Unable to add the Built-in/Administrators group from two different domains to the override accounts for GPO-protected templated accounts.
In this situation, the Built-in/Administrators group for each of the domains has exactly the same SID, as this is a well-known SID that is the same in all domains. This would result in attempting to add a duplicate SID into the protection template for each of the domains.
This was identified as a defect.
Defect ID 621850: Unable to add the Builtin/Administrators group from two different domains to the override accounts for GPO protection templated.
Workaround: create a group and add both accounts into it, and exclude the group instead of the acounts.
