME "Пользователи"
    IDS_ALIAS_USERS_COMMENT "Пользователи не имеют прав на изменение параметров системы и могут запускать большинство приложений."
+    IDS_ALIAS_BACKUP_OPS_NAME "Backup Operators"
+    IDS_ALIAS_BACKUP_OPS_COMMENT "Backup Operators can override security restrictions for the sole purpose of backing up or resoring files"
+    IDS_ALIAS_REPLICATOR_NAME "Replicator"
+    IDS_ALIAS_REPLICATOR_COMMENT "Supports file replication in a domain"
+    IDS_ALIAS_REMOTE_DESKTOP_USERS_NAME "Remote Desktop Users"
+    IDS_ALIAS_REMOTE_DESKTOP_USERS_COMMENT "Members in this group are granted the right to logon remotely"
+    IDS_ALIAS_NETWORK_CONFIGURATION_OPS_NAME "Network Configuration Operators"
+    IDS_ALIAS_NETWORK_CONFIGURATION_OPS_COMMENT "Members in this group can have some administrative privileges to manage configuration of networking features"
    /*
     * ATTENTION: 
     *   If you translate the administrator account name, keep IDS_USER_ADMINISTRATOR_NAME and
--- a/dll/win32/samsrv/lang/sq-AL.rc
+++ b/dll/win32/samsrv/lang/sq-AL.rc
@ -17,6 +17,14 @@ BEGIN
    IDS_ALIAS_POWER_USERS_COMMENT "Përdorues të Fuqishëm katë të drejta administrative me disa kufizime."
    IDS_ALIAS_USERS_NAME "Përdoruesit"
    IDS_ALIAS_USERS_COMMENT "Përdoruesit janë të penguar për ndryshim bërje të gjërave të sistemit."
+    IDS_ALIAS_BACKUP_OPS_NAME "Backup Operators"
+    IDS_ALIAS_BACKUP_OPS_COMMENT "Backup Operators can override security restrictions for the sole purpose of backing up or resoring files"
+    IDS_ALIAS_REPLICATOR_NAME "Replicator"
+    IDS_ALIAS_REPLICATOR_COMMENT "Supports file replication in a domain"
+    IDS_ALIAS_REMOTE_DESKTOP_USERS_NAME "Remote Desktop Users"
+    IDS_ALIAS_REMOTE_DESKTOP_USERS_COMMENT "Members in this group are granted the right to logon remotely"
+    IDS_ALIAS_NETWORK_CONFIGURATION_OPS_NAME "Network Configuration Operators"
+    IDS_ALIAS_NETWORK_CONFIGURATION_OPS_COMMENT "Members in this group can have some administrative privileges to manage configuration of networking features"
    /*
     * ATTENTION: 
     *   If you translate the administrator account name, keep IDS_USER_ADMINISTRATOR_NAME and
--- a/dll/win32/samsrv/lang/tr-TR.rc
+++ b/dll/win32/samsrv/lang/tr-TR.rc
@ -15,6 +15,14 @@ BEGIN
    IDS_ALIAS_POWER_USERS_COMMENT "Güçlü Kullanıcılar, birtakım kısıtlamalarla çoğu yönetim yetkilerine iyedir."
    IDS_ALIAS_USERS_NAME "Kullanıcılar"
    IDS_ALIAS_USERS_COMMENT "Kullanıcılar, dizge değişiklikleri yapmaktan alıkonulmuştur."
+    IDS_ALIAS_BACKUP_OPS_NAME "Backup Operators"
+    IDS_ALIAS_BACKUP_OPS_COMMENT "Backup Operators can override security restrictions for the sole purpose of backing up or resoring files"
+    IDS_ALIAS_REPLICATOR_NAME "Replicator"
+    IDS_ALIAS_REPLICATOR_COMMENT "Supports file replication in a domain"
+    IDS_ALIAS_REMOTE_DESKTOP_USERS_NAME "Remote Desktop Users"
+    IDS_ALIAS_REMOTE_DESKTOP_USERS_COMMENT "Members in this group are granted the right to logon remotely"
+    IDS_ALIAS_NETWORK_CONFIGURATION_OPS_NAME "Network Configuration Operators"
+    IDS_ALIAS_NETWORK_CONFIGURATION_OPS_COMMENT "Members in this group can have some administrative privileges to manage configuration of networking features"
    /*
     * ATTENTION: 
     *   If you translate the administrator account name, keep IDS_USER_ADMINISTRATOR_NAME and
--- a/dll/win32/samsrv/lang/zh-CN.rc
+++ b/dll/win32/samsrv/lang/zh-CN.rc
@ -16,6 +16,14 @@ BEGIN
    IDS_ALIAS_POWER_USERS_COMMENT "高级用户拥有大多数管理权限，但存在一些限制。"
    IDS_ALIAS_USERS_NAME "用户"
    IDS_ALIAS_USERS_COMMENT "防止用户进行对系统进行全面更改。"
+    IDS_ALIAS_BACKUP_OPS_NAME "Backup Operators"
+    IDS_ALIAS_BACKUP_OPS_COMMENT "Backup Operators can override security restrictions for the sole purpose of backing up or resoring files"
+    IDS_ALIAS_REPLICATOR_NAME "Replicator"
+    IDS_ALIAS_REPLICATOR_COMMENT "Supports file replication in a domain"
+    IDS_ALIAS_REMOTE_DESKTOP_USERS_NAME "Remote Desktop Users"
+    IDS_ALIAS_REMOTE_DESKTOP_USERS_COMMENT "Members in this group are granted the right to logon remotely"
+    IDS_ALIAS_NETWORK_CONFIGURATION_OPS_NAME "Network Configuration Operators"
+    IDS_ALIAS_NETWORK_CONFIGURATION_OPS_COMMENT "Members in this group can have some administrative privileges to manage configuration of networking features"
    /*
     * ATTENTION: 
     *   If you translate the administrator account name, keep IDS_USER_ADMINISTRATOR_NAME and
--- a/dll/win32/samsrv/lang/zh-TW.rc
+++ b/dll/win32/samsrv/lang/zh-TW.rc
@ -16,6 +16,14 @@ BEGIN
    IDS_ALIAS_POWER_USERS_COMMENT "進階使用者擁有大多數管理權限，但存在一些限制。"
    IDS_ALIAS_USERS_NAME "使用者"
    IDS_ALIAS_USERS_COMMENT "防止使用者對系統進行全面變更。"
+    IDS_ALIAS_BACKUP_OPS_NAME "Backup Operators"
+    IDS_ALIAS_BACKUP_OPS_COMMENT "Backup Operators can override security restrictions for the sole purpose of backing up or resoring files"
+    IDS_ALIAS_REPLICATOR_NAME "Replicator"
+    IDS_ALIAS_REPLICATOR_COMMENT "Supports file replication in a domain"
+    IDS_ALIAS_REMOTE_DESKTOP_USERS_NAME "Remote Desktop Users"
+    IDS_ALIAS_REMOTE_DESKTOP_USERS_COMMENT "Members in this group are granted the right to logon remotely"
+    IDS_ALIAS_NETWORK_CONFIGURATION_OPS_NAME "Network Configuration Operators"
+    IDS_ALIAS_NETWORK_CONFIGURATION_OPS_COMMENT "Members in this group can have some administrative privileges to manage configuration of networking features"
    /*
     * ATTENTION: 
     *   If you translate the administrator account name, keep IDS_USER_ADMINISTRATOR_NAME and
--- a/dll/win32/samsrv/resources.h
+++ b/dll/win32/samsrv/resources.h
@ -13,16 +13,25 @@
 #define IDS_GROUP_NONE_NAME    110
 #define IDS_GROUP_NONE_COMMENT 111

-#define IDS_ALIAS_ADMINISTRATORS_NAME    120
-#define IDS_ALIAS_ADMINISTRATORS_COMMENT 121
-#define IDS_ALIAS_GUESTS_NAME            122
-#define IDS_ALIAS_GUESTS_COMMENT         123
-#define IDS_ALIAS_POWER_USERS_NAME       124
-#define IDS_ALIAS_POWER_USERS_COMMENT    125
-#define IDS_ALIAS_USERS_NAME             126
-#define IDS_ALIAS_USERS_COMMENT          127
+#define IDS_ALIAS_ADMINISTRATORS_NAME               120
+#define IDS_ALIAS_ADMINISTRATORS_COMMENT            121
+#define IDS_ALIAS_GUESTS_NAME                       122
+#define IDS_ALIAS_GUESTS_COMMENT                    123
+#define IDS_ALIAS_POWER_USERS_NAME                  124
+#define IDS_ALIAS_POWER_USERS_COMMENT               125
+#define IDS_ALIAS_USERS_NAME                        126
+#define IDS_ALIAS_USERS_COMMENT                     127
+#define IDS_ALIAS_BACKUP_OPS_NAME                   128
+#define IDS_ALIAS_BACKUP_OPS_COMMENT                129
+#define IDS_ALIAS_REPLICATOR_NAME                   130
+#define IDS_ALIAS_REPLICATOR_COMMENT                131
+#define IDS_ALIAS_REMOTE_DESKTOP_USERS_NAME         132
+#define IDS_ALIAS_REMOTE_DESKTOP_USERS_COMMENT      133
+#define IDS_ALIAS_NETWORK_CONFIGURATION_OPS_NAME    134
+#define IDS_ALIAS_NETWORK_CONFIGURATION_OPS_COMMENT 135

-#define IDS_USER_ADMINISTRATOR_NAME    140
-#define IDS_USER_ADMINISTRATOR_COMMENT 141
-#define IDS_USER_GUEST_NAME            142
-#define IDS_USER_GUEST_COMMENT         143
+
+#define IDS_USER_ADMINISTRATOR_NAME      160
+#define IDS_USER_ADMINISTRATOR_COMMENT   161
+#define IDS_USER_GUEST_NAME              162
+#define IDS_USER_GUEST_COMMENT           163
--- a/dll/win32/samsrv/setup.c
+++ b/dll/win32/samsrv/setup.c
@ -1022,6 +1022,41 @@ SampInitializeSAM(VOID)
                                szComment,
                                DOMAIN_ALIAS_RID_POWER_USERS);

+    /* Create the Backup Operators alias */
+    SampLoadString(hInstance, IDS_ALIAS_BACKUP_OPS_NAME, szName, 80);
+    SampLoadString(hInstance, IDS_ALIAS_BACKUP_OPS_COMMENT, szComment, 256);
+
+    SampSetupCreateAliasAccount(hBuiltinDomainKey,
+                                szName,
+                                szComment,
+                                DOMAIN_ALIAS_RID_BACKUP_OPS);
+
+    /* Create the Replicator alias */
+    SampLoadString(hInstance, IDS_ALIAS_REPLICATOR_NAME, szName, 80);
+    SampLoadString(hInstance, IDS_ALIAS_REPLICATOR_COMMENT, szComment, 256);
+
+    SampSetupCreateAliasAccount(hBuiltinDomainKey,
+                                szName,
+                                szComment,
+                                DOMAIN_ALIAS_RID_REPLICATOR);
+
+    /* Create the Remote Desktop Users alias */
+    SampLoadString(hInstance, IDS_ALIAS_REMOTE_DESKTOP_USERS_NAME, szName, 80);
+    SampLoadString(hInstance, IDS_ALIAS_REMOTE_DESKTOP_USERS_COMMENT, szComment, 256);
+
+    SampSetupCreateAliasAccount(hBuiltinDomainKey,
+                                szName,
+                                szComment,
+                                DOMAIN_ALIAS_RID_REMOTE_DESKTOP_USERS);
+
+    /* Create the Network Configuration Operators alias */
+    SampLoadString(hInstance, IDS_ALIAS_NETWORK_CONFIGURATION_OPS_NAME, szName, 80);
+    SampLoadString(hInstance, IDS_ALIAS_NETWORK_CONFIGURATION_OPS_COMMENT, szComment, 256);
+
+    SampSetupCreateAliasAccount(hBuiltinDomainKey,
+                                szName,
+                                szComment,
+                                DOMAIN_ALIAS_RID_NETWORK_CONFIGURATION_OPS);

    /* Add the Administrator user to the Administrators alias */
    pSid = AppendRidToSid(AccountDomainInfo->DomainSid,
--- a/media/inf/defltws.inf
+++ b/media/inf/defltws.inf
@ -7,9 +7,9 @@ Signature = "$Windows NT$"
 [Privilege Rights]
 SeAssignPrimaryTokenPrivilege = *S-1-5-19, *S-1-5-20
 SeAuditPrivilege = *S-1-5-19, *S-1-5-20
-SeBackupPrivilege = *S-1-5-32-544
+SeBackupPrivilege = *S-1-5-32-544, *S-1-5-32-551
 SeBatchLogonRight = 
-SeChangeNotifyPrivilege = *S-1-1-0, *S-1-5-32-544, *S-1-5-32-545
+SeChangeNotifyPrivilege = *S-1-1-0, *S-1-5-32-544, *S-1-5-32-545, *S-1-5-32-551
 SeCreatePagefilePrivilege = *S-1-5-32-544
 SeCreateGlobalPrivilege = *S-1-5-4, *S-1-5-6, *S-1-5-32-544
 SeCreatePermanentPrivilege =
@ -33,10 +33,10 @@ SeNetworkLogonRight =  *S-1-1-0, *S-1-5-32-544, *S-1-5-32-545, *S-1-5-32-547, *S
 SeProfileSingleProcessPrivilege = *S-1-5-32-544
 SeRemoteInteractiveLogonRight = *S-1-5-32-544, *S-1-5-32-555
 SeRemoteShutdownPrivilege = *S-1-5-32-544
-SeRestorePrivilege = *S-1-5-32-544
+SeRestorePrivilege = *S-1-5-32-544, *S-1-5-32-551
 SeSecurityPrivilege = *S-1-5-32-544
 SeServiceLogonRight =
-SeShutdownPrivilege = *S-1-5-32-544, *S-1-5-32-545
+SeShutdownPrivilege = *S-1-5-32-544, *S-1-5-32-545, *S-1-5-32-551
 SeSyncAgentPrivilege =
 SeSystemEnvironmentPrivilege = *S-1-5-32-544
 SeSystemProfilePrivilege = *S-1-5-32-544