add well known rid for pre win2k compatible access group; bug 897