From 7bc9c20037c908a2211d92ddb960325a45972969 Mon Sep 17 00:00:00 2001 From: Andrew Bartlett Date: Mon, 11 Dec 2017 10:09:55 +1300 Subject: [PATCH] provision: Import extended rights schema from MS-ADTS v47.0 Signed-off-by: Andrew Bartlett Reviewed-by: Garming Sam --- source4/setup/extended-rights.ldif | 595 +++++++++++++++++++++++++++++ 1 file changed, 595 insertions(+) create mode 100644 source4/setup/extended-rights.ldif diff --git a/source4/setup/extended-rights.ldif b/source4/setup/extended-rights.ldif new file mode 100644 index 0000000000..90dd523989 --- /dev/null +++ b/source4/setup/extended-rights.ldif @@ -0,0 +1,595 @@ +# This is the schema of the extended rights built in to Active Directory +# +# This file is needed to document the rights that are available and to +# create the appropritate objects in the AD database, which are used +# by the administrative tools. +# +# The primary source is MS-ADTS 12/1/2017 v47.0 +# That document is licenced thusly: +# +# Intellectual Property Rights Notice for Open Specifications Documentation +# + +# Technical Documentation. Microsoft publishes Open Specifications +# documentation (“this documentation”) for protocols, file formats, +# data portability, computer languages, and standards +# support. Additionally, overview documents cover inter-protocol +# relationships and interactions. + +# Copyrights. This documentation is covered by Microsoft +# copyrights. Regardless of any other terms that are contained in the +# terms of use for the Microsoft website that hosts this +# documentation, you can make copies of it in order to develop +# implementations of the technologies that are described in this +# documentation and can distribute portions of it in your +# implementations that use these technologies or in your documentation +# as necessary to properly document the implementation. You can also +# distribute in your implementation, with or without modification, any +# schemas, IDLs, or code samples that are included in the +# documentation. This permission also applies to any documents that +# are referenced in the Open Specifications documentation. + +# No Trade Secrets. Microsoft does not claim any trade secret rights +# in this documentation. + +# Patents. Microsoft has patents that might cover your implementations +# of the technologies described in the Open Specifications +# documentation. Neither this notice nor Microsoft's delivery of this +# documentation grants any licenses under those patents or any other +# Microsoft patents. However, a given Open Specifications document +# might be covered by the Microsoft Open Specifications Promise or the +# Microsoft Community Promise. If you would prefer a written license, +# or if the technologies described in this documentation are not +# covered by the Open Specifications Promise or Community Promise, as +# applicable, patent licenses are available by contacting +# iplg@microsoft.com. + +# License Programs. To see all of the protocols in scope under a +# specific license program and the associated patents, visit the +# Patent Map. + +# Trademarks. The names of companies and products contained in this +# documentation might be covered by trademarks or similar intellectual +# property rights. This notice does not grant any licenses under those +# rights. For a list of Microsoft trademarks, visit +# www.microsoft.com/trademarks. + +# Fictitious Names. The example companies, organizations, products, +# domain names, email addresses, logos, people, places, and events +# that are depicted in this documentation are fictitious. No +# association with any real company, organization, product, domain +# name, email address, logo, person, place, or event is intended or +# should be inferred. + +# Reservation of Rights. All other rights are reserved, and this +# notice does not grant any rights other than as specifically +# described above, whether by implication, estoppel, or otherwise. + +# Tools. The Open Specifications documentation does not require the +# use of Microsoft programming tools or programming environments in +# order for you to develop an implementation. If you have access to +# Microsoft programming tools and environments, you are free to take +# advantage of them. Certain Open Specifications documents are +# intended for use in conjunction with publicly available standards +# specifications and network programming art and, as such, assume that +# the reader either is familiar with the aforementioned material or +# has immediate access to it. + +# Support. For questions and support, please contact dochelp@microsoft.com. + + +6.1.1.2.7 Extended Rights +name: Extended Rights +parent: Config NC root object +objectClass: container +systemFlags: { FLAG_DISALLOW_DELETE } +6.1.1.2.7.1 controlAccessRight objects +All controlAccessRight objects have: +objectClass: controlAccessRight +rightsGuid: This value is the identifier of the control access right used for security descriptors and SDDL. +appliesTo: Each value in this attribute is a GUID, with each GUID equaling an attribute schemaIDGUID on a schema object defining a class in the schema NC. This class defines the objects in which the control access right can be a security descriptor for. The appliesTo values on the controlAccessRight are not enforced by the directory server; that is, the controlAccessRight can be included in security descriptors of objects of classes not specified in the appliesTo attribute. +localizationDisplayId: This is implementation-specific information for the administrative application. +validAccesses: This is implementation-specific information for the administrative application. +6.1.1.2.7.2 Change-Rid-Master +This object is present in AD DS only. +name: Change-Rid-Master +rightsGuid: d58d5f36-0a98-11d1-adbb-00c04fd8d5cd +appliesTo: 6617188d-8f3c-11d0-afda-00c04fd930c9 +6.1.1.2.7.3 Do-Garbage-Collection +This object is present in AD DS and AD LDS. +name: Do-Garbage-Collection +rightsGuid: fec364e0-0a98-11d1-adbb-00c04fd8d5cd +appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed +6.1.1.2.7.4 Recalculate-Hierarchy +This object is present in AD DS only. +name: Recalculate-Hierarchy +rightsGuid: 0bc1554e-0a99-11d1-adbb-00c04fd8d5cd +appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed +6.1.1.2.7.5 Allocate-Rids +This object is present in AD DS only. +name: Allocate-Rids +rightsGuid: 1abd7cf8-0a99-11d1-adbb-00c04fd8d5cd +appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed +6.1.1.2.7.6 Change-PDC +This object is present in AD DS only. +name: Change-PDC +rightsGuid: bae50096-4752-11d1-9052-00c04fc2d4cf +appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9 +6.1.1.2.7.7 Add-GUID +This object is present in AD DS and AD LDS. +name: Add-GUID +rightsGuid: 440820ad-65b4-11d1-a3da-0000f875ae0d +appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9 +6.1.1.2.7.8 Change-Domain-Master +This object is present in AD DS only. +name: Change-Domain-Master +rightsGuid: 014bf69c-7b3b-11d1-85f6-08002be74fab +appliesTo: ef9e60e0-56f7-11d1-a9c6-0000f80367c1 +6.1.1.2.7.9 Public-Information +This object is present in AD DS and AD LDS. +name: Public-Information +rightsGuid: e48d0154-bcf8-11d1-8702-00c04fb96050 +appliesTo: +4828CC14-1437-45bc-9B07-AD6F015E5F28 +bf967a86-0de6-11d0-a285-00aa003049e2 +bf967aba-0de6-11d0-a285-00aa003049e2 +ce206244-5827-4a86-ba1c-1c0c386c1b64 (for AD DS only) +7b8b558a-93a5-4af7-adca-c017e67f1057 (only in AD DS schema version 87 and greater) +6.1.1.2.7.10 msmq-Receive-Dead-Letter +This object is present in AD DS only. +name: msmq-Receive-Dead-Letter +rightsGuid: 4b6e08c0-df3c-11d1-9c86-006008764d0e +appliesTo: 9a0dc344-c100-11d1-bbc5-0080c76670c0 +6.1.1.2.7.11 msmq-Peek-Dead-Letter +This object is present in AD DS only. +name: msmq-Peek-Dead-Letter +rightsGuid: 4b6e08c1-df3c-11d1-9c86-006008764d0e +appliesTo: 9a0dc344-c100-11d1-bbc5-0080c76670c0 +6.1.1.2.7.12 msmq-Receive-computer-Journal +This object is present in AD DS only. +name: msmq-Receive-computer-Journal +rightsGuid: 4b6e08c2-df3c-11d1-9c86-006008764d0e +appliesTo: 9a0dc344-c100-11d1-bbc5-0080c76670c0 +6.1.1.2.7.13 msmq-Peek-computer-Journal +This object is present in AD DS only. +name: msmq-Peek-computer-Journal +rightsGuid: 4b6e08c3-df3c-11d1-9c86-006008764d0e +appliesTo: 9a0dc344-c100-11d1-bbc5-0080c76670c0 +6.1.1.2.7.14 msmq-Receive +This object is present in AD DS only. +name: msmq-Receive +rightsGuid: 06bd3200-df3e-11d1-9c86-006008764d0e +appliesTo: 9a0dc343-c100-11d1-bbc5-0080c76670c0 +6.1.1.2.7.15 msmq-Peek +This object is present in AD DS only. +name: msmq-Peek +rightsGuid: 06bd3201-df3e-11d1-9c86-006008764d0e +appliesTo: 9a0dc343-c100-11d1-bbc5-0080c76670c0 +6.1.1.2.7.16 msmq-Send +This object is present in AD DS only. +name: msmq-Send +rightsGuid: 06bd3202-df3e-11d1-9c86-006008764d0e +appliesTo: +9a0dc343-c100-11d1-bbc5-0080c76670c0 +46b27aac-aafa-4ffb-b773-e5bf621ee87b (only in schema version 30 and greater) +6.1.1.2.7.17 msmq-Receive-journal +This object is present in AD DS only. +name: msmq-Receive-journal +rightsGuid: 06bd3203-df3e-11d1-9c86-006008764d0e +appliesTo: 9a0dc343-c100-11d1-bbc5-0080c76670c0 +6.1.1.2.7.18 msmq-Open-Connector +This object is present in AD DS only. +name: msmq-Open-Connector +rightsGuid: b4e60130-df3f-11d1-9c86-006008764d0e +appliesTo: bf967ab3-0de6-11d0-a285-00aa003049e2 +6.1.1.2.7.19 Apply-Group-Policy +This object is present in AD DS only. +name: Apply-Group-Policy +rightsGuid: edacfd8f-ffb3-11d1-b41d-00a0c968f939 +appliesTo: f30e3bc2-9ff0-11d1-b603-0000f80367c1 +6.1.1.2.7.20 RAS-Information +This object is present in AD DS only. +name: RAS-Information +rightsGuid: 037088f8-0ae1-11d2-b422-00a0c968f939 +appliesTo: +4828CC14-1437-45bc-9B07-AD6F015E5F28 +bf967aba-0de6-11d0-a285-00aa003049e2 +6.1.1.2.7.21 DS-Install-Replica +This object is present in AD DS and AD LDS. +name: DS-Install-Replica +rightsGuid: 9923a32a-3607-11d2-b9be-0000f87a36b2 +appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9 +6.1.1.2.7.22 Change-Infrastructure-Master +This object is present in AD DS only. +name: Change-Infrastructure-Master +rightsGuid: cc17b1fb-33d9-11d2-97d4-00c04fd8d5cd +appliesTo: 2df90d89-009f-11d2-aa4c-00c04fd7d83a +6.1.1.2.7.23 Update-Schema-Cache +This object is present in AD DS and AD LDS. +name: Update-Schema-Cache +rightsGuid: be2bb760-7f46-11d2-b9ad-00c04f79f805 +appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2 +6.1.1.2.7.24 Recalculate-Security-Inheritance +This object is present in AD DS and AD LDS. +name: Recalculate-Security-Inheritance +rightsGuid: 62dd28a8-7f46-11d2-b9ad-00c04f79f805 +appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed +6.1.1.2.7.25 DS-Check-Stale-Phantoms +This object is present in AD DS only. +name: DS-Check-Stale-Phantoms +rightsGuid: 69ae6200-7f46-11d2-b9ad-00c04f79f805 +appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed +6.1.1.2.7.26 Certificate-Enrollment +This object is present in AD DS only. +name: Certificate-Enrollment +rightsGuid: 0e10c968-78fb-11d2-90d4-00c04f79dc55 +appliesTo: e5209ca2-3bba-11d2-90cc-00c04fd91ab1 +6.1.1.2.7.27 Self-Membership +This object is present in AD DS and AD LDS. +name: Self-Membership +rightsGuid: bf9679c0-0de6-11d0-a285-00aa003049e2 +appliesTo: bf967a9c-0de6-11d0-a285-00aa003049e2 +6.1.1.2.7.28 Validated-DNS-Host-Name +This object is present in AD DS only. +name: Validated-DNS-Host-Name +rightsGuid: 72e39547-7b18-11d1-adef-00c04fd8d5cd +appliesTo: +bf967a86-0de6-11d0-a285-00aa003049e2 +ce206244-5827-4a86-ba1c-1c0c386c1b64 (only in schema version 45 and greater) +7b8b558a-93a5-4af7-adca-c017e67f1057 (only in schema version 55 and greater) +6.1.1.2.7.29 Validated-SPN +This object is present in AD DS only. +name: Validated-SPN +rightsGuid: f3a64788-5306-11d1-a9c5-0000f80367c1 +appliesTo: +bf967a86-0de6-11d0-a285-00aa003049e2 +ce206244-5827-4a86-ba1c-1c0c386c1b64 (only in schema version 45 and greater) +7b8b558a-93a5-4af7-adca-c017e67f1057 (only in schema version 87 and greater) +6.1.1.2.7.30 Generate-RSoP-Planning +This object is present in AD DS only. +name: Generate-RSoP-Planning +rightsGuid: b7b1b3dd-ab09-4242-9e30-9980e5d322f7 +appliesTo: +19195a5b-6da0-11d0-afd3-00c04fd930c9 +bf967aa5-0de6-11d0-a285-00aa003049e2 +6.1.1.2.7.31 Refresh-Group-Cache +This object is present in AD DS only. +name: Refresh-Group-Cache +rightsGuid: 9432c620-033c-4db7-8b58-14ef6d0bf477 +appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed +6.1.1.2.7.32 Reload-SSL-Certificate +This object is present in AD DS and AD LDS. +name: Reload-SSL-Certificate +rightsGuid: 1a60ea8d-58a6-4b20-bcdc-fb71eb8a9ff8 +appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed +6.1.1.2.7.33 SAM-Enumerate-Entire-Domain +This object is present in AD DS only. +name: SAM-Enumerate-Entire-Domain +rightsGuid: 91d67418-0135-4acc-8d79-c08e857cfbec +appliesTo: bf967aad-0de6-11d0-a285-00aa003049e2 +6.1.1.2.7.34 Generate-RSoP-Logging +This object is present in AD DS only. +name: Generate-RSoP-Logging +rightsGuid: b7b1b3de-ab09-4242-9e30-9980e5d322f7 +appliesTo: +19195a5b-6da0-11d0-afd3-00c04fd930c9 +bf967aa5-0de6-11d0-a285-00aa003049e2 +6.1.1.2.7.35 Domain-Other-Parameters +This object is present in AD DS only. +name: Domain-Other-Parameters +rightsGuid: b8119fd0-04f6-4762-ab7a-4986c76b3f9a +appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9 +6.1.1.2.7.36 DNS-Host-Name-Attributes +This object is present in AD DS only. +name: DNS-Host-Name-Attributes +rightsGuid: 72e39547-7b18-11d1-adef-00c04fd8d5cd +appliesTo: +bf967a86-0de6-11d0-a285-00aa003049e2 +ce206244-5827-4a86-ba1c-1c0c386c1b64 +7b8b558a-93a5-4af7-adca-c017e67f1057 (only in schema version 55 and greater) +6.1.1.2.7.37 Create-Inbound-Forest-Trust +This object is present in AD DS only. +name: Create-Inbound-Forest-Trust +rightsGuid: e2a36dc9-ae17-47c3-b58b-be34c55ba633 +appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9 +6.1.1.2.7.38 DS-Replication-Get-Changes-All +This object is present in AD DS and AD LDS. +name: DS-Replication-Get-Changes-All +rightsGuid: 1131f6ad-9c07-11d1-f79f-00c04fc2dcd2 +appliesTo: +bf967a8f-0de6-11d0-a285-00aa003049e2 +bf967a87-0de6-11d0-a285-00aa003049e2 +19195a5b-6da0-11d0-afd3-00c04fd930c9 +6.1.1.2.7.39 Migrate-SID-History +This object is present in AD DS only. +name: Migrate-SID-History +rightsGuid: BA33815A-4F93-4c76-87F3-57574BFF8109 +appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9 +6.1.1.2.7.40 Reanimate-Tombstones +This object is present in AD DS and AD LDS. +name: Reanimate-Tombstones +rightsGuid: 45EC5156-DB7E-47bb-B53F-DBEB2D03C40F +appliesTo: +bf967a8f-0de6-11d0-a285-00aa003049e2 +bf967a87-0de6-11d0-a285-00aa003049e2 +19195a5b-6da0-11d0-afd3-00c04fd930c9 +6.1.1.2.7.41 Allowed-To-Authenticate +This object is present in AD DS only. +name: Allowed-To-Authenticate +rightsGuid: 68B1D179-0D15-4d4f-AB71-46152E79A7BC +appliesTo: +4828cc14-1437-45bc-9b07-ad6f015e5f28 +bf967aba-0de6-11d0-a285-00aa003049e2 +bf967a86-0de6-11d0-a285-00aa003049e2 +ce206244-5827-4a86-ba1c-1c0c386c1b64 (only in schema version 45 and greater) +7b8b558a-93a5-4af7-adca-c017e67f1057 (only in schema version 87 and greater) +6.1.1.2.7.42 DS-Execute-Intentions-Script +This object is present in AD DS and AD LDS. +name: DS-Execute-Intentions-Script +rightsGuid: 2f16c4a5-b98e-432c-952a-cb388ba33f2e +appliesTo: ef9e60e0-56f7-11d1-a9c6-0000f80367c1 +6.1.1.2.7.43 DS-Replication-Monitor-Topology +This object is present in AD DS and AD LDS. +name: DS-Replication-Monitor-Topology +rightsGuid: f98340fb-7c5b-4cdb-a00b-2ebdfa115a96 +appliesTo: +bf967a8f-0de6-11d0-a285-00aa003049e2 +bf967a87-0de6-11d0-a285-00aa003049e2 +19195a5b-6da0-11d0-afd3-00c04fd930c9 +6.1.1.2.7.44 Update-Password-Not-Required-Bit +This object is present in AD DS only. +name: Update-Password-Not-Required-Bit +rightsGuid: 280f369c-67c7-438e-ae98-1d46f3c6f541 +appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9 +6.1.1.2.7.45 Unexpire-Password +This object is present in AD DS and AD LDS. +name: Unexpire-Password +rightsGuid: ccc2dc7d-a6ad-4a7a-8846-c04e3cc53501 +appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9 +6.1.1.2.7.46 Enable-Per-User-Reversibly-Encrypted-Password +This object is present in AD DS only. +name: Enable-Per-User-Reversibly-Encrypted-Password +rightsGuid: 05c74c5e-4deb-43b4-bd9f-86664c2a7fd5 +appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9 +6.1.1.2.7.47 DS-Query-Self-Quota +This object is present in AD DS and AD LDS. +name: DS-Query-Self-Quota +rightsGuid: 4ecc03fe-ffc0-4947-b630-eb672a8a9dbc +appliesTo: da83fc4f-076f-4aea-b4dc-8f4dab9b5993 +6.1.1.2.7.48 Private-Information +This object is present in AD DS only. +name: Private-Information +rightsGuid: 91e647de-d96f-4b70-9557-d63ff4f3ccd8 +appliesTo: +bf967aba-0de6-11d0-a285-00aa003049e2 +4828cc14-1437-45bc-9b07-ad6f015e5f28 +6.1.1.2.7.49 MS-TS-GatewayAccess +This object is present in AD DS only. +name: MS-TS-GatewayAccess +rightsGuid: ffa6f046-ca4b-4feb-b40d-04dfee722543 +appliesTo: +bf967a86-0de6-11d0-a285-00aa003049e2 +ce206244-5827-4a86-ba1c-1c0c386c1b64 +7b8b558a-93a5-4af7-adca-c017e67f1057 (only in schema version 87 and greater) +6.1.1.2.7.50 Terminal-Server-License-Server +This object is present in AD DS only. +name: Terminal-Server-License-Server +rightsGuid: 5805bc62-bdc9-4428-a5e2-856a0f4c185e +appliesTo: +bf967aba-0de6-11d0-a285-00aa003049e2 +4828cc14-1437-45bc-9b07-ad6f015e5f28 +6.1.1.2.7.51 Domain-Administer-Server +This object is present in AD DS only. +name: Domain-Administer-Server +rightsGuid: ab721a52-1e2f-11d0-9819-00aa0040529b +appliesTo: bf967aad-0de6-11d0-a285-00aa003049e2 +6.1.1.2.7.52 User-Change-Password +This object is present in AD DS and AD LDS. +name: User-Change-Password +rightsGuid: ab721a53-1e2f-11d0-9819-00aa0040529b +appliesTo: +bf967a86-0de6-11d0-a285-00aa003049e2 +bf967aba-0de6-11d0-a285-00aa003049e2 +4828CC14-1437-45bc-9B07-AD6F015E5F28 (only in schema version 30 and greater) +ce206244-5827-4a86-ba1c-1c0c386c1b64 (only in schema version 45 and greater, for AD DS only) +6.1.1.2.7.53 User-Force-Change-Password +This object is present in AD DS and AD LDS. +name: User-Force-Change-Password +rightsGuid: 00299570-246d-11d0-a768-00aa006e0529 +appliesTo: +bf967a86-0de6-11d0-a285-00aa003049e2 +bf967aba-0de6-11d0-a285-00aa003049e2 +4828CC14-1437-45bc-9B07-AD6F015E5F28 (only in schema version 30 and greater) +ce206244-5827-4a86-ba1c-1c0c386c1b64 (only in schema version 45 and greater, for AD DS only) +6.1.1.2.7.54 Send-As +This object is present in AD DS only. +name: Send-As +rightsGuid: ab721a54-1e2f-11d0-9819-00aa0040529b +appliesTo: +bf967a86-0de6-11d0-a285-00aa003049e2 +bf967aba-0de6-11d0-a285-00aa003049e2 +4828CC14-1437-45bc-9B07-AD6F015E5F28 (only in schema version 30 and greater) +ce206244-5827-4a86-ba1c-1c0c386c1b64 (only in schema version 45 and greater) +7b8b558a-93a5-4af7-adca-c017e67f1057 (only in schema version 87 and greater) +6.1.1.2.7.55 Receive-As +This object is present in AD DS only. +name: Receive-As +rightsGuid: ab721a56-1e2f-11d0-9819-00aa0040529b +appliesTo: +bf967a86-0de6-11d0-a285-00aa003049e2 +bf967aba-0de6-11d0-a285-00aa003049e2 +4828CC14-1437-45bc-9B07-AD6F015E5F28 (only in schema version 30 and greater) +ce206244-5827-4a86-ba1c-1c0c386c1b64 (only in schema version 45 and greater) +7b8b558a-93a5-4af7-adca-c017e67f1057 (only in schema version 87 and greater) +6.1.1.2.7.56 Send-To +This object is present in AD DS only. +name: Send-To +rightsGuid: ab721a55-1e2f-11d0-9819-00aa0040529b +appliesTo: bf967a9c-0de6-11d0-a285-00aa003049e2 +6.1.1.2.7.57 Domain-Password +This object is present in AD DS only. +name: Domain-Password +rightsGuid: c7407360-20bf-11d0-a768-00aa006e0529 +appliesTo: +19195a5b-6da0-11d0-afd3-00c04fd930c9 +19195a5a-6da0-11d0-afd3-00c04fd930c9 +6.1.1.2.7.58 General-Information +This object is present in AD DS and AD LDS. +name: General-Information +rightsGuid: 59ba2f42-79a2-11d0-9020-00c04fc2d3cf +appliesTo: +4828CC14-1437-45bc-9B07-AD6F015E5F28 +bf967aba-0de6-11d0-a285-00aa003049e2 +6.1.1.2.7.59 User-Account-Restrictions +This object is present in AD DS and AD LDS. +name: User-Account-Restrictions +rightsGuid: 4c164200-20c0-11d0-a768-00aa006e0529 +appliesTo: +4828CC14-1437-45bc-9B07-AD6F015E5F28 +bf967a86-0de6-11d0-a285-00aa003049e2 +bf967aba-0de6-11d0-a285-00aa003049e2 +ce206244-5827-4a86-ba1c-1c0c386c1b64 (for AD DS only) +7b8b558a-93a5-4af7-adca-c017e67f1057 (only in schema version 54 and greater, for AD DS only) +6.1.1.2.7.60 User-Logon +This object is present in AD DS and AD LDS. +name: User-Logon +rightsGuid: 5f202010-79a5-11d0-9020-00c04fc2d4cf +appliesTo: +4828CC14-1437-45bc-9B07-AD6F015E5F28 +bf967aba-0de6-11d0-a285-00aa003049e2 +6.1.1.2.7.61 Membership +This object is present in AD DS and AD LDS. +name: Membership +rightsGuid: bc0ac240-79a9-11d0-9020-00c04fc2d4cf +appliesTo: +4828CC14-1437-45bc-9B07-AD6F015E5F28 +bf967aba-0de6-11d0-a285-00aa003049e2 +6.1.1.2.7.62 Open-Address-Book +This object is present in AD DS only. +name: Open-Address-Book +rightsGuid: a1990816-4298-11d1-ade2-00c04fd8d5cd +appliesTo: 3e74f60f-3e73-11d1-a9c0-0000f80367c1 +6.1.1.2.7.63 Personal-Information +This object is present in AD DS and AD LDS. +name: Personal-Information +rightsGuid: 77B5B886-944A-11d1-AEBD-0000F80367C1 +appliesTo: +4828CC14-1437-45bc-9B07-AD6F015E5F28 +bf967a86-0de6-11d0-a285-00aa003049e2 +5cb41ed0-0e4c-11d0-a286-00aa003049e2 +bf967aba-0de6-11d0-a285-00aa003049e2 +ce206244-5827-4a86-ba1c-1c0c386c1b64 (for AD DS only) +641e87a4-8326-4771-ba2d-c706df35e35a (only in AD DS schema version 52 and greater) +7b8b558a-93a5-4af7-adca-c017e67f1057 (only in AD DS schema version 87 and greater) +6.1.1.2.7.64 Email-Information +This object is present in AD DS and AD LDS. +name: Email-Information +rightsGuid: E45795B2-9455-11d1-AEBD-0000F80367C1 +appliesTo: +4828CC14-1437-45bc-9B07-AD6F015E5F28 +bf967a9c-0de6-11d0-a285-00aa003049e2 +bf967aba-0de6-11d0-a285-00aa003049e2 +6.1.1.2.7.65 Web-Information +This object is present in AD DS and AD LDS. +name: Web-Information +rightsGuid: E45795B3-9455-11d1-AEBD-0000F80367C1 +appliesTo: +4828CC14-1437-45bc-9B07-AD6F015E5F28 +5cb41ed0-0e4c-11d0-a286-00aa003049e2 +bf967aba-0de6-11d0-a285-00aa003049e2 +6.1.1.2.7.66 DS-Replication-Get-Changes +This object is present in AD DS and AD LDS. +name: DS-Replication-Get-Changes +rightsGuid: 1131f6aa-9c07-11d1-f79f-00c04fc2dcd2 +appliesTo: +bf967a8f-0de6-11d0-a285-00aa003049e2 +bf967a87-0de6-11d0-a285-00aa003049e2 +19195a5b-6da0-11d0-afd3-00c04fd930c9 +6.1.1.2.7.67 DS-Replication-Synchronize +This object is present in AD DS and AD LDS. +name: DS-Replication-Synchronize +rightsGuid: 1131f6ab-9c07-11d1-f79f-00c04fc2dcd2 +appliesTo: +bf967a8f-0de6-11d0-a285-00aa003049e2 +bf967a87-0de6-11d0-a285-00aa003049e2 +19195a5b-6da0-11d0-afd3-00c04fd930c9 +6.1.1.2.7.68 DS-Replication-Manage-Topology +This object is present in AD DS and AD LDS. +name: DS-Replication-Manage-Topology +rightsGuid: 1131f6ac-9c07-11d1-f79f-00c04fc2dcd2 +appliesTo: +bf967a8f-0de6-11d0-a285-00aa003049e2 +bf967a87-0de6-11d0-a285-00aa003049e2 +19195a5b-6da0-11d0-afd3-00c04fd930c9 +6.1.1.2.7.69 Change-Schema-Master +This object is present in AD DS and AD LDS. +name: Change-Schema-Master +rightsGuid: e12b56b6-0a95-11d1-adbb-00c04fd8d5cd +appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2 +6.1.1.2.7.70 DS-Replication-Get-Changes-In-Filtered-Set +This object is present in AD DS only. +name: DS-Replication-Get-Changes-In-Filtered-Set +rightsGuid: 89e95b76-444d-4c62-991a-0facbeda640c +appliesTo: +19195a5b-6da0-11d0-afd3-00c04fd930c9 +bf967a87-0de6-11d0-a285-00aa003049e2 +bf967a8f-0de6-11d0-a285-00aa003049e2 +6.1.1.2.7.71 Run-Protect-Admin-Groups-Task +This object is present in AD DS only. +name: Run-Protect-Admin-Groups-Task +rightsGuid: 7726b9d5-a4b4-4288-a6b2-dce952e80a7f +appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9 +6.1.1.2.7.72 Manage-Optional-Features +This object is present in AD DS and AD LDS. +name: Manage-Optional-Features +rightsGuid: 7c0e2a7c-a419-48e4-a995-10180aad54dd +appliesTo: ef9e60e0-56f7-11d1-a9c6-0000f80367c1 +6.1.1.2.7.73 Read-Only-Replication-Secret-Synchronization +This object is present in AD DS only. +name: Read-Only-Replication-Secret-Synchronization +rightsGuid: 1131f6ae-9c07-11d1-f79f-00c04fc2dcd2 +appliesTo +bf967a8f-0de6-11d0-a285-00aa003049e2 +bf967a87-0de6-11d0-a285-00aa003049e2 +19195a5b-6da0-11d0-afd3-00c04fd930c9 +6.1.1.2.7.74 Validated-MS-DS-Additional-DNS-Host-Name +This object is present in AD DS only. +name: Validated-MS-DS-Additional-DNS-Host-Name +rightsGuid: 80863791-dbe9-4eb8-837e-7f0ab55d9ac7 +appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2 +6.1.1.2.7.75 Validated-MS-DS-Behavior-Version +This object is present in AD DS only. +name: Validated-MS-DS-Behavior-Version +rightsGuid: d31a8757-2447-4545-8081-3bb610cacbf2 +appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed +6.1.1.2.7.76 DS-Clone-Domain-Controller +This object is present in AD DS only. +name: DS-Clone-Domain-Controller +rightsGuid: 3e0f7e18-2c7a-4c10-ba82-4d926db99a3e +appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9 +6.1.1.2.7.77 Certificate-AutoEnrollment +This object is present in AD DS only. +name: Certificate-AutoEnrollment +rightsGuid: a05b8cc2-17bc-4802-a710-e7c15ab866a2 +appliesTo: e5209ca2-3bba-11d2-90cc-00c04fd91ab1 +6.1.1.2.7.78 DS-Read-Partition-Secrets +name: DS-Read-Partition-Secrets +rightsGuid: 084c93a2-620d-4879-a836-f0ae47de0e89 +appliesTo: 26f11b08-a29d-4869-99bb-ef0b99fd883e +6.1.1.2.7.79 DS-Write-Partition-Secrets +name: DS-Write-Partition-Secrets +rightsGuid: 94825a8d-b171-4116-8146-1e34d8f54401 +appliesTo: 26f11b08-a29d-4869-99bb-ef0b99fd883e +6.1.1.2.7.80 DS-Set-Owner +name: DS-Set-Owner +rightsGuid: 4125c71f-7fac-4ff0-bcb7-f09a41325286 +appliesTo: 26f11b08-a29d-4869-99bb-ef0b99fd883e +6.1.1.2.7.81 DS-Bypass-Quota +name: DS-Bypass-Quota +rightsGuid: 88a9933e-e5c8-4f2a-9dd7-2527416b8092 +appliesTo: 26f11b08-a29d-4869-99bb-ef0b99fd883e +6.1.1.2.7.82 DS-Validated-Write-Computer +This object is present in AD DS only. +name: DS-Validated-Write-Computer +rightsGuid: 9b026da6-0d3c-465c-8bee-5199d7165cba +appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2 -- 2.34.1