1 ###############################
2 # Configuration Naming Context
3 ###############################
5 # Display specifiers are located in
6 # display-specifiers/DisplaySpecifiers-Win2k8R2.txt"
7 # This file is parsed during provision using the ms_display_specifiers.py
10 dn: CN=Deleted Objects
,$
{CONFIGDN
}
12 objectClass: container
13 description: Container for deleted objects
15 isCriticalSystemObject
: TRUE
16 systemFlags
: -1946157056
20 dn: CN=Extended
-Rights
,$
{CONFIGDN
}
22 objectClass: container
23 systemFlags
: -2147483648
25 dn: CN=Change
-Rid
-Master
,CN=Extended
-Rights
,$
{CONFIGDN
}
27 objectClass: controlAccessRight
28 displayName
: Change Rid Master
29 rightsGuid
: d58d5f36
-0a98
-11d1
-adbb
-00c04fd8d5cd
30 appliesTo
: 6617188d
-8f3c
-11d0
-afda
-00c04fd930c9
31 localizationDisplayId
: 29
34 dn: CN=Do
-Garbage
-Collection
,CN=Extended
-Rights
,$
{CONFIGDN
}
36 objectClass: controlAccessRight
37 displayName
: Do Garbage Collection
38 rightsGuid
: fec364e0
-0a98
-11d1
-adbb
-00c04fd8d5cd
39 appliesTo
: f0f8ffab
-1191-11d0
-a060
-00aa006c33ed
40 localizationDisplayId
: 31
43 dn: CN=Recalculate
-Hierarchy
,CN=Extended
-Rights
,$
{CONFIGDN
}
45 objectClass: controlAccessRight
46 displayName
: Recalculate Hierarchy
47 rightsGuid
: 0bc1554e
-0a99
-11d1
-adbb
-00c04fd8d5cd
48 appliesTo
: f0f8ffab
-1191-11d0
-a060
-00aa006c33ed
49 localizationDisplayId
: 32
52 dn: CN=Allocate
-Rids
,CN=Extended
-Rights
,$
{CONFIGDN
}
54 objectClass: controlAccessRight
55 displayName
: Allocate Rids
56 rightsGuid
: 1abd7cf8
-0a99
-11d1
-adbb
-00c04fd8d5cd
57 appliesTo
: f0f8ffab
-1191-11d0
-a060
-00aa006c33ed
58 localizationDisplayId
: 33
61 dn: CN=Change
-PDC
,CN=Extended
-Rights
,$
{CONFIGDN
}
63 objectClass: controlAccessRight
64 displayName
: Change PDC
65 rightsGuid
: bae50096
-4752-11d1
-9052-00c04fc2d4cf
66 appliesTo
: 19195a5b
-6da0
-11d0
-afd3
-00c04fd930c9
67 localizationDisplayId
: 34
70 dn: CN=Add-GUID
,CN=Extended
-Rights
,$
{CONFIGDN
}
72 objectClass: controlAccessRight
74 rightsGuid
: 440820ad
-65b4
-11d1
-a3da
-0000f875ae0d
75 appliesTo
: 19195a5b
-6da0
-11d0
-afd3
-00c04fd930c9
76 localizationDisplayId
: 35
79 dn: CN=Change
-Domain
-Master
,CN=Extended
-Rights
,$
{CONFIGDN
}
81 objectClass: controlAccessRight
82 displayName
: Change Domain Master
83 rightsGuid
: 014bf69c
-7b3b
-11d1
-85f6
-08002be74fab
84 appliesTo
: ef9e60e0
-56f7
-11d1
-a9c6
-0000f80367c1
85 localizationDisplayId
: 36
88 dn: CN=Public
-Information
,CN=Extended
-Rights
,$
{CONFIGDN
}
90 objectClass: controlAccessRight
91 displayName
: Public Information
92 rightsGuid
: e48d0154
-bcf8
-11d1
-8702-00c04fb96050
93 appliesTo
: 4828CC14
-1437-45bc
-9B07
-AD6F015E5F28
94 appliesTo
: bf967a86
-0de6
-11d0
-a285
-00aa003049e2
95 appliesTo
: bf967aba
-0de6
-11d0
-a285
-00aa003049e2
96 localizationDisplayId
: 37
99 dn: CN=msmq
-Receive
-Dead
-Letter
,CN=Extended
-Rights
,$
{CONFIGDN
}
101 objectClass: controlAccessRight
102 displayName
: Receive Dead Letter
103 rightsGuid
: 4b6e08c0
-df3c
-11d1
-9c86
-006008764d0e
104 appliesTo
: 9a0dc344
-c100
-11d1
-bbc5
-0080c76670c0
105 localizationDisplayId
: 38
108 dn: CN=msmq
-Peek
-Dead
-Letter
,CN=Extended
-Rights
,$
{CONFIGDN
}
110 objectClass: controlAccessRight
111 displayName
: Peek Dead Letter
112 rightsGuid
: 4b6e08c1
-df3c
-11d1
-9c86
-006008764d0e
113 appliesTo
: 9a0dc344
-c100
-11d1
-bbc5
-0080c76670c0
114 localizationDisplayId
: 39
117 dn: CN=msmq
-Receive
-computer
-Journal
,CN=Extended
-Rights
,$
{CONFIGDN
}
119 objectClass: controlAccessRight
120 displayName
: Receive Computer Journal
121 rightsGuid
: 4b6e08c2
-df3c
-11d1
-9c86
-006008764d0e
122 appliesTo
: 9a0dc344
-c100
-11d1
-bbc5
-0080c76670c0
123 localizationDisplayId
: 40
126 dn: CN=msmq
-Peek
-computer
-Journal
,CN=Extended
-Rights
,$
{CONFIGDN
}
128 objectClass: controlAccessRight
129 displayName
: Peek Computer Journal
130 rightsGuid
: 4b6e08c3
-df3c
-11d1
-9c86
-006008764d0e
131 appliesTo
: 9a0dc344
-c100
-11d1
-bbc5
-0080c76670c0
132 localizationDisplayId
: 41
135 dn: CN=msmq
-Receive
,CN=Extended
-Rights
,$
{CONFIGDN
}
137 objectClass: controlAccessRight
138 displayName
: Receive Message
139 rightsGuid
: 06bd3200
-df3e
-11d1
-9c86
-006008764d0e
140 appliesTo
: 9a0dc343
-c100
-11d1
-bbc5
-0080c76670c0
141 localizationDisplayId
: 42
144 dn: CN=msmq
-Peek
,CN=Extended
-Rights
,$
{CONFIGDN
}
146 objectClass: controlAccessRight
147 displayName
: Peek Message
148 rightsGuid
: 06bd3201
-df3e
-11d1
-9c86
-006008764d0e
149 appliesTo
: 9a0dc343
-c100
-11d1
-bbc5
-0080c76670c0
150 localizationDisplayId
: 43
153 dn: CN=msmq
-Send
,CN=Extended
-Rights
,$
{CONFIGDN
}
155 objectClass: controlAccessRight
156 displayName
: Send Message
157 rightsGuid
: 06bd3202
-df3e
-11d1
-9c86
-006008764d0e
158 appliesTo
: 46b27aac
-aafa
-4ffb
-b773
-e5bf621ee87b
159 appliesTo
: 9a0dc343
-c100
-11d1
-bbc5
-0080c76670c0
160 localizationDisplayId
: 44
163 dn: CN=msmq
-Receive
-journal
,CN=Extended
-Rights
,$
{CONFIGDN
}
165 objectClass: controlAccessRight
166 displayName
: Receive Journal
167 rightsGuid
: 06bd3203
-df3e
-11d1
-9c86
-006008764d0e
168 appliesTo
: 9a0dc343
-c100
-11d1
-bbc5
-0080c76670c0
169 localizationDisplayId
: 45
172 dn: CN=msmq
-Open
-Connector
,CN=Extended
-Rights
,$
{CONFIGDN
}
174 objectClass: controlAccessRight
175 displayName
: Open Connector Queue
176 rightsGuid
: b4e60130
-df3f
-11d1
-9c86
-006008764d0e
177 appliesTo
: bf967ab3
-0de6
-11d0
-a285
-00aa003049e2
178 localizationDisplayId
: 46
181 dn: CN=Apply
-Group
-Policy
,CN=Extended
-Rights
,$
{CONFIGDN
}
183 objectClass: controlAccessRight
184 displayName
: Apply Group Policy
185 rightsGuid
: edacfd8f
-ffb3
-11d1
-b41d
-00a0c968f939
186 appliesTo
: f30e3bc2
-9ff0
-11d1
-b603
-0000f80367c1
187 localizationDisplayId
: 47
190 dn: CN=RAS
-Information
,CN=Extended
-Rights
,$
{CONFIGDN
}
192 objectClass: controlAccessRight
193 displayName
: Remote Access Information
194 rightsGuid
: 037088f8
-0ae1
-11d2
-b422
-00a0c968f939
195 appliesTo
: 4828CC14
-1437-45bc
-9B07
-AD6F015E5F28
196 appliesTo
: bf967aba
-0de6
-11d0
-a285
-00aa003049e2
197 localizationDisplayId
: 48
200 dn: CN=DS
-Install
-Replica
,CN=Extended
-Rights
,$
{CONFIGDN
}
202 objectClass: controlAccessRight
203 displayName
: Add/Remove Replica In Domain
204 rightsGuid
: 9923a32a
-3607-11d2
-b9be
-0000f87a36b2
205 appliesTo
: 19195a5b
-6da0
-11d0
-afd3
-00c04fd930c9
206 localizationDisplayId
: 49
209 dn: CN=Change
-Infrastructure
-Master
,CN=Extended
-Rights
,$
{CONFIGDN
}
211 objectClass: controlAccessRight
212 displayName
: Change Infrastructure Master
213 rightsGuid
: cc17b1fb
-33d9
-11d2
-97d4
-00c04fd8d5cd
214 appliesTo
: 2df90d89
-009f
-11d2
-aa4c
-00c04fd7d83a
215 localizationDisplayId
: 50
218 dn: CN=Update
-Schema
-Cache
,CN=Extended
-Rights
,$
{CONFIGDN
}
220 objectClass: controlAccessRight
221 displayName
: Update Schema Cache
222 rightsGuid
: be2bb760
-7f46
-11d2
-b9ad
-00c04f79f805
223 appliesTo
: bf967a8f
-0de6
-11d0
-a285
-00aa003049e2
224 localizationDisplayId
: 51
227 dn: CN=Recalculate
-Security
-Inheritance
,CN=Extended
-Rights
,$
{CONFIGDN
}
229 objectClass: controlAccessRight
230 displayName
: Recalculate Security Inheritance
231 rightsGuid
: 62dd28a8
-7f46
-11d2
-b9ad
-00c04f79f805
232 appliesTo
: f0f8ffab
-1191-11d0
-a060
-00aa006c33ed
233 localizationDisplayId
: 52
236 dn: CN=DS
-Check
-Stale
-Phantoms
,CN=Extended
-Rights
,$
{CONFIGDN
}
238 objectClass: controlAccessRight
239 displayName
: Check Stale Phantoms
240 rightsGuid
: 69ae6200
-7f46
-11d2
-b9ad
-00c04f79f805
241 appliesTo
: f0f8ffab
-1191-11d0
-a060
-00aa006c33ed
242 localizationDisplayId
: 53
245 dn: CN=Certificate
-Enrollment
,CN=Extended
-Rights
,$
{CONFIGDN
}
247 objectClass: controlAccessRight
249 rightsGuid
: 0e10c968
-78fb
-11d2
-90d4
-00c04f79dc55
250 appliesTo
: e5209ca2
-3bba
-11d2
-90cc
-00c04fd91ab1
251 localizationDisplayId
: 54
254 dn: CN=Self
-Membership
,CN=Extended
-Rights
,$
{CONFIGDN
}
256 objectClass: controlAccessRight
257 displayName
: Add/Remove self as member
258 rightsGuid
: bf9679c0
-0de6
-11d0
-a285
-00aa003049e2
259 appliesTo
: bf967a9c
-0de6
-11d0
-a285
-00aa003049e2
260 localizationDisplayId
: 12
263 dn: CN=Validated
-DNS
-Host
-Name
,CN=Extended
-Rights
,$
{CONFIGDN
}
265 objectClass: controlAccessRight
266 displayName
: Validated write to DNS host name
267 rightsGuid
: 72e39547
-7b18
-11d1
-adef
-00c04fd8d5cd
268 appliesTo
: bf967a86
-0de6
-11d0
-a285
-00aa003049e2
269 localizationDisplayId
: 13
272 dn: CN=Validated
-SPN
,CN=Extended
-Rights
,$
{CONFIGDN
}
274 objectClass: controlAccessRight
275 displayName
: Validated write to service principal name
276 rightsGuid
: f3a64788
-5306-11d1
-a9c5
-0000f80367c1
277 appliesTo
: bf967a86
-0de6
-11d0
-a285
-00aa003049e2
278 localizationDisplayId
: 14
281 dn: CN=Generate
-RSoP
-Planning
,CN=Extended
-Rights
,$
{CONFIGDN
}
283 objectClass: controlAccessRight
284 displayName
: Generate Resultant Set of Policy
(Planning
)
285 rightsGuid
: b7b1b3dd
-ab09
-4242-9e30
-9980e5d322f7
286 appliesTo
: 19195a5b
-6da0
-11d0
-afd3
-00c04fd930c9
287 appliesTo
: bf967aa5
-0de6
-11d0
-a285
-00aa003049e2
288 localizationDisplayId
: 55
291 dn: CN=Refresh
-Group
-Cache
,CN=Extended
-Rights
,$
{CONFIGDN
}
293 objectClass: controlAccessRight
294 displayName
: Refresh Group Cache for Logons
295 rightsGuid
: 9432c620
-033c-4db7
-8b58
-14ef6d0bf477
296 appliesTo
: f0f8ffab
-1191-11d0
-a060
-00aa006c33ed
297 localizationDisplayId
: 56
300 dn: CN=SAM
-Enumerate
-Entire
-Domain
,CN=Extended
-Rights
,$
{CONFIGDN
}
302 objectClass: controlAccessRight
303 displayName
: Enumerate Entire SAM Domain
304 rightsGuid
: 91d67418
-0135-4acc
-8d79
-c08e857cfbec
305 appliesTo
: bf967aad
-0de6
-11d0
-a285
-00aa003049e2
306 localizationDisplayId
: 57
309 dn: CN=Generate
-RSoP
-Logging
,CN=Extended
-Rights
,$
{CONFIGDN
}
311 objectClass: controlAccessRight
312 displayName
: Generate Resultant Set of Policy
(Logging
)
313 rightsGuid
: b7b1b3de
-ab09
-4242-9e30
-9980e5d322f7
314 appliesTo
: 19195a5b
-6da0
-11d0
-afd3
-00c04fd930c9
315 appliesTo
: bf967aa5
-0de6
-11d0
-a285
-00aa003049e2
316 localizationDisplayId
: 58
319 dn: CN=Domain
-Other
-Parameters
,CN=Extended
-Rights
,$
{CONFIGDN
}
321 objectClass: controlAccessRight
322 displayName
: Other Domain Parameters
(for use by SAM
)
323 rightsGuid
: b8119fd0
-04f6
-4762-ab7a
-4986c76b3f9a
324 appliesTo
: 19195a5b
-6da0
-11d0
-afd3
-00c04fd930c9
325 localizationDisplayId
: 59
328 dn: CN=DNS
-Host
-Name
-Attributes
,CN=Extended
-Rights
,$
{CONFIGDN
}
330 objectClass: controlAccessRight
331 displayName
: DNS Host Name Attributes
332 rightsGuid
: 72e39547
-7b18
-11d1
-adef
-00c04fd8d5cd
333 appliesTo
: bf967a86
-0de6
-11d0
-a285
-00aa003049e2
334 localizationDisplayId
: 60
337 dn: CN=Create
-Inbound
-Forest
-Trust
,CN=Extended
-Rights
,$
{CONFIGDN
}
339 objectClass: controlAccessRight
340 displayName
: Create Inbound Forest Trust
341 rightsGuid
: e2a36dc9
-ae17
-47c3
-b58b
-be34c55ba633
342 appliesTo
: 19195a5b
-6da0
-11d0
-afd3
-00c04fd930c9
343 localizationDisplayId
: 61
346 dn: CN=DS
-Replication
-Get
-Changes
-All
,CN=Extended
-Rights
,$
{CONFIGDN
}
348 objectClass: controlAccessRight
349 displayName
: Replicating Directory Changes All
350 rightsGuid
: 1131f6ad
-9c07
-11d1
-f79f
-00c04fc2dcd2
351 appliesTo
: bf967a8f
-0de6
-11d0
-a285
-00aa003049e2
352 appliesTo
: bf967a87
-0de6
-11d0
-a285
-00aa003049e2
353 appliesTo
: 19195a5b
-6da0
-11d0
-afd3
-00c04fd930c9
354 localizationDisplayId
: 62
357 dn: CN=Migrate
-SID
-History
,CN=Extended
-Rights
,$
{CONFIGDN
}
359 objectClass: controlAccessRight
360 displayName
: Migrate SID History
361 rightsGuid
: BA33815A
-4F93
-4c76
-87F3
-57574BFF8109
362 appliesTo
: 19195a5b
-6da0
-11d0
-afd3
-00c04fd930c9
363 localizationDisplayId
: 63
366 dn: CN=Reanimate
-Tombstones
,CN=Extended
-Rights
,$
{CONFIGDN
}
368 objectClass: controlAccessRight
369 displayName
: Reanimate Tombstones
370 rightsGuid
: 45EC5156
-DB7E
-47bb
-B53F
-DBEB2D03C40F
371 appliesTo
: bf967a8f
-0de6
-11d0
-a285
-00aa003049e2
372 appliesTo
: bf967a87
-0de6
-11d0
-a285
-00aa003049e2
373 appliesTo
: 19195a5b
-6da0
-11d0
-afd3
-00c04fd930c9
374 localizationDisplayId
: 64
377 dn: CN=Allowed
-To
-Authenticate
,CN=Extended
-Rights
,$
{CONFIGDN
}
379 objectClass: controlAccessRight
380 displayName
: Allowed to Authenticate
381 rightsGuid
: 68B1D179
-0D15
-4d4f
-AB71
-46152E79A7BC
382 appliesTo
: 4828cc14
-1437-45bc
-9b07
-ad6f015e5f28
383 appliesTo
: bf967aba
-0de6
-11d0
-a285
-00aa003049e2
384 appliesTo
: bf967a86
-0de6
-11d0
-a285
-00aa003049e2
385 localizationDisplayId
: 65
388 dn: CN=DS
-Execute
-Intentions
-Script
,CN=Extended
-Rights
,$
{CONFIGDN
}
390 objectClass: controlAccessRight
391 displayName
: Execute Forest Update Script
392 rightsGuid
: 2f16c4a5
-b98e
-432
c-952a
-cb388ba33f2e
393 appliesTo
: ef9e60e0
-56f7
-11d1
-a9c6
-0000f80367c1
394 localizationDisplayId
: 66
397 dn: CN=DS
-Replication
-Monitor
-Topology
,CN=Extended
-Rights
,$
{CONFIGDN
}
399 objectClass: controlAccessRight
400 displayName
: Monitor Active Directory Replication
401 rightsGuid
: f98340fb
-7c5b
-4cdb
-a00b
-2ebdfa115a96
402 appliesTo
: bf967a8f
-0de6
-11d0
-a285
-00aa003049e2
403 appliesTo
: bf967a87
-0de6
-11d0
-a285
-00aa003049e2
404 appliesTo
: 19195a5b
-6da0
-11d0
-afd3
-00c04fd930c9
405 localizationDisplayId
: 67
408 dn: CN=Update
-Password
-Not
-Required
-Bit
,CN=Extended
-Rights
,$
{CONFIGDN
}
410 objectClass: controlAccessRight
411 displayName
: Update Password Not Required Bit
412 rightsGuid
: 280f369c
-67c7
-438e
-ae98
-1d46f3c6f541
413 appliesTo
: 19195a5b
-6da0
-11d0
-afd3
-00c04fd930c9
414 localizationDisplayId
: 68
417 dn: CN=Unexpire
-Password
,CN=Extended
-Rights
,$
{CONFIGDN
}
419 objectClass: controlAccessRight
420 displayName
: Unexpire Password
421 rightsGuid
: ccc2dc7d
-a6ad
-4a7a
-8846-c04e3cc53501
422 appliesTo
: 19195a5b
-6da0
-11d0
-afd3
-00c04fd930c9
423 localizationDisplayId
: 69
426 dn: CN=Enable
-Per
-User
-Reversibly
-Encrypted
-Password
,CN=Extended
-Rights
,$
{CONFIGDN
}
428 objectClass: controlAccessRight
429 displayName
: Enable Per User Reversibly Encrypted Password
430 rightsGuid
: 05c74c5e
-4deb
-43b4
-bd9f
-86664c2a7fd5
431 appliesTo
: 19195a5b
-6da0
-11d0
-afd3
-00c04fd930c9
432 localizationDisplayId
: 70
435 dn: CN=DS
-Query
-Self
-Quota
,CN=Extended
-Rights
,$
{CONFIGDN
}
437 objectClass: controlAccessRight
438 displayName
: Query Self Quota
439 rightsGuid
: 4ecc03fe
-ffc0
-4947-b630
-eb672a8a9dbc
440 appliesTo
: da83fc4f
-076f
-4aea
-b4dc
-8f4dab9b5993
441 localizationDisplayId
: 71
444 dn: CN=Domain
-Administer
-Server
,CN=Extended
-Rights
,$
{CONFIGDN
}
446 objectClass: controlAccessRight
447 displayName
: Domain Administer Server
448 rightsGuid
: ab721a52
-1e2f
-11d0
-9819-00aa0040529b
449 appliesTo
: bf967aad
-0de6
-11d0
-a285
-00aa003049e2
450 localizationDisplayId
: 1
453 dn: CN=User
-Change
-Password
,CN=Extended
-Rights
,$
{CONFIGDN
}
455 objectClass: controlAccessRight
456 displayName
: Change Password
457 rightsGuid
: ab721a53
-1e2f
-11d0
-9819-00aa0040529b
458 appliesTo
: 4828CC14
-1437-45bc
-9B07
-AD6F015E5F28
459 appliesTo
: bf967a86
-0de6
-11d0
-a285
-00aa003049e2
460 appliesTo
: bf967aba
-0de6
-11d0
-a285
-00aa003049e2
461 localizationDisplayId
: 2
464 dn: CN=User
-Force
-Change
-Password
,CN=Extended
-Rights
,$
{CONFIGDN
}
466 objectClass: controlAccessRight
467 displayName
: Reset Password
468 rightsGuid
: 00299570-246d
-11d0
-a768
-00aa006e0529
469 appliesTo
: 4828CC14
-1437-45bc
-9B07
-AD6F015E5F28
470 appliesTo
: bf967a86
-0de6
-11d0
-a285
-00aa003049e2
471 appliesTo
: bf967aba
-0de6
-11d0
-a285
-00aa003049e2
472 localizationDisplayId
: 3
475 dn: CN=Send
-As
,CN=Extended
-Rights
,$
{CONFIGDN
}
477 objectClass: controlAccessRight
479 rightsGuid
: ab721a54
-1e2f
-11d0
-9819-00aa0040529b
480 appliesTo
: 4828CC14
-1437-45bc
-9B07
-AD6F015E5F28
481 appliesTo
: bf967a86
-0de6
-11d0
-a285
-00aa003049e2
482 appliesTo
: bf967aba
-0de6
-11d0
-a285
-00aa003049e2
483 localizationDisplayId
: 4
486 dn: CN=Receive
-As
,CN=Extended
-Rights
,$
{CONFIGDN
}
488 objectClass: controlAccessRight
489 displayName
: Receive As
490 rightsGuid
: ab721a56
-1e2f
-11d0
-9819-00aa0040529b
491 appliesTo
: 4828CC14
-1437-45bc
-9B07
-AD6F015E5F28
492 appliesTo
: bf967a86
-0de6
-11d0
-a285
-00aa003049e2
493 appliesTo
: bf967aba
-0de6
-11d0
-a285
-00aa003049e2
494 localizationDisplayId
: 5
497 dn: CN=Send
-To
,CN=Extended
-Rights
,$
{CONFIGDN
}
499 objectClass: controlAccessRight
501 rightsGuid
: ab721a55
-1e2f
-11d0
-9819-00aa0040529b
502 appliesTo
: bf967a9c
-0de6
-11d0
-a285
-00aa003049e2
503 localizationDisplayId
: 6
506 dn: CN=Domain
-Password
,CN=Extended
-Rights
,$
{CONFIGDN
}
508 objectClass: controlAccessRight
509 displayName
: Domain Password
& Lockout Policies
510 rightsGuid
: c7407360
-20bf
-11d0
-a768
-00aa006e0529
511 appliesTo
: 19195a5b
-6da0
-11d0
-afd3
-00c04fd930c9
512 appliesTo
: 19195a5a
-6da0
-11d0
-afd3
-00c04fd930c9
513 localizationDisplayId
: 7
516 dn: CN=General
-Information
,CN=Extended
-Rights
,$
{CONFIGDN
}
518 objectClass: controlAccessRight
519 displayName
: General Information
520 rightsGuid
: 59ba2f42
-79a2
-11d0
-9020-00c04fc2d3cf
521 appliesTo
: 4828CC14
-1437-45bc
-9B07
-AD6F015E5F28
522 appliesTo
: bf967aba
-0de6
-11d0
-a285
-00aa003049e2
523 localizationDisplayId
: 8
526 dn: CN=User
-Account
-Restrictions
,CN=Extended
-Rights
,$
{CONFIGDN
}
528 objectClass: controlAccessRight
529 displayName
: Account Restrictions
530 rightsGuid
: 4c164200
-20c0
-11d0
-a768
-00aa006e0529
531 appliesTo
: 4828CC14
-1437-45bc
-9B07
-AD6F015E5F28
532 appliesTo
: bf967a86
-0de6
-11d0
-a285
-00aa003049e2
533 appliesTo
: bf967aba
-0de6
-11d0
-a285
-00aa003049e2
534 localizationDisplayId
: 9
537 dn: CN=User
-Logon
,CN=Extended
-Rights
,$
{CONFIGDN
}
539 objectClass: controlAccessRight
540 displayName
: Logon Information
541 rightsGuid
: 5f202010
-79a5
-11d0
-9020-00c04fc2d4cf
542 appliesTo
: 4828CC14
-1437-45bc
-9B07
-AD6F015E5F28
543 appliesTo
: bf967aba
-0de6
-11d0
-a285
-00aa003049e2
544 localizationDisplayId
: 10
547 dn: CN=Membership
,CN=Extended
-Rights
,$
{CONFIGDN
}
549 objectClass: controlAccessRight
550 displayName
: Group Membership
551 rightsGuid
: bc0ac240
-79a9
-11d0
-9020-00c04fc2d4cf
552 appliesTo
: 4828CC14
-1437-45bc
-9B07
-AD6F015E5F28
553 appliesTo
: bf967aba
-0de6
-11d0
-a285
-00aa003049e2
554 localizationDisplayId
: 11
557 dn: CN=Open
-Address
-Book
,CN=Extended
-Rights
,$
{CONFIGDN
}
559 objectClass: controlAccessRight
560 displayName
: Open Address List
561 rightsGuid
: a1990816
-4298-11d1
-ade2
-00c04fd8d5cd
562 appliesTo
: 3e74f60f
-3e73
-11d1
-a9c0
-0000f80367c1
563 localizationDisplayId
: 21
566 dn: CN=Personal
-Information
,CN=Extended
-Rights
,$
{CONFIGDN
}
568 objectClass: controlAccessRight
569 displayName
: Personal Information
570 rightsGuid
: 77B5B886
-944A
-11d1
-AEBD
-0000F80367C1
571 appliesTo
: 4828CC14
-1437-45bc
-9B07
-AD6F015E5F28
572 appliesTo
: bf967a86
-0de6
-11d0
-a285
-00aa003049e2
573 appliesTo
: 5cb41ed0
-0e4c
-11d0
-a286
-00aa003049e2
574 appliesTo
: bf967aba
-0de6
-11d0
-a285
-00aa003049e2
575 localizationDisplayId
: 23
578 dn: CN=Email
-Information
,CN=Extended
-Rights
,$
{CONFIGDN
}
580 objectClass: controlAccessRight
581 displayName
: Phone and
Mail Options
582 rightsGuid
: E45795B2
-9455-11d1
-AEBD
-0000F80367C1
583 appliesTo
: 4828CC14
-1437-45bc
-9B07
-AD6F015E5F28
584 appliesTo
: bf967a9c
-0de6
-11d0
-a285
-00aa003049e2
585 appliesTo
: bf967aba
-0de6
-11d0
-a285
-00aa003049e2
586 localizationDisplayId
: 22
589 dn: CN=Web
-Information
,CN=Extended
-Rights
,$
{CONFIGDN
}
591 objectClass: controlAccessRight
592 displayName
: Web Information
593 rightsGuid
: E45795B3
-9455-11d1
-AEBD
-0000F80367C1
594 appliesTo
: 4828CC14
-1437-45bc
-9B07
-AD6F015E5F28
595 appliesTo
: 5cb41ed0
-0e4c
-11d0
-a286
-00aa003049e2
596 appliesTo
: bf967aba
-0de6
-11d0
-a285
-00aa003049e2
597 localizationDisplayId
: 24
600 dn: CN=DS
-Replication
-Get
-Changes
,CN=Extended
-Rights
,$
{CONFIGDN
}
602 objectClass: controlAccessRight
603 displayName
: Replicating Directory Changes
604 rightsGuid
: 1131f6aa
-9c07
-11d1
-f79f
-00c04fc2dcd2
605 appliesTo
: bf967a8f
-0de6
-11d0
-a285
-00aa003049e2
606 appliesTo
: bf967a87
-0de6
-11d0
-a285
-00aa003049e2
607 appliesTo
: 19195a5b
-6da0
-11d0
-afd3
-00c04fd930c9
608 localizationDisplayId
: 25
611 dn: CN=DS
-Replication
-Synchronize
,CN=Extended
-Rights
,$
{CONFIGDN
}
613 objectClass: controlAccessRight
614 displayName
: Replication Synchronization
615 rightsGuid
: 1131f6ab
-9c07
-11d1
-f79f
-00c04fc2dcd2
616 appliesTo
: bf967a8f
-0de6
-11d0
-a285
-00aa003049e2
617 appliesTo
: bf967a87
-0de6
-11d0
-a285
-00aa003049e2
618 appliesTo
: 19195a5b
-6da0
-11d0
-afd3
-00c04fd930c9
619 localizationDisplayId
: 26
622 dn: CN=DS
-Replication
-Manage
-Topology
,CN=Extended
-Rights
,$
{CONFIGDN
}
624 objectClass: controlAccessRight
625 displayName
: Manage Replication Topology
626 rightsGuid
: 1131f6ac
-9c07
-11d1
-f79f
-00c04fc2dcd2
627 appliesTo
: bf967a8f
-0de6
-11d0
-a285
-00aa003049e2
628 appliesTo
: bf967a87
-0de6
-11d0
-a285
-00aa003049e2
629 appliesTo
: 19195a5b
-6da0
-11d0
-afd3
-00c04fd930c9
630 localizationDisplayId
: 27
633 dn: CN=Change
-Schema
-Master
,CN=Extended
-Rights
,$
{CONFIGDN
}
635 objectClass: controlAccessRight
636 displayName
: Change Schema Master
637 rightsGuid
: e12b56b6
-0a95
-11d1
-adbb
-00c04fd8d5cd
638 appliesTo
: bf967a8f
-0de6
-11d0
-a285
-00aa003049e2
639 localizationDisplayId
: 28
642 # End extended rights
646 dn: CN=ForestUpdates
,$
{CONFIGDN
}
648 objectClass: container
650 dn: CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
652 objectClass: container
654 dn: CN=6b800a81
-affe
-4a15
-8e41
-6ea0c7aa89e4
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
656 objectClass: container
658 dn: CN=dd07182c
-3174-4c95
-902a
-d64fee285bbf
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
660 objectClass: container
662 dn: CN=ffa5ee3c
-1405-476d
-b344
-7ad37d69cc25
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
664 objectClass: container
666 dn: CN=099f1587
-af70
-49c6
-ab6c
-7b3e82be0fe2
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
668 objectClass: container
670 dn: CN=94fdebc6
-8eeb
-4640-80de
-ec52b9ca17fa
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
672 objectClass: container
674 dn: CN=1a3f6b15
-55f2
-4752-ba27
-3d38a8232c4d
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
676 objectClass: container
678 dn: CN=dee21a17
-4e8e
-4f40
-a58c
-c0c009b685a7
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
680 objectClass: container
682 dn: CN=9bd98bb4
-4047-4de5
-bf4c
-7bd1d0f6d21d
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
684 objectClass: container
686 dn: CN=3fe80fbf
-bf39
-4773-b5bd
-3e5767a30d2d
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
688 objectClass: container
690 dn: CN=f02915e2
-9141-4f73
-b8e7
-2804662782da
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
692 objectClass: container
694 dn: CN=39902c52
-ef24
-4b4b
-8033-2c9dfdd173a2
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
696 objectClass: container
698 dn: CN=20bf09b4
-6d0b
-4cd1
-9c09
-4231edf1209b
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
700 objectClass: container
702 dn: CN=94f238bb
-831c-11d6
-977b
-00c04f613221
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
704 objectClass: container
706 dn: CN=94f238bc
-831c-11d6
-977b
-00c04f613221
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
708 objectClass: container
710 dn: CN=94f238bd
-831c-11d6
-977b
-00c04f613221
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
712 objectClass: container
714 dn: CN=94f238be
-831c-11d6
-977b
-00c04f613221
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
716 objectClass: container
718 dn: CN=94f238bf
-831c-11d6
-977b
-00c04f613221
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
720 objectClass: container
722 dn: CN=94f238c0
-831c-11d6
-977b
-00c04f613221
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
724 objectClass: container
726 dn: CN=eda27b47
-e610
-11d6
-9793-00c04f613221
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
728 objectClass: container
730 dn: CN=eda27b48
-e610
-11d6
-9793-00c04f613221
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
732 objectClass: container
734 dn: CN=eda27b49
-e610
-11d6
-9793-00c04f613221
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
736 objectClass: container
738 dn: CN=eda27b4a
-e610
-11d6
-9793-00c04f613221
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
740 objectClass: container
742 dn: CN=26d9c510
-e61a
-11d6
-9793-00c04f613221
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
744 objectClass: container
746 dn: CN=26d9c511
-e61a
-11d6
-9793-00c04f613221
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
748 objectClass: container
750 dn: CN=3467dae5
-dedd
-4648-9066-f48ac186b20a
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
752 objectClass: container
754 dn: CN=33b7ee33
-1386-47cf
-baa1
-b03e06473253
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
756 objectClass: container
758 dn: CN=e9ee8d55
-c2fb
-4723-a333
-c80ff4dfbf45
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
760 objectClass: container
762 dn: CN=ccfae63a
-7fb5
-454c-83ab
-0e8e1214974e
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
764 objectClass: container
766 dn: CN=ad3c7909
-b154
-4c16
-8bf7
-2c3a7870bb3d
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
768 objectClass: container
770 dn: CN=26ad2ebf
-f8f5
-44a4
-b97c
-a616c8b9d09a
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
772 objectClass: container
774 dn: CN=4444c516
-f43a
-4c12
-9c4b
-b5c064941d61
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
776 objectClass: container
778 dn: CN=436a1a4b
-f41a
-46e6
-ac86
-427720ef29f3
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
780 objectClass: container
782 dn: CN=b2b7fb45
-f50d
-41bc
-a73b
-8f580f3b636a
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
784 objectClass: container
786 dn: CN=1bdf6366
-c3db
-4d0b
-b8cb
-f99ba9bce20f
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
788 objectClass: container
790 dn: CN=63c0f51a
-067c-4640-8a4f
-044fb33f1049
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
792 objectClass: container
794 dn: CN=dae441c0
-366e-482e
-98d9
-60a99a1898cc
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
796 objectClass: container
798 dn: CN=7dd09ca6
-f0d6
-43bf
-b7f8
-ef348f435617
,CN=Operations
,CN=ForestUpdates
,$
{CONFIGDN
}
800 objectClass: container
802 dn: CN=Windows2003Update
,CN=ForestUpdates
,$
{CONFIGDN
}
804 objectClass: container
809 dn: CN=LostAndFoundConfig
,$
{CONFIGDN
}
811 objectClass: lostAndFound
812 systemFlags
: -2147483648
814 dn: CN=NTDS Quotas
,$
{CONFIGDN
}
816 objectClass: msDS
-QuotaContainer
817 description: Quota specifications container
818 msDS
-TombstoneQuotaFactor
: 100
819 systemFlags
: -2147483648
823 dn: CN=Partitions
,$
{CONFIGDN
}
825 objectClass: crossRefContainer
826 systemFlags
: -2147483648
827 msDS
-Behavior
-Version
: $
{FOREST_FUNCTIONALALITY
}
828 showInAdvancedViewOnly
: TRUE
830 # Partitions for DNS are missing since we don't support AD DNS
832 dn: CN=Enterprise Configuration
,CN=Partitions
,$
{CONFIGDN
}
834 objectClass: crossRef
835 dnsRoot
: $
{DNSDOMAIN
}
839 dn: CN=Enterprise Schema
,CN=Partitions
,$
{CONFIGDN
}
841 objectClass: crossRef
842 dnsRoot
: $
{DNSDOMAIN
}
846 dn: CN=$
{DOMAIN
},CN=Partitions
,$
{CONFIGDN
}
848 objectClass: crossRef
849 dnsRoot
: $
{DNSDOMAIN
}
851 nETBIOSName
: $
{DOMAIN
}
857 dn: CN=Physical Locations
,$
{CONFIGDN
}
859 objectClass: locality
860 objectClass: physicalLocation
861 l: Physical Locations tree root
863 # Schema located in "ad-schema/*.txt"
867 dn: CN=Services
,$
{CONFIGDN
}
869 objectClass: container
870 systemFlags
: -2147483648
872 dn: CN=MsmqServices
,CN=Services
,$
{CONFIGDN
}
874 objectClass: mSMQEnterpriseSettings
877 dn: CN=NetServices
,CN=Services
,$
{CONFIGDN
}
879 objectClass: container
881 dn: CN=Public Key Services
,CN=Services
,$
{CONFIGDN
}
883 objectClass: container
885 dn: CN=Certificate Templates
,CN=Public Key Services
,CN=Services
,$
{CONFIGDN
}
887 objectClass: container
889 dn: CN=Enrollment Services
,CN=Public Key Services
,CN=Services
,$
{CONFIGDN
}
891 objectClass: container
893 dn: CN=Certification Authorities
,CN=Public Key Services
,CN=Services
,$
{CONFIGDN
}
895 objectClass: container
897 dn: CN=AIA
,CN=Public Key Services
,CN=Services
,$
{CONFIGDN
}
899 objectClass: container
901 dn: CN=CDP
,CN=Public Key Services
,CN=Services
,$
{CONFIGDN
}
903 objectClass: container
905 dn: CN=KRA
,CN=Public Key Services
,CN=Services
,$
{CONFIGDN
}
907 objectClass: container
909 dn: CN=OID
,CN=Public Key Services
,CN=Services
,$
{CONFIGDN
}
911 objectClass: msPKI
-Enterprise
-Oid
913 dn: CN=RRAS
,CN=Services
,$
{CONFIGDN
}
915 objectClass: container
917 dn: CN=IdentityDictionary
,CN=RRAS
,CN=Services
,$
{CONFIGDN
}
919 objectClass: rRASAdministrationDictionary
920 msRRASVendorAttributeEntry
: 311:6:803:RADIUS Accouting
921 msRRASVendorAttributeEntry
: 311:6:802:RADIUS Authentication
922 msRRASVendorAttributeEntry
: 311:6:801:NT Domain Authentication
923 msRRASVendorAttributeEntry
: 311:6:714:Point to point parallel connection
924 msRRASVendorAttributeEntry
: 311:6:713:Point to point serial connection
925 msRRASVendorAttributeEntry
: 311:6:712:Generic LAN
926 msRRASVendorAttributeEntry
: 311:6:711:Generic WAN
927 msRRASVendorAttributeEntry
: 311:6:710:X
.25
928 msRRASVendorAttributeEntry
: 311:6:709:IrDA
929 msRRASVendorAttributeEntry
: 311:6:708:Switched
56
930 msRRASVendorAttributeEntry
: 311:6:707:SONET
931 msRRASVendorAttributeEntry
: 311:6:706:Modem
932 msRRASVendorAttributeEntry
: 311:6:705:ISDN
933 msRRASVendorAttributeEntry
: 311:6:704:ATM
934 msRRASVendorAttributeEntry
: 311:6:703:Frame Relay
935 msRRASVendorAttributeEntry
: 311:6:702:Layer
2 Tunneling Protocol
936 msRRASVendorAttributeEntry
: 311:6:701:Point
-to
-Point Tunneling Protocol
937 msRRASVendorAttributeEntry
: 311:6:604:Network Address and Port Translation
938 msRRASVendorAttributeEntry
: 311:6:603:Demand Dial Router
939 msRRASVendorAttributeEntry
: 311:6:602:Remote Access Server
940 msRRASVendorAttributeEntry
: 311:6:601:LAN
-to
- LAN Router
941 msRRASVendorAttributeEntry
: 311:6:503:AppleTalk Forwarding Enabled
942 msRRASVendorAttributeEntry
: 311:6:502:IPX Forwarding Enabled
943 msRRASVendorAttributeEntry
: 311:6:501:IP Forwarding Enabled
944 msRRASVendorAttributeEntry
: 311:5:2:IPX SAP
945 msRRASVendorAttributeEntry
: 311::5:1:IPX RIP
946 msRRASVendorAttributeEntry
: 311:1:10:IGMP Only
947 msRRASVendorAttributeEntry
: 311:0:13:OSPF
948 msRRASVendorAttributeEntry
: 311:0:8:RIP
(version
1 or
2)
950 dn: CN=Windows NT
,CN=Services
,$
{CONFIGDN
}
952 objectClass: container
954 dn: CN=Directory Service
,CN=Windows NT
,CN=Services
,$
{CONFIGDN
}
956 objectClass: nTDSService
957 msDS
-Other
-Settings
: DisableVLVSupport
=0
958 msDS
-Other
-Settings
: DynamicObjectMinTTL
=900
959 msDS
-Other
-Settings
: DynamicObjectDefaultTTL
=86400
960 sPNMappings
: host
=alerter
,appmgmt
,cisvc
,clipsrv
,browser
,dhcp
,dnscache
,replicator
,eventlog
,eventsystem
,policyagent
,oakley
,dmserver
,dns
,mcsvc
,fax
,msiserver
,ias
,messenger
,netlogon
,netman
,netdde
,netddedsm
,nmagent
,plugplay
,protectedstorage
,rasman
,rpclocator
,rpc
,rpcss
,remoteaccess
,rsvp
,samss
,scardsvr
,scesrv
,seclogon
,scm
,dcom
,cifs
,spooler
,snmp
,schedule
,tapisrv
,trksvr
,trkwks
,ups
,time
,wins
,www
,http
,w3svc
,iisadmin
,msdtc
961 tombstoneLifetime
: 180
963 dn: CN=Query
-Policies
,CN=Directory Service
,CN=Windows NT
,CN=Services
,$
{CONFIGDN
}
965 objectClass: container
967 dn: CN=Default Query Policy
,CN=Query
-Policies
,CN=Directory Service
,CN=Windows NT
,CN=Services
,$
{CONFIGDN
}
969 objectClass: queryPolicy
970 lDAPAdminLimits
: MaxValRange
=1500
971 lDAPAdminLimits
: MaxReceiveBuffer
=10485760
972 lDAPAdminLimits
: MaxDatagramRecv
=4096
973 lDAPAdminLimits
: MaxPoolThreads
=4
974 lDAPAdminLimits
: MaxResultSetSize
=262144
975 lDAPAdminLimits
: MaxTempTableSize
=10000
976 lDAPAdminLimits
: MaxQueryDuration
=120
977 lDAPAdminLimits
: MaxPageSize
=1000
978 lDAPAdminLimits
: MaxNotificationPerConn
=5
979 lDAPAdminLimits
: MaxActiveQueries
=20
980 lDAPAdminLimits
: MaxConnIdleTime
=900
981 lDAPAdminLimits
: InitRecvTimeout
=120
982 lDAPAdminLimits
: MaxConnections
=5000
988 dn: CN=Sites
,$
{CONFIGDN
}
990 objectClass: sitesContainer
991 systemFlags
: -2113929216
993 dn: CN=$
{DEFAULTSITE
},CN=Sites
,$
{CONFIGDN
}
996 systemFlags
: 1107296256
998 dn: CN=Licensing Site Settings
,CN=$
{DEFAULTSITE
},CN=Sites
,$
{CONFIGDN
}
1000 objectClass: applicationSiteSettings
1001 objectClass: licensingSiteSettings
1003 dn: CN=Inter
-Site Transports
,CN=Sites
,$
{CONFIGDN
}
1005 objectClass: interSiteTransportContainer
1006 systemFlags
: -2147483648
1008 dn: CN=IP
,CN=Inter
-Site Transports
,CN=Sites
,$
{CONFIGDN
}
1010 objectClass: interSiteTransport
1011 transportAddressAttribute
: dNSHostName
1012 transportDLLName
: ismip.dll
1013 systemFlags
: -2147483648
1015 dn: CN=DEFAULTIPSITELINK
,CN=IP
,CN=Inter
-Site Transports
,CN=Sites
,$
{CONFIGDN
}
1017 objectClass: siteLink
1020 siteList
: CN=$
{DEFAULTSITE
},CN=Sites
,$
{CONFIGDN
}
1021 systemFlags
: 1073741824
1023 dn: CN=SMTP
,CN=Inter
-Site Transports
,CN=Sites
,$
{CONFIGDN
}
1025 objectClass: interSiteTransport
1026 transportAddressAttribute
: mailAddress
1027 transportDLLName
: ismsmtp.dll
1030 dn: CN=NTDS Site Settings
,CN=$
{DEFAULTSITE
},CN=Sites
,$
{CONFIGDN
}
1032 objectClass: applicationSiteSettings
1033 objectClass: nTDSSiteSettings
1035 dn: CN=Servers
,CN=$
{DEFAULTSITE
},CN=Sites
,$
{CONFIGDN
}
1037 objectClass: serversContainer
1038 systemFlags
: 33554432
1040 dn: CN=Subnets
,CN=Sites
,$
{CONFIGDN
}
1042 objectClass: subnetContainer
1043 systemFlags
: -1073741824