source4/setup/provision_privilege.ldif

   1 # default privileges - more can be added via LSA or ldbedit
   2 dn: @ATTRIBUTES
   3 comment: CASE_INSENSITIVE
   4 privilege: CASE_INSENSITIVE
   5
   6 dn: @INDEXLIST
   7 @IDXATTR: objectSid
   8 @IDXATTR: privilege
   9
  10 dn: sid=S-1-5-32-544
  11 objectClass: privilege
  12 comment: Administrators
  13 objectSid: S-1-5-32-544
  14 privilege: SeSecurityPrivilege
  15 privilege: SeBackupPrivilege
  16 privilege: SeRestorePrivilege
  17 privilege: SeSystemtimePrivilege
  18 privilege: SeShutdownPrivilege
  19 privilege: SeRemoteShutdownPrivilege
  20 privilege: SeTakeOwnershipPrivilege
  21 privilege: SeDebugPrivilege
  22 privilege: SeSystemEnvironmentPrivilege
  23 privilege: SeSystemProfilePrivilege
  24 privilege: SeProfileSingleProcessPrivilege
  25 privilege: SeIncreaseBasePriorityPrivilege
  26 privilege: SeLoadDriverPrivilege
  27 privilege: SeCreatePagefilePrivilege
  28 privilege: SeIncreaseQuotaPrivilege
  29 privilege: SeChangeNotifyPrivilege
  30 privilege: SeUndockPrivilege
  31 privilege: SeManageVolumePrivilege
  32 privilege: SeImpersonatePrivilege
  33 privilege: SeCreateGlobalPrivilege
  34 privilege: SeEnableDelegationPrivilege
  35 privilege: SeInteractiveLogonRight
  36 privilege: SeNetworkLogonRight
  37 privilege: SeRemoteInteractiveLogonRight
  38
  39 dn: sid=S-1-5-32-550
  40 objectClass: privilege
  41 comment: Print Operators
  42 objectSid: S-1-5-32-550
  43 privilege: SeLoadDriverPrivilege
  44 privilege: SeShutdownPrivilege
  45 privilege: SeInteractiveLogonRight
  46
  47 dn: sid=S-1-5-32-551
  48 objectClass: privilege
  49 comment: Backup Operators
  50 objectSid: S-1-5-32-551
  51 privilege: SeBackupPrivilege
  52 privilege: SeRestorePrivilege
  53 privilege: SeShutdownPrivilege
  54 privilege: SeInteractiveLogonRight
  55
  56 dn: sid=S-1-5-32-549
  57 objectClass: privilege
  58 comment: Server Operators
  59 objectSid: S-1-5-32-549
  60 privilege: SeBackupPrivilege
  61 privilege: SeSystemtimePrivilege
  62 privilege: SeRemoteShutdownPrivilege
  63 privilege: SeRestorePrivilege
  64 privilege: SeShutdownPrivilege
  65 privilege: SeInteractiveLogonRight
  66
  67 dn: sid=S-1-5-32-548
  68 objectClass: privilege
  69 comment: Account Operators
  70 objectSid: S-1-5-32-548
  71 privilege: SeInteractiveLogonRight
  72
  73 dn: sid=S-1-5-32-554
  74 objectClass: privilege
  75 comment: Pre-Windows 2000 Compatible Access
  76 objectSid: S-1-5-32-554
  77 privilege: SeRemoteInteractiveLogonRight
  78 privilege: SeChangeNotifyPrivilege