1 ###############################
2 # Configuration Naming Context
3 ###############################
5 # Display specifiers are located in
6 # display-specifiers/DisplaySpecifiers-Win2k8R2.txt"
7 # This file is parsed during provision using the ms_display_specifiers.py
10 dn: CN=Deleted Objects
,$
{CONFIGDN
}
12 objectClass: container
13 description: Container for deleted objects
15 isCriticalSystemObject
: TRUE
16 systemFlags
: -1946157056
20 dn: CN=Extended
-Rights
,$
{CONFIGDN
}
22 objectClass: container
23 systemFlags
: -2147483648
25 dn: CN=Change
-Rid
-Master
,CN=Extended
-Rights
,$
{CONFIGDN
}
27 objectClass: controlAccessRight
28 displayName
: Change Rid Master
29 rightsGuid
: d58d5f36
-0a98
-11d1
-adbb
-00c04fd8d5cd
30 appliesTo
: 6617188d
-8f3c
-11d0
-afda
-00c04fd930c9
31 localizationDisplayId
: 29
34 dn: CN=Do
-Garbage
-Collection
,CN=Extended
-Rights
,$
{CONFIGDN
}
36 objectClass: controlAccessRight
37 displayName
: Do Garbage Collection
38 rightsGuid
: fec364e0
-0a98
-11d1
-adbb
-00c04fd8d5cd
39 appliesTo
: f0f8ffab
-1191-11d0
-a060
-00aa006c33ed
40 localizationDisplayId
: 31
43 dn: CN=Recalculate
-Hierarchy
,CN=Extended
-Rights
,$
{CONFIGDN
}
45 objectClass: controlAccessRight
46 displayName
: Recalculate Hierarchy
47 rightsGuid
: 0bc1554e
-0a99
-11d1
-adbb
-00c04fd8d5cd
48 appliesTo
: f0f8ffab
-1191-11d0
-a060
-00aa006c33ed
49 localizationDisplayId
: 32
52 dn: CN=Allocate
-Rids
,CN=Extended
-Rights
,$
{CONFIGDN
}
54 objectClass: controlAccessRight
55 displayName
: Allocate Rids
56 rightsGuid
: 1abd7cf8
-0a99
-11d1
-adbb
-00c04fd8d5cd
57 appliesTo
: f0f8ffab
-1191-11d0
-a060
-00aa006c33ed
58 localizationDisplayId
: 33
61 dn: CN=Change
-PDC
,CN=Extended
-Rights
,$
{CONFIGDN
}
63 objectClass: controlAccessRight
64 displayName
: Change PDC
65 rightsGuid
: bae50096
-4752-11d1
-9052-00c04fc2d4cf
66 appliesTo
: 19195a5b
-6da0
-11d0
-afd3
-00c04fd930c9
67 localizationDisplayId
: 34
70 dn: CN=Add-GUID
,CN=Extended
-Rights
,$
{CONFIGDN
}
72 objectClass: controlAccessRight
74 rightsGuid
: 440820ad
-65b4
-11d1
-a3da
-0000f875ae0d
75 appliesTo
: 19195a5b
-6da0
-11d0
-afd3
-00c04fd930c9
76 localizationDisplayId
: 35
79 dn: CN=Change
-Domain
-Master
,CN=Extended
-Rights
,$
{CONFIGDN
}
81 objectClass: controlAccessRight
82 displayName
: Change Domain Master
83 rightsGuid
: 014bf69c
-7b3b
-11d1
-85f6
-08002be74fab
84 appliesTo
: ef9e60e0
-56f7
-11d1
-a9c6
-0000f80367c1
85 localizationDisplayId
: 36
88 dn: CN=Public
-Information
,CN=Extended
-Rights
,$
{CONFIGDN
}
90 objectClass: controlAccessRight
91 displayName
: Public Information
92 rightsGuid
: e48d0154
-bcf8
-11d1
-8702-00c04fb96050
93 appliesTo
: 4828CC14
-1437-45bc
-9B07
-AD6F015E5F28
94 appliesTo
: bf967a86
-0de6
-11d0
-a285
-00aa003049e2
95 appliesTo
: bf967aba
-0de6
-11d0
-a285
-00aa003049e2
96 localizationDisplayId
: 37
99 dn: CN=msmq
-Receive
-Dead
-Letter
,CN=Extended
-Rights
,$
{CONFIGDN
}
101 objectClass: controlAccessRight
102 displayName
: Receive Dead Letter
103 rightsGuid
: 4b6e08c0
-df3c
-11d1
-9c86
-006008764d0e
104 appliesTo
: 9a0dc344
-c100
-11d1
-bbc5
-0080c76670c0
105 localizationDisplayId
: 38
108 dn: CN=msmq
-Peek
-Dead
-Letter
,CN=Extended
-Rights
,$
{CONFIGDN
}
110 objectClass: controlAccessRight
111 displayName
: Peek Dead Letter
112 rightsGuid
: 4b6e08c1
-df3c
-11d1
-9c86
-006008764d0e
113 appliesTo
: 9a0dc344
-c100
-11d1
-bbc5
-0080c76670c0
114 localizationDisplayId
: 39
117 dn: CN=msmq
-Receive
-computer
-Journal
,CN=Extended
-Rights
,$
{CONFIGDN
}
119 objectClass: controlAccessRight
120 displayName
: Receive Computer Journal
121 rightsGuid
: 4b6e08c2
-df3c
-11d1
-9c86
-006008764d0e
122 appliesTo
: 9a0dc344
-c100
-11d1
-bbc5
-0080c76670c0
123 localizationDisplayId
: 40
126 dn: CN=msmq
-Peek
-computer
-Journal
,CN=Extended
-Rights
,$
{CONFIGDN
}
128 objectClass: controlAccessRight
129 displayName
: Peek Computer Journal
130 rightsGuid
: 4b6e08c3
-df3c
-11d1
-9c86
-006008764d0e
131 appliesTo
: 9a0dc344
-c100
-11d1
-bbc5
-0080c76670c0
132 localizationDisplayId
: 41
135 dn: CN=msmq
-Receive
,CN=Extended
-Rights
,$
{CONFIGDN
}
137 objectClass: controlAccessRight
138 displayName
: Receive Message
139 rightsGuid
: 06bd3200
-df3e
-11d1
-9c86
-006008764d0e
140 appliesTo
: 9a0dc343
-c100
-11d1
-bbc5
-0080c76670c0
141 localizationDisplayId
: 42
144 dn: CN=msmq
-Peek
,CN=Extended
-Rights
,$
{CONFIGDN
}
146 objectClass: controlAccessRight
147 displayName
: Peek Message
148 rightsGuid
: 06bd3201
-df3e
-11d1
-9c86
-006008764d0e
149 appliesTo
: 9a0dc343
-c100
-11d1
-bbc5
-0080c76670c0
150 localizationDisplayId
: 43
153 dn: CN=msmq
-Send
,CN=Extended
-Rights
,$
{CONFIGDN
}
155 objectClass: controlAccessRight
156 displayName
: Send Message
157 rightsGuid
: 06bd3202
-df3e
-11d1
-9c86
-006008764d0e
158 appliesTo
: 46b27aac
-aafa
-4ffb
-b773
-e5bf621ee87b
159 appliesTo
: 9a0dc343
-c100
-11d1
-bbc5
-0080c76670c0
160 localizationDisplayId
: 44
163 dn: CN=msmq
-Receive
-journal
,CN=Extended
-Rights
,$
{CONFIGDN
}
165 objectClass: controlAccessRight
166 displayName
: Receive Journal
167 rightsGuid
: 06bd3203
-df3e
-11d1
-9c86
-006008764d0e
168 appliesTo
: 9a0dc343
-c100
-11d1
-bbc5
-0080c76670c0
169 localizationDisplayId
: 45
172 dn: CN=msmq
-Open
-Connector
,CN=Extended
-Rights
,$
{CONFIGDN
}
174 objectClass: controlAccessRight
175 displayName
: Open Connector Queue
176 rightsGuid
: b4e60130
-df3f
-11d1
-9c86
-006008764d0e
177 appliesTo
: bf967ab3
-0de6
-11d0
-a285
-00aa003049e2
178 localizationDisplayId
: 46
181 dn: CN=Apply
-Group
-Policy
,CN=Extended
-Rights
,$
{CONFIGDN
}
183 objectClass: controlAccessRight
184 displayName
: Apply Group Policy
185 rightsGuid
: edacfd8f
-ffb3
-11d1
-b41d
-00a0c968f939
186 appliesTo
: f30e3bc2
-9ff0
-11d1
-b603
-0000f80367c1
187 localizationDisplayId
: 47
190 dn: CN=RAS
-Information
,CN=Extended
-Rights
,$
{CONFIGDN
}
192 objectClass: controlAccessRight
193 displayName
: Remote Access Information
194 rightsGuid
: 037088f8
-0ae1
-11d2
-b422
-00a0c968f939
195 appliesTo
: 4828CC14
-1437-45bc
-9B07
-AD6F015E5F28
196 appliesTo
: bf967aba
-0de6
-11d0
-a285
-00aa003049e2
197 localizationDisplayId
: 48
200 dn: CN=DS
-Install
-Replica
,CN=Extended
-Rights
,$
{CONFIGDN
}
202 objectClass: controlAccessRight
203 displayName
: Add/Remove Replica In Domain
204 rightsGuid
: 9923a32a
-3607-11d2
-b9be
-0000f87a36b2
205 appliesTo
: 19195a5b
-6da0
-11d0
-afd3
-00c04fd930c9
206 localizationDisplayId
: 49
209 dn: CN=Change
-Infrastructure
-Master
,CN=Extended
-Rights
,$
{CONFIGDN
}
211 objectClass: controlAccessRight
212 displayName
: Change Infrastructure Master
213 rightsGuid
: cc17b1fb
-33d9
-11d2
-97d4
-00c04fd8d5cd
214 appliesTo
: 2df90d89
-009f
-11d2
-aa4c
-00c04fd7d83a
215 localizationDisplayId
: 50
218 dn: CN=Update
-Schema
-Cache
,CN=Extended
-Rights
,$
{CONFIGDN
}
220 objectClass: controlAccessRight
221 displayName
: Update Schema Cache
222 rightsGuid
: be2bb760
-7f46
-11d2
-b9ad
-00c04f79f805
223 appliesTo
: bf967a8f
-0de6
-11d0
-a285
-00aa003049e2
224 localizationDisplayId
: 51
227 dn: CN=Recalculate
-Security
-Inheritance
,CN=Extended
-Rights
,$
{CONFIGDN
}
229 objectClass: controlAccessRight
230 displayName
: Recalculate Security Inheritance
231 rightsGuid
: 62dd28a8
-7f46
-11d2
-b9ad
-00c04f79f805
232 appliesTo
: f0f8ffab
-1191-11d0
-a060
-00aa006c33ed
233 localizationDisplayId
: 52
236 dn: CN=DS
-Check
-Stale
-Phantoms
,CN=Extended
-Rights
,$
{CONFIGDN
}
238 objectClass: controlAccessRight
239 displayName
: Check Stale Phantoms
240 rightsGuid
: 69ae6200
-7f46
-11d2
-b9ad
-00c04f79f805
241 appliesTo
: f0f8ffab
-1191-11d0
-a060
-00aa006c33ed
242 localizationDisplayId
: 53
245 dn: CN=Certificate
-Enrollment
,CN=Extended
-Rights
,$
{CONFIGDN
}
247 objectClass: controlAccessRight
249 rightsGuid
: 0e10c968
-78fb
-11d2
-90d4
-00c04f79dc55
250 appliesTo
: e5209ca2
-3bba
-11d2
-90cc
-00c04fd91ab1
251 localizationDisplayId
: 54
254 dn: CN=Self
-Membership
,CN=Extended
-Rights
,$
{CONFIGDN
}
256 objectClass: controlAccessRight
257 displayName
: Add/Remove self as member
258 rightsGuid
: bf9679c0
-0de6
-11d0
-a285
-00aa003049e2
259 appliesTo
: bf967a9c
-0de6
-11d0
-a285
-00aa003049e2
260 localizationDisplayId
: 12
263 dn: CN=Validated
-DNS
-Host
-Name
,CN=Extended
-Rights
,$
{CONFIGDN
}
265 objectClass: controlAccessRight
266 displayName
: Validated write to DNS host name
267 rightsGuid
: 72e39547
-7b18
-11d1
-adef
-00c04fd8d5cd
268 appliesTo
: bf967a86
-0de6
-11d0
-a285
-00aa003049e2
269 localizationDisplayId
: 13
272 dn: CN=Validated
-SPN
,CN=Extended
-Rights
,$
{CONFIGDN
}
274 objectClass: controlAccessRight
275 displayName
: Validated write to service principal name
276 rightsGuid
: f3a64788
-5306-11d1
-a9c5
-0000f80367c1
277 appliesTo
: bf967a86
-0de6
-11d0
-a285
-00aa003049e2
278 localizationDisplayId
: 14
281 dn: CN=Generate
-RSoP
-Planning
,CN=Extended
-Rights
,$
{CONFIGDN
}
283 objectClass: controlAccessRight
284 displayName
: Generate Resultant Set of Policy
(Planning
)
285 rightsGuid
: b7b1b3dd
-ab09
-4242-9e30
-9980e5d322f7
286 appliesTo
: 19195a5b
-6da0
-11d0
-afd3
-00c04fd930c9
287 appliesTo
: bf967aa5
-0de6
-11d0
-a285
-00aa003049e2
288 localizationDisplayId
: 55
291 dn: CN=Refresh
-Group
-Cache
,CN=Extended
-Rights
,$
{CONFIGDN
}
293 objectClass: controlAccessRight
294 displayName
: Refresh Group Cache for Logons
295 rightsGuid
: 9432c620
-033c-4db7
-8b58
-14ef6d0bf477
296 appliesTo
: f0f8ffab
-1191-11d0
-a060
-00aa006c33ed
297 localizationDisplayId
: 56
300 dn: CN=SAM
-Enumerate
-Entire
-Domain
,CN=Extended
-Rights
,$
{CONFIGDN
}
302 objectClass: controlAccessRight
303 displayName
: Enumerate Entire SAM Domain
304 rightsGuid
: 91d67418
-0135-4acc
-8d79
-c08e857cfbec
305 appliesTo
: bf967aad
-0de6
-11d0
-a285
-00aa003049e2
306 localizationDisplayId
: 57
309 dn: CN=Generate
-RSoP
-Logging
,CN=Extended
-Rights
,$
{CONFIGDN
}
311 objectClass: controlAccessRight
312 displayName
: Generate Resultant Set of Policy
(Logging
)
313 rightsGuid
: b7b1b3de
-ab09
-4242-9e30
-9980e5d322f7
314 appliesTo
: 19195a5b
-6da0
-11d0
-afd3
-00c04fd930c9
315 appliesTo
: bf967aa5
-0de6
-11d0
-a285
-00aa003049e2
316 localizationDisplayId
: 58
319 dn: CN=Domain
-Other
-Parameters
,CN=Extended
-Rights
,$
{CONFIGDN
}
321 objectClass: controlAccessRight
322 displayName
: Other Domain Parameters
(for use by SAM
)
323 rightsGuid
: b8119fd0
-04f6
-4762-ab7a
-4986c76b3f9a
324 appliesTo
: 19195a5b
-6da0
-11d0
-afd3
-00c04fd930c9
325 localizationDisplayId
: 59
328 dn: CN=DNS
-Host
-Name
-Attributes
,CN=Extended
-Rights
,$
{CONFIGDN
}
330 objectClass: controlAccessRight
331 displayName
: DNS Host Name Attributes
332 rightsGuid
: 72e39547
-7b18
-11d1
-adef
-00c04fd8d5cd
333 appliesTo
: bf967a86
-0de6
-11d0
-a285
-00aa003049e2
334 localizationDisplayId
: 60
337 dn: CN=Create
-Inbound
-Forest
-Trust
,CN=Extended
-Rights
,$
{CONFIGDN
}
339 objectClass: controlAccessRight
340 displayName
: Create Inbound Forest Trust
341 rightsGuid
: e2a36dc9
-ae17
-47c3
-b58b
-be34c55ba633
342 appliesTo
: 19195a5b
-6da0
-11d0
-afd3
-00c04fd930c9
343 localizationDisplayId
: 61
346 dn: CN=DS
-Replication
-Get
-Changes
-All
,CN=Extended
-Rights
,$
{CONFIGDN
}
348 objectClass: controlAccessRight
349 displayName
: Replicating Directory Changes All
350 rightsGuid
: 1131f6ad
-9c07
-11d1
-f79f
-00c04fc2dcd2
351 appliesTo
: bf967a8f
-0de6
-11d0
-a285
-00aa003049e2
352 appliesTo
: bf967a87
-0de6
-11d0
-a285
-00aa003049e2
353 appliesTo
: 19195a5b
-6da0
-11d0
-afd3
-00c04fd930c9
354 localizationDisplayId
: 62
357 dn: CN=Migrate
-SID
-History
,CN=Extended
-Rights
,$
{CONFIGDN
}
359 objectClass: controlAccessRight
360 displayName
: Migrate SID History
361 rightsGuid
: BA33815A
-4F93
-4c76
-87F3
-57574BFF8109
362 appliesTo
: 19195a5b
-6da0
-11d0
-afd3
-00c04fd930c9
363 localizationDisplayId
: 63
366 dn: CN=Reanimate
-Tombstones
,CN=Extended
-Rights
,$
{CONFIGDN
}
368 objectClass: controlAccessRight
369 displayName
: Reanimate Tombstones
370 rightsGuid
: 45EC5156
-DB7E
-47bb
-B53F
-DBEB2D03C40F
371 appliesTo
: bf967a8f
-0de6
-11d0
-a285
-00aa003049e2
372 appliesTo
: bf967a87
-0de6
-11d0
-a285
-00aa003049e2
373 appliesTo
: 19195a5b
-6da0
-11d0
-afd3
-00c04fd930c9
374 localizationDisplayId
: 64
377 dn: CN=Allowed
-To
-Authenticate
,CN=Extended
-Rights
,$
{CONFIGDN
}
379 objectClass: controlAccessRight
380 displayName
: Allowed to Authenticate
381 rightsGuid
: 68B1D179
-0D15
-4d4f
-AB71
-46152E79A7BC
382 appliesTo
: 4828cc14
-1437-45bc
-9b07
-ad6f015e5f28
383 appliesTo
: bf967aba
-0de6
-11d0
-a285
-00aa003049e2
384 appliesTo
: bf967a86
-0de6
-11d0
-a285
-00aa003049e2
385 localizationDisplayId
: 65
388 dn: CN=DS
-Execute
-Intentions
-Script
,CN=Extended
-Rights
,$
{CONFIGDN
}
390 objectClass: controlAccessRight
391 displayName
: Execute Forest Update Script
392 rightsGuid
: 2f16c4a5
-b98e
-432
c-952a
-cb388ba33f2e
393 appliesTo
: ef9e60e0
-56f7
-11d1
-a9c6
-0000f80367c1
394 localizationDisplayId
: 66
397 dn: CN=DS
-Replication
-Monitor
-Topology
,CN=Extended
-Rights
,$
{CONFIGDN
}
399 objectClass: controlAccessRight
400 displayName
: Monitor Active Directory Replication
401 rightsGuid
: f98340fb
-7c5b
-4cdb
-a00b
-2ebdfa115a96
402 appliesTo
: bf967a8f
-0de6
-11d0
-a285
-00aa003049e2
403 appliesTo
: bf967a87
-0de6
-11d0
-a285
-00aa003049e2
404 appliesTo
: 19195a5b
-6da0
-11d0
-afd3
-00c04fd930c9
405 localizationDisplayId
: 67
408 dn: CN=Update
-Password
-Not
-Required
-Bit
,CN=Extended
-Rights
,$
{CONFIGDN
}
410 objectClass: controlAccessRight
411 displayName
: Update Password Not Required Bit
412 rightsGuid
: 280f369c
-67c7
-438e
-ae98
-1d46f3c6f541
413 appliesTo
: 19195a5b
-6da0
-11d0
-afd3
-00c04fd930c9
414 localizationDisplayId
: 68
417 dn: CN=Unexpire
-Password
,CN=Extended
-Rights
,$
{CONFIGDN
}
419 objectClass: controlAccessRight
420 displayName
: Unexpire Password
421 rightsGuid
: ccc2dc7d
-a6ad
-4a7a
-8846-c04e3cc53501
422 appliesTo
: 19195a5b
-6da0
-11d0
-afd3
-00c04fd930c9
423 localizationDisplayId
: 69
426 dn: CN=Enable
-Per
-User
-Reversibly
-Encrypted
-Password
,CN=Extended
-Rights
,$
{CONFIGDN
}
428 objectClass: controlAccessRight
429 displayName
: Enable Per User Reversibly Encrypted Password
430 rightsGuid
: 05c74c5e
-4deb
-43b4
-bd9f
-86664c2a7fd5
431 appliesTo
: 19195a5b
-6da0
-11d0
-afd3
-00c04fd930c9
432 localizationDisplayId
: 70
435 dn: CN=DS
-Query
-Self
-Quota
,CN=Extended
-Rights
,$
{CONFIGDN
}
437 objectClass: controlAccessRight
438 displayName
: Query Self Quota
439 rightsGuid
: 4ecc03fe
-ffc0
-4947-b630
-eb672a8a9dbc
440 appliesTo
: da83fc4f
-076f
-4aea
-b4dc
-8f4dab9b5993
441 localizationDisplayId
: 71
444 dn: CN=Domain
-Administer
-Server
,CN=Extended
-Rights
,$
{CONFIGDN
}
446 objectClass: controlAccessRight
447 displayName
: Domain Administer Server
448 rightsGuid
: ab721a52
-1e2f
-11d0
-9819-00aa0040529b
449 appliesTo
: bf967aad
-0de6
-11d0
-a285
-00aa003049e2
450 localizationDisplayId
: 1
453 dn: CN=User
-Change
-Password
,CN=Extended
-Rights
,$
{CONFIGDN
}
455 objectClass: controlAccessRight
456 displayName
: Change Password
457 rightsGuid
: ab721a53
-1e2f
-11d0
-9819-00aa0040529b
458 appliesTo
: 4828CC14
-1437-45bc
-9B07
-AD6F015E5F28
459 appliesTo
: bf967a86
-0de6
-11d0
-a285
-00aa003049e2
460 appliesTo
: bf967aba
-0de6
-11d0
-a285
-00aa003049e2
461 localizationDisplayId
: 2
464 dn: CN=User
-Force
-Change
-Password
,CN=Extended
-Rights
,$
{CONFIGDN
}
466 objectClass: controlAccessRight
467 displayName
: Reset Password
468 rightsGuid
: 00299570-246d
-11d0
-a768
-00aa006e0529
469 appliesTo
: 4828CC14
-1437-45bc
-9B07
-AD6F015E5F28
470 appliesTo
: bf967a86
-0de6
-11d0
-a285
-00aa003049e2
471 appliesTo
: bf967aba
-0de6
-11d0
-a285
-00aa003049e2
472 localizationDisplayId
: 3
475 dn: CN=Send
-As
,CN=Extended
-Rights
,$
{CONFIGDN
}
477 objectClass: controlAccessRight
479 rightsGuid
: ab721a54
-1e2f
-11d0
-9819-00aa0040529b
480 appliesTo
: 4828CC14
-1437-45bc
-9B07
-AD6F015E5F28
481 appliesTo
: bf967a86
-0de6
-11d0
-a285
-00aa003049e2
482 appliesTo
: bf967aba
-0de6
-11d0
-a285
-00aa003049e2
483 localizationDisplayId
: 4
486 dn: CN=Receive
-As
,CN=Extended
-Rights
,$
{CONFIGDN
}
488 objectClass: controlAccessRight
489 displayName
: Receive As
490 rightsGuid
: ab721a56
-1e2f
-11d0
-9819-00aa0040529b
491 appliesTo
: 4828CC14
-1437-45bc
-9B07
-AD6F015E5F28
492 appliesTo
: bf967a86
-0de6
-11d0
-a285
-00aa003049e2
493 appliesTo
: bf967aba
-0de6
-11d0
-a285
-00aa003049e2
494 localizationDisplayId
: 5
497 dn: CN=Send
-To
,CN=Extended
-Rights
,$
{CONFIGDN
}
499 objectClass: controlAccessRight
501 rightsGuid
: ab721a55
-1e2f
-11d0
-9819-00aa0040529b
502 appliesTo
: bf967a9c
-0de6
-11d0
-a285
-00aa003049e2
503 localizationDisplayId
: 6
506 dn: CN=Domain
-Password
,CN=Extended
-Rights
,$
{CONFIGDN
}
508 objectClass: controlAccessRight
509 displayName
: Domain Password
& Lockout Policies
510 rightsGuid
: c7407360
-20bf
-11d0
-a768
-00aa006e0529
511 appliesTo
: 19195a5b
-6da0
-11d0
-afd3
-00c04fd930c9
512 appliesTo
: 19195a5a
-6da0
-11d0
-afd3
-00c04fd930c9
513 localizationDisplayId
: 7
516 dn: CN=General
-Information
,CN=Extended
-Rights
,$
{CONFIGDN
}
518 objectClass: controlAccessRight
519 displayName
: General Information
520 rightsGuid
: 59ba2f42
-79a2
-11d0
-9020-00c04fc2d3cf
521 appliesTo
: 4828CC14
-1437-45bc
-9B07
-AD6F015E5F28
522 appliesTo
: bf967aba
-0de6
-11d0
-a285
-00aa003049e2
523 localizationDisplayId
: 8
526 dn: CN=User
-Account
-Restrictions
,CN=Extended
-Rights
,$
{CONFIGDN
}
528 objectClass: controlAccessRight
529 displayName
: Account Restrictions
530 rightsGuid
: 4c164200
-20c0
-11d0
-a768
-00aa006e0529
531 appliesTo
: 4828CC14
-1437-45bc
-9B07
-AD6F015E5F28
532 appliesTo
: bf967a86
-0de6
-11d0
-a285
-00aa003049e2
533 appliesTo
: bf967aba
-0de6
-11d0
-a285
-00aa003049e2
534 localizationDisplayId
: 9
537 dn: CN=User
-Logon
,CN=Extended
-Rights
,$
{CONFIGDN
}
539 objectClass: controlAccessRight
540 displayName
: Logon Information
541 rightsGuid
: 5f202010
-79a5
-11d0
-9020-00c04fc2d4cf
542 appliesTo
: 4828CC14
-1437-45bc
-9B07
-AD6F015E5F28
543 appliesTo
: bf967aba
-0de6
-11d0
-a285
-00aa003049e2
544 localizationDisplayId
: 10
547 dn: CN=Membership
,CN=Extended
-Rights
,$
{CONFIGDN
}
549 objectClass: controlAccessRight
550 displayName
: Group Membership
551 rightsGuid
: bc0ac240
-79a9
-11d0
-9020-00c04fc2d4cf
552 appliesTo
: 4828CC14
-1437-45bc
-9B07
-AD6F015E5F28
553 appliesTo
: bf967aba
-0de6
-11d0
-a285
-00aa003049e2
554 localizationDisplayId
: 11
557 dn: CN=Open
-Address
-Book
,CN=Extended
-Rights
,$
{CONFIGDN
}
559 objectClass: controlAccessRight
560 displayName
: Open Address List
561 rightsGuid
: a1990816
-4298-11d1
-ade2
-00c04fd8d5cd
562 appliesTo
: 3e74f60f
-3e73
-11d1
-a9c0
-0000f80367c1
563 localizationDisplayId
: 21
566 dn: CN=Personal
-Information
,CN=Extended
-Rights
,$
{CONFIGDN
}
568 objectClass: controlAccessRight
569 displayName
: Personal Information
570 rightsGuid
: 77B5B886
-944A
-11d1
-AEBD
-0000F80367C1
571 appliesTo
: 4828CC14
-1437-45bc
-9B07
-AD6F015E5F28
572 appliesTo
: bf967a86
-0de6
-11d0
-a285
-00aa003049e2
573 appliesTo
: 5cb41ed0
-0e4c
-11d0
-a286
-00aa003049e2
574 appliesTo
: bf967aba
-0de6
-11d0
-a285
-00aa003049e2
575 localizationDisplayId
: 23
578 dn: CN=Email
-Information
,CN=Extended
-Rights
,$
{CONFIGDN
}
580 objectClass: controlAccessRight
581 displayName
: Phone and
Mail Options
582 rightsGuid
: E45795B2
-9455-11d1
-AEBD
-0000F80367C1
583 appliesTo
: 4828CC14
-1437-45bc
-9B07
-AD6F015E5F28
584 appliesTo
: bf967a9c
-0de6
-11d0
-a285
-00aa003049e2
585 appliesTo
: bf967aba
-0de6
-11d0
-a285
-00aa003049e2
586 localizationDisplayId
: 22
589 dn: CN=Web
-Information
,CN=Extended
-Rights
,$
{CONFIGDN
}
591 objectClass: controlAccessRight
592 displayName
: Web Information
593 rightsGuid
: E45795B3
-9455-11d1
-AEBD
-0000F80367C1
594 appliesTo
: 4828CC14
-1437-45bc
-9B07
-AD6F015E5F28
595 appliesTo
: 5cb41ed0
-0e4c
-11d0
-a286
-00aa003049e2
596 appliesTo
: bf967aba
-0de6
-11d0
-a285
-00aa003049e2
597 localizationDisplayId
: 24
600 dn: CN=DS
-Replication
-Get
-Changes
,CN=Extended
-Rights
,$
{CONFIGDN
}
602 objectClass: controlAccessRight
603 displayName
: Replicating Directory Changes
604 rightsGuid
: 1131f6aa
-9c07
-11d1
-f79f
-00c04fc2dcd2
605 appliesTo
: bf967a8f
-0de6
-11d0
-a285
-00aa003049e2
606 appliesTo
: bf967a87
-0de6
-11d0
-a285
-00aa003049e2
607 appliesTo
: 19195a5b
-6da0
-11d0
-afd3
-00c04fd930c9
608 localizationDisplayId
: 25
611 dn: CN=DS
-Replication
-Synchronize
,CN=Extended
-Rights
,$
{CONFIGDN
}
613 objectClass: controlAccessRight
614 displayName
: Replication Synchronization
615 rightsGuid
: 1131f6ab
-9c07
-11d1
-f79f
-00c04fc2dcd2
616 appliesTo
: bf967a8f
-0de6
-11d0
-a285
-00aa003049e2
617 appliesTo
: bf967a87
-0de6
-11d0
-a285
-00aa003049e2
618 appliesTo
: 19195a5b
-6da0
-11d0
-afd3
-00c04fd930c9
619 localizationDisplayId
: 26
622 dn: CN=DS
-Replication
-Manage
-Topology
,CN=Extended
-Rights
,$
{CONFIGDN
}
624 objectClass: controlAccessRight
625 displayName
: Manage Replication Topology
626 rightsGuid
: 1131f6ac
-9c07
-11d1
-f79f
-00c04fc2dcd2
627 appliesTo
: bf967a8f
-0de6
-11d0
-a285
-00aa003049e2
628 appliesTo
: bf967a87
-0de6
-11d0
-a285
-00aa003049e2
629 appliesTo
: 19195a5b
-6da0
-11d0
-afd3
-00c04fd930c9
630 localizationDisplayId
: 27
633 dn: CN=Change
-Schema
-Master
,CN=Extended
-Rights
,$
{CONFIGDN
}
635 objectClass: controlAccessRight
636 displayName
: Change Schema Master
637 rightsGuid
: e12b56b6
-0a95
-11d1
-adbb
-00c04fd8d5cd
638 appliesTo
: bf967a8f
-0de6
-11d0
-a285
-00aa003049e2
639 localizationDisplayId
: 28
644 dn: CN=ForestUpdates
,$
{CONFIGDN
}
646 objectClass: container
648 dn: CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
650 objectClass: container
652 dn: CN=6b800a81
-affe
-4a15
-8e41
-6ea0c7aa89e4
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
654 objectClass: container
656 dn: CN=dd07182c
-3174-4c95
-902a
-d64fee285bbf
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
658 objectClass: container
660 dn: CN=ffa5ee3c
-1405-476d
-b344
-7ad37d69cc25
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
662 objectClass: container
664 dn: CN=099f1587
-af70
-49c6
-ab6c
-7b3e82be0fe2
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
666 objectClass: container
668 dn: CN=94fdebc6
-8eeb
-4640-80de
-ec52b9ca17fa
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
670 objectClass: container
672 dn: CN=1a3f6b15
-55f2
-4752-ba27
-3d38a8232c4d
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
674 objectClass: container
676 dn: CN=dee21a17
-4e8e
-4f40
-a58c
-c0c009b685a7
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
678 objectClass: container
680 dn: CN=9bd98bb4
-4047-4de5
-bf4c
-7bd1d0f6d21d
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
682 objectClass: container
684 dn: CN=3fe80fbf
-bf39
-4773-b5bd
-3e5767a30d2d
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
686 objectClass: container
688 dn: CN=f02915e2
-9141-4f73
-b8e7
-2804662782da
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
690 objectClass: container
692 dn: CN=39902c52
-ef24
-4b4b
-8033-2c9dfdd173a2
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
694 objectClass: container
696 dn: CN=20bf09b4
-6d0b
-4cd1
-9c09
-4231edf1209b
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
698 objectClass: container
700 dn: CN=94f238bb
-831c-11d6
-977b
-00c04f613221
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
702 objectClass: container
704 dn: CN=94f238bc
-831c-11d6
-977b
-00c04f613221
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
706 objectClass: container
708 dn: CN=94f238bd
-831c-11d6
-977b
-00c04f613221
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
710 objectClass: container
712 dn: CN=94f238be
-831c-11d6
-977b
-00c04f613221
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
714 objectClass: container
716 dn: CN=94f238bf
-831c-11d6
-977b
-00c04f613221
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
718 objectClass: container
720 dn: CN=94f238c0
-831c-11d6
-977b
-00c04f613221
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
722 objectClass: container
724 dn: CN=eda27b47
-e610
-11d6
-9793-00c04f613221
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
726 objectClass: container
728 dn: CN=eda27b48
-e610
-11d6
-9793-00c04f613221
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
730 objectClass: container
732 dn: CN=eda27b49
-e610
-11d6
-9793-00c04f613221
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
734 objectClass: container
736 dn: CN=eda27b4a
-e610
-11d6
-9793-00c04f613221
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
738 objectClass: container
740 dn: CN=26d9c510
-e61a
-11d6
-9793-00c04f613221
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
742 objectClass: container
744 dn: CN=26d9c511
-e61a
-11d6
-9793-00c04f613221
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
746 objectClass: container
748 dn: CN=3467dae5
-dedd
-4648-9066-f48ac186b20a
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
750 objectClass: container
752 dn: CN=33b7ee33
-1386-47cf
-baa1
-b03e06473253
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
754 objectClass: container
756 dn: CN=e9ee8d55
-c2fb
-4723-a333
-c80ff4dfbf45
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
758 objectClass: container
760 dn: CN=ccfae63a
-7fb5
-454c-83ab
-0e8e1214974e
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
762 objectClass: container
764 dn: CN=ad3c7909
-b154
-4c16
-8bf7
-2c3a7870bb3d
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
766 objectClass: container
768 dn: CN=26ad2ebf
-f8f5
-44a4
-b97c
-a616c8b9d09a
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
770 objectClass: container
772 dn: CN=4444c516
-f43a
-4c12
-9c4b
-b5c064941d61
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
774 objectClass: container
776 dn: CN=436a1a4b
-f41a
-46e6
-ac86
-427720ef29f3
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
778 objectClass: container
780 dn: CN=b2b7fb45
-f50d
-41bc
-a73b
-8f580f3b636a
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
782 objectClass: container
784 dn: CN=1bdf6366
-c3db
-4d0b
-b8cb
-f99ba9bce20f
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
786 objectClass: container
788 dn: CN=63c0f51a
-067c-4640-8a4f
-044fb33f1049
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
790 objectClass: container
792 dn: CN=dae441c0
-366e-482e
-98d9
-60a99a1898cc
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
794 objectClass: container
796 dn: CN=7dd09ca6
-f0d6
-43bf
-b7f8
-ef348f435617
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
798 objectClass: container
800 dn: CN=Windows2003Update
,CN=ForestUpdates
,$
{CONFIGDN
}
802 objectClass: container
805 dn: CN=LostAndFoundConfig
,$
{CONFIGDN
}
807 objectClass: lostAndFound
808 systemFlags
: -2147483648
810 dn: CN=NTDS Quotas
,$
{CONFIGDN
}
812 objectClass: msDS
-QuotaContainer
813 description: Quota specifications container
814 msDS
-TombstoneQuotaFactor
: 100
815 systemFlags
: -2147483648
819 dn: CN=Partitions
,$
{CONFIGDN
}
821 objectClass: crossRefContainer
822 systemFlags
: -2147483648
823 msDS
-Behavior
-Version
: $
{FOREST_FUNCTIONALALITY
}
824 showInAdvancedViewOnly
: TRUE
826 # Partitions for DNS are missing since we don't support AD DNS
828 dn: CN=Enterprise Configuration
,CN=Partitions
,$
{CONFIGDN
}
830 objectClass: crossRef
831 dnsRoot
: $
{DNSDOMAIN
}
835 dn: CN=Enterprise Schema
,CN=Partitions
,$
{CONFIGDN
}
837 objectClass: crossRef
838 dnsRoot
: $
{DNSDOMAIN
}
842 dn: CN=$
{DOMAIN
},CN=Partitions
,$
{CONFIGDN
}
844 objectClass: crossRef
845 dnsRoot
: $
{DNSDOMAIN
}
847 nETBIOSName
: $
{DOMAIN
}
851 dn: CN=Physical Locations
,$
{CONFIGDN
}
853 objectClass: locality
854 objectClass: physicalLocation
855 l: Physical Locations tree root
857 # Schema located in "ad-schema/*.txt"
861 dn: CN=Services
,$
{CONFIGDN
}
863 objectClass: container
864 systemFlags
: -2147483648
866 dn: CN=MsmqServices
,CN=Services
,$
{CONFIGDN
}
868 objectClass: mSMQEnterpriseSettings
871 dn: CN=NetServices
,CN=Services
,$
{CONFIGDN
}
873 objectClass: container
875 dn: CN=Public Key Services
,CN=Services
,$
{CONFIGDN
}
877 objectClass: container
879 dn: CN=Certificate Templates
,CN=Public Key Services
,CN=Services
,$
{CONFIGDN
}
881 objectClass: container
883 dn: CN=Enrollment Services
,CN=Public Key Services
,CN=Services
,$
{CONFIGDN
}
885 objectClass: container
887 dn: CN=Certification Authorities
,CN=Public Key Services
,CN=Services
,$
{CONFIGDN
}
889 objectClass: container
891 dn: CN=AIA
,CN=Public Key Services
,CN=Services
,$
{CONFIGDN
}
893 objectClass: container
895 dn: CN=CDP
,CN=Public Key Services
,CN=Services
,$
{CONFIGDN
}
897 objectClass: container
899 dn: CN=KRA
,CN=Public Key Services
,CN=Services
,$
{CONFIGDN
}
901 objectClass: container
903 dn: CN=OID
,CN=Public Key Services
,CN=Services
,$
{CONFIGDN
}
905 objectClass: msPKI
-Enterprise
-Oid
907 dn: CN=RRAS
,CN=Services
,$
{CONFIGDN
}
909 objectClass: container
911 dn: CN=IdentityDictionary
,CN=RRAS
,CN=Services
,$
{CONFIGDN
}
913 objectClass: rRASAdministrationDictionary
914 msRRASVendorAttributeEntry
: 311:6:803:RADIUS Accouting
915 msRRASVendorAttributeEntry
: 311:6:802:RADIUS Authentication
916 msRRASVendorAttributeEntry
: 311:6:801:NT Domain Authentication
917 msRRASVendorAttributeEntry
: 311:6:714:Point to point parallel connection
918 msRRASVendorAttributeEntry
: 311:6:713:Point to point serial connection
919 msRRASVendorAttributeEntry
: 311:6:712:Generic LAN
920 msRRASVendorAttributeEntry
: 311:6:711:Generic WAN
921 msRRASVendorAttributeEntry
: 311:6:710:X
.25
922 msRRASVendorAttributeEntry
: 311:6:709:IrDA
923 msRRASVendorAttributeEntry
: 311:6:708:Switched
56
924 msRRASVendorAttributeEntry
: 311:6:707:SONET
925 msRRASVendorAttributeEntry
: 311:6:706:Modem
926 msRRASVendorAttributeEntry
: 311:6:705:ISDN
927 msRRASVendorAttributeEntry
: 311:6:704:ATM
928 msRRASVendorAttributeEntry
: 311:6:703:Frame Relay
929 msRRASVendorAttributeEntry
: 311:6:702:Layer
2 Tunneling Protocol
930 msRRASVendorAttributeEntry
: 311:6:701:Point
-to
-Point Tunneling Protocol
931 msRRASVendorAttributeEntry
: 311:6:604:Network Address and Port Translation
932 msRRASVendorAttributeEntry
: 311:6:603:Demand Dial Router
933 msRRASVendorAttributeEntry
: 311:6:602:Remote Access Server
934 msRRASVendorAttributeEntry
: 311:6:601:LAN
-to
- LAN Router
935 msRRASVendorAttributeEntry
: 311:6:503:AppleTalk Forwarding Enabled
936 msRRASVendorAttributeEntry
: 311:6:502:IPX Forwarding Enabled
937 msRRASVendorAttributeEntry
: 311:6:501:IP Forwarding Enabled
938 msRRASVendorAttributeEntry
: 311:5:2:IPX SAP
939 msRRASVendorAttributeEntry
: 311::5:1:IPX RIP
940 msRRASVendorAttributeEntry
: 311:1:10:IGMP Only
941 msRRASVendorAttributeEntry
: 311:0:13:OSPF
942 msRRASVendorAttributeEntry
: 311:0:8:RIP
(version
1 or
2)
944 dn: CN=Windows NT
,CN=Services
,$
{CONFIGDN
}
946 objectClass: container
948 dn: CN=Directory Service
,CN=Windows NT
,CN=Services
,$
{CONFIGDN
}
950 objectClass: nTDSService
951 msDS
-Other
-Settings
: DisableVLVSupport
=0
952 msDS
-Other
-Settings
: DynamicObjectMinTTL
=900
953 msDS
-Other
-Settings
: DynamicObjectDefaultTTL
=86400
954 # "sPNMappings" needs to be enhanced when we add features
955 sPNMappings
: host
=dns
,netlogon
,rpc
,cifs
,wins
,http
956 tombstoneLifetime
: 180
958 dn: CN=Query
-Policies
,CN=Directory Service
,CN=Windows NT
,CN=Services
,$
{CONFIGDN
}
960 objectClass: container
962 dn: CN=Default Query Policy
,CN=Query
-Policies
,CN=Directory Service
,CN=Windows NT
,CN=Services
,$
{CONFIGDN
}
964 objectClass: queryPolicy
965 lDAPAdminLimits
: MaxValRange
=1500
966 lDAPAdminLimits
: MaxReceiveBuffer
=10485760
967 lDAPAdminLimits
: MaxDatagramRecv
=4096
968 lDAPAdminLimits
: MaxPoolThreads
=4
969 lDAPAdminLimits
: MaxResultSetSize
=262144
970 lDAPAdminLimits
: MaxTempTableSize
=10000
971 lDAPAdminLimits
: MaxQueryDuration
=120
972 lDAPAdminLimits
: MaxPageSize
=1000
973 lDAPAdminLimits
: MaxNotificationPerConn
=5
974 lDAPAdminLimits
: MaxActiveQueries
=20
975 lDAPAdminLimits
: MaxConnIdleTime
=900
976 lDAPAdminLimits
: InitRecvTimeout
=120
977 lDAPAdminLimits
: MaxConnections
=5000
981 dn: CN=Sites
,$
{CONFIGDN
}
983 objectClass: sitesContainer
984 systemFlags
: -2113929216
986 dn: CN=$
{DEFAULTSITE
},CN=Sites
,$
{CONFIGDN
}
989 systemFlags
: 1107296256
991 dn: CN=Licensing Site Settings
,CN=$
{DEFAULTSITE
},CN=Sites
,$
{CONFIGDN
}
993 objectClass: applicationSiteSettings
994 objectClass: licensingSiteSettings
996 dn: CN=Inter
-Site Transports
,CN=Sites
,$
{CONFIGDN
}
998 objectClass: interSiteTransportContainer
999 systemFlags
: -2147483648
1001 dn: CN=IP
,CN=Inter
-Site Transports
,CN=Sites
,$
{CONFIGDN
}
1003 objectClass: interSiteTransport
1004 transportAddressAttribute
: dNSHostName
1005 transportDLLName
: ismip.dll
1006 systemFlags
: -2147483648
1008 dn: CN=DEFAULTIPSITELINK
,CN=IP
,CN=Inter
-Site Transports
,CN=Sites
,$
{CONFIGDN
}
1010 objectClass: siteLink
1013 siteList
: CN=$
{DEFAULTSITE
},CN=Sites
,$
{CONFIGDN
}
1014 systemFlags
: 1073741824
1016 dn: CN=SMTP
,CN=Inter
-Site Transports
,CN=Sites
,$
{CONFIGDN
}
1018 objectClass: interSiteTransport
1019 transportAddressAttribute
: mailAddress
1020 transportDLLName
: ismsmtp.dll
1023 dn: CN=NTDS Site Settings
,CN=$
{DEFAULTSITE
},CN=Sites
,$
{CONFIGDN
}
1025 objectClass: applicationSiteSettings
1026 objectClass: nTDSSiteSettings
1028 dn: CN=Servers
,CN=$
{DEFAULTSITE
},CN=Sites
,$
{CONFIGDN
}
1030 objectClass: serversContainer
1031 systemFlags
: 33554432
1033 dn: CN=Subnets
,CN=Sites
,$
{CONFIGDN
}
1035 objectClass: subnetContainer
1036 systemFlags
: -1073741824