source4/setup/provision_configuration.ldif

   1 ###############################
   2 # Configuration Naming Context
   3 ###############################
   4 dn: CN=Partitions,${CONFIGDN}
   5 objectClass: top
   6 objectClass: crossRefContainer
   7 cn: Partitions
   8 systemFlags: -2147483648
   9 msDS-Behavior-Version: ${FOREST_FUNCTIONALALITY}
  10 fSMORoleOwner: CN=NTDS Settings,${SERVERDN}
  11 showInAdvancedViewOnly: TRUE
  12
  13 dn: CN=Enterprise Configuration,CN=Partitions,${CONFIGDN}
  14 objectClass: top
  15 objectClass: crossRef
  16 cn: Enterprise Configuration
  17 systemFlags: 1
  18 nCName: ${CONFIGDN}
  19 dnsRoot: ${DNSDOMAIN}
  20
  21 dn: CN=Enterprise Schema,CN=Partitions,${CONFIGDN}
  22 objectClass: top
  23 objectClass: crossRef
  24 cn: Enterprise Schema
  25 systemFlags: 1
  26 nCName: ${SCHEMADN}
  27 dnsRoot: ${DNSDOMAIN}
  28
  29 dn: CN=${DOMAIN},CN=Partitions,${CONFIGDN}
  30 objectClass: top
  31 objectClass: crossRef
  32 cn: ${DOMAIN}
  33 systemFlags: 3
  34 nCName: ${DOMAINDN}
  35 nETBIOSName: ${DOMAIN}
  36 dnsRoot: ${DNSDOMAIN}
  37
  38 dn: CN=Sites,${CONFIGDN}
  39 objectClass: top
  40 objectClass: sitesContainer
  41 cn: Sites
  42 systemFlags: -2113929216
  43
  44 dn: CN=${DEFAULTSITE},CN=Sites,${CONFIGDN}
  45 objectClass: top
  46 objectClass: site
  47 cn: ${DEFAULTSITE}
  48 systemFlags: 1107296256
  49
  50 dn: CN=Servers,CN=${DEFAULTSITE},CN=Sites,${CONFIGDN}
  51 objectClass: top
  52 objectClass: serversContainer
  53 cn: Servers
  54 systemFlags: 33554432
  55
  56 dn: CN=Services,${CONFIGDN}
  57 objectClass: top
  58 objectClass: container
  59 cn: Services
  60 systemFlags: -2147483648
  61
  62 dn: CN=Windows NT,CN=Services,${CONFIGDN}
  63 objectClass: top
  64 objectClass: container
  65 cn: Windows NT
  66
  67 dn: CN=Directory Service,CN=Windows NT,CN=Services,${CONFIGDN}
  68 objectClass: top
  69 objectClass: nTDSService
  70 cn: Directory Service
  71 sPNMappings: host=ldap,dns,cifs,http
  72
  73 dn: CN=Query-Policies,CN=Directory Service,CN=Windows NT,CN=Services,${CONFIGDN}
  74 objectClass: top
  75 objectClass: container
  76 cn: Query-Policies
  77
  78 dn: CN=Default Query Policy,CN=Query-Policies,CN=Directory Service,CN=Windows NT,CN=Services,${CONFIGDN}
  79 objectClass: top
  80 objectClass: queryPolicy
  81 cn: Default Query Policy
  82 lDAPAdminLimits: MaxValRange=1500
  83 lDAPAdminLimits: MaxReceiveBuffer=10485760
  84 lDAPAdminLimits: MaxDatagramRecv=4096
  85 lDAPAdminLimits: MaxPoolThreads=4
  86 lDAPAdminLimits: MaxResultSetSize=262144
  87 lDAPAdminLimits: MaxTempTableSize=10000
  88 lDAPAdminLimits: MaxQueryDuration=120
  89 lDAPAdminLimits: MaxPageSize=1000
  90 lDAPAdminLimits: MaxNotificationPerConn=5
  91 lDAPAdminLimits: MaxActiveQueries=20
  92 lDAPAdminLimits: MaxConnIdleTime=900
  93 lDAPAdminLimits: InitRecvTimeout=120
  94 lDAPAdminLimits: MaxConnections=5000
  95
  96 dn: CN=Extended-Rights,${CONFIGDN}
  97 objectClass: top
  98 objectClass: container
  99 cn: Extended-Rights
 100 systemFlags: -2147483648
 101
 102 dn: CN=Change-Rid-Master,CN=Extended-Rights,${CONFIGDN}
 103 objectClass: top
 104 objectClass: controlAccessRight
 105 cn: Change-Rid-Master
 106 displayName: Change Rid Master
 107 rightsGuid: d58d5f36-0a98-11d1-adbb-00c04fd8d5cd
 108 appliesTo: 6617188d-8f3c-11d0-afda-00c04fd930c9
 109 localizationDisplayId: 29
 110 validAccesses: 256
 111
 112 dn: CN=Do-Garbage-Collection,CN=Extended-Rights,${CONFIGDN}
 113 objectClass: top
 114 objectClass: controlAccessRight
 115 cn: Do-Garbage-Collection
 116 displayName: Do Garbage Collection
 117 rightsGuid: fec364e0-0a98-11d1-adbb-00c04fd8d5cd
 118 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
 119 localizationDisplayId: 31
 120 validAccesses: 256
 121
 122 dn: CN=Recalculate-Hierarchy,CN=Extended-Rights,${CONFIGDN}
 123 objectClass: top
 124 objectClass: controlAccessRight
 125 cn: Recalculate-Hierarchy
 126 displayName: Recalculate Hierarchy
 127 rightsGuid: 0bc1554e-0a99-11d1-adbb-00c04fd8d5cd
 128 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
 129 localizationDisplayId: 32
 130 validAccesses: 256
 131
 132 dn: CN=Allocate-Rids,CN=Extended-Rights,${CONFIGDN}
 133 objectClass: top
 134 objectClass: controlAccessRight
 135 cn: Allocate-Rids
 136 displayName: Allocate Rids
 137 rightsGuid: 1abd7cf8-0a99-11d1-adbb-00c04fd8d5cd
 138 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
 139 localizationDisplayId: 33
 140 validAccesses: 256
 141
 142 dn: CN=Change-PDC,CN=Extended-Rights,${CONFIGDN}
 143 objectClass: top
 144 objectClass: controlAccessRight
 145 cn: Change-PDC
 146 displayName: Change PDC
 147 rightsGuid: bae50096-4752-11d1-9052-00c04fc2d4cf
 148 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 149 localizationDisplayId: 34
 150 validAccesses: 256
 151
 152 dn: CN=Add-GUID,CN=Extended-Rights,${CONFIGDN}
 153 objectClass: top
 154 objectClass: controlAccessRight
 155 cn: Add-GUID
 156 displayName: Add GUID
 157 rightsGuid: 440820ad-65b4-11d1-a3da-0000f875ae0d
 158 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 159 localizationDisplayId: 35
 160 validAccesses: 256
 161
 162 dn: CN=Change-Domain-Master,CN=Extended-Rights,${CONFIGDN}
 163 objectClass: top
 164 objectClass: controlAccessRight
 165 cn: Change-Domain-Master
 166 displayName: Change Domain Master
 167 rightsGuid: 014bf69c-7b3b-11d1-85f6-08002be74fab
 168 appliesTo: ef9e60e0-56f7-11d1-a9c6-0000f80367c1
 169 localizationDisplayId: 36
 170 validAccesses: 256
 171
 172 dn: CN=Public-Information,CN=Extended-Rights,${CONFIGDN}
 173 objectClass: top
 174 objectClass: controlAccessRight
 175 cn: Public-Information
 176 displayName: Public Information
 177 rightsGuid: e48d0154-bcf8-11d1-8702-00c04fb96050
 178 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
 179 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
 180 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
 181 localizationDisplayId: 37
 182 validAccesses: 48
 183
 184 dn: CN=msmq-Receive-Dead-Letter,CN=Extended-Rights,${CONFIGDN}
 185 objectClass: top
 186 objectClass: controlAccessRight
 187 cn: msmq-Receive-Dead-Letter
 188 displayName: Receive Dead Letter
 189 rightsGuid: 4b6e08c0-df3c-11d1-9c86-006008764d0e
 190 appliesTo: 9a0dc344-c100-11d1-bbc5-0080c76670c0
 191 localizationDisplayId: 38
 192 validAccesses: 256
 193
 194 dn: CN=msmq-Peek-Dead-Letter,CN=Extended-Rights,${CONFIGDN}
 195 objectClass: top
 196 objectClass: controlAccessRight
 197 cn: msmq-Peek-Dead-Letter
 198 displayName: Peek Dead Letter
 199 rightsGuid: 4b6e08c1-df3c-11d1-9c86-006008764d0e
 200 appliesTo: 9a0dc344-c100-11d1-bbc5-0080c76670c0
 201 localizationDisplayId: 39
 202 validAccesses: 256
 203
 204 dn: CN=msmq-Receive-computer-Journal,CN=Extended-Rights,${CONFIGDN}
 205 objectClass: top
 206 objectClass: controlAccessRight
 207 cn: msmq-Receive-computer-Journal
 208 displayName: Receive Computer Journal
 209 rightsGuid: 4b6e08c2-df3c-11d1-9c86-006008764d0e
 210 appliesTo: 9a0dc344-c100-11d1-bbc5-0080c76670c0
 211 localizationDisplayId: 40
 212 validAccesses: 256
 213
 214 dn: CN=msmq-Peek-computer-Journal,CN=Extended-Rights,${CONFIGDN}
 215 objectClass: top
 216 objectClass: controlAccessRight
 217 cn: msmq-Peek-computer-Journal
 218 displayName: Peek Computer Journal
 219 rightsGuid: 4b6e08c3-df3c-11d1-9c86-006008764d0e
 220 appliesTo: 9a0dc344-c100-11d1-bbc5-0080c76670c0
 221 localizationDisplayId: 41
 222 validAccesses: 256
 223
 224 dn: CN=msmq-Receive,CN=Extended-Rights,${CONFIGDN}
 225 objectClass: top
 226 objectClass: controlAccessRight
 227 cn: msmq-Receive
 228 displayName: Receive Message
 229 rightsGuid: 06bd3200-df3e-11d1-9c86-006008764d0e
 230 appliesTo: 9a0dc343-c100-11d1-bbc5-0080c76670c0
 231 localizationDisplayId: 42
 232 validAccesses: 256
 233
 234 dn: CN=msmq-Peek,CN=Extended-Rights,${CONFIGDN}
 235 objectClass: top
 236 objectClass: controlAccessRight
 237 cn: msmq-Peek
 238 displayName: Peek Message
 239 rightsGuid: 06bd3201-df3e-11d1-9c86-006008764d0e
 240 appliesTo: 9a0dc343-c100-11d1-bbc5-0080c76670c0
 241 localizationDisplayId: 43
 242 validAccesses: 256
 243
 244 dn: CN=msmq-Send,CN=Extended-Rights,${CONFIGDN}
 245 objectClass: top
 246 objectClass: controlAccessRight
 247 cn: msmq-Send
 248 displayName: Send Message
 249 rightsGuid: 06bd3202-df3e-11d1-9c86-006008764d0e
 250 appliesTo: 46b27aac-aafa-4ffb-b773-e5bf621ee87b
 251 appliesTo: 9a0dc343-c100-11d1-bbc5-0080c76670c0
 252 localizationDisplayId: 44
 253 validAccesses: 256
 254
 255 dn: CN=msmq-Receive-journal,CN=Extended-Rights,${CONFIGDN}
 256 objectClass: top
 257 objectClass: controlAccessRight
 258 cn: msmq-Receive-journal
 259 displayName: Receive Journal
 260 rightsGuid: 06bd3203-df3e-11d1-9c86-006008764d0e
 261 appliesTo: 9a0dc343-c100-11d1-bbc5-0080c76670c0
 262 localizationDisplayId: 45
 263 validAccesses: 256
 264
 265 dn: CN=msmq-Open-Connector,CN=Extended-Rights,${CONFIGDN}
 266 objectClass: top
 267 objectClass: controlAccessRight
 268 cn: msmq-Open-Connector
 269 displayName: Open Connector Queue
 270 rightsGuid: b4e60130-df3f-11d1-9c86-006008764d0e
 271 appliesTo: bf967ab3-0de6-11d0-a285-00aa003049e2
 272 localizationDisplayId: 46
 273 validAccesses: 256
 274
 275 dn: CN=Apply-Group-Policy,CN=Extended-Rights,${CONFIGDN}
 276 objectClass: top
 277 objectClass: controlAccessRight
 278 cn: Apply-Group-Policy
 279 displayName: Apply Group Policy
 280 rightsGuid: edacfd8f-ffb3-11d1-b41d-00a0c968f939
 281 appliesTo: f30e3bc2-9ff0-11d1-b603-0000f80367c1
 282 localizationDisplayId: 47
 283 validAccesses: 256
 284
 285 dn: CN=RAS-Information,CN=Extended-Rights,${CONFIGDN}
 286 objectClass: top
 287 objectClass: controlAccessRight
 288 cn: RAS-Information
 289 displayName: Remote Access Information
 290 rightsGuid: 037088f8-0ae1-11d2-b422-00a0c968f939
 291 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
 292 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
 293 localizationDisplayId: 48
 294 validAccesses: 48
 295
 296 dn: CN=DS-Install-Replica,CN=Extended-Rights,${CONFIGDN}
 297 objectClass: top
 298 objectClass: controlAccessRight
 299 cn: DS-Install-Replica
 300 displayName: Add/Remove Replica In Domain
 301 rightsGuid: 9923a32a-3607-11d2-b9be-0000f87a36b2
 302 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 303 localizationDisplayId: 49
 304 validAccesses: 256
 305
 306 dn: CN=Change-Infrastructure-Master,CN=Extended-Rights,${CONFIGDN}
 307 objectClass: top
 308 objectClass: controlAccessRight
 309 cn: Change-Infrastructure-Master
 310 displayName: Change Infrastructure Master
 311 rightsGuid: cc17b1fb-33d9-11d2-97d4-00c04fd8d5cd
 312 appliesTo: 2df90d89-009f-11d2-aa4c-00c04fd7d83a
 313 localizationDisplayId: 50
 314 validAccesses: 256
 315
 316 dn: CN=Update-Schema-Cache,CN=Extended-Rights,${CONFIGDN}
 317 objectClass: top
 318 objectClass: controlAccessRight
 319 cn: Update-Schema-Cache
 320 displayName: Update Schema Cache
 321 rightsGuid: be2bb760-7f46-11d2-b9ad-00c04f79f805
 322 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
 323 localizationDisplayId: 51
 324 validAccesses: 256
 325
 326 dn: CN=Recalculate-Security-Inheritance,CN=Extended-Rights,${CONFIGDN}
 327 objectClass: top
 328 objectClass: controlAccessRight
 329 cn: Recalculate-Security-Inheritance
 330 displayName: Recalculate Security Inheritance
 331 rightsGuid: 62dd28a8-7f46-11d2-b9ad-00c04f79f805
 332 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
 333 localizationDisplayId: 52
 334 validAccesses: 256
 335
 336 dn: CN=DS-Check-Stale-Phantoms,CN=Extended-Rights,${CONFIGDN}
 337 objectClass: top
 338 objectClass: controlAccessRight
 339 cn: DS-Check-Stale-Phantoms
 340 displayName: Check Stale Phantoms
 341 rightsGuid: 69ae6200-7f46-11d2-b9ad-00c04f79f805
 342 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
 343 localizationDisplayId: 53
 344 validAccesses: 256
 345
 346 dn: CN=Certificate-Enrollment,CN=Extended-Rights,${CONFIGDN}
 347 objectClass: top
 348 objectClass: controlAccessRight
 349 cn: Certificate-Enrollment
 350 displayName: Enroll
 351 rightsGuid: 0e10c968-78fb-11d2-90d4-00c04f79dc55
 352 appliesTo: e5209ca2-3bba-11d2-90cc-00c04fd91ab1
 353 localizationDisplayId: 54
 354 validAccesses: 256
 355
 356 dn: CN=Self-Membership,CN=Extended-Rights,${CONFIGDN}
 357 objectClass: top
 358 objectClass: controlAccessRight
 359 cn: Self-Membership
 360 displayName: Add/Remove self as member
 361 rightsGuid: bf9679c0-0de6-11d0-a285-00aa003049e2
 362 appliesTo: bf967a9c-0de6-11d0-a285-00aa003049e2
 363 localizationDisplayId: 12
 364 validAccesses: 8
 365
 366 dn: CN=Validated-DNS-Host-Name,CN=Extended-Rights,${CONFIGDN}
 367 objectClass: top
 368 objectClass: controlAccessRight
 369 cn: Validated-DNS-Host-Name
 370 displayName: Validated write to DNS host name
 371 rightsGuid: 72e39547-7b18-11d1-adef-00c04fd8d5cd
 372 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
 373 localizationDisplayId: 13
 374 validAccesses: 8
 375
 376 dn: CN=Validated-SPN,CN=Extended-Rights,${CONFIGDN}
 377 objectClass: top
 378 objectClass: controlAccessRight
 379 cn: Validated-SPN
 380 displayName: Validated write to service principal name
 381 rightsGuid: f3a64788-5306-11d1-a9c5-0000f80367c1
 382 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
 383 localizationDisplayId: 14
 384 validAccesses: 8
 385
 386 dn: CN=Generate-RSoP-Planning,CN=Extended-Rights,${CONFIGDN}
 387 objectClass: top
 388 objectClass: controlAccessRight
 389 cn: Generate-RSoP-Planning
 390 displayName: Generate Resultant Set of Policy (Planning)
 391 rightsGuid: b7b1b3dd-ab09-4242-9e30-9980e5d322f7
 392 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 393 appliesTo: bf967aa5-0de6-11d0-a285-00aa003049e2
 394 localizationDisplayId: 55
 395 validAccesses: 256
 396
 397 dn: CN=Refresh-Group-Cache,CN=Extended-Rights,${CONFIGDN}
 398 objectClass: top
 399 objectClass: controlAccessRight
 400 cn: Refresh-Group-Cache
 401 displayName: Refresh Group Cache for Logons
 402 rightsGuid: 9432c620-033c-4db7-8b58-14ef6d0bf477
 403 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
 404 localizationDisplayId: 56
 405 validAccesses: 256
 406
 407 dn: CN=SAM-Enumerate-Entire-Domain,CN=Extended-Rights,${CONFIGDN}
 408 objectClass: top
 409 objectClass: controlAccessRight
 410 cn: SAM-Enumerate-Entire-Domain
 411 displayName: Enumerate Entire SAM Domain
 412 rightsGuid: 91d67418-0135-4acc-8d79-c08e857cfbec
 413 appliesTo: bf967aad-0de6-11d0-a285-00aa003049e2
 414 localizationDisplayId: 57
 415 validAccesses: 256
 416
 417 dn: CN=Generate-RSoP-Logging,CN=Extended-Rights,${CONFIGDN}
 418 objectClass: top
 419 objectClass: controlAccessRight
 420 cn: Generate-RSoP-Logging
 421 displayName: Generate Resultant Set of Policy (Logging)
 422 rightsGuid: b7b1b3de-ab09-4242-9e30-9980e5d322f7
 423 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 424 appliesTo: bf967aa5-0de6-11d0-a285-00aa003049e2
 425 localizationDisplayId: 58
 426 validAccesses: 256
 427
 428 dn: CN=Domain-Other-Parameters,CN=Extended-Rights,${CONFIGDN}
 429 objectClass: top
 430 objectClass: controlAccessRight
 431 cn: Domain-Other-Parameters
 432 displayName: Other Domain Parameters (for use by SAM)
 433 rightsGuid: b8119fd0-04f6-4762-ab7a-4986c76b3f9a
 434 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 435 localizationDisplayId: 59
 436 validAccesses: 48
 437
 438 dn: CN=DNS-Host-Name-Attributes,CN=Extended-Rights,${CONFIGDN}
 439 objectClass: top
 440 objectClass: controlAccessRight
 441 cn: DNS-Host-Name-Attributes
 442 displayName: DNS Host Name Attributes
 443 rightsGuid: 72e39547-7b18-11d1-adef-00c04fd8d5cd
 444 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
 445 localizationDisplayId: 60
 446 validAccesses: 48
 447
 448 dn: CN=Create-Inbound-Forest-Trust,CN=Extended-Rights,${CONFIGDN}
 449 objectClass: top
 450 objectClass: controlAccessRight
 451 cn: Create-Inbound-Forest-Trust
 452 displayName: Create Inbound Forest Trust
 453 rightsGuid: e2a36dc9-ae17-47c3-b58b-be34c55ba633
 454 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 455 localizationDisplayId: 61
 456 validAccesses: 256
 457
 458 dn: CN=DS-Replication-Get-Changes-All,CN=Extended-Rights,${CONFIGDN}
 459 objectClass: top
 460 objectClass: controlAccessRight
 461 cn: DS-Replication-Get-Changes-All
 462 displayName: Replicating Directory Changes All
 463 rightsGuid: 1131f6ad-9c07-11d1-f79f-00c04fc2dcd2
 464 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
 465 appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
 466 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 467 localizationDisplayId: 62
 468 validAccesses: 256
 469
 470 dn: CN=Migrate-SID-History,CN=Extended-Rights,${CONFIGDN}
 471 objectClass: top
 472 objectClass: controlAccessRight
 473 cn: Migrate-SID-History
 474 displayName: Migrate SID History
 475 rightsGuid: BA33815A-4F93-4c76-87F3-57574BFF8109
 476 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 477 localizationDisplayId: 63
 478 validAccesses: 256
 479
 480 dn: CN=Reanimate-Tombstones,CN=Extended-Rights,${CONFIGDN}
 481 objectClass: top
 482 objectClass: controlAccessRight
 483 cn: Reanimate-Tombstones
 484 displayName: Reanimate Tombstones
 485 rightsGuid: 45EC5156-DB7E-47bb-B53F-DBEB2D03C40F
 486 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
 487 appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
 488 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 489 localizationDisplayId: 64
 490 validAccesses: 256
 491
 492 dn: CN=Allowed-To-Authenticate,CN=Extended-Rights,${CONFIGDN}
 493 objectClass: top
 494 objectClass: controlAccessRight
 495 cn: Allowed-To-Authenticate
 496 displayName: Allowed to Authenticate
 497 rightsGuid: 68B1D179-0D15-4d4f-AB71-46152E79A7BC
 498 appliesTo: 4828cc14-1437-45bc-9b07-ad6f015e5f28
 499 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
 500 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
 501 localizationDisplayId: 65
 502 validAccesses: 256
 503
 504 dn: CN=DS-Execute-Intentions-Script,CN=Extended-Rights,${CONFIGDN}
 505 objectClass: top
 506 objectClass: controlAccessRight
 507 cn: DS-Execute-Intentions-Script
 508 displayName: Execute Forest Update Script
 509 rightsGuid: 2f16c4a5-b98e-432c-952a-cb388ba33f2e
 510 appliesTo: ef9e60e0-56f7-11d1-a9c6-0000f80367c1
 511 localizationDisplayId: 66
 512 validAccesses: 256
 513
 514 dn: CN=DS-Replication-Monitor-Topology,CN=Extended-Rights,${CONFIGDN}
 515 objectClass: top
 516 objectClass: controlAccessRight
 517 cn: DS-Replication-Monitor-Topology
 518 displayName: Monitor Active Directory Replication
 519 rightsGuid: f98340fb-7c5b-4cdb-a00b-2ebdfa115a96
 520 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
 521 appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
 522 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 523 localizationDisplayId: 67
 524 validAccesses: 256
 525
 526 dn: CN=Update-Password-Not-Required-Bit,CN=Extended-Rights,${CONFIGDN}
 527 objectClass: top
 528 objectClass: controlAccessRight
 529 cn: Update-Password-Not-Required-Bit
 530 displayName: Update Password Not Required Bit
 531 rightsGuid: 280f369c-67c7-438e-ae98-1d46f3c6f541
 532 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 533 localizationDisplayId: 68
 534 validAccesses: 256
 535
 536 dn: CN=Unexpire-Password,CN=Extended-Rights,${CONFIGDN}
 537 objectClass: top
 538 objectClass: controlAccessRight
 539 cn: Unexpire-Password
 540 displayName: Unexpire Password
 541 rightsGuid: ccc2dc7d-a6ad-4a7a-8846-c04e3cc53501
 542 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 543 localizationDisplayId: 69
 544 validAccesses: 256
 545
 546 dn: CN=Enable-Per-User-Reversibly-Encrypted-Password,CN=Extended-Rights,${CONFIGDN}
 547 objectClass: top
 548 objectClass: controlAccessRight
 549 cn: Enable-Per-User-Reversibly-Encrypted-Password
 550 displayName: Enable Per User Reversibly Encrypted Password
 551 rightsGuid: 05c74c5e-4deb-43b4-bd9f-86664c2a7fd5
 552 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 553 localizationDisplayId: 70
 554 validAccesses: 256
 555
 556 dn: CN=DS-Query-Self-Quota,CN=Extended-Rights,${CONFIGDN}
 557 objectClass: top
 558 objectClass: controlAccessRight
 559 cn: DS-Query-Self-Quota
 560 displayName: Query Self Quota
 561 rightsGuid: 4ecc03fe-ffc0-4947-b630-eb672a8a9dbc
 562 appliesTo: da83fc4f-076f-4aea-b4dc-8f4dab9b5993
 563 localizationDisplayId: 71
 564 validAccesses: 256
 565
 566 dn: CN=Domain-Administer-Server,CN=Extended-Rights,${CONFIGDN}
 567 objectClass: top
 568 objectClass: controlAccessRight
 569 cn: Domain-Administer-Server
 570 displayName: Domain Administer Server
 571 rightsGuid: ab721a52-1e2f-11d0-9819-00aa0040529b
 572 appliesTo: bf967aad-0de6-11d0-a285-00aa003049e2
 573 localizationDisplayId: 1
 574 validAccesses: 256
 575
 576 dn: CN=User-Change-Password,CN=Extended-Rights,${CONFIGDN}
 577 objectClass: top
 578 objectClass: controlAccessRight
 579 cn: User-Change-Password
 580 displayName: Change Password
 581 rightsGuid: ab721a53-1e2f-11d0-9819-00aa0040529b
 582 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
 583 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
 584 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
 585 localizationDisplayId: 2
 586 validAccesses: 256
 587
 588 dn: CN=User-Force-Change-Password,CN=Extended-Rights,${CONFIGDN}
 589 objectClass: top
 590 objectClass: controlAccessRight
 591 cn: User-Force-Change-Password
 592 displayName: Reset Password
 593 rightsGuid: 00299570-246d-11d0-a768-00aa006e0529
 594 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
 595 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
 596 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
 597 localizationDisplayId: 3
 598 validAccesses: 256
 599
 600 dn: CN=Send-As,CN=Extended-Rights,${CONFIGDN}
 601 objectClass: top
 602 objectClass: controlAccessRight
 603 cn: Send-As
 604 displayName: Send As
 605 rightsGuid: ab721a54-1e2f-11d0-9819-00aa0040529b
 606 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
 607 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
 608 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
 609 localizationDisplayId: 4
 610 validAccesses: 256
 611
 612 dn: CN=Receive-As,CN=Extended-Rights,${CONFIGDN}
 613 objectClass: top
 614 objectClass: controlAccessRight
 615 cn: Receive-As
 616 displayName: Receive As
 617 rightsGuid: ab721a56-1e2f-11d0-9819-00aa0040529b
 618 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
 619 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
 620 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
 621 localizationDisplayId: 5
 622 validAccesses: 256
 623
 624 dn: CN=Send-To,CN=Extended-Rights,${CONFIGDN}
 625 objectClass: top
 626 objectClass: controlAccessRight
 627 cn: Send-To
 628 displayName: Send To
 629 rightsGuid: ab721a55-1e2f-11d0-9819-00aa0040529b
 630 appliesTo: bf967a9c-0de6-11d0-a285-00aa003049e2
 631 localizationDisplayId: 6
 632 validAccesses: 256
 633
 634 dn: CN=Domain-Password,CN=Extended-Rights,${CONFIGDN}
 635 objectClass: top
 636 objectClass: controlAccessRight
 637 cn: Domain-Password
 638 displayName: Domain Password & Lockout Policies
 639 rightsGuid: c7407360-20bf-11d0-a768-00aa006e0529
 640 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 641 appliesTo: 19195a5a-6da0-11d0-afd3-00c04fd930c9
 642 localizationDisplayId: 7
 643 validAccesses: 48
 644
 645 dn: CN=General-Information,CN=Extended-Rights,${CONFIGDN}
 646 objectClass: top
 647 objectClass: controlAccessRight
 648 cn: General-Information
 649 displayName: General Information
 650 rightsGuid: 59ba2f42-79a2-11d0-9020-00c04fc2d3cf
 651 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
 652 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
 653 localizationDisplayId: 8
 654 validAccesses: 48
 655
 656 dn: CN=User-Account-Restrictions,CN=Extended-Rights,${CONFIGDN}
 657 objectClass: top
 658 objectClass: controlAccessRight
 659 cn: User-Account-Restrictions
 660 displayName: Account Restrictions
 661 rightsGuid: 4c164200-20c0-11d0-a768-00aa006e0529
 662 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
 663 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
 664 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
 665 localizationDisplayId: 9
 666 validAccesses: 48
 667
 668 dn: CN=User-Logon,CN=Extended-Rights,${CONFIGDN}
 669 objectClass: top
 670 objectClass: controlAccessRight
 671 cn: User-Logon
 672 displayName: Logon Information
 673 rightsGuid: 5f202010-79a5-11d0-9020-00c04fc2d4cf
 674 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
 675 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
 676 localizationDisplayId: 10
 677 validAccesses: 48
 678
 679 dn: CN=Membership,CN=Extended-Rights,${CONFIGDN}
 680 objectClass: top
 681 objectClass: controlAccessRight
 682 cn: Membership
 683 displayName: Group Membership
 684 rightsGuid: bc0ac240-79a9-11d0-9020-00c04fc2d4cf
 685 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
 686 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
 687 localizationDisplayId: 11
 688 validAccesses: 48
 689
 690 dn: CN=Open-Address-Book,CN=Extended-Rights,${CONFIGDN}
 691 objectClass: top
 692 objectClass: controlAccessRight
 693 cn: Open-Address-Book
 694 displayName: Open Address List
 695 rightsGuid: a1990816-4298-11d1-ade2-00c04fd8d5cd
 696 appliesTo: 3e74f60f-3e73-11d1-a9c0-0000f80367c1
 697 localizationDisplayId: 21
 698 validAccesses: 256
 699
 700 dn: CN=Personal-Information,CN=Extended-Rights,${CONFIGDN}
 701 objectClass: top
 702 objectClass: controlAccessRight
 703 cn: Personal-Information
 704 displayName: Personal Information
 705 rightsGuid: 77B5B886-944A-11d1-AEBD-0000F80367C1
 706 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
 707 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
 708 appliesTo: 5cb41ed0-0e4c-11d0-a286-00aa003049e2
 709 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
 710 localizationDisplayId: 23
 711 validAccesses: 48
 712
 713 dn: CN=Email-Information,CN=Extended-Rights,${CONFIGDN}
 714 objectClass: top
 715 objectClass: controlAccessRight
 716 cn: Email-Information
 717 displayName: Phone and Mail Options
 718 rightsGuid: E45795B2-9455-11d1-AEBD-0000F80367C1
 719 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
 720 appliesTo: bf967a9c-0de6-11d0-a285-00aa003049e2
 721 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
 722 localizationDisplayId: 22
 723 validAccesses: 48
 724
 725 dn: CN=Web-Information,CN=Extended-Rights,${CONFIGDN}
 726 objectClass: top
 727 objectClass: controlAccessRight
 728 cn: Web-Information
 729 displayName: Web Information
 730 rightsGuid: E45795B3-9455-11d1-AEBD-0000F80367C1
 731 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
 732 appliesTo: 5cb41ed0-0e4c-11d0-a286-00aa003049e2
 733 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
 734 localizationDisplayId: 24
 735 validAccesses: 48
 736
 737 dn: CN=DS-Replication-Get-Changes,CN=Extended-Rights,${CONFIGDN}
 738 objectClass: top
 739 objectClass: controlAccessRight
 740 cn: DS-Replication-Get-Changes
 741 displayName: Replicating Directory Changes
 742 rightsGuid: 1131f6aa-9c07-11d1-f79f-00c04fc2dcd2
 743 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
 744 appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
 745 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 746 localizationDisplayId: 25
 747 validAccesses: 256
 748
 749 dn: CN=DS-Replication-Synchronize,CN=Extended-Rights,${CONFIGDN}
 750 objectClass: top
 751 objectClass: controlAccessRight
 752 cn: DS-Replication-Synchronize
 753 displayName: Replication Synchronization
 754 rightsGuid: 1131f6ab-9c07-11d1-f79f-00c04fc2dcd2
 755 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
 756 appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
 757 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 758 localizationDisplayId: 26
 759 validAccesses: 256
 760
 761 dn: CN=DS-Replication-Manage-Topology,CN=Extended-Rights,${CONFIGDN}
 762 objectClass: top
 763 objectClass: controlAccessRight
 764 cn: DS-Replication-Manage-Topology
 765 displayName: Manage Replication Topology
 766 rightsGuid: 1131f6ac-9c07-11d1-f79f-00c04fc2dcd2
 767 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
 768 appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
 769 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 770 localizationDisplayId: 27
 771 validAccesses: 256
 772
 773 dn: CN=Change-Schema-Master,CN=Extended-Rights,${CONFIGDN}
 774 objectClass: top
 775 objectClass: controlAccessRight
 776 cn: Change-Schema-Master
 777 displayName: Change Schema Master
 778 rightsGuid: e12b56b6-0a95-11d1-adbb-00c04fd8d5cd
 779 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
 780 localizationDisplayId: 28
 781 validAccesses: 256