VERSION: Disable git snapshots for the 4.0.16 release.
[Samba.git] / source4 / setup / provision_configuration.ldif
blob42de84afade446537286ad473edc26c159bf97fe
1 ###############################
2 # Configuration Naming Context
3 ###############################
5 # Display specifiers are located in
6 # display-specifiers/DisplaySpecifiers-Win2k8R2.txt"
7 # This file is parsed during provision using the ms_display_specifiers.py
8 # script.
10 dn: CN=Deleted Objects,${CONFIGDN}
11 objectClass: top
12 objectClass: container
13 description: Container for deleted objects
14 isDeleted: TRUE
15 isCriticalSystemObject: TRUE
16 systemFlags: -1946157056
18 # Extended rights
20 dn: CN=Extended-Rights,${CONFIGDN}
21 objectClass: top
22 objectClass: container
23 systemFlags: -2147483648
24 nTSecurityDescriptor:: ${EXTENDEDRIGHTS_DESCRIPTOR}
26 dn: CN=Change-Rid-Master,CN=Extended-Rights,${CONFIGDN}
27 objectClass: top
28 objectClass: controlAccessRight
29 displayName: Change Rid Master
30 rightsGuid: d58d5f36-0a98-11d1-adbb-00c04fd8d5cd
31 appliesTo: 6617188d-8f3c-11d0-afda-00c04fd930c9
32 localizationDisplayId: 29
33 validAccesses: 256
35 dn: CN=Do-Garbage-Collection,CN=Extended-Rights,${CONFIGDN}
36 objectClass: top
37 objectClass: controlAccessRight
38 displayName: Do Garbage Collection
39 rightsGuid: fec364e0-0a98-11d1-adbb-00c04fd8d5cd
40 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
41 localizationDisplayId: 31
42 validAccesses: 256
44 dn: CN=Recalculate-Hierarchy,CN=Extended-Rights,${CONFIGDN}
45 objectClass: top
46 objectClass: controlAccessRight
47 displayName: Recalculate Hierarchy
48 rightsGuid: 0bc1554e-0a99-11d1-adbb-00c04fd8d5cd
49 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
50 localizationDisplayId: 32
51 validAccesses: 256
53 dn: CN=Allocate-Rids,CN=Extended-Rights,${CONFIGDN}
54 objectClass: top
55 objectClass: controlAccessRight
56 displayName: Allocate Rids
57 rightsGuid: 1abd7cf8-0a99-11d1-adbb-00c04fd8d5cd
58 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
59 localizationDisplayId: 33
60 validAccesses: 256
62 dn: CN=Change-PDC,CN=Extended-Rights,${CONFIGDN}
63 objectClass: top
64 objectClass: controlAccessRight
65 displayName: Change PDC
66 rightsGuid: bae50096-4752-11d1-9052-00c04fc2d4cf
67 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
68 localizationDisplayId: 34
69 validAccesses: 256
71 dn: CN=Add-GUID,CN=Extended-Rights,${CONFIGDN}
72 objectClass: top
73 objectClass: controlAccessRight
74 displayName: Add GUID
75 rightsGuid: 440820ad-65b4-11d1-a3da-0000f875ae0d
76 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
77 localizationDisplayId: 35
78 validAccesses: 256
80 dn: CN=Change-Domain-Master,CN=Extended-Rights,${CONFIGDN}
81 objectClass: top
82 objectClass: controlAccessRight
83 displayName: Change Domain Master
84 rightsGuid: 014bf69c-7b3b-11d1-85f6-08002be74fab
85 appliesTo: ef9e60e0-56f7-11d1-a9c6-0000f80367c1
86 localizationDisplayId: 36
87 validAccesses: 256
89 dn: CN=Public-Information,CN=Extended-Rights,${CONFIGDN}
90 objectClass: top
91 objectClass: controlAccessRight
92 displayName: Public Information
93 rightsGuid: e48d0154-bcf8-11d1-8702-00c04fb96050
94 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
95 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
96 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
97 localizationDisplayId: 37
98 validAccesses: 48
100 dn: CN=msmq-Receive-Dead-Letter,CN=Extended-Rights,${CONFIGDN}
101 objectClass: top
102 objectClass: controlAccessRight
103 displayName: Receive Dead Letter
104 rightsGuid: 4b6e08c0-df3c-11d1-9c86-006008764d0e
105 appliesTo: 9a0dc344-c100-11d1-bbc5-0080c76670c0
106 localizationDisplayId: 38
107 validAccesses: 256
109 dn: CN=msmq-Peek-Dead-Letter,CN=Extended-Rights,${CONFIGDN}
110 objectClass: top
111 objectClass: controlAccessRight
112 displayName: Peek Dead Letter
113 rightsGuid: 4b6e08c1-df3c-11d1-9c86-006008764d0e
114 appliesTo: 9a0dc344-c100-11d1-bbc5-0080c76670c0
115 localizationDisplayId: 39
116 validAccesses: 256
118 dn: CN=msmq-Receive-computer-Journal,CN=Extended-Rights,${CONFIGDN}
119 objectClass: top
120 objectClass: controlAccessRight
121 displayName: Receive Computer Journal
122 rightsGuid: 4b6e08c2-df3c-11d1-9c86-006008764d0e
123 appliesTo: 9a0dc344-c100-11d1-bbc5-0080c76670c0
124 localizationDisplayId: 40
125 validAccesses: 256
127 dn: CN=msmq-Peek-computer-Journal,CN=Extended-Rights,${CONFIGDN}
128 objectClass: top
129 objectClass: controlAccessRight
130 displayName: Peek Computer Journal
131 rightsGuid: 4b6e08c3-df3c-11d1-9c86-006008764d0e
132 appliesTo: 9a0dc344-c100-11d1-bbc5-0080c76670c0
133 localizationDisplayId: 41
134 validAccesses: 256
136 dn: CN=msmq-Receive,CN=Extended-Rights,${CONFIGDN}
137 objectClass: top
138 objectClass: controlAccessRight
139 displayName: Receive Message
140 rightsGuid: 06bd3200-df3e-11d1-9c86-006008764d0e
141 appliesTo: 9a0dc343-c100-11d1-bbc5-0080c76670c0
142 localizationDisplayId: 42
143 validAccesses: 256
145 dn: CN=msmq-Peek,CN=Extended-Rights,${CONFIGDN}
146 objectClass: top
147 objectClass: controlAccessRight
148 displayName: Peek Message
149 rightsGuid: 06bd3201-df3e-11d1-9c86-006008764d0e
150 appliesTo: 9a0dc343-c100-11d1-bbc5-0080c76670c0
151 localizationDisplayId: 43
152 validAccesses: 256
154 dn: CN=msmq-Send,CN=Extended-Rights,${CONFIGDN}
155 objectClass: top
156 objectClass: controlAccessRight
157 displayName: Send Message
158 rightsGuid: 06bd3202-df3e-11d1-9c86-006008764d0e
159 appliesTo: 46b27aac-aafa-4ffb-b773-e5bf621ee87b
160 appliesTo: 9a0dc343-c100-11d1-bbc5-0080c76670c0
161 localizationDisplayId: 44
162 validAccesses: 256
164 dn: CN=msmq-Receive-journal,CN=Extended-Rights,${CONFIGDN}
165 objectClass: top
166 objectClass: controlAccessRight
167 displayName: Receive Journal
168 rightsGuid: 06bd3203-df3e-11d1-9c86-006008764d0e
169 appliesTo: 9a0dc343-c100-11d1-bbc5-0080c76670c0
170 localizationDisplayId: 45
171 validAccesses: 256
173 dn: CN=msmq-Open-Connector,CN=Extended-Rights,${CONFIGDN}
174 objectClass: top
175 objectClass: controlAccessRight
176 displayName: Open Connector Queue
177 rightsGuid: b4e60130-df3f-11d1-9c86-006008764d0e
178 appliesTo: bf967ab3-0de6-11d0-a285-00aa003049e2
179 localizationDisplayId: 46
180 validAccesses: 256
182 dn: CN=Apply-Group-Policy,CN=Extended-Rights,${CONFIGDN}
183 objectClass: top
184 objectClass: controlAccessRight
185 displayName: Apply Group Policy
186 rightsGuid: edacfd8f-ffb3-11d1-b41d-00a0c968f939
187 appliesTo: f30e3bc2-9ff0-11d1-b603-0000f80367c1
188 localizationDisplayId: 47
189 validAccesses: 256
191 dn: CN=RAS-Information,CN=Extended-Rights,${CONFIGDN}
192 objectClass: top
193 objectClass: controlAccessRight
194 displayName: Remote Access Information
195 rightsGuid: 037088f8-0ae1-11d2-b422-00a0c968f939
196 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
197 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
198 localizationDisplayId: 48
199 validAccesses: 48
201 dn: CN=DS-Install-Replica,CN=Extended-Rights,${CONFIGDN}
202 objectClass: top
203 objectClass: controlAccessRight
204 displayName: Add/Remove Replica In Domain
205 rightsGuid: 9923a32a-3607-11d2-b9be-0000f87a36b2
206 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
207 localizationDisplayId: 49
208 validAccesses: 256
210 dn: CN=Change-Infrastructure-Master,CN=Extended-Rights,${CONFIGDN}
211 objectClass: top
212 objectClass: controlAccessRight
213 displayName: Change Infrastructure Master
214 rightsGuid: cc17b1fb-33d9-11d2-97d4-00c04fd8d5cd
215 appliesTo: 2df90d89-009f-11d2-aa4c-00c04fd7d83a
216 localizationDisplayId: 50
217 validAccesses: 256
219 dn: CN=Update-Schema-Cache,CN=Extended-Rights,${CONFIGDN}
220 objectClass: top
221 objectClass: controlAccessRight
222 displayName: Update Schema Cache
223 rightsGuid: be2bb760-7f46-11d2-b9ad-00c04f79f805
224 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
225 localizationDisplayId: 51
226 validAccesses: 256
228 dn: CN=Recalculate-Security-Inheritance,CN=Extended-Rights,${CONFIGDN}
229 objectClass: top
230 objectClass: controlAccessRight
231 displayName: Recalculate Security Inheritance
232 rightsGuid: 62dd28a8-7f46-11d2-b9ad-00c04f79f805
233 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
234 localizationDisplayId: 52
235 validAccesses: 256
237 dn: CN=DS-Check-Stale-Phantoms,CN=Extended-Rights,${CONFIGDN}
238 objectClass: top
239 objectClass: controlAccessRight
240 displayName: Check Stale Phantoms
241 rightsGuid: 69ae6200-7f46-11d2-b9ad-00c04f79f805
242 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
243 localizationDisplayId: 53
244 validAccesses: 256
246 dn: CN=Certificate-Enrollment,CN=Extended-Rights,${CONFIGDN}
247 objectClass: top
248 objectClass: controlAccessRight
249 displayName: Enroll
250 rightsGuid: 0e10c968-78fb-11d2-90d4-00c04f79dc55
251 appliesTo: e5209ca2-3bba-11d2-90cc-00c04fd91ab1
252 localizationDisplayId: 54
253 validAccesses: 256
255 dn: CN=Self-Membership,CN=Extended-Rights,${CONFIGDN}
256 objectClass: top
257 objectClass: controlAccessRight
258 displayName: Add/Remove self as member
259 rightsGuid: bf9679c0-0de6-11d0-a285-00aa003049e2
260 appliesTo: bf967a9c-0de6-11d0-a285-00aa003049e2
261 localizationDisplayId: 12
262 validAccesses: 8
264 dn: CN=Validated-DNS-Host-Name,CN=Extended-Rights,${CONFIGDN}
265 objectClass: top
266 objectClass: controlAccessRight
267 displayName: Validated write to DNS host name
268 rightsGuid: 72e39547-7b18-11d1-adef-00c04fd8d5cd
269 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
270 localizationDisplayId: 13
271 validAccesses: 8
273 dn: CN=Validated-SPN,CN=Extended-Rights,${CONFIGDN}
274 objectClass: top
275 objectClass: controlAccessRight
276 displayName: Validated write to service principal name
277 rightsGuid: f3a64788-5306-11d1-a9c5-0000f80367c1
278 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
279 localizationDisplayId: 14
280 validAccesses: 8
282 dn: CN=Generate-RSoP-Planning,CN=Extended-Rights,${CONFIGDN}
283 objectClass: top
284 objectClass: controlAccessRight
285 displayName: Generate Resultant Set of Policy (Planning)
286 rightsGuid: b7b1b3dd-ab09-4242-9e30-9980e5d322f7
287 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
288 appliesTo: bf967aa5-0de6-11d0-a285-00aa003049e2
289 localizationDisplayId: 55
290 validAccesses: 256
292 dn: CN=Refresh-Group-Cache,CN=Extended-Rights,${CONFIGDN}
293 objectClass: top
294 objectClass: controlAccessRight
295 displayName: Refresh Group Cache for Logons
296 rightsGuid: 9432c620-033c-4db7-8b58-14ef6d0bf477
297 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
298 localizationDisplayId: 56
299 validAccesses: 256
301 dn: CN=SAM-Enumerate-Entire-Domain,CN=Extended-Rights,${CONFIGDN}
302 objectClass: top
303 objectClass: controlAccessRight
304 displayName: Enumerate Entire SAM Domain
305 rightsGuid: 91d67418-0135-4acc-8d79-c08e857cfbec
306 appliesTo: bf967aad-0de6-11d0-a285-00aa003049e2
307 localizationDisplayId: 57
308 validAccesses: 256
310 dn: CN=Generate-RSoP-Logging,CN=Extended-Rights,${CONFIGDN}
311 objectClass: top
312 objectClass: controlAccessRight
313 displayName: Generate Resultant Set of Policy (Logging)
314 rightsGuid: b7b1b3de-ab09-4242-9e30-9980e5d322f7
315 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
316 appliesTo: bf967aa5-0de6-11d0-a285-00aa003049e2
317 localizationDisplayId: 58
318 validAccesses: 256
320 dn: CN=Domain-Other-Parameters,CN=Extended-Rights,${CONFIGDN}
321 objectClass: top
322 objectClass: controlAccessRight
323 displayName: Other Domain Parameters (for use by SAM)
324 rightsGuid: b8119fd0-04f6-4762-ab7a-4986c76b3f9a
325 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
326 localizationDisplayId: 59
327 validAccesses: 48
329 dn: CN=DNS-Host-Name-Attributes,CN=Extended-Rights,${CONFIGDN}
330 objectClass: top
331 objectClass: controlAccessRight
332 displayName: DNS Host Name Attributes
333 rightsGuid: 72e39547-7b18-11d1-adef-00c04fd8d5cd
334 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
335 localizationDisplayId: 60
336 validAccesses: 48
338 dn: CN=Create-Inbound-Forest-Trust,CN=Extended-Rights,${CONFIGDN}
339 objectClass: top
340 objectClass: controlAccessRight
341 displayName: Create Inbound Forest Trust
342 rightsGuid: e2a36dc9-ae17-47c3-b58b-be34c55ba633
343 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
344 localizationDisplayId: 61
345 validAccesses: 256
347 dn: CN=DS-Replication-Get-Changes-All,CN=Extended-Rights,${CONFIGDN}
348 objectClass: top
349 objectClass: controlAccessRight
350 displayName: Replicating Directory Changes All
351 rightsGuid: 1131f6ad-9c07-11d1-f79f-00c04fc2dcd2
352 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
353 appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
354 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
355 localizationDisplayId: 62
356 validAccesses: 256
358 dn: CN=Migrate-SID-History,CN=Extended-Rights,${CONFIGDN}
359 objectClass: top
360 objectClass: controlAccessRight
361 displayName: Migrate SID History
362 rightsGuid: BA33815A-4F93-4c76-87F3-57574BFF8109
363 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
364 localizationDisplayId: 63
365 validAccesses: 256
367 dn: CN=Reanimate-Tombstones,CN=Extended-Rights,${CONFIGDN}
368 objectClass: top
369 objectClass: controlAccessRight
370 displayName: Reanimate Tombstones
371 rightsGuid: 45EC5156-DB7E-47bb-B53F-DBEB2D03C40F
372 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
373 appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
374 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
375 localizationDisplayId: 64
376 validAccesses: 256
378 dn: CN=Allowed-To-Authenticate,CN=Extended-Rights,${CONFIGDN}
379 objectClass: top
380 objectClass: controlAccessRight
381 displayName: Allowed to Authenticate
382 rightsGuid: 68B1D179-0D15-4d4f-AB71-46152E79A7BC
383 appliesTo: 4828cc14-1437-45bc-9b07-ad6f015e5f28
384 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
385 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
386 localizationDisplayId: 65
387 validAccesses: 256
389 dn: CN=DS-Execute-Intentions-Script,CN=Extended-Rights,${CONFIGDN}
390 objectClass: top
391 objectClass: controlAccessRight
392 displayName: Execute Forest Update Script
393 rightsGuid: 2f16c4a5-b98e-432c-952a-cb388ba33f2e
394 appliesTo: ef9e60e0-56f7-11d1-a9c6-0000f80367c1
395 localizationDisplayId: 66
396 validAccesses: 256
398 dn: CN=DS-Replication-Monitor-Topology,CN=Extended-Rights,${CONFIGDN}
399 objectClass: top
400 objectClass: controlAccessRight
401 displayName: Monitor Active Directory Replication
402 rightsGuid: f98340fb-7c5b-4cdb-a00b-2ebdfa115a96
403 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
404 appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
405 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
406 localizationDisplayId: 67
407 validAccesses: 256
409 dn: CN=Update-Password-Not-Required-Bit,CN=Extended-Rights,${CONFIGDN}
410 objectClass: top
411 objectClass: controlAccessRight
412 displayName: Update Password Not Required Bit
413 rightsGuid: 280f369c-67c7-438e-ae98-1d46f3c6f541
414 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
415 localizationDisplayId: 68
416 validAccesses: 256
418 dn: CN=Unexpire-Password,CN=Extended-Rights,${CONFIGDN}
419 objectClass: top
420 objectClass: controlAccessRight
421 displayName: Unexpire Password
422 rightsGuid: ccc2dc7d-a6ad-4a7a-8846-c04e3cc53501
423 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
424 localizationDisplayId: 69
425 validAccesses: 256
427 dn: CN=Enable-Per-User-Reversibly-Encrypted-Password,CN=Extended-Rights,${CONFIGDN}
428 objectClass: top
429 objectClass: controlAccessRight
430 displayName: Enable Per User Reversibly Encrypted Password
431 rightsGuid: 05c74c5e-4deb-43b4-bd9f-86664c2a7fd5
432 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
433 localizationDisplayId: 70
434 validAccesses: 256
436 dn: CN=DS-Query-Self-Quota,CN=Extended-Rights,${CONFIGDN}
437 objectClass: top
438 objectClass: controlAccessRight
439 displayName: Query Self Quota
440 rightsGuid: 4ecc03fe-ffc0-4947-b630-eb672a8a9dbc
441 appliesTo: da83fc4f-076f-4aea-b4dc-8f4dab9b5993
442 localizationDisplayId: 71
443 validAccesses: 256
445 dn: CN=Domain-Administer-Server,CN=Extended-Rights,${CONFIGDN}
446 objectClass: top
447 objectClass: controlAccessRight
448 displayName: Domain Administer Server
449 rightsGuid: ab721a52-1e2f-11d0-9819-00aa0040529b
450 appliesTo: bf967aad-0de6-11d0-a285-00aa003049e2
451 localizationDisplayId: 1
452 validAccesses: 256
454 dn: CN=User-Change-Password,CN=Extended-Rights,${CONFIGDN}
455 objectClass: top
456 objectClass: controlAccessRight
457 displayName: Change Password
458 rightsGuid: ab721a53-1e2f-11d0-9819-00aa0040529b
459 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
460 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
461 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
462 localizationDisplayId: 2
463 validAccesses: 256
465 dn: CN=User-Force-Change-Password,CN=Extended-Rights,${CONFIGDN}
466 objectClass: top
467 objectClass: controlAccessRight
468 displayName: Reset Password
469 rightsGuid: 00299570-246d-11d0-a768-00aa006e0529
470 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
471 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
472 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
473 localizationDisplayId: 3
474 validAccesses: 256
476 dn: CN=Send-As,CN=Extended-Rights,${CONFIGDN}
477 objectClass: top
478 objectClass: controlAccessRight
479 displayName: Send As
480 rightsGuid: ab721a54-1e2f-11d0-9819-00aa0040529b
481 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
482 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
483 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
484 localizationDisplayId: 4
485 validAccesses: 256
487 dn: CN=Receive-As,CN=Extended-Rights,${CONFIGDN}
488 objectClass: top
489 objectClass: controlAccessRight
490 displayName: Receive As
491 rightsGuid: ab721a56-1e2f-11d0-9819-00aa0040529b
492 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
493 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
494 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
495 localizationDisplayId: 5
496 validAccesses: 256
498 dn: CN=Send-To,CN=Extended-Rights,${CONFIGDN}
499 objectClass: top
500 objectClass: controlAccessRight
501 displayName: Send To
502 rightsGuid: ab721a55-1e2f-11d0-9819-00aa0040529b
503 appliesTo: bf967a9c-0de6-11d0-a285-00aa003049e2
504 localizationDisplayId: 6
505 validAccesses: 256
507 dn: CN=Domain-Password,CN=Extended-Rights,${CONFIGDN}
508 objectClass: top
509 objectClass: controlAccessRight
510 displayName: Domain Password & Lockout Policies
511 rightsGuid: c7407360-20bf-11d0-a768-00aa006e0529
512 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
513 appliesTo: 19195a5a-6da0-11d0-afd3-00c04fd930c9
514 localizationDisplayId: 7
515 validAccesses: 48
517 dn: CN=General-Information,CN=Extended-Rights,${CONFIGDN}
518 objectClass: top
519 objectClass: controlAccessRight
520 displayName: General Information
521 rightsGuid: 59ba2f42-79a2-11d0-9020-00c04fc2d3cf
522 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
523 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
524 localizationDisplayId: 8
525 validAccesses: 48
527 dn: CN=User-Account-Restrictions,CN=Extended-Rights,${CONFIGDN}
528 objectClass: top
529 objectClass: controlAccessRight
530 displayName: Account Restrictions
531 rightsGuid: 4c164200-20c0-11d0-a768-00aa006e0529
532 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
533 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
534 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
535 localizationDisplayId: 9
536 validAccesses: 48
538 dn: CN=User-Logon,CN=Extended-Rights,${CONFIGDN}
539 objectClass: top
540 objectClass: controlAccessRight
541 displayName: Logon Information
542 rightsGuid: 5f202010-79a5-11d0-9020-00c04fc2d4cf
543 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
544 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
545 localizationDisplayId: 10
546 validAccesses: 48
548 dn: CN=Membership,CN=Extended-Rights,${CONFIGDN}
549 objectClass: top
550 objectClass: controlAccessRight
551 displayName: Group Membership
552 rightsGuid: bc0ac240-79a9-11d0-9020-00c04fc2d4cf
553 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
554 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
555 localizationDisplayId: 11
556 validAccesses: 48
558 dn: CN=Open-Address-Book,CN=Extended-Rights,${CONFIGDN}
559 objectClass: top
560 objectClass: controlAccessRight
561 displayName: Open Address List
562 rightsGuid: a1990816-4298-11d1-ade2-00c04fd8d5cd
563 appliesTo: 3e74f60f-3e73-11d1-a9c0-0000f80367c1
564 localizationDisplayId: 21
565 validAccesses: 256
567 dn: CN=Personal-Information,CN=Extended-Rights,${CONFIGDN}
568 objectClass: top
569 objectClass: controlAccessRight
570 displayName: Personal Information
571 rightsGuid: 77B5B886-944A-11d1-AEBD-0000F80367C1
572 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
573 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
574 appliesTo: 5cb41ed0-0e4c-11d0-a286-00aa003049e2
575 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
576 localizationDisplayId: 23
577 validAccesses: 48
579 dn: CN=Email-Information,CN=Extended-Rights,${CONFIGDN}
580 objectClass: top
581 objectClass: controlAccessRight
582 displayName: Phone and Mail Options
583 rightsGuid: E45795B2-9455-11d1-AEBD-0000F80367C1
584 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
585 appliesTo: bf967a9c-0de6-11d0-a285-00aa003049e2
586 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
587 localizationDisplayId: 22
588 validAccesses: 48
590 dn: CN=Web-Information,CN=Extended-Rights,${CONFIGDN}
591 objectClass: top
592 objectClass: controlAccessRight
593 displayName: Web Information
594 rightsGuid: E45795B3-9455-11d1-AEBD-0000F80367C1
595 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
596 appliesTo: 5cb41ed0-0e4c-11d0-a286-00aa003049e2
597 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
598 localizationDisplayId: 24
599 validAccesses: 48
601 dn: CN=DS-Replication-Get-Changes,CN=Extended-Rights,${CONFIGDN}
602 objectClass: top
603 objectClass: controlAccessRight
604 displayName: Replicating Directory Changes
605 rightsGuid: 1131f6aa-9c07-11d1-f79f-00c04fc2dcd2
606 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
607 appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
608 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
609 localizationDisplayId: 25
610 validAccesses: 256
612 dn: CN=DS-Replication-Synchronize,CN=Extended-Rights,${CONFIGDN}
613 objectClass: top
614 objectClass: controlAccessRight
615 displayName: Replication Synchronization
616 rightsGuid: 1131f6ab-9c07-11d1-f79f-00c04fc2dcd2
617 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
618 appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
619 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
620 localizationDisplayId: 26
621 validAccesses: 256
623 dn: CN=DS-Replication-Manage-Topology,CN=Extended-Rights,${CONFIGDN}
624 objectClass: top
625 objectClass: controlAccessRight
626 displayName: Manage Replication Topology
627 rightsGuid: 1131f6ac-9c07-11d1-f79f-00c04fc2dcd2
628 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
629 appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
630 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
631 localizationDisplayId: 27
632 validAccesses: 256
634 dn: CN=Change-Schema-Master,CN=Extended-Rights,${CONFIGDN}
635 objectClass: top
636 objectClass: controlAccessRight
637 displayName: Change Schema Master
638 rightsGuid: e12b56b6-0a95-11d1-adbb-00c04fd8d5cd
639 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
640 localizationDisplayId: 28
641 validAccesses: 256
643 dn: CN=DS-Replication-Get-Changes-In-Filtered-Set,CN=Extended-Rights,${CONFIGDN}
644 objectClass: top
645 objectClass: controlAccessRight
646 displayName: Replicating Directory Changes In Filtered Set
647 rightsGuid: 89e95b76-444d-4c62-991a-0facbeda640c
648 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
649 appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
650 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
651 localizationDisplayId: 77
652 validAccesses: 256
654 dn: CN=MS-TS-GatewayAccess,CN=Extended-Rights,${CONFIGDN}
655 objectClass: top
656 objectClass: controlAccessRight
657 displayName: MS-TS-GatewayAccess
658 rightsGuid: ffa6f046-ca4b-4feb-b40d-04dfee722543
659 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
660 localizationDisplayId: 74
661 validAccesses: 48
663 dn: CN=Private-Information,CN=Extended-Rights,${CONFIGDN}
664 objectClass: top
665 objectClass: controlAccessRight
666 displayName: Private Information
667 rightsGuid: 91e647de-d96f-4b70-9557-d63ff4f3ccd8
668 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
669 appliesTo: 4828cc14-1437-45bc-9b07-ad6f015e5f28
670 localizationDisplayId: 72
671 validAccesses: 48
673 dn: CN=Read-Only-Replication-Secret-Synchronization,CN=Extended-Rights,${CONFIGDN}
674 objectClass: top
675 objectClass: controlAccessRight
676 displayName: Read Only Replication Secret Synchronization
677 rightsGuid: 1131f6ae-9c07-11d1-f79f-00c04fc2dcd2
678 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
679 appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
680 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
681 localizationDisplayId: 73
682 validAccesses: 256
684 dn: CN=Reload-SSL-Certificate,CN=Extended-Rights,${CONFIGDN}
685 objectClass: top
686 objectClass: controlAccessRight
687 displayName: Reload SSL/TLS Certificate
688 rightsGuid: 1a60ea8d-58a6-4b20-bcdc-fb71eb8a9ff8
689 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
690 localizationDisplayId: 76
691 validAccesses: 256
693 dn: CN=Terminal-Server-License-Server,CN=Extended-Rights,${CONFIGDN}
694 objectClass: top
695 objectClass: controlAccessRight
696 displayName: Terminal Server License Server
697 rightsGuid: 5805bc62-bdc9-4428-a5e2-856a0f4c185e
698 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
699 appliesTo: 4828cc14-1437-45bc-9b07-ad6f015e5f28
700 localizationDisplayId: 75
701 validAccesses: 48
703 # End extended rights
705 # Forest updates
707 dn: CN=ForestUpdates,${CONFIGDN}
708 objectClass: top
709 objectClass: container
710 nTSecurityDescriptor:: ${FORESTUPDATES_DESCRIPTOR}
712 dn: CN=ActiveDirectoryRodcUpdate,CN=ForestUpdates,${CONFIGDN}
713 objectClass: top
714 objectClass: container
715 revision: 5
717 dn: CN=ActiveDirectoryUpdate,CN=ForestUpdates,${CONFIGDN}
718 objectClass: top
719 objectClass: container
720 revision: 5
722 dn: CN=Operations,CN=ForestUpdates,${CONFIGDN}
723 objectClass: top
724 objectClass: container
726 dn: CN=6b800a81-affe-4a15-8e41-6ea0c7aa89e4,CN=Operations,CN=ForestUpdates,${CONFIGDN}
727 objectClass: top
728 objectClass: container
730 dn: CN=dd07182c-3174-4c95-902a-d64fee285bbf,CN=Operations,CN=ForestUpdates,${CONFIGDN}
731 objectClass: top
732 objectClass: container
734 dn: CN=ffa5ee3c-1405-476d-b344-7ad37d69cc25,CN=Operations,CN=ForestUpdates,${CONFIGDN}
735 objectClass: top
736 objectClass: container
738 dn: CN=099f1587-af70-49c6-ab6c-7b3e82be0fe2,CN=Operations,CN=ForestUpdates,${CONFIGDN}
739 objectClass: top
740 objectClass: container
742 dn: CN=94fdebc6-8eeb-4640-80de-ec52b9ca17fa,CN=Operations,CN=ForestUpdates,${CONFIGDN}
743 objectClass: top
744 objectClass: container
745 objectVersion: 3
747 dn: CN=1a3f6b15-55f2-4752-ba27-3d38a8232c4d,CN=Operations,CN=ForestUpdates,${CONFIGDN}
748 objectClass: top
749 objectClass: container
751 dn: CN=dee21a17-4e8e-4f40-a58c-c0c009b685a7,CN=Operations,CN=ForestUpdates,${CONFIGDN}
752 objectClass: top
753 objectClass: container
755 dn: CN=9bd98bb4-4047-4de5-bf4c-7bd1d0f6d21d,CN=Operations,CN=ForestUpdates,${CONFIGDN}
756 objectClass: top
757 objectClass: container
759 dn: CN=3fe80fbf-bf39-4773-b5bd-3e5767a30d2d,CN=Operations,CN=ForestUpdates,${CONFIGDN}
760 objectClass: top
761 objectClass: container
763 dn: CN=f02915e2-9141-4f73-b8e7-2804662782da,CN=Operations,CN=ForestUpdates,${CONFIGDN}
764 objectClass: top
765 objectClass: container
767 dn: CN=39902c52-ef24-4b4b-8033-2c9dfdd173a2,CN=Operations,CN=ForestUpdates,${CONFIGDN}
768 objectClass: top
769 objectClass: container
771 dn: CN=20bf09b4-6d0b-4cd1-9c09-4231edf1209b,CN=Operations,CN=ForestUpdates,${CONFIGDN}
772 objectClass: top
773 objectClass: container
775 dn: CN=94f238bb-831c-11d6-977b-00c04f613221,CN=Operations,CN=ForestUpdates,${CONFIGDN}
776 objectClass: top
777 objectClass: container
779 dn: CN=94f238bc-831c-11d6-977b-00c04f613221,CN=Operations,CN=ForestUpdates,${CONFIGDN}
780 objectClass: top
781 objectClass: container
783 dn: CN=94f238bd-831c-11d6-977b-00c04f613221,CN=Operations,CN=ForestUpdates,${CONFIGDN}
784 objectClass: top
785 objectClass: container
787 dn: CN=94f238be-831c-11d6-977b-00c04f613221,CN=Operations,CN=ForestUpdates,${CONFIGDN}
788 objectClass: top
789 objectClass: container
791 dn: CN=94f238bf-831c-11d6-977b-00c04f613221,CN=Operations,CN=ForestUpdates,${CONFIGDN}
792 objectClass: top
793 objectClass: container
795 dn: CN=94f238c0-831c-11d6-977b-00c04f613221,CN=Operations,CN=ForestUpdates,${CONFIGDN}
796 objectClass: top
797 objectClass: container
799 dn: CN=eda27b47-e610-11d6-9793-00c04f613221,CN=Operations,CN=ForestUpdates,${CONFIGDN}
800 objectClass: top
801 objectClass: container
803 dn: CN=eda27b48-e610-11d6-9793-00c04f613221,CN=Operations,CN=ForestUpdates,${CONFIGDN}
804 objectClass: top
805 objectClass: container
807 dn: CN=eda27b49-e610-11d6-9793-00c04f613221,CN=Operations,CN=ForestUpdates,${CONFIGDN}
808 objectClass: top
809 objectClass: container
811 dn: CN=eda27b4a-e610-11d6-9793-00c04f613221,CN=Operations,CN=ForestUpdates,${CONFIGDN}
812 objectClass: top
813 objectClass: container
815 dn: CN=26d9c510-e61a-11d6-9793-00c04f613221,CN=Operations,CN=ForestUpdates,${CONFIGDN}
816 objectClass: top
817 objectClass: container
819 dn: CN=26d9c511-e61a-11d6-9793-00c04f613221,CN=Operations,CN=ForestUpdates,${CONFIGDN}
820 objectClass: top
821 objectClass: container
823 dn: CN=3467dae5-dedd-4648-9066-f48ac186b20a,CN=Operations,CN=ForestUpdates,${CONFIGDN}
824 objectClass: top
825 objectClass: container
827 dn: CN=33b7ee33-1386-47cf-baa1-b03e06473253,CN=Operations,CN=ForestUpdates,${CONFIGDN}
828 objectClass: top
829 objectClass: container
831 dn: CN=e9ee8d55-c2fb-4723-a333-c80ff4dfbf45,CN=Operations,CN=ForestUpdates,${CONFIGDN}
832 objectClass: top
833 objectClass: container
835 dn: CN=ccfae63a-7fb5-454c-83ab-0e8e1214974e,CN=Operations,CN=ForestUpdates,${CONFIGDN}
836 objectClass: top
837 objectClass: container
839 dn: CN=ad3c7909-b154-4c16-8bf7-2c3a7870bb3d,CN=Operations,CN=ForestUpdates,${CONFIGDN}
840 objectClass: top
841 objectClass: container
843 dn: CN=26ad2ebf-f8f5-44a4-b97c-a616c8b9d09a,CN=Operations,CN=ForestUpdates,${CONFIGDN}
844 objectClass: top
845 objectClass: container
847 dn: CN=4444c516-f43a-4c12-9c4b-b5c064941d61,CN=Operations,CN=ForestUpdates,${CONFIGDN}
848 objectClass: top
849 objectClass: container
851 dn: CN=436a1a4b-f41a-46e6-ac86-427720ef29f3,CN=Operations,CN=ForestUpdates,${CONFIGDN}
852 objectClass: top
853 objectClass: container
855 dn: CN=b2b7fb45-f50d-41bc-a73b-8f580f3b636a,CN=Operations,CN=ForestUpdates,${CONFIGDN}
856 objectClass: top
857 objectClass: container
859 dn: CN=1bdf6366-c3db-4d0b-b8cb-f99ba9bce20f,CN=Operations,CN=ForestUpdates,${CONFIGDN}
860 objectClass: top
861 objectClass: container
863 dn: CN=63c0f51a-067c-4640-8a4f-044fb33f1049,CN=Operations,CN=ForestUpdates,${CONFIGDN}
864 objectClass: top
865 objectClass: container
867 dn: CN=dae441c0-366e-482e-98d9-60a99a1898cc,CN=Operations,CN=ForestUpdates,${CONFIGDN}
868 objectClass: top
869 objectClass: container
871 dn: CN=7dd09ca6-f0d6-43bf-b7f8-ef348f435617,CN=Operations,CN=ForestUpdates,${CONFIGDN}
872 objectClass: top
873 objectClass: container
875 dn: CN=002fb291-0d00-4b0c-8c00-fe7f50ce6f8d,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
876 objectClass: top
877 objectClass: container
879 dn: CN=07e57d28-ad40-44fc-8334-8a0dc119b3f4,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
880 objectClass: top
881 objectClass: container
883 dn: CN=0fc5a978-0059-4b0a-9dc2-9896e8e389a1,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
884 objectClass: top
885 objectClass: container
887 dn: CN=10338d31-2423-4dff-b4b5-ef025144b01f,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
888 objectClass: top
889 objectClass: container
891 dn: CN=2a858903-5696-4364-b4e5-4cac027ca7a6,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
892 objectClass: top
893 objectClass: container
895 dn: CN=2b9e0609-6d75-498a-9727-c9fcc93f0e42,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
896 objectClass: top
897 objectClass: container
899 dn: CN=3b3adbdb-4485-4559-aed8-9811c4bf90e4,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
900 objectClass: top
901 objectClass: container
903 dn: CN=429a6334-1a00-4515-bf48-676deb55954a,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
904 objectClass: top
905 objectClass: container
907 dn: CN=4c022fd1-adab-4d84-a7f1-9580f03da856,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
908 objectClass: top
909 objectClass: container
911 dn: CN=4c0672a2-437c-4944-b953-5db8f111d665,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
912 objectClass: top
913 objectClass: container
915 dn: CN=4d753a29-26ac-4d1a-bc80-311f947e4f0a,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
916 objectClass: top
917 objectClass: container
919 dn: CN=56040c71-fe93-4037-8fe9-1a4d1a283009,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
920 objectClass: top
921 objectClass: container
923 dn: CN=560cf82d-9572-48a3-9024-6f2b56f1f866,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
924 objectClass: top
925 objectClass: container
927 dn: CN=613bd063-e8e9-4a62-8f4c-cda566f7eb6f,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
928 objectClass: top
929 objectClass: container
931 dn: CN=6eb8eaf9-3403-4ba5-8b4b-ce349a4680ad,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
932 objectClass: top
933 objectClass: container
935 dn: CN=6fd48655-1698-497a-ac8d-8267ce01c80b,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
936 objectClass: top
937 objectClass: container
939 dn: CN=782370ce-3d38-438d-8b0c-464220a3039d,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
940 objectClass: top
941 objectClass: container
943 dn: CN=8f86b825-c322-4101-adc4-579f12d445db,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
944 objectClass: top
945 objectClass: container
947 dn: CN=96541a16-910a-4b66-acde-720a0dff03c7,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
948 objectClass: top
949 objectClass: container
951 dn: CN=9fea28ff-387f-4d57-866d-3893c50f373f,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
952 objectClass: top
953 objectClass: container
955 dn: CN=a96e2ed5-7a7c-4d5c-9d5d-965eca0051da,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
956 objectClass: top
957 objectClass: container
959 dn: CN=abd97102-88dd-4013-a009-0e2c2f967ff6,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
960 objectClass: top
961 objectClass: container
963 dn: CN=bd3413c0-9559-469b-9f3d-51d7faabd81a,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
964 objectClass: top
965 objectClass: container
967 dn: CN=c03b1f37-c240-4910-93c8-1544a452b4b5,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
968 objectClass: top
969 objectClass: container
971 dn: CN=caa2bfad-0cca-483b-8d00-347f943292a8,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
972 objectClass: top
973 objectClass: container
975 dn: CN=d668ad1f-cedd-4565-ab02-9385926ce4f5,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
976 objectClass: top
977 objectClass: container
979 dn: CN=dcb3c95d-deb7-4c51-ad13-43a7d5d06fc7,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
980 objectClass: top
981 objectClass: container
983 dn: CN=ea08c04c-f474-4212-b19e-5e754f9210d4,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
984 objectClass: top
985 objectClass: container
987 dn: CN=ef010a1e-bd88-48c8-a7af-2affd250d77d,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
988 objectClass: top
989 objectClass: container
991 dn: CN=f814097b-3e3d-49ba-8a3a-092c25085f06,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
992 objectClass: top
993 objectClass: container
995 dn: CN=Windows2003Update,CN=ForestUpdates,${CONFIGDN}
996 objectClass: top
997 objectClass: container
998 revision: 10
1000 # End forest updates
1002 dn: CN=LostAndFoundConfig,${CONFIGDN}
1003 objectClass: top
1004 objectClass: lostAndFound
1005 systemFlags: -2147483648
1006 nTSecurityDescriptor:: ${LOSTANDFOUND_DESCRIPTOR}
1008 dn: CN=NTDS Quotas,${CONFIGDN}
1009 objectClass: top
1010 objectClass: msDS-QuotaContainer
1011 description: Quota specifications container
1012 isCriticalSystemObject: TRUE
1013 msDS-TombstoneQuotaFactor: 100
1014 systemFlags: -2147483648
1015 nTSecurityDescriptor:: ${NTDSQUOTAS_DESCRIPTOR}
1017 # Partitions
1019 dn: CN=Partitions,${CONFIGDN}
1020 objectClass: top
1021 objectClass: crossRefContainer
1022 systemFlags: -2147483648
1023 msDS-Behavior-Version: ${FOREST_FUNCTIONALITY}
1024 showInAdvancedViewOnly: TRUE
1025 nTSecurityDescriptor:: ${PARTITIONS_DESCRIPTOR}
1027 # Partitions for DNS are missing here, they are added from provision_dnszones.ldif
1029 dn: CN=Enterprise Configuration,CN=Partitions,${CONFIGDN}
1030 objectClass: top
1031 objectClass: crossRef
1032 dnsRoot: ${DNSDOMAIN}
1033 nCName: ${CONFIGDN}
1034 systemFlags: 1
1036 dn: CN=Enterprise Schema,CN=Partitions,${CONFIGDN}
1037 objectClass: top
1038 objectClass: crossRef
1039 dnsRoot: ${DNSDOMAIN}
1040 nCName: ${SCHEMADN}
1041 systemFlags: 1
1043 dn: CN=${DOMAIN},CN=Partitions,${CONFIGDN}
1044 objectClass: top
1045 objectClass: crossRef
1046 dnsRoot: ${DNSDOMAIN}
1047 msDS-Behavior-Version: ${DOMAIN_FUNCTIONALITY}
1048 nCName: ${DOMAINDN}
1049 nETBIOSName: ${DOMAIN}
1050 nTMixedDomain: 0
1051 systemFlags: 3
1053 # End partitions
1055 dn: CN=Physical Locations,${CONFIGDN}
1056 objectClass: top
1057 objectClass: locality
1058 objectClass: physicalLocation
1059 l: Physical Locations tree root
1060 nTSecurityDescriptor:: ${PHYSICALLOCATIONS_DESCRIPTOR}
1062 # Schema located in "ad-schema/*.txt"
1064 # Services
1066 dn: CN=Services,${CONFIGDN}
1067 objectClass: top
1068 objectClass: container
1069 systemFlags: -2147483648
1070 nTSecurityDescriptor:: ${SERVICES_DESCRIPTOR}
1072 dn: CN=MsmqServices,CN=Services,${CONFIGDN}
1073 objectClass: top
1074 objectClass: mSMQEnterpriseSettings
1075 mSMQVersion: 200
1077 dn: CN=NetServices,CN=Services,${CONFIGDN}
1078 objectClass: top
1079 objectClass: container
1081 dn: CN=Public Key Services,CN=Services,${CONFIGDN}
1082 objectClass: top
1083 objectClass: container
1085 dn: CN=Certificate Templates,CN=Public Key Services,CN=Services,${CONFIGDN}
1086 objectClass: top
1087 objectClass: container
1089 dn: CN=Enrollment Services,CN=Public Key Services,CN=Services,${CONFIGDN}
1090 objectClass: top
1091 objectClass: container
1093 dn: CN=Certification Authorities,CN=Public Key Services,CN=Services,${CONFIGDN}
1094 objectClass: top
1095 objectClass: container
1097 dn: CN=AIA,CN=Public Key Services,CN=Services,${CONFIGDN}
1098 objectClass: top
1099 objectClass: container
1101 dn: CN=CDP,CN=Public Key Services,CN=Services,${CONFIGDN}
1102 objectClass: top
1103 objectClass: container
1105 dn: CN=KRA,CN=Public Key Services,CN=Services,${CONFIGDN}
1106 objectClass: top
1107 objectClass: container
1109 dn: CN=OID,CN=Public Key Services,CN=Services,${CONFIGDN}
1110 objectClass: top
1111 objectClass: msPKI-Enterprise-Oid
1113 dn: CN=RRAS,CN=Services,${CONFIGDN}
1114 objectClass: top
1115 objectClass: container
1117 dn: CN=IdentityDictionary,CN=RRAS,CN=Services,${CONFIGDN}
1118 objectClass: top
1119 objectClass: rRASAdministrationDictionary
1120 msRRASVendorAttributeEntry: 311:6:803:RADIUS Accouting
1121 msRRASVendorAttributeEntry: 311:6:802:RADIUS Authentication
1122 msRRASVendorAttributeEntry: 311:6:801:NT Domain Authentication
1123 msRRASVendorAttributeEntry: 311:6:714:Point to point parallel connection
1124 msRRASVendorAttributeEntry: 311:6:713:Point to point serial connection
1125 msRRASVendorAttributeEntry: 311:6:712:Generic LAN
1126 msRRASVendorAttributeEntry: 311:6:711:Generic WAN
1127 msRRASVendorAttributeEntry: 311:6:710:X.25
1128 msRRASVendorAttributeEntry: 311:6:709:IrDA
1129 msRRASVendorAttributeEntry: 311:6:708:Switched 56
1130 msRRASVendorAttributeEntry: 311:6:707:SONET
1131 msRRASVendorAttributeEntry: 311:6:706:Modem
1132 msRRASVendorAttributeEntry: 311:6:705:ISDN
1133 msRRASVendorAttributeEntry: 311:6:704:ATM
1134 msRRASVendorAttributeEntry: 311:6:703:Frame Relay
1135 msRRASVendorAttributeEntry: 311:6:702:Layer 2 Tunneling Protocol
1136 msRRASVendorAttributeEntry: 311:6:701:Point-to-Point Tunneling Protocol
1137 msRRASVendorAttributeEntry: 311:6:604:Network Address and Port Translation
1138 msRRASVendorAttributeEntry: 311:6:603:Demand Dial Router
1139 msRRASVendorAttributeEntry: 311:6:602:Remote Access Server
1140 msRRASVendorAttributeEntry: 311:6:601:LAN-to- LAN Router
1141 msRRASVendorAttributeEntry: 311:6:503:AppleTalk Forwarding Enabled
1142 msRRASVendorAttributeEntry: 311:6:502:IPX Forwarding Enabled
1143 msRRASVendorAttributeEntry: 311:6:501:IP Forwarding Enabled
1144 msRRASVendorAttributeEntry: 311:5:2:IPX SAP
1145 msRRASVendorAttributeEntry: 311::5:1:IPX RIP
1146 msRRASVendorAttributeEntry: 311:1:10:IGMP Only
1147 msRRASVendorAttributeEntry: 311:0:13:OSPF
1148 msRRASVendorAttributeEntry: 311:0:8:RIP (version 1 or 2)
1150 dn: CN=Windows NT,CN=Services,${CONFIGDN}
1151 objectClass: top
1152 objectClass: container
1154 dn: CN=Directory Service,CN=Windows NT,CN=Services,${CONFIGDN}
1155 objectClass: top
1156 objectClass: nTDSService
1157 msDS-Other-Settings: DisableVLVSupport=0
1158 msDS-Other-Settings: DynamicObjectMinTTL=900
1159 msDS-Other-Settings: DynamicObjectDefaultTTL=86400
1160 sPNMappings: host=alerter,appmgmt,cisvc,clipsrv,browser,dhcp,dnscache,replicator,eventlog,eventsystem,policyagent,oakley,dmserver,dns,mcsvc,fax,msiserver,ias,messenger,netlogon,netman,netdde,netddedsm,nmagent,plugplay,protectedstorage,rasman,rpclocator,rpc,rpcss,remoteaccess,rsvp,samss,scardsvr,scesrv,seclogon,scm,dcom,cifs,spooler,snmp,schedule,tapisrv,trksvr,trkwks,ups,time,wins,www,http,w3svc,iisadmin,msdtc
1161 tombstoneLifetime: 180
1163 dn: CN=Optional Features,CN=Directory Service,CN=Windows NT,CN=Services,${CONFIGDN}
1164 objectClass: top
1165 objectClass: container
1167 dn: CN=Recycle Bin Feature,CN=Optional Features,CN=Directory Service,CN=Windows NT,CN=Services,${CONFIGDN}
1168 objectClass: top
1169 objectClass: msDS-OptionalFeature
1170 msDS-OptionalFeatureGUID: 766ddcd8-acd0-445e-f3b9-a7f9b6744f2a
1171 msDS-OptionalFeatureFlags: 1
1172 msDS-RequiredForestBehaviorVersion: 4
1173 systemFlags: -1946157056
1175 dn: CN=Query-Policies,CN=Directory Service,CN=Windows NT,CN=Services,${CONFIGDN}
1176 objectClass: top
1177 objectClass: container
1179 dn: CN=Default Query Policy,CN=Query-Policies,CN=Directory Service,CN=Windows NT,CN=Services,${CONFIGDN}
1180 objectClass: top
1181 objectClass: queryPolicy
1182 lDAPAdminLimits: MaxValRange=1500
1183 lDAPAdminLimits: MaxReceiveBuffer=10485760
1184 lDAPAdminLimits: MaxDatagramRecv=4096
1185 lDAPAdminLimits: MaxPoolThreads=4
1186 lDAPAdminLimits: MaxResultSetSize=262144
1187 lDAPAdminLimits: MaxTempTableSize=10000
1188 lDAPAdminLimits: MaxQueryDuration=120
1189 lDAPAdminLimits: MaxPageSize=1000
1190 lDAPAdminLimits: MaxNotificationPerConn=5
1191 lDAPAdminLimits: MaxActiveQueries=20
1192 lDAPAdminLimits: MaxConnIdleTime=900
1193 lDAPAdminLimits: InitRecvTimeout=120
1194 lDAPAdminLimits: MaxConnections=5000
1196 # End services
1198 # Sites
1200 dn: CN=Sites,${CONFIGDN}
1201 objectClass: top
1202 objectClass: sitesContainer
1203 systemFlags: -2113929216
1204 ntSecurityDescriptor:: ${SITES_DESCRIPTOR}
1206 dn: CN=${DEFAULTSITE},CN=Sites,${CONFIGDN}
1207 objectClass: top
1208 objectClass: site
1209 systemFlags: 1107296256
1211 dn: CN=Inter-Site Transports,CN=Sites,${CONFIGDN}
1212 objectClass: top
1213 objectClass: interSiteTransportContainer
1214 systemFlags: -2147483648
1216 dn: CN=IP,CN=Inter-Site Transports,CN=Sites,${CONFIGDN}
1217 objectClass: top
1218 objectClass: interSiteTransport
1219 transportAddressAttribute: dNSHostName
1220 transportDLLName: ismip.dll
1221 systemFlags: -2147483648
1223 dn: CN=DEFAULTIPSITELINK,CN=IP,CN=Inter-Site Transports,CN=Sites,${CONFIGDN}
1224 objectClass: top
1225 objectClass: siteLink
1226 cost: 100
1227 replInterval: 180
1228 showInAdvancedViewOnly: TRUE
1229 siteList: CN=${DEFAULTSITE},CN=Sites,${CONFIGDN}
1230 systemFlags: 1073741824
1232 dn: CN=SMTP,CN=Inter-Site Transports,CN=Sites,${CONFIGDN}
1233 objectClass: top
1234 objectClass: interSiteTransport
1235 transportAddressAttribute: mailAddress
1236 transportDLLName: ismsmtp.dll
1237 options: 1
1239 dn: CN=NTDS Site Settings,CN=${DEFAULTSITE},CN=Sites,${CONFIGDN}
1240 objectClass: top
1241 objectClass: applicationSiteSettings
1242 objectClass: nTDSSiteSettings
1243 schedule:: vAAAAAAAAAABAAAAAAAAABQAAAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQE=
1245 dn: CN=Servers,CN=${DEFAULTSITE},CN=Sites,${CONFIGDN}
1246 objectClass: top
1247 objectClass: serversContainer
1248 systemFlags: 33554432
1250 dn: CN=Subnets,CN=Sites,${CONFIGDN}
1251 objectClass: top
1252 objectClass: subnetContainer
1253 systemFlags: -2147483648