Feature: DOMAIN_CONTROLLERS string match for non-English Active Directory

[fkxdr]

I know it is tagged as TODO, but in config.ml:

set DOMAIN_CONTROLLERS = "DOMAIN CONTROLLERS@" # TODO: check languages

On non-English Active Directory installations, the Domain Controllers group name is localized: "DOMÄNENCONTROLLER@" on German systems or "CONTRÔLEURS DE DOMAINE@" on French systems. The string match might silently fail, missing paths via SeBackupPrivilege on OUs containing Domain Controllers.

The most robust fix (I believe?) would be to match against the well-known SID S-1-5-9 instead of the group name, which is language-independent.

[shellinvictus]

Ah yes, i've made a very simple solution to check this. Noted for the S-1-5-9, I will take a look!