Windows Server 2025 member server rule V-278001.c includes domain-controller-only Server Operators principal

[PleaseStopAsking]

PowerSTIG 4.30.0 incorrectly includes the Server Operators principal in V-278001.c for the Windows Server 2025 Member Server STIG 1.1.

The rule manages permissions on:

HKLM:\SYSTEM

Its processed ACL contains:

<Entry>
    <Principal>Server Operators</Principal>
    <Inheritance />
    <Rights>ReadKey</Rights>
</Entry>

However, the rule's own STIG text states:

Server Operators - Read - This key and subkeys (Domain controllers only)

The Server Operators group does not exist on a member server. AccessControlDsc therefore fails while attempting to resolve it.

Exception calling "Translate" with "1" argument(s):
"Some or all identity references could not be translated."

A constructor was not found. Cannot find an appropriate constructor
for type System.Security.Principal.NTAccount.

The PowerShell DSC resource
[RegistryAccessEntry][V-278001.c]::[WindowsServer]Baseline
threw one or more non-terminating errors while running Test-TargetResource.

Workaround:

Exception = @{
    'V-278001.c' = @{
        AccessControlEntry = @{
            Entry = @(
                @{
                    Type = ''
                    Principal = 'Authenticated Users'
                    ForcePrincipal = 'False'
                    Inheritance = 'This Key and Subkeys'
                    Rights = 'ReadKey'
                }
                @{
                    Type = ''
                    Principal = 'Administrators'
                    ForcePrincipal = 'False'
                    Inheritance = 'This Key and Subkeys'
                    Rights = 'FullControl'
                }
                @{
                    Type = ''
                    Principal = 'SYSTEM'
                    ForcePrincipal = 'False'
                    Inheritance = 'This Key and Subkeys'
                    Rights = 'FullControl'
                }
                @{
                    Type = ''
                    Principal = 'CREATOR OWNER'
                    ForcePrincipal = 'False'
                    Inheritance = 'This Key and Subkeys'
                    Rights = 'FullControl'
                }
                @{
                    Type = ''
                    Principal = 'ALL APPLICATION PACKAGES'
                    ForcePrincipal = 'False'
                    Inheritance = 'This Key and Subkeys'
                    Rights = 'ReadKey'
                }
                @{
                    Type = ''
                    Principal = 'S-1-15-3-1024-1065365936-1281604716-3511738428-1654721687-432734479-3232135806-4053264122-3456934681'
                    ForcePrincipal = 'False'
                    Inheritance = 'This Key and Subkeys'
                    Rights = 'ReadKey'
                }
            )
        }
    }
}