4e0cc71997eea61774791f9ff9fbbe613cdca4b7
[metze/samba/wip.git] / source4 / setup / provision_configuration.ldif
1 ###############################
2 # Configuration Naming Context
3 ###############################
4
5 # Display specifiers located in "display_specifiers.ldif"
6
7 dn: CN=Extended-Rights,${CONFIGDN}
8 objectClass: top
9 objectClass: container
10 systemFlags: -2147483648
11
12 dn: CN=Change-Rid-Master,CN=Extended-Rights,${CONFIGDN}
13 objectClass: top
14 objectClass: controlAccessRight
15 displayName: Change Rid Master
16 rightsGuid: d58d5f36-0a98-11d1-adbb-00c04fd8d5cd
17 appliesTo: 6617188d-8f3c-11d0-afda-00c04fd930c9
18 localizationDisplayId: 29
19 validAccesses: 256
20
21 dn: CN=Do-Garbage-Collection,CN=Extended-Rights,${CONFIGDN}
22 objectClass: top
23 objectClass: controlAccessRight
24 displayName: Do Garbage Collection
25 rightsGuid: fec364e0-0a98-11d1-adbb-00c04fd8d5cd
26 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
27 localizationDisplayId: 31
28 validAccesses: 256
29
30 dn: CN=Recalculate-Hierarchy,CN=Extended-Rights,${CONFIGDN}
31 objectClass: top
32 objectClass: controlAccessRight
33 displayName: Recalculate Hierarchy
34 rightsGuid: 0bc1554e-0a99-11d1-adbb-00c04fd8d5cd
35 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
36 localizationDisplayId: 32
37 validAccesses: 256
38
39 dn: CN=Allocate-Rids,CN=Extended-Rights,${CONFIGDN}
40 objectClass: top
41 objectClass: controlAccessRight
42 displayName: Allocate Rids
43 rightsGuid: 1abd7cf8-0a99-11d1-adbb-00c04fd8d5cd
44 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
45 localizationDisplayId: 33
46 validAccesses: 256
47
48 dn: CN=Change-PDC,CN=Extended-Rights,${CONFIGDN}
49 objectClass: top
50 objectClass: controlAccessRight
51 displayName: Change PDC
52 rightsGuid: bae50096-4752-11d1-9052-00c04fc2d4cf
53 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
54 localizationDisplayId: 34
55 validAccesses: 256
56
57 dn: CN=Add-GUID,CN=Extended-Rights,${CONFIGDN}
58 objectClass: top
59 objectClass: controlAccessRight
60 displayName: Add GUID
61 rightsGuid: 440820ad-65b4-11d1-a3da-0000f875ae0d
62 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
63 localizationDisplayId: 35
64 validAccesses: 256
65
66 dn: CN=Change-Domain-Master,CN=Extended-Rights,${CONFIGDN}
67 objectClass: top
68 objectClass: controlAccessRight
69 displayName: Change Domain Master
70 rightsGuid: 014bf69c-7b3b-11d1-85f6-08002be74fab
71 appliesTo: ef9e60e0-56f7-11d1-a9c6-0000f80367c1
72 localizationDisplayId: 36
73 validAccesses: 256
74
75 dn: CN=Public-Information,CN=Extended-Rights,${CONFIGDN}
76 objectClass: top
77 objectClass: controlAccessRight
78 displayName: Public Information
79 rightsGuid: e48d0154-bcf8-11d1-8702-00c04fb96050
80 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
81 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
82 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
83 localizationDisplayId: 37
84 validAccesses: 48
85
86 dn: CN=msmq-Receive-Dead-Letter,CN=Extended-Rights,${CONFIGDN}
87 objectClass: top
88 objectClass: controlAccessRight
89 displayName: Receive Dead Letter
90 rightsGuid: 4b6e08c0-df3c-11d1-9c86-006008764d0e
91 appliesTo: 9a0dc344-c100-11d1-bbc5-0080c76670c0
92 localizationDisplayId: 38
93 validAccesses: 256
94
95 dn: CN=msmq-Peek-Dead-Letter,CN=Extended-Rights,${CONFIGDN}
96 objectClass: top
97 objectClass: controlAccessRight
98 displayName: Peek Dead Letter
99 rightsGuid: 4b6e08c1-df3c-11d1-9c86-006008764d0e
100 appliesTo: 9a0dc344-c100-11d1-bbc5-0080c76670c0
101 localizationDisplayId: 39
102 validAccesses: 256
103
104 dn: CN=msmq-Receive-computer-Journal,CN=Extended-Rights,${CONFIGDN}
105 objectClass: top
106 objectClass: controlAccessRight
107 displayName: Receive Computer Journal
108 rightsGuid: 4b6e08c2-df3c-11d1-9c86-006008764d0e
109 appliesTo: 9a0dc344-c100-11d1-bbc5-0080c76670c0
110 localizationDisplayId: 40
111 validAccesses: 256
112
113 dn: CN=msmq-Peek-computer-Journal,CN=Extended-Rights,${CONFIGDN}
114 objectClass: top
115 objectClass: controlAccessRight
116 displayName: Peek Computer Journal
117 rightsGuid: 4b6e08c3-df3c-11d1-9c86-006008764d0e
118 appliesTo: 9a0dc344-c100-11d1-bbc5-0080c76670c0
119 localizationDisplayId: 41
120 validAccesses: 256
121
122 dn: CN=msmq-Receive,CN=Extended-Rights,${CONFIGDN}
123 objectClass: top
124 objectClass: controlAccessRight
125 displayName: Receive Message
126 rightsGuid: 06bd3200-df3e-11d1-9c86-006008764d0e
127 appliesTo: 9a0dc343-c100-11d1-bbc5-0080c76670c0
128 localizationDisplayId: 42
129 validAccesses: 256
130
131 dn: CN=msmq-Peek,CN=Extended-Rights,${CONFIGDN}
132 objectClass: top
133 objectClass: controlAccessRight
134 displayName: Peek Message
135 rightsGuid: 06bd3201-df3e-11d1-9c86-006008764d0e
136 appliesTo: 9a0dc343-c100-11d1-bbc5-0080c76670c0
137 localizationDisplayId: 43
138 validAccesses: 256
139
140 dn: CN=msmq-Send,CN=Extended-Rights,${CONFIGDN}
141 objectClass: top
142 objectClass: controlAccessRight
143 displayName: Send Message
144 rightsGuid: 06bd3202-df3e-11d1-9c86-006008764d0e
145 appliesTo: 46b27aac-aafa-4ffb-b773-e5bf621ee87b
146 appliesTo: 9a0dc343-c100-11d1-bbc5-0080c76670c0
147 localizationDisplayId: 44
148 validAccesses: 256
149
150 dn: CN=msmq-Receive-journal,CN=Extended-Rights,${CONFIGDN}
151 objectClass: top
152 objectClass: controlAccessRight
153 displayName: Receive Journal
154 rightsGuid: 06bd3203-df3e-11d1-9c86-006008764d0e
155 appliesTo: 9a0dc343-c100-11d1-bbc5-0080c76670c0
156 localizationDisplayId: 45
157 validAccesses: 256
158
159 dn: CN=msmq-Open-Connector,CN=Extended-Rights,${CONFIGDN}
160 objectClass: top
161 objectClass: controlAccessRight
162 displayName: Open Connector Queue
163 rightsGuid: b4e60130-df3f-11d1-9c86-006008764d0e
164 appliesTo: bf967ab3-0de6-11d0-a285-00aa003049e2
165 localizationDisplayId: 46
166 validAccesses: 256
167
168 dn: CN=Apply-Group-Policy,CN=Extended-Rights,${CONFIGDN}
169 objectClass: top
170 objectClass: controlAccessRight
171 displayName: Apply Group Policy
172 rightsGuid: edacfd8f-ffb3-11d1-b41d-00a0c968f939
173 appliesTo: f30e3bc2-9ff0-11d1-b603-0000f80367c1
174 localizationDisplayId: 47
175 validAccesses: 256
176
177 dn: CN=RAS-Information,CN=Extended-Rights,${CONFIGDN}
178 objectClass: top
179 objectClass: controlAccessRight
180 displayName: Remote Access Information
181 rightsGuid: 037088f8-0ae1-11d2-b422-00a0c968f939
182 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
183 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
184 localizationDisplayId: 48
185 validAccesses: 48
186
187 dn: CN=DS-Install-Replica,CN=Extended-Rights,${CONFIGDN}
188 objectClass: top
189 objectClass: controlAccessRight
190 displayName: Add/Remove Replica In Domain
191 rightsGuid: 9923a32a-3607-11d2-b9be-0000f87a36b2
192 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
193 localizationDisplayId: 49
194 validAccesses: 256
195
196 dn: CN=Change-Infrastructure-Master,CN=Extended-Rights,${CONFIGDN}
197 objectClass: top
198 objectClass: controlAccessRight
199 displayName: Change Infrastructure Master
200 rightsGuid: cc17b1fb-33d9-11d2-97d4-00c04fd8d5cd
201 appliesTo: 2df90d89-009f-11d2-aa4c-00c04fd7d83a
202 localizationDisplayId: 50
203 validAccesses: 256
204
205 dn: CN=Update-Schema-Cache,CN=Extended-Rights,${CONFIGDN}
206 objectClass: top
207 objectClass: controlAccessRight
208 displayName: Update Schema Cache
209 rightsGuid: be2bb760-7f46-11d2-b9ad-00c04f79f805
210 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
211 localizationDisplayId: 51
212 validAccesses: 256
213
214 dn: CN=Recalculate-Security-Inheritance,CN=Extended-Rights,${CONFIGDN}
215 objectClass: top
216 objectClass: controlAccessRight
217 displayName: Recalculate Security Inheritance
218 rightsGuid: 62dd28a8-7f46-11d2-b9ad-00c04f79f805
219 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
220 localizationDisplayId: 52
221 validAccesses: 256
222
223 dn: CN=DS-Check-Stale-Phantoms,CN=Extended-Rights,${CONFIGDN}
224 objectClass: top
225 objectClass: controlAccessRight
226 displayName: Check Stale Phantoms
227 rightsGuid: 69ae6200-7f46-11d2-b9ad-00c04f79f805
228 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
229 localizationDisplayId: 53
230 validAccesses: 256
231
232 dn: CN=Certificate-Enrollment,CN=Extended-Rights,${CONFIGDN}
233 objectClass: top
234 objectClass: controlAccessRight
235 displayName: Enroll
236 rightsGuid: 0e10c968-78fb-11d2-90d4-00c04f79dc55
237 appliesTo: e5209ca2-3bba-11d2-90cc-00c04fd91ab1
238 localizationDisplayId: 54
239 validAccesses: 256
240
241 dn: CN=Self-Membership,CN=Extended-Rights,${CONFIGDN}
242 objectClass: top
243 objectClass: controlAccessRight
244 displayName: Add/Remove self as member
245 rightsGuid: bf9679c0-0de6-11d0-a285-00aa003049e2
246 appliesTo: bf967a9c-0de6-11d0-a285-00aa003049e2
247 localizationDisplayId: 12
248 validAccesses: 8
249
250 dn: CN=Validated-DNS-Host-Name,CN=Extended-Rights,${CONFIGDN}
251 objectClass: top
252 objectClass: controlAccessRight
253 displayName: Validated write to DNS host name
254 rightsGuid: 72e39547-7b18-11d1-adef-00c04fd8d5cd
255 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
256 localizationDisplayId: 13
257 validAccesses: 8
258
259 dn: CN=Validated-SPN,CN=Extended-Rights,${CONFIGDN}
260 objectClass: top
261 objectClass: controlAccessRight
262 displayName: Validated write to service principal name
263 rightsGuid: f3a64788-5306-11d1-a9c5-0000f80367c1
264 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
265 localizationDisplayId: 14
266 validAccesses: 8
267
268 dn: CN=Generate-RSoP-Planning,CN=Extended-Rights,${CONFIGDN}
269 objectClass: top
270 objectClass: controlAccessRight
271 displayName: Generate Resultant Set of Policy (Planning)
272 rightsGuid: b7b1b3dd-ab09-4242-9e30-9980e5d322f7
273 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
274 appliesTo: bf967aa5-0de6-11d0-a285-00aa003049e2
275 localizationDisplayId: 55
276 validAccesses: 256
277
278 dn: CN=Refresh-Group-Cache,CN=Extended-Rights,${CONFIGDN}
279 objectClass: top
280 objectClass: controlAccessRight
281 displayName: Refresh Group Cache for Logons
282 rightsGuid: 9432c620-033c-4db7-8b58-14ef6d0bf477
283 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
284 localizationDisplayId: 56
285 validAccesses: 256
286
287 dn: CN=SAM-Enumerate-Entire-Domain,CN=Extended-Rights,${CONFIGDN}
288 objectClass: top
289 objectClass: controlAccessRight
290 displayName: Enumerate Entire SAM Domain
291 rightsGuid: 91d67418-0135-4acc-8d79-c08e857cfbec
292 appliesTo: bf967aad-0de6-11d0-a285-00aa003049e2
293 localizationDisplayId: 57
294 validAccesses: 256
295
296 dn: CN=Generate-RSoP-Logging,CN=Extended-Rights,${CONFIGDN}
297 objectClass: top
298 objectClass: controlAccessRight
299 displayName: Generate Resultant Set of Policy (Logging)
300 rightsGuid: b7b1b3de-ab09-4242-9e30-9980e5d322f7
301 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
302 appliesTo: bf967aa5-0de6-11d0-a285-00aa003049e2
303 localizationDisplayId: 58
304 validAccesses: 256
305
306 dn: CN=Domain-Other-Parameters,CN=Extended-Rights,${CONFIGDN}
307 objectClass: top
308 objectClass: controlAccessRight
309 displayName: Other Domain Parameters (for use by SAM)
310 rightsGuid: b8119fd0-04f6-4762-ab7a-4986c76b3f9a
311 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
312 localizationDisplayId: 59
313 validAccesses: 48
314
315 dn: CN=DNS-Host-Name-Attributes,CN=Extended-Rights,${CONFIGDN}
316 objectClass: top
317 objectClass: controlAccessRight
318 displayName: DNS Host Name Attributes
319 rightsGuid: 72e39547-7b18-11d1-adef-00c04fd8d5cd
320 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
321 localizationDisplayId: 60
322 validAccesses: 48
323
324 dn: CN=Create-Inbound-Forest-Trust,CN=Extended-Rights,${CONFIGDN}
325 objectClass: top
326 objectClass: controlAccessRight
327 displayName: Create Inbound Forest Trust
328 rightsGuid: e2a36dc9-ae17-47c3-b58b-be34c55ba633
329 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
330 localizationDisplayId: 61
331 validAccesses: 256
332
333 dn: CN=DS-Replication-Get-Changes-All,CN=Extended-Rights,${CONFIGDN}
334 objectClass: top
335 objectClass: controlAccessRight
336 displayName: Replicating Directory Changes All
337 rightsGuid: 1131f6ad-9c07-11d1-f79f-00c04fc2dcd2
338 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
339 appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
340 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
341 localizationDisplayId: 62
342 validAccesses: 256
343
344 dn: CN=Migrate-SID-History,CN=Extended-Rights,${CONFIGDN}
345 objectClass: top
346 objectClass: controlAccessRight
347 displayName: Migrate SID History
348 rightsGuid: BA33815A-4F93-4c76-87F3-57574BFF8109
349 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
350 localizationDisplayId: 63
351 validAccesses: 256
352
353 dn: CN=Reanimate-Tombstones,CN=Extended-Rights,${CONFIGDN}
354 objectClass: top
355 objectClass: controlAccessRight
356 displayName: Reanimate Tombstones
357 rightsGuid: 45EC5156-DB7E-47bb-B53F-DBEB2D03C40F
358 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
359 appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
360 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
361 localizationDisplayId: 64
362 validAccesses: 256
363
364 dn: CN=Allowed-To-Authenticate,CN=Extended-Rights,${CONFIGDN}
365 objectClass: top
366 objectClass: controlAccessRight
367 displayName: Allowed to Authenticate
368 rightsGuid: 68B1D179-0D15-4d4f-AB71-46152E79A7BC
369 appliesTo: 4828cc14-1437-45bc-9b07-ad6f015e5f28
370 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
371 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
372 localizationDisplayId: 65
373 validAccesses: 256
374
375 dn: CN=DS-Execute-Intentions-Script,CN=Extended-Rights,${CONFIGDN}
376 objectClass: top
377 objectClass: controlAccessRight
378 displayName: Execute Forest Update Script
379 rightsGuid: 2f16c4a5-b98e-432c-952a-cb388ba33f2e
380 appliesTo: ef9e60e0-56f7-11d1-a9c6-0000f80367c1
381 localizationDisplayId: 66
382 validAccesses: 256
383
384 dn: CN=DS-Replication-Monitor-Topology,CN=Extended-Rights,${CONFIGDN}
385 objectClass: top
386 objectClass: controlAccessRight
387 displayName: Monitor Active Directory Replication
388 rightsGuid: f98340fb-7c5b-4cdb-a00b-2ebdfa115a96
389 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
390 appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
391 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
392 localizationDisplayId: 67
393 validAccesses: 256
394
395 dn: CN=Update-Password-Not-Required-Bit,CN=Extended-Rights,${CONFIGDN}
396 objectClass: top
397 objectClass: controlAccessRight
398 displayName: Update Password Not Required Bit
399 rightsGuid: 280f369c-67c7-438e-ae98-1d46f3c6f541
400 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
401 localizationDisplayId: 68
402 validAccesses: 256
403
404 dn: CN=Unexpire-Password,CN=Extended-Rights,${CONFIGDN}
405 objectClass: top
406 objectClass: controlAccessRight
407 displayName: Unexpire Password
408 rightsGuid: ccc2dc7d-a6ad-4a7a-8846-c04e3cc53501
409 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
410 localizationDisplayId: 69
411 validAccesses: 256
412
413 dn: CN=Enable-Per-User-Reversibly-Encrypted-Password,CN=Extended-Rights,${CONFIGDN}
414 objectClass: top
415 objectClass: controlAccessRight
416 displayName: Enable Per User Reversibly Encrypted Password
417 rightsGuid: 05c74c5e-4deb-43b4-bd9f-86664c2a7fd5
418 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
419 localizationDisplayId: 70
420 validAccesses: 256
421
422 dn: CN=DS-Query-Self-Quota,CN=Extended-Rights,${CONFIGDN}
423 objectClass: top
424 objectClass: controlAccessRight
425 displayName: Query Self Quota
426 rightsGuid: 4ecc03fe-ffc0-4947-b630-eb672a8a9dbc
427 appliesTo: da83fc4f-076f-4aea-b4dc-8f4dab9b5993
428 localizationDisplayId: 71
429 validAccesses: 256
430
431 dn: CN=Domain-Administer-Server,CN=Extended-Rights,${CONFIGDN}
432 objectClass: top
433 objectClass: controlAccessRight
434 displayName: Domain Administer Server
435 rightsGuid: ab721a52-1e2f-11d0-9819-00aa0040529b
436 appliesTo: bf967aad-0de6-11d0-a285-00aa003049e2
437 localizationDisplayId: 1
438 validAccesses: 256
439
440 dn: CN=User-Change-Password,CN=Extended-Rights,${CONFIGDN}
441 objectClass: top
442 objectClass: controlAccessRight
443 displayName: Change Password
444 rightsGuid: ab721a53-1e2f-11d0-9819-00aa0040529b
445 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
446 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
447 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
448 localizationDisplayId: 2
449 validAccesses: 256
450
451 dn: CN=User-Force-Change-Password,CN=Extended-Rights,${CONFIGDN}
452 objectClass: top
453 objectClass: controlAccessRight
454 displayName: Reset Password
455 rightsGuid: 00299570-246d-11d0-a768-00aa006e0529
456 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
457 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
458 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
459 localizationDisplayId: 3
460 validAccesses: 256
461
462 dn: CN=Send-As,CN=Extended-Rights,${CONFIGDN}
463 objectClass: top
464 objectClass: controlAccessRight
465 displayName: Send As
466 rightsGuid: ab721a54-1e2f-11d0-9819-00aa0040529b
467 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
468 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
469 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
470 localizationDisplayId: 4
471 validAccesses: 256
472
473 dn: CN=Receive-As,CN=Extended-Rights,${CONFIGDN}
474 objectClass: top
475 objectClass: controlAccessRight
476 displayName: Receive As
477 rightsGuid: ab721a56-1e2f-11d0-9819-00aa0040529b
478 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
479 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
480 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
481 localizationDisplayId: 5
482 validAccesses: 256
483
484 dn: CN=Send-To,CN=Extended-Rights,${CONFIGDN}
485 objectClass: top
486 objectClass: controlAccessRight
487 displayName: Send To
488 rightsGuid: ab721a55-1e2f-11d0-9819-00aa0040529b
489 appliesTo: bf967a9c-0de6-11d0-a285-00aa003049e2
490 localizationDisplayId: 6
491 validAccesses: 256
492
493 dn: CN=Domain-Password,CN=Extended-Rights,${CONFIGDN}
494 objectClass: top
495 objectClass: controlAccessRight
496 displayName: Domain Password & Lockout Policies
497 rightsGuid: c7407360-20bf-11d0-a768-00aa006e0529
498 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
499 appliesTo: 19195a5a-6da0-11d0-afd3-00c04fd930c9
500 localizationDisplayId: 7
501 validAccesses: 48
502
503 dn: CN=General-Information,CN=Extended-Rights,${CONFIGDN}
504 objectClass: top
505 objectClass: controlAccessRight
506 displayName: General Information
507 rightsGuid: 59ba2f42-79a2-11d0-9020-00c04fc2d3cf
508 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
509 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
510 localizationDisplayId: 8
511 validAccesses: 48
512
513 dn: CN=User-Account-Restrictions,CN=Extended-Rights,${CONFIGDN}
514 objectClass: top
515 objectClass: controlAccessRight
516 displayName: Account Restrictions
517 rightsGuid: 4c164200-20c0-11d0-a768-00aa006e0529
518 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
519 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
520 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
521 localizationDisplayId: 9
522 validAccesses: 48
523
524 dn: CN=User-Logon,CN=Extended-Rights,${CONFIGDN}
525 objectClass: top
526 objectClass: controlAccessRight
527 displayName: Logon Information
528 rightsGuid: 5f202010-79a5-11d0-9020-00c04fc2d4cf
529 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
530 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
531 localizationDisplayId: 10
532 validAccesses: 48
533
534 dn: CN=Membership,CN=Extended-Rights,${CONFIGDN}
535 objectClass: top
536 objectClass: controlAccessRight
537 displayName: Group Membership
538 rightsGuid: bc0ac240-79a9-11d0-9020-00c04fc2d4cf
539 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
540 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
541 localizationDisplayId: 11
542 validAccesses: 48
543
544 dn: CN=Open-Address-Book,CN=Extended-Rights,${CONFIGDN}
545 objectClass: top
546 objectClass: controlAccessRight
547 displayName: Open Address List
548 rightsGuid: a1990816-4298-11d1-ade2-00c04fd8d5cd
549 appliesTo: 3e74f60f-3e73-11d1-a9c0-0000f80367c1
550 localizationDisplayId: 21
551 validAccesses: 256
552
553 dn: CN=Personal-Information,CN=Extended-Rights,${CONFIGDN}
554 objectClass: top
555 objectClass: controlAccessRight
556 displayName: Personal Information
557 rightsGuid: 77B5B886-944A-11d1-AEBD-0000F80367C1
558 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
559 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
560 appliesTo: 5cb41ed0-0e4c-11d0-a286-00aa003049e2
561 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
562 localizationDisplayId: 23
563 validAccesses: 48
564
565 dn: CN=Email-Information,CN=Extended-Rights,${CONFIGDN}
566 objectClass: top
567 objectClass: controlAccessRight
568 displayName: Phone and Mail Options
569 rightsGuid: E45795B2-9455-11d1-AEBD-0000F80367C1
570 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
571 appliesTo: bf967a9c-0de6-11d0-a285-00aa003049e2
572 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
573 localizationDisplayId: 22
574 validAccesses: 48
575
576 dn: CN=Web-Information,CN=Extended-Rights,${CONFIGDN}
577 objectClass: top
578 objectClass: controlAccessRight
579 displayName: Web Information
580 rightsGuid: E45795B3-9455-11d1-AEBD-0000F80367C1
581 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
582 appliesTo: 5cb41ed0-0e4c-11d0-a286-00aa003049e2
583 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
584 localizationDisplayId: 24
585 validAccesses: 48
586
587 dn: CN=DS-Replication-Get-Changes,CN=Extended-Rights,${CONFIGDN}
588 objectClass: top
589 objectClass: controlAccessRight
590 displayName: Replicating Directory Changes
591 rightsGuid: 1131f6aa-9c07-11d1-f79f-00c04fc2dcd2
592 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
593 appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
594 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
595 localizationDisplayId: 25
596 validAccesses: 256
597
598 dn: CN=DS-Replication-Synchronize,CN=Extended-Rights,${CONFIGDN}
599 objectClass: top
600 objectClass: controlAccessRight
601 displayName: Replication Synchronization
602 rightsGuid: 1131f6ab-9c07-11d1-f79f-00c04fc2dcd2
603 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
604 appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
605 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
606 localizationDisplayId: 26
607 validAccesses: 256
608
609 dn: CN=DS-Replication-Manage-Topology,CN=Extended-Rights,${CONFIGDN}
610 objectClass: top
611 objectClass: controlAccessRight
612 displayName: Manage Replication Topology
613 rightsGuid: 1131f6ac-9c07-11d1-f79f-00c04fc2dcd2
614 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
615 appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
616 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
617 localizationDisplayId: 27
618 validAccesses: 256
619
620 dn: CN=Change-Schema-Master,CN=Extended-Rights,${CONFIGDN}
621 objectClass: top
622 objectClass: controlAccessRight
623 displayName: Change Schema Master
624 rightsGuid: e12b56b6-0a95-11d1-adbb-00c04fd8d5cd
625 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
626 localizationDisplayId: 28
627 validAccesses: 256
628
629 dn: CN=ForestUpdates,${CONFIGDN}
630 objectClass: top
631 objectClass: container
632
633 dn: CN=Operations,CN=ForestUpdates,${CONFIGDN}
634 objectClass: top
635 objectClass: container
636
637 dn: CN=Windows2003Update,CN=ForestUpdates,${CONFIGDN}
638 objectClass: top
639 objectClass: container
640 revision: 9
641
642 dn: CN=LostAndFoundConfig,${CONFIGDN}
643 objectClass: top
644 objectClass: lostAndFound
645 systemFlags: -2147483648
646
647 dn: CN=NTDS Quotas,${CONFIGDN}
648 objectClass: top
649 objectClass: msDS-QuotaContainer
650 description: Quota specifications container
651 msDS-TombstoneQuotaFactor: 100
652 systemFlags: -2147483648
653
654 dn: CN=Partitions,${CONFIGDN}
655 objectClass: top
656 objectClass: crossRefContainer
657 systemFlags: -2147483648
658 msDS-Behavior-Version: ${FOREST_FUNCTIONALALITY}
659 fSMORoleOwner: CN=NTDS Settings,${SERVERDN}
660 showInAdvancedViewOnly: TRUE
661
662 dn: CN=Enterprise Configuration,CN=Partitions,${CONFIGDN}
663 objectClass: top
664 objectClass: crossRef
665 systemFlags: 1
666 nCName: ${CONFIGDN}
667 dnsRoot: ${DNSDOMAIN}
668
669 dn: CN=Enterprise Schema,CN=Partitions,${CONFIGDN}
670 objectClass: top
671 objectClass: crossRef
672 systemFlags: 1
673 nCName: ${SCHEMADN}
674 dnsRoot: ${DNSDOMAIN}
675
676 dn: CN=${DOMAIN},CN=Partitions,${CONFIGDN}
677 objectClass: top
678 objectClass: crossRef
679 systemFlags: 3
680 nCName: ${DOMAINDN}
681 nETBIOSName: ${DOMAIN}
682 dnsRoot: ${DNSDOMAIN}
683
684 dn: CN=Physical Locations,${CONFIGDN}
685 objectClass: top
686 objectClass: locality
687 objectClass: physicalLocation
688 l: Physical Locations tree root
689
690 # Schema located in "ad-schema/*.txt"
691
692 dn: CN=Services,${CONFIGDN}
693 objectClass: top
694 objectClass: container
695 systemFlags: -2147483648
696
697 dn: CN=Windows NT,CN=Services,${CONFIGDN}
698 objectClass: top
699 objectClass: container
700
701 dn: CN=Directory Service,CN=Windows NT,CN=Services,${CONFIGDN}
702 objectClass: top
703 objectClass: nTDSService
704 sPNMappings: host=ldap,dns,cifs,http
705
706 dn: CN=Query-Policies,CN=Directory Service,CN=Windows NT,CN=Services,${CONFIGDN}
707 objectClass: top
708 objectClass: container
709
710 dn: CN=Default Query Policy,CN=Query-Policies,CN=Directory Service,CN=Windows NT,CN=Services,${CONFIGDN}
711 objectClass: top
712 objectClass: queryPolicy
713 lDAPAdminLimits: MaxValRange=1500
714 lDAPAdminLimits: MaxReceiveBuffer=10485760
715 lDAPAdminLimits: MaxDatagramRecv=4096
716 lDAPAdminLimits: MaxPoolThreads=4
717 lDAPAdminLimits: MaxResultSetSize=262144
718 lDAPAdminLimits: MaxTempTableSize=10000
719 lDAPAdminLimits: MaxQueryDuration=120
720 lDAPAdminLimits: MaxPageSize=1000
721 lDAPAdminLimits: MaxNotificationPerConn=5
722 lDAPAdminLimits: MaxActiveQueries=20
723 lDAPAdminLimits: MaxConnIdleTime=900
724 lDAPAdminLimits: InitRecvTimeout=120
725 lDAPAdminLimits: MaxConnections=5000
726
727 dn: CN=Sites,${CONFIGDN}
728 objectClass: top
729 objectClass: sitesContainer
730 systemFlags: -2113929216
731
732 dn: CN=${DEFAULTSITE},CN=Sites,${CONFIGDN}
733 objectClass: top
734 objectClass: site
735 systemFlags: 1107296256
736
737 dn: CN=Licensing Site Settings,CN=${DEFAULTSITE},CN=Sites,${CONFIGDN}
738 objectClass: top
739 objectClass: applicationSiteSettings
740 objectClass: licensingSiteSettings
741
742 dn: CN=NTDS Site Settings,CN=${DEFAULTSITE},CN=Sites,${CONFIGDN}
743 objectClass: top
744 objectClass: applicationSiteSettings
745 objectClass: nTDSSiteSettings
746 interSiteTopologyGenerator: CN=NTDS Settings,${SERVERDN}
747
748 dn: CN=Servers,CN=${DEFAULTSITE},CN=Sites,${CONFIGDN}
749 objectClass: top
750 objectClass: serversContainer
751 systemFlags: 33554432
752
753 dn: CN=Subnets,CN=Sites,${CONFIGDN}
754 objectClass: top
755 objectClass: subnetContainer
756 systemFlags: -1073741824