inspec/test/kitchen/policies/default/controls/security_identifier_spec.rb

unless os.windows?
  $stderr.puts "\033[1;33mTODO: Not running #{__FILE__} because we are not on Windows.\033[0m"
  return
end

describe security_identifier({ user: 'Administrator' }) do
  it { should exist }
  its('sid') { should match %r{S-1-5-21.+-500} }
end

describe security_identifier({ unspecified: 'Administrator' }) do
  it { should exist }
  its('sid') { should match %r{S-1-5-21.+-500} }
end

describe security_identifier({ group: 'Administrator' }) do
  it { should_not exist }
  its('sid') { should be nil }
end

describe security_identifier({ group: 'Administrators' }) do
  its('sid') { should eq 'S-1-5-32-544' }
end

describe security_identifier({ unspecified: 'Administrators' }) do
  its('sid') { should eq 'S-1-5-32-544' }
end

describe security_identifier({ user: 'Administrators' }) do
  it { should_not exist }
  its('sid') { should be nil }
end