mirror of
https://github.com/samba-team/samba.git
synced 2024-12-23 17:34:34 +03:00
15637206b9
With the fix introduced by Nadya in changeset
622ef6aed8 we are now able to generate
correct SD (at least the same as W2k3R2 with a Forest Level of 2003), so
there is no need for this fix anymore as it makes SDs for Forest Level
2003 and lower incorrect.
1246 lines
40 KiB
Plaintext
1246 lines
40 KiB
Plaintext
###############################
|
|
# Configuration Naming Context
|
|
###############################
|
|
|
|
# Display specifiers are located in
|
|
# display-specifiers/DisplaySpecifiers-Win2k8R2.txt"
|
|
# This file is parsed during provision using the ms_display_specifiers.py
|
|
# script.
|
|
|
|
dn: CN=Deleted Objects,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
description: Container for deleted objects
|
|
isDeleted: TRUE
|
|
isCriticalSystemObject: TRUE
|
|
systemFlags: -1946157056
|
|
|
|
# Extended rights
|
|
|
|
dn: CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
systemFlags: -2147483648
|
|
|
|
dn: CN=Change-Rid-Master,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Change Rid Master
|
|
rightsGuid: d58d5f36-0a98-11d1-adbb-00c04fd8d5cd
|
|
appliesTo: 6617188d-8f3c-11d0-afda-00c04fd930c9
|
|
localizationDisplayId: 29
|
|
validAccesses: 256
|
|
|
|
dn: CN=Do-Garbage-Collection,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Do Garbage Collection
|
|
rightsGuid: fec364e0-0a98-11d1-adbb-00c04fd8d5cd
|
|
appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
|
|
localizationDisplayId: 31
|
|
validAccesses: 256
|
|
|
|
dn: CN=Recalculate-Hierarchy,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Recalculate Hierarchy
|
|
rightsGuid: 0bc1554e-0a99-11d1-adbb-00c04fd8d5cd
|
|
appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
|
|
localizationDisplayId: 32
|
|
validAccesses: 256
|
|
|
|
dn: CN=Allocate-Rids,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Allocate Rids
|
|
rightsGuid: 1abd7cf8-0a99-11d1-adbb-00c04fd8d5cd
|
|
appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
|
|
localizationDisplayId: 33
|
|
validAccesses: 256
|
|
|
|
dn: CN=Change-PDC,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Change PDC
|
|
rightsGuid: bae50096-4752-11d1-9052-00c04fc2d4cf
|
|
appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
|
|
localizationDisplayId: 34
|
|
validAccesses: 256
|
|
|
|
dn: CN=Add-GUID,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Add GUID
|
|
rightsGuid: 440820ad-65b4-11d1-a3da-0000f875ae0d
|
|
appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
|
|
localizationDisplayId: 35
|
|
validAccesses: 256
|
|
|
|
dn: CN=Change-Domain-Master,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Change Domain Master
|
|
rightsGuid: 014bf69c-7b3b-11d1-85f6-08002be74fab
|
|
appliesTo: ef9e60e0-56f7-11d1-a9c6-0000f80367c1
|
|
localizationDisplayId: 36
|
|
validAccesses: 256
|
|
|
|
dn: CN=Public-Information,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Public Information
|
|
rightsGuid: e48d0154-bcf8-11d1-8702-00c04fb96050
|
|
appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
|
|
appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
|
|
appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
|
|
localizationDisplayId: 37
|
|
validAccesses: 48
|
|
|
|
dn: CN=msmq-Receive-Dead-Letter,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Receive Dead Letter
|
|
rightsGuid: 4b6e08c0-df3c-11d1-9c86-006008764d0e
|
|
appliesTo: 9a0dc344-c100-11d1-bbc5-0080c76670c0
|
|
localizationDisplayId: 38
|
|
validAccesses: 256
|
|
|
|
dn: CN=msmq-Peek-Dead-Letter,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Peek Dead Letter
|
|
rightsGuid: 4b6e08c1-df3c-11d1-9c86-006008764d0e
|
|
appliesTo: 9a0dc344-c100-11d1-bbc5-0080c76670c0
|
|
localizationDisplayId: 39
|
|
validAccesses: 256
|
|
|
|
dn: CN=msmq-Receive-computer-Journal,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Receive Computer Journal
|
|
rightsGuid: 4b6e08c2-df3c-11d1-9c86-006008764d0e
|
|
appliesTo: 9a0dc344-c100-11d1-bbc5-0080c76670c0
|
|
localizationDisplayId: 40
|
|
validAccesses: 256
|
|
|
|
dn: CN=msmq-Peek-computer-Journal,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Peek Computer Journal
|
|
rightsGuid: 4b6e08c3-df3c-11d1-9c86-006008764d0e
|
|
appliesTo: 9a0dc344-c100-11d1-bbc5-0080c76670c0
|
|
localizationDisplayId: 41
|
|
validAccesses: 256
|
|
|
|
dn: CN=msmq-Receive,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Receive Message
|
|
rightsGuid: 06bd3200-df3e-11d1-9c86-006008764d0e
|
|
appliesTo: 9a0dc343-c100-11d1-bbc5-0080c76670c0
|
|
localizationDisplayId: 42
|
|
validAccesses: 256
|
|
|
|
dn: CN=msmq-Peek,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Peek Message
|
|
rightsGuid: 06bd3201-df3e-11d1-9c86-006008764d0e
|
|
appliesTo: 9a0dc343-c100-11d1-bbc5-0080c76670c0
|
|
localizationDisplayId: 43
|
|
validAccesses: 256
|
|
|
|
dn: CN=msmq-Send,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Send Message
|
|
rightsGuid: 06bd3202-df3e-11d1-9c86-006008764d0e
|
|
appliesTo: 46b27aac-aafa-4ffb-b773-e5bf621ee87b
|
|
appliesTo: 9a0dc343-c100-11d1-bbc5-0080c76670c0
|
|
localizationDisplayId: 44
|
|
validAccesses: 256
|
|
|
|
dn: CN=msmq-Receive-journal,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Receive Journal
|
|
rightsGuid: 06bd3203-df3e-11d1-9c86-006008764d0e
|
|
appliesTo: 9a0dc343-c100-11d1-bbc5-0080c76670c0
|
|
localizationDisplayId: 45
|
|
validAccesses: 256
|
|
|
|
dn: CN=msmq-Open-Connector,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Open Connector Queue
|
|
rightsGuid: b4e60130-df3f-11d1-9c86-006008764d0e
|
|
appliesTo: bf967ab3-0de6-11d0-a285-00aa003049e2
|
|
localizationDisplayId: 46
|
|
validAccesses: 256
|
|
|
|
dn: CN=Apply-Group-Policy,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Apply Group Policy
|
|
rightsGuid: edacfd8f-ffb3-11d1-b41d-00a0c968f939
|
|
appliesTo: f30e3bc2-9ff0-11d1-b603-0000f80367c1
|
|
localizationDisplayId: 47
|
|
validAccesses: 256
|
|
|
|
dn: CN=RAS-Information,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Remote Access Information
|
|
rightsGuid: 037088f8-0ae1-11d2-b422-00a0c968f939
|
|
appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
|
|
appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
|
|
localizationDisplayId: 48
|
|
validAccesses: 48
|
|
|
|
dn: CN=DS-Install-Replica,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Add/Remove Replica In Domain
|
|
rightsGuid: 9923a32a-3607-11d2-b9be-0000f87a36b2
|
|
appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
|
|
localizationDisplayId: 49
|
|
validAccesses: 256
|
|
|
|
dn: CN=Change-Infrastructure-Master,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Change Infrastructure Master
|
|
rightsGuid: cc17b1fb-33d9-11d2-97d4-00c04fd8d5cd
|
|
appliesTo: 2df90d89-009f-11d2-aa4c-00c04fd7d83a
|
|
localizationDisplayId: 50
|
|
validAccesses: 256
|
|
|
|
dn: CN=Update-Schema-Cache,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Update Schema Cache
|
|
rightsGuid: be2bb760-7f46-11d2-b9ad-00c04f79f805
|
|
appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
|
|
localizationDisplayId: 51
|
|
validAccesses: 256
|
|
|
|
dn: CN=Recalculate-Security-Inheritance,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Recalculate Security Inheritance
|
|
rightsGuid: 62dd28a8-7f46-11d2-b9ad-00c04f79f805
|
|
appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
|
|
localizationDisplayId: 52
|
|
validAccesses: 256
|
|
|
|
dn: CN=DS-Check-Stale-Phantoms,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Check Stale Phantoms
|
|
rightsGuid: 69ae6200-7f46-11d2-b9ad-00c04f79f805
|
|
appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
|
|
localizationDisplayId: 53
|
|
validAccesses: 256
|
|
|
|
dn: CN=Certificate-Enrollment,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Enroll
|
|
rightsGuid: 0e10c968-78fb-11d2-90d4-00c04f79dc55
|
|
appliesTo: e5209ca2-3bba-11d2-90cc-00c04fd91ab1
|
|
localizationDisplayId: 54
|
|
validAccesses: 256
|
|
|
|
dn: CN=Self-Membership,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Add/Remove self as member
|
|
rightsGuid: bf9679c0-0de6-11d0-a285-00aa003049e2
|
|
appliesTo: bf967a9c-0de6-11d0-a285-00aa003049e2
|
|
localizationDisplayId: 12
|
|
validAccesses: 8
|
|
|
|
dn: CN=Validated-DNS-Host-Name,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Validated write to DNS host name
|
|
rightsGuid: 72e39547-7b18-11d1-adef-00c04fd8d5cd
|
|
appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
|
|
localizationDisplayId: 13
|
|
validAccesses: 8
|
|
|
|
dn: CN=Validated-SPN,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Validated write to service principal name
|
|
rightsGuid: f3a64788-5306-11d1-a9c5-0000f80367c1
|
|
appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
|
|
localizationDisplayId: 14
|
|
validAccesses: 8
|
|
|
|
dn: CN=Generate-RSoP-Planning,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Generate Resultant Set of Policy (Planning)
|
|
rightsGuid: b7b1b3dd-ab09-4242-9e30-9980e5d322f7
|
|
appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
|
|
appliesTo: bf967aa5-0de6-11d0-a285-00aa003049e2
|
|
localizationDisplayId: 55
|
|
validAccesses: 256
|
|
|
|
dn: CN=Refresh-Group-Cache,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Refresh Group Cache for Logons
|
|
rightsGuid: 9432c620-033c-4db7-8b58-14ef6d0bf477
|
|
appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
|
|
localizationDisplayId: 56
|
|
validAccesses: 256
|
|
|
|
dn: CN=SAM-Enumerate-Entire-Domain,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Enumerate Entire SAM Domain
|
|
rightsGuid: 91d67418-0135-4acc-8d79-c08e857cfbec
|
|
appliesTo: bf967aad-0de6-11d0-a285-00aa003049e2
|
|
localizationDisplayId: 57
|
|
validAccesses: 256
|
|
|
|
dn: CN=Generate-RSoP-Logging,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Generate Resultant Set of Policy (Logging)
|
|
rightsGuid: b7b1b3de-ab09-4242-9e30-9980e5d322f7
|
|
appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
|
|
appliesTo: bf967aa5-0de6-11d0-a285-00aa003049e2
|
|
localizationDisplayId: 58
|
|
validAccesses: 256
|
|
|
|
dn: CN=Domain-Other-Parameters,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Other Domain Parameters (for use by SAM)
|
|
rightsGuid: b8119fd0-04f6-4762-ab7a-4986c76b3f9a
|
|
appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
|
|
localizationDisplayId: 59
|
|
validAccesses: 48
|
|
|
|
dn: CN=DNS-Host-Name-Attributes,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: DNS Host Name Attributes
|
|
rightsGuid: 72e39547-7b18-11d1-adef-00c04fd8d5cd
|
|
appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
|
|
localizationDisplayId: 60
|
|
validAccesses: 48
|
|
|
|
dn: CN=Create-Inbound-Forest-Trust,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Create Inbound Forest Trust
|
|
rightsGuid: e2a36dc9-ae17-47c3-b58b-be34c55ba633
|
|
appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
|
|
localizationDisplayId: 61
|
|
validAccesses: 256
|
|
|
|
dn: CN=DS-Replication-Get-Changes-All,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Replicating Directory Changes All
|
|
rightsGuid: 1131f6ad-9c07-11d1-f79f-00c04fc2dcd2
|
|
appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
|
|
appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
|
|
appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
|
|
localizationDisplayId: 62
|
|
validAccesses: 256
|
|
|
|
dn: CN=Migrate-SID-History,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Migrate SID History
|
|
rightsGuid: BA33815A-4F93-4c76-87F3-57574BFF8109
|
|
appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
|
|
localizationDisplayId: 63
|
|
validAccesses: 256
|
|
|
|
dn: CN=Reanimate-Tombstones,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Reanimate Tombstones
|
|
rightsGuid: 45EC5156-DB7E-47bb-B53F-DBEB2D03C40F
|
|
appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
|
|
appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
|
|
appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
|
|
localizationDisplayId: 64
|
|
validAccesses: 256
|
|
|
|
dn: CN=Allowed-To-Authenticate,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Allowed to Authenticate
|
|
rightsGuid: 68B1D179-0D15-4d4f-AB71-46152E79A7BC
|
|
appliesTo: 4828cc14-1437-45bc-9b07-ad6f015e5f28
|
|
appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
|
|
appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
|
|
localizationDisplayId: 65
|
|
validAccesses: 256
|
|
|
|
dn: CN=DS-Execute-Intentions-Script,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Execute Forest Update Script
|
|
rightsGuid: 2f16c4a5-b98e-432c-952a-cb388ba33f2e
|
|
appliesTo: ef9e60e0-56f7-11d1-a9c6-0000f80367c1
|
|
localizationDisplayId: 66
|
|
validAccesses: 256
|
|
|
|
dn: CN=DS-Replication-Monitor-Topology,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Monitor Active Directory Replication
|
|
rightsGuid: f98340fb-7c5b-4cdb-a00b-2ebdfa115a96
|
|
appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
|
|
appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
|
|
appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
|
|
localizationDisplayId: 67
|
|
validAccesses: 256
|
|
|
|
dn: CN=Update-Password-Not-Required-Bit,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Update Password Not Required Bit
|
|
rightsGuid: 280f369c-67c7-438e-ae98-1d46f3c6f541
|
|
appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
|
|
localizationDisplayId: 68
|
|
validAccesses: 256
|
|
|
|
dn: CN=Unexpire-Password,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Unexpire Password
|
|
rightsGuid: ccc2dc7d-a6ad-4a7a-8846-c04e3cc53501
|
|
appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
|
|
localizationDisplayId: 69
|
|
validAccesses: 256
|
|
|
|
dn: CN=Enable-Per-User-Reversibly-Encrypted-Password,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Enable Per User Reversibly Encrypted Password
|
|
rightsGuid: 05c74c5e-4deb-43b4-bd9f-86664c2a7fd5
|
|
appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
|
|
localizationDisplayId: 70
|
|
validAccesses: 256
|
|
|
|
dn: CN=DS-Query-Self-Quota,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Query Self Quota
|
|
rightsGuid: 4ecc03fe-ffc0-4947-b630-eb672a8a9dbc
|
|
appliesTo: da83fc4f-076f-4aea-b4dc-8f4dab9b5993
|
|
localizationDisplayId: 71
|
|
validAccesses: 256
|
|
|
|
dn: CN=Domain-Administer-Server,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Domain Administer Server
|
|
rightsGuid: ab721a52-1e2f-11d0-9819-00aa0040529b
|
|
appliesTo: bf967aad-0de6-11d0-a285-00aa003049e2
|
|
localizationDisplayId: 1
|
|
validAccesses: 256
|
|
|
|
dn: CN=User-Change-Password,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Change Password
|
|
rightsGuid: ab721a53-1e2f-11d0-9819-00aa0040529b
|
|
appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
|
|
appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
|
|
appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
|
|
localizationDisplayId: 2
|
|
validAccesses: 256
|
|
|
|
dn: CN=User-Force-Change-Password,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Reset Password
|
|
rightsGuid: 00299570-246d-11d0-a768-00aa006e0529
|
|
appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
|
|
appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
|
|
appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
|
|
localizationDisplayId: 3
|
|
validAccesses: 256
|
|
|
|
dn: CN=Send-As,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Send As
|
|
rightsGuid: ab721a54-1e2f-11d0-9819-00aa0040529b
|
|
appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
|
|
appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
|
|
appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
|
|
localizationDisplayId: 4
|
|
validAccesses: 256
|
|
|
|
dn: CN=Receive-As,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Receive As
|
|
rightsGuid: ab721a56-1e2f-11d0-9819-00aa0040529b
|
|
appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
|
|
appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
|
|
appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
|
|
localizationDisplayId: 5
|
|
validAccesses: 256
|
|
|
|
dn: CN=Send-To,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Send To
|
|
rightsGuid: ab721a55-1e2f-11d0-9819-00aa0040529b
|
|
appliesTo: bf967a9c-0de6-11d0-a285-00aa003049e2
|
|
localizationDisplayId: 6
|
|
validAccesses: 256
|
|
|
|
dn: CN=Domain-Password,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Domain Password & Lockout Policies
|
|
rightsGuid: c7407360-20bf-11d0-a768-00aa006e0529
|
|
appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
|
|
appliesTo: 19195a5a-6da0-11d0-afd3-00c04fd930c9
|
|
localizationDisplayId: 7
|
|
validAccesses: 48
|
|
|
|
dn: CN=General-Information,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: General Information
|
|
rightsGuid: 59ba2f42-79a2-11d0-9020-00c04fc2d3cf
|
|
appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
|
|
appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
|
|
localizationDisplayId: 8
|
|
validAccesses: 48
|
|
|
|
dn: CN=User-Account-Restrictions,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Account Restrictions
|
|
rightsGuid: 4c164200-20c0-11d0-a768-00aa006e0529
|
|
appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
|
|
appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
|
|
appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
|
|
localizationDisplayId: 9
|
|
validAccesses: 48
|
|
|
|
dn: CN=User-Logon,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Logon Information
|
|
rightsGuid: 5f202010-79a5-11d0-9020-00c04fc2d4cf
|
|
appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
|
|
appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
|
|
localizationDisplayId: 10
|
|
validAccesses: 48
|
|
|
|
dn: CN=Membership,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Group Membership
|
|
rightsGuid: bc0ac240-79a9-11d0-9020-00c04fc2d4cf
|
|
appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
|
|
appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
|
|
localizationDisplayId: 11
|
|
validAccesses: 48
|
|
|
|
dn: CN=Open-Address-Book,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Open Address List
|
|
rightsGuid: a1990816-4298-11d1-ade2-00c04fd8d5cd
|
|
appliesTo: 3e74f60f-3e73-11d1-a9c0-0000f80367c1
|
|
localizationDisplayId: 21
|
|
validAccesses: 256
|
|
|
|
dn: CN=Personal-Information,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Personal Information
|
|
rightsGuid: 77B5B886-944A-11d1-AEBD-0000F80367C1
|
|
appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
|
|
appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
|
|
appliesTo: 5cb41ed0-0e4c-11d0-a286-00aa003049e2
|
|
appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
|
|
localizationDisplayId: 23
|
|
validAccesses: 48
|
|
|
|
dn: CN=Email-Information,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Phone and Mail Options
|
|
rightsGuid: E45795B2-9455-11d1-AEBD-0000F80367C1
|
|
appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
|
|
appliesTo: bf967a9c-0de6-11d0-a285-00aa003049e2
|
|
appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
|
|
localizationDisplayId: 22
|
|
validAccesses: 48
|
|
|
|
dn: CN=Web-Information,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Web Information
|
|
rightsGuid: E45795B3-9455-11d1-AEBD-0000F80367C1
|
|
appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
|
|
appliesTo: 5cb41ed0-0e4c-11d0-a286-00aa003049e2
|
|
appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
|
|
localizationDisplayId: 24
|
|
validAccesses: 48
|
|
|
|
dn: CN=DS-Replication-Get-Changes,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Replicating Directory Changes
|
|
rightsGuid: 1131f6aa-9c07-11d1-f79f-00c04fc2dcd2
|
|
appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
|
|
appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
|
|
appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
|
|
localizationDisplayId: 25
|
|
validAccesses: 256
|
|
|
|
dn: CN=DS-Replication-Synchronize,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Replication Synchronization
|
|
rightsGuid: 1131f6ab-9c07-11d1-f79f-00c04fc2dcd2
|
|
appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
|
|
appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
|
|
appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
|
|
localizationDisplayId: 26
|
|
validAccesses: 256
|
|
|
|
dn: CN=DS-Replication-Manage-Topology,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Manage Replication Topology
|
|
rightsGuid: 1131f6ac-9c07-11d1-f79f-00c04fc2dcd2
|
|
appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
|
|
appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
|
|
appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
|
|
localizationDisplayId: 27
|
|
validAccesses: 256
|
|
|
|
dn: CN=Change-Schema-Master,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Change Schema Master
|
|
rightsGuid: e12b56b6-0a95-11d1-adbb-00c04fd8d5cd
|
|
appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
|
|
localizationDisplayId: 28
|
|
validAccesses: 256
|
|
|
|
dn: CN=DS-Replication-Get-Changes-In-Filtered-Set,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Replicating Directory Changes In Filtered Set
|
|
rightsGuid: 89e95b76-444d-4c62-991a-0facbeda640c
|
|
appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
|
|
appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
|
|
appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
|
|
localizationDisplayId: 77
|
|
validAccesses: 256
|
|
|
|
dn: CN=MS-TS-GatewayAccess,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: MS-TS-GatewayAccess
|
|
rightsGuid: ffa6f046-ca4b-4feb-b40d-04dfee722543
|
|
appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
|
|
localizationDisplayId: 74
|
|
validAccesses: 48
|
|
|
|
dn: CN=Private-Information,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Private Information
|
|
rightsGuid: 91e647de-d96f-4b70-9557-d63ff4f3ccd8
|
|
appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
|
|
appliesTo: 4828cc14-1437-45bc-9b07-ad6f015e5f28
|
|
localizationDisplayId: 72
|
|
validAccesses: 48
|
|
|
|
dn: CN=Read-Only-Replication-Secret-Synchronization,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Read Only Replication Secret Synchronization
|
|
rightsGuid: 1131f6ae-9c07-11d1-f79f-00c04fc2dcd2
|
|
appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
|
|
appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
|
|
appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
|
|
localizationDisplayId: 73
|
|
validAccesses: 256
|
|
|
|
dn: CN=Reload-SSL-Certificate,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Reload SSL/TLS Certificate
|
|
rightsGuid: 1a60ea8d-58a6-4b20-bcdc-fb71eb8a9ff8
|
|
appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
|
|
localizationDisplayId: 76
|
|
validAccesses: 256
|
|
|
|
dn: CN=Terminal-Server-License-Server,CN=Extended-Rights,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: controlAccessRight
|
|
displayName: Terminal Server License Server
|
|
rightsGuid: 5805bc62-bdc9-4428-a5e2-856a0f4c185e
|
|
appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
|
|
appliesTo: 4828cc14-1437-45bc-9b07-ad6f015e5f28
|
|
localizationDisplayId: 75
|
|
validAccesses: 48
|
|
|
|
# End extended rights
|
|
|
|
# Forest updates
|
|
|
|
dn: CN=ForestUpdates,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=ActiveDirectoryRodcUpdate,CN=ForestUpdates,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
revision: 5
|
|
|
|
dn: CN=ActiveDirectoryUpdate,CN=ForestUpdates,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
revision: 5
|
|
|
|
dn: CN=Operations,CN=ForestUpdates,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=6b800a81-affe-4a15-8e41-6ea0c7aa89e4,CN=Operations,CN=ForestUpdates,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=dd07182c-3174-4c95-902a-d64fee285bbf,CN=Operations,CN=ForestUpdates,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=ffa5ee3c-1405-476d-b344-7ad37d69cc25,CN=Operations,CN=ForestUpdates,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=099f1587-af70-49c6-ab6c-7b3e82be0fe2,CN=Operations,CN=ForestUpdates,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=94fdebc6-8eeb-4640-80de-ec52b9ca17fa,CN=Operations,CN=ForestUpdates,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
objectVersion: 3
|
|
|
|
dn: CN=1a3f6b15-55f2-4752-ba27-3d38a8232c4d,CN=Operations,CN=ForestUpdates,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=dee21a17-4e8e-4f40-a58c-c0c009b685a7,CN=Operations,CN=ForestUpdates,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=9bd98bb4-4047-4de5-bf4c-7bd1d0f6d21d,CN=Operations,CN=ForestUpdates,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=3fe80fbf-bf39-4773-b5bd-3e5767a30d2d,CN=Operations,CN=ForestUpdates,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=f02915e2-9141-4f73-b8e7-2804662782da,CN=Operations,CN=ForestUpdates,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=39902c52-ef24-4b4b-8033-2c9dfdd173a2,CN=Operations,CN=ForestUpdates,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=20bf09b4-6d0b-4cd1-9c09-4231edf1209b,CN=Operations,CN=ForestUpdates,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=94f238bb-831c-11d6-977b-00c04f613221,CN=Operations,CN=ForestUpdates,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=94f238bc-831c-11d6-977b-00c04f613221,CN=Operations,CN=ForestUpdates,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=94f238bd-831c-11d6-977b-00c04f613221,CN=Operations,CN=ForestUpdates,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=94f238be-831c-11d6-977b-00c04f613221,CN=Operations,CN=ForestUpdates,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=94f238bf-831c-11d6-977b-00c04f613221,CN=Operations,CN=ForestUpdates,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=94f238c0-831c-11d6-977b-00c04f613221,CN=Operations,CN=ForestUpdates,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=eda27b47-e610-11d6-9793-00c04f613221,CN=Operations,CN=ForestUpdates,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=eda27b48-e610-11d6-9793-00c04f613221,CN=Operations,CN=ForestUpdates,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=eda27b49-e610-11d6-9793-00c04f613221,CN=Operations,CN=ForestUpdates,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=eda27b4a-e610-11d6-9793-00c04f613221,CN=Operations,CN=ForestUpdates,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=26d9c510-e61a-11d6-9793-00c04f613221,CN=Operations,CN=ForestUpdates,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=26d9c511-e61a-11d6-9793-00c04f613221,CN=Operations,CN=ForestUpdates,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=3467dae5-dedd-4648-9066-f48ac186b20a,CN=Operations,CN=ForestUpdates,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=33b7ee33-1386-47cf-baa1-b03e06473253,CN=Operations,CN=ForestUpdates,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=e9ee8d55-c2fb-4723-a333-c80ff4dfbf45,CN=Operations,CN=ForestUpdates,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=ccfae63a-7fb5-454c-83ab-0e8e1214974e,CN=Operations,CN=ForestUpdates,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=ad3c7909-b154-4c16-8bf7-2c3a7870bb3d,CN=Operations,CN=ForestUpdates,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=26ad2ebf-f8f5-44a4-b97c-a616c8b9d09a,CN=Operations,CN=ForestUpdates,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=4444c516-f43a-4c12-9c4b-b5c064941d61,CN=Operations,CN=ForestUpdates,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=436a1a4b-f41a-46e6-ac86-427720ef29f3,CN=Operations,CN=ForestUpdates,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=b2b7fb45-f50d-41bc-a73b-8f580f3b636a,CN=Operations,CN=ForestUpdates,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=1bdf6366-c3db-4d0b-b8cb-f99ba9bce20f,CN=Operations,CN=ForestUpdates,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=63c0f51a-067c-4640-8a4f-044fb33f1049,CN=Operations,CN=ForestUpdates,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=dae441c0-366e-482e-98d9-60a99a1898cc,CN=Operations,CN=ForestUpdates,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=7dd09ca6-f0d6-43bf-b7f8-ef348f435617,CN=Operations,CN=ForestUpdates,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=002fb291-0d00-4b0c-8c00-fe7f50ce6f8d,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=07e57d28-ad40-44fc-8334-8a0dc119b3f4,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=0fc5a978-0059-4b0a-9dc2-9896e8e389a1,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=10338d31-2423-4dff-b4b5-ef025144b01f,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=2a858903-5696-4364-b4e5-4cac027ca7a6,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=2b9e0609-6d75-498a-9727-c9fcc93f0e42,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=3b3adbdb-4485-4559-aed8-9811c4bf90e4,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=429a6334-1a00-4515-bf48-676deb55954a,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=4c022fd1-adab-4d84-a7f1-9580f03da856,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=4c0672a2-437c-4944-b953-5db8f111d665,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=4d753a29-26ac-4d1a-bc80-311f947e4f0a,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=56040c71-fe93-4037-8fe9-1a4d1a283009,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=560cf82d-9572-48a3-9024-6f2b56f1f866,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=613bd063-e8e9-4a62-8f4c-cda566f7eb6f,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=6eb8eaf9-3403-4ba5-8b4b-ce349a4680ad,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=6fd48655-1698-497a-ac8d-8267ce01c80b,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=782370ce-3d38-438d-8b0c-464220a3039d,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=8f86b825-c322-4101-adc4-579f12d445db,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=96541a16-910a-4b66-acde-720a0dff03c7,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=9fea28ff-387f-4d57-866d-3893c50f373f,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=a96e2ed5-7a7c-4d5c-9d5d-965eca0051da,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=abd97102-88dd-4013-a009-0e2c2f967ff6,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=bd3413c0-9559-469b-9f3d-51d7faabd81a,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=c03b1f37-c240-4910-93c8-1544a452b4b5,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=caa2bfad-0cca-483b-8d00-347f943292a8,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=d668ad1f-cedd-4565-ab02-9385926ce4f5,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=dcb3c95d-deb7-4c51-ad13-43a7d5d06fc7,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=ea08c04c-f474-4212-b19e-5e754f9210d4,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=ef010a1e-bd88-48c8-a7af-2affd250d77d,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=f814097b-3e3d-49ba-8a3a-092c25085f06,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=Windows2003Update,CN=ForestUpdates,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
revision: 10
|
|
|
|
# End forest updates
|
|
|
|
dn: CN=LostAndFoundConfig,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: lostAndFound
|
|
systemFlags: -2147483648
|
|
|
|
dn: CN=NTDS Quotas,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: msDS-QuotaContainer
|
|
description: Quota specifications container
|
|
isCriticalSystemObject: TRUE
|
|
msDS-TombstoneQuotaFactor: 100
|
|
systemFlags: -2147483648
|
|
|
|
# Partitions
|
|
|
|
dn: CN=Partitions,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: crossRefContainer
|
|
systemFlags: -2147483648
|
|
msDS-Behavior-Version: ${FOREST_FUNCTIONALITY}
|
|
showInAdvancedViewOnly: TRUE
|
|
|
|
# Partitions for DNS are missing since we don't support AD DNS
|
|
|
|
dn: CN=Enterprise Configuration,CN=Partitions,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: crossRef
|
|
dnsRoot: ${DNSDOMAIN}
|
|
nCName: ${CONFIGDN}
|
|
systemFlags: 1
|
|
|
|
dn: CN=Enterprise Schema,CN=Partitions,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: crossRef
|
|
dnsRoot: ${DNSDOMAIN}
|
|
nCName: ${SCHEMADN}
|
|
systemFlags: 1
|
|
|
|
dn: CN=${DOMAIN},CN=Partitions,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: crossRef
|
|
dnsRoot: ${DNSDOMAIN}
|
|
msDS-Behavior-Version: ${DOMAIN_FUNCTIONALITY}
|
|
nCName: ${DOMAINDN}
|
|
nETBIOSName: ${DOMAIN}
|
|
nTMixedDomain: 0
|
|
systemFlags: 3
|
|
|
|
# End partitions
|
|
|
|
dn: CN=Physical Locations,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: locality
|
|
objectClass: physicalLocation
|
|
l: Physical Locations tree root
|
|
|
|
# Schema located in "ad-schema/*.txt"
|
|
|
|
# Services
|
|
|
|
dn: CN=Services,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
systemFlags: -2147483648
|
|
|
|
dn: CN=MsmqServices,CN=Services,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: mSMQEnterpriseSettings
|
|
mSMQVersion: 200
|
|
|
|
dn: CN=NetServices,CN=Services,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=Public Key Services,CN=Services,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=Certificate Templates,CN=Public Key Services,CN=Services,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=Enrollment Services,CN=Public Key Services,CN=Services,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=Certification Authorities,CN=Public Key Services,CN=Services,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=AIA,CN=Public Key Services,CN=Services,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=CDP,CN=Public Key Services,CN=Services,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=KRA,CN=Public Key Services,CN=Services,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=OID,CN=Public Key Services,CN=Services,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: msPKI-Enterprise-Oid
|
|
|
|
dn: CN=RRAS,CN=Services,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=IdentityDictionary,CN=RRAS,CN=Services,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: rRASAdministrationDictionary
|
|
msRRASVendorAttributeEntry: 311:6:803:RADIUS Accouting
|
|
msRRASVendorAttributeEntry: 311:6:802:RADIUS Authentication
|
|
msRRASVendorAttributeEntry: 311:6:801:NT Domain Authentication
|
|
msRRASVendorAttributeEntry: 311:6:714:Point to point parallel connection
|
|
msRRASVendorAttributeEntry: 311:6:713:Point to point serial connection
|
|
msRRASVendorAttributeEntry: 311:6:712:Generic LAN
|
|
msRRASVendorAttributeEntry: 311:6:711:Generic WAN
|
|
msRRASVendorAttributeEntry: 311:6:710:X.25
|
|
msRRASVendorAttributeEntry: 311:6:709:IrDA
|
|
msRRASVendorAttributeEntry: 311:6:708:Switched 56
|
|
msRRASVendorAttributeEntry: 311:6:707:SONET
|
|
msRRASVendorAttributeEntry: 311:6:706:Modem
|
|
msRRASVendorAttributeEntry: 311:6:705:ISDN
|
|
msRRASVendorAttributeEntry: 311:6:704:ATM
|
|
msRRASVendorAttributeEntry: 311:6:703:Frame Relay
|
|
msRRASVendorAttributeEntry: 311:6:702:Layer 2 Tunneling Protocol
|
|
msRRASVendorAttributeEntry: 311:6:701:Point-to-Point Tunneling Protocol
|
|
msRRASVendorAttributeEntry: 311:6:604:Network Address and Port Translation
|
|
msRRASVendorAttributeEntry: 311:6:603:Demand Dial Router
|
|
msRRASVendorAttributeEntry: 311:6:602:Remote Access Server
|
|
msRRASVendorAttributeEntry: 311:6:601:LAN-to- LAN Router
|
|
msRRASVendorAttributeEntry: 311:6:503:AppleTalk Forwarding Enabled
|
|
msRRASVendorAttributeEntry: 311:6:502:IPX Forwarding Enabled
|
|
msRRASVendorAttributeEntry: 311:6:501:IP Forwarding Enabled
|
|
msRRASVendorAttributeEntry: 311:5:2:IPX SAP
|
|
msRRASVendorAttributeEntry: 311::5:1:IPX RIP
|
|
msRRASVendorAttributeEntry: 311:1:10:IGMP Only
|
|
msRRASVendorAttributeEntry: 311:0:13:OSPF
|
|
msRRASVendorAttributeEntry: 311:0:8:RIP (version 1 or 2)
|
|
|
|
dn: CN=Windows NT,CN=Services,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=Directory Service,CN=Windows NT,CN=Services,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: nTDSService
|
|
msDS-Other-Settings: DisableVLVSupport=0
|
|
msDS-Other-Settings: DynamicObjectMinTTL=900
|
|
msDS-Other-Settings: DynamicObjectDefaultTTL=86400
|
|
sPNMappings: host=alerter,appmgmt,cisvc,clipsrv,browser,dhcp,dnscache,replicator,eventlog,eventsystem,policyagent,oakley,dmserver,dns,mcsvc,fax,msiserver,ias,messenger,netlogon,netman,netdde,netddedsm,nmagent,plugplay,protectedstorage,rasman,rpclocator,rpc,rpcss,remoteaccess,rsvp,samss,scardsvr,scesrv,seclogon,scm,dcom,cifs,spooler,snmp,schedule,tapisrv,trksvr,trkwks,ups,time,wins,www,http,w3svc,iisadmin,msdtc
|
|
tombstoneLifetime: 180
|
|
|
|
dn: CN=Optional Features,CN=Directory Service,CN=Windows NT,CN=Services,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=Recycle Bin Feature,CN=Optional Features,CN=Directory Service,CN=Windows NT,CN=Services,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: msDS-OptionalFeature
|
|
msDS-OptionalFeatureGUID: 766ddcd8-acd0-445e-f3b9-a7f9b6744f2a
|
|
msDS-OptionalFeatureFlags: 1
|
|
msDS-RequiredForestBehaviorVersion: 4
|
|
systemFlags: -1946157056
|
|
|
|
dn: CN=Query-Policies,CN=Directory Service,CN=Windows NT,CN=Services,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: container
|
|
|
|
dn: CN=Default Query Policy,CN=Query-Policies,CN=Directory Service,CN=Windows NT,CN=Services,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: queryPolicy
|
|
lDAPAdminLimits: MaxValRange=1500
|
|
lDAPAdminLimits: MaxReceiveBuffer=10485760
|
|
lDAPAdminLimits: MaxDatagramRecv=4096
|
|
lDAPAdminLimits: MaxPoolThreads=4
|
|
lDAPAdminLimits: MaxResultSetSize=262144
|
|
lDAPAdminLimits: MaxTempTableSize=10000
|
|
lDAPAdminLimits: MaxQueryDuration=120
|
|
lDAPAdminLimits: MaxPageSize=1000
|
|
lDAPAdminLimits: MaxNotificationPerConn=5
|
|
lDAPAdminLimits: MaxActiveQueries=20
|
|
lDAPAdminLimits: MaxConnIdleTime=900
|
|
lDAPAdminLimits: InitRecvTimeout=120
|
|
lDAPAdminLimits: MaxConnections=5000
|
|
|
|
# End services
|
|
|
|
# Sites
|
|
|
|
dn: CN=Sites,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: sitesContainer
|
|
systemFlags: -2113929216
|
|
|
|
dn: CN=${DEFAULTSITE},CN=Sites,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: site
|
|
systemFlags: 1107296256
|
|
|
|
dn: CN=Inter-Site Transports,CN=Sites,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: interSiteTransportContainer
|
|
systemFlags: -2147483648
|
|
|
|
dn: CN=IP,CN=Inter-Site Transports,CN=Sites,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: interSiteTransport
|
|
transportAddressAttribute: dNSHostName
|
|
transportDLLName: ismip.dll
|
|
systemFlags: -2147483648
|
|
|
|
dn: CN=DEFAULTIPSITELINK,CN=IP,CN=Inter-Site Transports,CN=Sites,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: siteLink
|
|
cost: 100
|
|
replInterval: 180
|
|
showInAdvancedViewOnly: TRUE
|
|
siteList: CN=${DEFAULTSITE},CN=Sites,${CONFIGDN}
|
|
systemFlags: 1073741824
|
|
|
|
dn: CN=SMTP,CN=Inter-Site Transports,CN=Sites,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: interSiteTransport
|
|
transportAddressAttribute: mailAddress
|
|
transportDLLName: ismsmtp.dll
|
|
options: 1
|
|
|
|
dn: CN=NTDS Site Settings,CN=${DEFAULTSITE},CN=Sites,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: applicationSiteSettings
|
|
objectClass: nTDSSiteSettings
|
|
schedule:: vAAAAAAAAAABAAAAAAAAABQAAAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQE=
|
|
|
|
dn: CN=Servers,CN=${DEFAULTSITE},CN=Sites,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: serversContainer
|
|
systemFlags: 33554432
|
|
|
|
dn: CN=Subnets,CN=Sites,${CONFIGDN}
|
|
objectClass: top
|
|
objectClass: subnetContainer
|
|
systemFlags: -2147483648
|