- Download pstools from link: http://technet.microsoft.com/en-us/sysinternals/bb896649.aspx.
- Extract it and get psexec.exe and copy it to a Domain Controller (DC).
- Open new command and run the command psexec.exe -s “cmd”, click Accept/Yes.
- We will get a new command that run under System account.
- Under new command prompt, please run the command below:
dsmod group “CN=Cert Publishers,CN=Users,DC=contoso,DC=com” -scope L
This would convert built-in group scope to Domain Local.