Merge branch 'master' of /home/tridge/samba/git/combined
[Samba/aatanasov.git] / source4 / setup / provision_configuration.ldif
blobac641da775344b12d1ef94a0689f1b700d3d2a80
1 ###############################
2 # Configuration Naming Context
3 ###############################
5 # Display specifiers are located in
6 # display-specifiers/DisplaySpecifiers-Win2k8R2.txt"
7 # This file is parsed during provision using the ms_display_specifiers.py
8 # script.
10 dn: CN=Deleted Objects,${CONFIGDN}
11 objectClass: top
12 objectClass: container
13 description: Container for deleted objects
14 isDeleted: TRUE
15 isCriticalSystemObject: TRUE
16 systemFlags: -1946157056
18 dn: CN=Extended-Rights,${CONFIGDN}
19 objectClass: top
20 objectClass: container
21 systemFlags: -2147483648
23 dn: CN=Change-Rid-Master,CN=Extended-Rights,${CONFIGDN}
24 objectClass: top
25 objectClass: controlAccessRight
26 displayName: Change Rid Master
27 rightsGuid: d58d5f36-0a98-11d1-adbb-00c04fd8d5cd
28 appliesTo: 6617188d-8f3c-11d0-afda-00c04fd930c9
29 localizationDisplayId: 29
30 validAccesses: 256
32 dn: CN=Do-Garbage-Collection,CN=Extended-Rights,${CONFIGDN}
33 objectClass: top
34 objectClass: controlAccessRight
35 displayName: Do Garbage Collection
36 rightsGuid: fec364e0-0a98-11d1-adbb-00c04fd8d5cd
37 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
38 localizationDisplayId: 31
39 validAccesses: 256
41 dn: CN=Recalculate-Hierarchy,CN=Extended-Rights,${CONFIGDN}
42 objectClass: top
43 objectClass: controlAccessRight
44 displayName: Recalculate Hierarchy
45 rightsGuid: 0bc1554e-0a99-11d1-adbb-00c04fd8d5cd
46 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
47 localizationDisplayId: 32
48 validAccesses: 256
50 dn: CN=Allocate-Rids,CN=Extended-Rights,${CONFIGDN}
51 objectClass: top
52 objectClass: controlAccessRight
53 displayName: Allocate Rids
54 rightsGuid: 1abd7cf8-0a99-11d1-adbb-00c04fd8d5cd
55 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
56 localizationDisplayId: 33
57 validAccesses: 256
59 dn: CN=Change-PDC,CN=Extended-Rights,${CONFIGDN}
60 objectClass: top
61 objectClass: controlAccessRight
62 displayName: Change PDC
63 rightsGuid: bae50096-4752-11d1-9052-00c04fc2d4cf
64 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
65 localizationDisplayId: 34
66 validAccesses: 256
68 dn: CN=Add-GUID,CN=Extended-Rights,${CONFIGDN}
69 objectClass: top
70 objectClass: controlAccessRight
71 displayName: Add GUID
72 rightsGuid: 440820ad-65b4-11d1-a3da-0000f875ae0d
73 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
74 localizationDisplayId: 35
75 validAccesses: 256
77 dn: CN=Change-Domain-Master,CN=Extended-Rights,${CONFIGDN}
78 objectClass: top
79 objectClass: controlAccessRight
80 displayName: Change Domain Master
81 rightsGuid: 014bf69c-7b3b-11d1-85f6-08002be74fab
82 appliesTo: ef9e60e0-56f7-11d1-a9c6-0000f80367c1
83 localizationDisplayId: 36
84 validAccesses: 256
86 dn: CN=Public-Information,CN=Extended-Rights,${CONFIGDN}
87 objectClass: top
88 objectClass: controlAccessRight
89 displayName: Public Information
90 rightsGuid: e48d0154-bcf8-11d1-8702-00c04fb96050
91 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
92 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
93 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
94 localizationDisplayId: 37
95 validAccesses: 48
97 dn: CN=msmq-Receive-Dead-Letter,CN=Extended-Rights,${CONFIGDN}
98 objectClass: top
99 objectClass: controlAccessRight
100 displayName: Receive Dead Letter
101 rightsGuid: 4b6e08c0-df3c-11d1-9c86-006008764d0e
102 appliesTo: 9a0dc344-c100-11d1-bbc5-0080c76670c0
103 localizationDisplayId: 38
104 validAccesses: 256
106 dn: CN=msmq-Peek-Dead-Letter,CN=Extended-Rights,${CONFIGDN}
107 objectClass: top
108 objectClass: controlAccessRight
109 displayName: Peek Dead Letter
110 rightsGuid: 4b6e08c1-df3c-11d1-9c86-006008764d0e
111 appliesTo: 9a0dc344-c100-11d1-bbc5-0080c76670c0
112 localizationDisplayId: 39
113 validAccesses: 256
115 dn: CN=msmq-Receive-computer-Journal,CN=Extended-Rights,${CONFIGDN}
116 objectClass: top
117 objectClass: controlAccessRight
118 displayName: Receive Computer Journal
119 rightsGuid: 4b6e08c2-df3c-11d1-9c86-006008764d0e
120 appliesTo: 9a0dc344-c100-11d1-bbc5-0080c76670c0
121 localizationDisplayId: 40
122 validAccesses: 256
124 dn: CN=msmq-Peek-computer-Journal,CN=Extended-Rights,${CONFIGDN}
125 objectClass: top
126 objectClass: controlAccessRight
127 displayName: Peek Computer Journal
128 rightsGuid: 4b6e08c3-df3c-11d1-9c86-006008764d0e
129 appliesTo: 9a0dc344-c100-11d1-bbc5-0080c76670c0
130 localizationDisplayId: 41
131 validAccesses: 256
133 dn: CN=msmq-Receive,CN=Extended-Rights,${CONFIGDN}
134 objectClass: top
135 objectClass: controlAccessRight
136 displayName: Receive Message
137 rightsGuid: 06bd3200-df3e-11d1-9c86-006008764d0e
138 appliesTo: 9a0dc343-c100-11d1-bbc5-0080c76670c0
139 localizationDisplayId: 42
140 validAccesses: 256
142 dn: CN=msmq-Peek,CN=Extended-Rights,${CONFIGDN}
143 objectClass: top
144 objectClass: controlAccessRight
145 displayName: Peek Message
146 rightsGuid: 06bd3201-df3e-11d1-9c86-006008764d0e
147 appliesTo: 9a0dc343-c100-11d1-bbc5-0080c76670c0
148 localizationDisplayId: 43
149 validAccesses: 256
151 dn: CN=msmq-Send,CN=Extended-Rights,${CONFIGDN}
152 objectClass: top
153 objectClass: controlAccessRight
154 displayName: Send Message
155 rightsGuid: 06bd3202-df3e-11d1-9c86-006008764d0e
156 appliesTo: 46b27aac-aafa-4ffb-b773-e5bf621ee87b
157 appliesTo: 9a0dc343-c100-11d1-bbc5-0080c76670c0
158 localizationDisplayId: 44
159 validAccesses: 256
161 dn: CN=msmq-Receive-journal,CN=Extended-Rights,${CONFIGDN}
162 objectClass: top
163 objectClass: controlAccessRight
164 displayName: Receive Journal
165 rightsGuid: 06bd3203-df3e-11d1-9c86-006008764d0e
166 appliesTo: 9a0dc343-c100-11d1-bbc5-0080c76670c0
167 localizationDisplayId: 45
168 validAccesses: 256
170 dn: CN=msmq-Open-Connector,CN=Extended-Rights,${CONFIGDN}
171 objectClass: top
172 objectClass: controlAccessRight
173 displayName: Open Connector Queue
174 rightsGuid: b4e60130-df3f-11d1-9c86-006008764d0e
175 appliesTo: bf967ab3-0de6-11d0-a285-00aa003049e2
176 localizationDisplayId: 46
177 validAccesses: 256
179 dn: CN=Apply-Group-Policy,CN=Extended-Rights,${CONFIGDN}
180 objectClass: top
181 objectClass: controlAccessRight
182 displayName: Apply Group Policy
183 rightsGuid: edacfd8f-ffb3-11d1-b41d-00a0c968f939
184 appliesTo: f30e3bc2-9ff0-11d1-b603-0000f80367c1
185 localizationDisplayId: 47
186 validAccesses: 256
188 dn: CN=RAS-Information,CN=Extended-Rights,${CONFIGDN}
189 objectClass: top
190 objectClass: controlAccessRight
191 displayName: Remote Access Information
192 rightsGuid: 037088f8-0ae1-11d2-b422-00a0c968f939
193 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
194 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
195 localizationDisplayId: 48
196 validAccesses: 48
198 dn: CN=DS-Install-Replica,CN=Extended-Rights,${CONFIGDN}
199 objectClass: top
200 objectClass: controlAccessRight
201 displayName: Add/Remove Replica In Domain
202 rightsGuid: 9923a32a-3607-11d2-b9be-0000f87a36b2
203 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
204 localizationDisplayId: 49
205 validAccesses: 256
207 dn: CN=Change-Infrastructure-Master,CN=Extended-Rights,${CONFIGDN}
208 objectClass: top
209 objectClass: controlAccessRight
210 displayName: Change Infrastructure Master
211 rightsGuid: cc17b1fb-33d9-11d2-97d4-00c04fd8d5cd
212 appliesTo: 2df90d89-009f-11d2-aa4c-00c04fd7d83a
213 localizationDisplayId: 50
214 validAccesses: 256
216 dn: CN=Update-Schema-Cache,CN=Extended-Rights,${CONFIGDN}
217 objectClass: top
218 objectClass: controlAccessRight
219 displayName: Update Schema Cache
220 rightsGuid: be2bb760-7f46-11d2-b9ad-00c04f79f805
221 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
222 localizationDisplayId: 51
223 validAccesses: 256
225 dn: CN=Recalculate-Security-Inheritance,CN=Extended-Rights,${CONFIGDN}
226 objectClass: top
227 objectClass: controlAccessRight
228 displayName: Recalculate Security Inheritance
229 rightsGuid: 62dd28a8-7f46-11d2-b9ad-00c04f79f805
230 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
231 localizationDisplayId: 52
232 validAccesses: 256
234 dn: CN=DS-Check-Stale-Phantoms,CN=Extended-Rights,${CONFIGDN}
235 objectClass: top
236 objectClass: controlAccessRight
237 displayName: Check Stale Phantoms
238 rightsGuid: 69ae6200-7f46-11d2-b9ad-00c04f79f805
239 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
240 localizationDisplayId: 53
241 validAccesses: 256
243 dn: CN=Certificate-Enrollment,CN=Extended-Rights,${CONFIGDN}
244 objectClass: top
245 objectClass: controlAccessRight
246 displayName: Enroll
247 rightsGuid: 0e10c968-78fb-11d2-90d4-00c04f79dc55
248 appliesTo: e5209ca2-3bba-11d2-90cc-00c04fd91ab1
249 localizationDisplayId: 54
250 validAccesses: 256
252 dn: CN=Self-Membership,CN=Extended-Rights,${CONFIGDN}
253 objectClass: top
254 objectClass: controlAccessRight
255 displayName: Add/Remove self as member
256 rightsGuid: bf9679c0-0de6-11d0-a285-00aa003049e2
257 appliesTo: bf967a9c-0de6-11d0-a285-00aa003049e2
258 localizationDisplayId: 12
259 validAccesses: 8
261 dn: CN=Validated-DNS-Host-Name,CN=Extended-Rights,${CONFIGDN}
262 objectClass: top
263 objectClass: controlAccessRight
264 displayName: Validated write to DNS host name
265 rightsGuid: 72e39547-7b18-11d1-adef-00c04fd8d5cd
266 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
267 localizationDisplayId: 13
268 validAccesses: 8
270 dn: CN=Validated-SPN,CN=Extended-Rights,${CONFIGDN}
271 objectClass: top
272 objectClass: controlAccessRight
273 displayName: Validated write to service principal name
274 rightsGuid: f3a64788-5306-11d1-a9c5-0000f80367c1
275 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
276 localizationDisplayId: 14
277 validAccesses: 8
279 dn: CN=Generate-RSoP-Planning,CN=Extended-Rights,${CONFIGDN}
280 objectClass: top
281 objectClass: controlAccessRight
282 displayName: Generate Resultant Set of Policy (Planning)
283 rightsGuid: b7b1b3dd-ab09-4242-9e30-9980e5d322f7
284 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
285 appliesTo: bf967aa5-0de6-11d0-a285-00aa003049e2
286 localizationDisplayId: 55
287 validAccesses: 256
289 dn: CN=Refresh-Group-Cache,CN=Extended-Rights,${CONFIGDN}
290 objectClass: top
291 objectClass: controlAccessRight
292 displayName: Refresh Group Cache for Logons
293 rightsGuid: 9432c620-033c-4db7-8b58-14ef6d0bf477
294 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
295 localizationDisplayId: 56
296 validAccesses: 256
298 dn: CN=SAM-Enumerate-Entire-Domain,CN=Extended-Rights,${CONFIGDN}
299 objectClass: top
300 objectClass: controlAccessRight
301 displayName: Enumerate Entire SAM Domain
302 rightsGuid: 91d67418-0135-4acc-8d79-c08e857cfbec
303 appliesTo: bf967aad-0de6-11d0-a285-00aa003049e2
304 localizationDisplayId: 57
305 validAccesses: 256
307 dn: CN=Generate-RSoP-Logging,CN=Extended-Rights,${CONFIGDN}
308 objectClass: top
309 objectClass: controlAccessRight
310 displayName: Generate Resultant Set of Policy (Logging)
311 rightsGuid: b7b1b3de-ab09-4242-9e30-9980e5d322f7
312 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
313 appliesTo: bf967aa5-0de6-11d0-a285-00aa003049e2
314 localizationDisplayId: 58
315 validAccesses: 256
317 dn: CN=Domain-Other-Parameters,CN=Extended-Rights,${CONFIGDN}
318 objectClass: top
319 objectClass: controlAccessRight
320 displayName: Other Domain Parameters (for use by SAM)
321 rightsGuid: b8119fd0-04f6-4762-ab7a-4986c76b3f9a
322 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
323 localizationDisplayId: 59
324 validAccesses: 48
326 dn: CN=DNS-Host-Name-Attributes,CN=Extended-Rights,${CONFIGDN}
327 objectClass: top
328 objectClass: controlAccessRight
329 displayName: DNS Host Name Attributes
330 rightsGuid: 72e39547-7b18-11d1-adef-00c04fd8d5cd
331 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
332 localizationDisplayId: 60
333 validAccesses: 48
335 dn: CN=Create-Inbound-Forest-Trust,CN=Extended-Rights,${CONFIGDN}
336 objectClass: top
337 objectClass: controlAccessRight
338 displayName: Create Inbound Forest Trust
339 rightsGuid: e2a36dc9-ae17-47c3-b58b-be34c55ba633
340 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
341 localizationDisplayId: 61
342 validAccesses: 256
344 dn: CN=DS-Replication-Get-Changes-All,CN=Extended-Rights,${CONFIGDN}
345 objectClass: top
346 objectClass: controlAccessRight
347 displayName: Replicating Directory Changes All
348 rightsGuid: 1131f6ad-9c07-11d1-f79f-00c04fc2dcd2
349 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
350 appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
351 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
352 localizationDisplayId: 62
353 validAccesses: 256
355 dn: CN=Migrate-SID-History,CN=Extended-Rights,${CONFIGDN}
356 objectClass: top
357 objectClass: controlAccessRight
358 displayName: Migrate SID History
359 rightsGuid: BA33815A-4F93-4c76-87F3-57574BFF8109
360 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
361 localizationDisplayId: 63
362 validAccesses: 256
364 dn: CN=Reanimate-Tombstones,CN=Extended-Rights,${CONFIGDN}
365 objectClass: top
366 objectClass: controlAccessRight
367 displayName: Reanimate Tombstones
368 rightsGuid: 45EC5156-DB7E-47bb-B53F-DBEB2D03C40F
369 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
370 appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
371 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
372 localizationDisplayId: 64
373 validAccesses: 256
375 dn: CN=Allowed-To-Authenticate,CN=Extended-Rights,${CONFIGDN}
376 objectClass: top
377 objectClass: controlAccessRight
378 displayName: Allowed to Authenticate
379 rightsGuid: 68B1D179-0D15-4d4f-AB71-46152E79A7BC
380 appliesTo: 4828cc14-1437-45bc-9b07-ad6f015e5f28
381 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
382 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
383 localizationDisplayId: 65
384 validAccesses: 256
386 dn: CN=DS-Execute-Intentions-Script,CN=Extended-Rights,${CONFIGDN}
387 objectClass: top
388 objectClass: controlAccessRight
389 displayName: Execute Forest Update Script
390 rightsGuid: 2f16c4a5-b98e-432c-952a-cb388ba33f2e
391 appliesTo: ef9e60e0-56f7-11d1-a9c6-0000f80367c1
392 localizationDisplayId: 66
393 validAccesses: 256
395 dn: CN=DS-Replication-Monitor-Topology,CN=Extended-Rights,${CONFIGDN}
396 objectClass: top
397 objectClass: controlAccessRight
398 displayName: Monitor Active Directory Replication
399 rightsGuid: f98340fb-7c5b-4cdb-a00b-2ebdfa115a96
400 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
401 appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
402 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
403 localizationDisplayId: 67
404 validAccesses: 256
406 dn: CN=Update-Password-Not-Required-Bit,CN=Extended-Rights,${CONFIGDN}
407 objectClass: top
408 objectClass: controlAccessRight
409 displayName: Update Password Not Required Bit
410 rightsGuid: 280f369c-67c7-438e-ae98-1d46f3c6f541
411 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
412 localizationDisplayId: 68
413 validAccesses: 256
415 dn: CN=Unexpire-Password,CN=Extended-Rights,${CONFIGDN}
416 objectClass: top
417 objectClass: controlAccessRight
418 displayName: Unexpire Password
419 rightsGuid: ccc2dc7d-a6ad-4a7a-8846-c04e3cc53501
420 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
421 localizationDisplayId: 69
422 validAccesses: 256
424 dn: CN=Enable-Per-User-Reversibly-Encrypted-Password,CN=Extended-Rights,${CONFIGDN}
425 objectClass: top
426 objectClass: controlAccessRight
427 displayName: Enable Per User Reversibly Encrypted Password
428 rightsGuid: 05c74c5e-4deb-43b4-bd9f-86664c2a7fd5
429 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
430 localizationDisplayId: 70
431 validAccesses: 256
433 dn: CN=DS-Query-Self-Quota,CN=Extended-Rights,${CONFIGDN}
434 objectClass: top
435 objectClass: controlAccessRight
436 displayName: Query Self Quota
437 rightsGuid: 4ecc03fe-ffc0-4947-b630-eb672a8a9dbc
438 appliesTo: da83fc4f-076f-4aea-b4dc-8f4dab9b5993
439 localizationDisplayId: 71
440 validAccesses: 256
442 dn: CN=Domain-Administer-Server,CN=Extended-Rights,${CONFIGDN}
443 objectClass: top
444 objectClass: controlAccessRight
445 displayName: Domain Administer Server
446 rightsGuid: ab721a52-1e2f-11d0-9819-00aa0040529b
447 appliesTo: bf967aad-0de6-11d0-a285-00aa003049e2
448 localizationDisplayId: 1
449 validAccesses: 256
451 dn: CN=User-Change-Password,CN=Extended-Rights,${CONFIGDN}
452 objectClass: top
453 objectClass: controlAccessRight
454 displayName: Change Password
455 rightsGuid: ab721a53-1e2f-11d0-9819-00aa0040529b
456 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
457 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
458 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
459 localizationDisplayId: 2
460 validAccesses: 256
462 dn: CN=User-Force-Change-Password,CN=Extended-Rights,${CONFIGDN}
463 objectClass: top
464 objectClass: controlAccessRight
465 displayName: Reset Password
466 rightsGuid: 00299570-246d-11d0-a768-00aa006e0529
467 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
468 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
469 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
470 localizationDisplayId: 3
471 validAccesses: 256
473 dn: CN=Send-As,CN=Extended-Rights,${CONFIGDN}
474 objectClass: top
475 objectClass: controlAccessRight
476 displayName: Send As
477 rightsGuid: ab721a54-1e2f-11d0-9819-00aa0040529b
478 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
479 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
480 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
481 localizationDisplayId: 4
482 validAccesses: 256
484 dn: CN=Receive-As,CN=Extended-Rights,${CONFIGDN}
485 objectClass: top
486 objectClass: controlAccessRight
487 displayName: Receive As
488 rightsGuid: ab721a56-1e2f-11d0-9819-00aa0040529b
489 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
490 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
491 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
492 localizationDisplayId: 5
493 validAccesses: 256
495 dn: CN=Send-To,CN=Extended-Rights,${CONFIGDN}
496 objectClass: top
497 objectClass: controlAccessRight
498 displayName: Send To
499 rightsGuid: ab721a55-1e2f-11d0-9819-00aa0040529b
500 appliesTo: bf967a9c-0de6-11d0-a285-00aa003049e2
501 localizationDisplayId: 6
502 validAccesses: 256
504 dn: CN=Domain-Password,CN=Extended-Rights,${CONFIGDN}
505 objectClass: top
506 objectClass: controlAccessRight
507 displayName: Domain Password & Lockout Policies
508 rightsGuid: c7407360-20bf-11d0-a768-00aa006e0529
509 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
510 appliesTo: 19195a5a-6da0-11d0-afd3-00c04fd930c9
511 localizationDisplayId: 7
512 validAccesses: 48
514 dn: CN=General-Information,CN=Extended-Rights,${CONFIGDN}
515 objectClass: top
516 objectClass: controlAccessRight
517 displayName: General Information
518 rightsGuid: 59ba2f42-79a2-11d0-9020-00c04fc2d3cf
519 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
520 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
521 localizationDisplayId: 8
522 validAccesses: 48
524 dn: CN=User-Account-Restrictions,CN=Extended-Rights,${CONFIGDN}
525 objectClass: top
526 objectClass: controlAccessRight
527 displayName: Account Restrictions
528 rightsGuid: 4c164200-20c0-11d0-a768-00aa006e0529
529 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
530 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
531 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
532 localizationDisplayId: 9
533 validAccesses: 48
535 dn: CN=User-Logon,CN=Extended-Rights,${CONFIGDN}
536 objectClass: top
537 objectClass: controlAccessRight
538 displayName: Logon Information
539 rightsGuid: 5f202010-79a5-11d0-9020-00c04fc2d4cf
540 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
541 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
542 localizationDisplayId: 10
543 validAccesses: 48
545 dn: CN=Membership,CN=Extended-Rights,${CONFIGDN}
546 objectClass: top
547 objectClass: controlAccessRight
548 displayName: Group Membership
549 rightsGuid: bc0ac240-79a9-11d0-9020-00c04fc2d4cf
550 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
551 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
552 localizationDisplayId: 11
553 validAccesses: 48
555 dn: CN=Open-Address-Book,CN=Extended-Rights,${CONFIGDN}
556 objectClass: top
557 objectClass: controlAccessRight
558 displayName: Open Address List
559 rightsGuid: a1990816-4298-11d1-ade2-00c04fd8d5cd
560 appliesTo: 3e74f60f-3e73-11d1-a9c0-0000f80367c1
561 localizationDisplayId: 21
562 validAccesses: 256
564 dn: CN=Personal-Information,CN=Extended-Rights,${CONFIGDN}
565 objectClass: top
566 objectClass: controlAccessRight
567 displayName: Personal Information
568 rightsGuid: 77B5B886-944A-11d1-AEBD-0000F80367C1
569 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
570 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
571 appliesTo: 5cb41ed0-0e4c-11d0-a286-00aa003049e2
572 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
573 localizationDisplayId: 23
574 validAccesses: 48
576 dn: CN=Email-Information,CN=Extended-Rights,${CONFIGDN}
577 objectClass: top
578 objectClass: controlAccessRight
579 displayName: Phone and Mail Options
580 rightsGuid: E45795B2-9455-11d1-AEBD-0000F80367C1
581 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
582 appliesTo: bf967a9c-0de6-11d0-a285-00aa003049e2
583 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
584 localizationDisplayId: 22
585 validAccesses: 48
587 dn: CN=Web-Information,CN=Extended-Rights,${CONFIGDN}
588 objectClass: top
589 objectClass: controlAccessRight
590 displayName: Web Information
591 rightsGuid: E45795B3-9455-11d1-AEBD-0000F80367C1
592 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
593 appliesTo: 5cb41ed0-0e4c-11d0-a286-00aa003049e2
594 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
595 localizationDisplayId: 24
596 validAccesses: 48
598 dn: CN=DS-Replication-Get-Changes,CN=Extended-Rights,${CONFIGDN}
599 objectClass: top
600 objectClass: controlAccessRight
601 displayName: Replicating Directory Changes
602 rightsGuid: 1131f6aa-9c07-11d1-f79f-00c04fc2dcd2
603 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
604 appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
605 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
606 localizationDisplayId: 25
607 validAccesses: 256
609 dn: CN=DS-Replication-Synchronize,CN=Extended-Rights,${CONFIGDN}
610 objectClass: top
611 objectClass: controlAccessRight
612 displayName: Replication Synchronization
613 rightsGuid: 1131f6ab-9c07-11d1-f79f-00c04fc2dcd2
614 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
615 appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
616 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
617 localizationDisplayId: 26
618 validAccesses: 256
620 dn: CN=DS-Replication-Manage-Topology,CN=Extended-Rights,${CONFIGDN}
621 objectClass: top
622 objectClass: controlAccessRight
623 displayName: Manage Replication Topology
624 rightsGuid: 1131f6ac-9c07-11d1-f79f-00c04fc2dcd2
625 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
626 appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
627 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
628 localizationDisplayId: 27
629 validAccesses: 256
631 dn: CN=Change-Schema-Master,CN=Extended-Rights,${CONFIGDN}
632 objectClass: top
633 objectClass: controlAccessRight
634 displayName: Change Schema Master
635 rightsGuid: e12b56b6-0a95-11d1-adbb-00c04fd8d5cd
636 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
637 localizationDisplayId: 28
638 validAccesses: 256
640 dn: CN=ForestUpdates,${CONFIGDN}
641 objectClass: top
642 objectClass: container
644 dn: CN=Operations,CN=ForestUpdates,${CONFIGDN}
645 objectClass: top
646 objectClass: container
648 dn: CN=Windows2003Update,CN=ForestUpdates,${CONFIGDN}
649 objectClass: top
650 objectClass: container
651 revision: 9
653 dn: CN=LostAndFoundConfig,${CONFIGDN}
654 objectClass: top
655 objectClass: lostAndFound
656 systemFlags: -2147483648
658 dn: CN=NTDS Quotas,${CONFIGDN}
659 objectClass: top
660 objectClass: msDS-QuotaContainer
661 description: Quota specifications container
662 msDS-TombstoneQuotaFactor: 100
663 systemFlags: -2147483648
665 dn: CN=Partitions,${CONFIGDN}
666 objectClass: top
667 objectClass: crossRefContainer
668 systemFlags: -2147483648
669 msDS-Behavior-Version: ${FOREST_FUNCTIONALALITY}
670 showInAdvancedViewOnly: TRUE
672 dn: CN=Enterprise Configuration,CN=Partitions,${CONFIGDN}
673 objectClass: top
674 objectClass: crossRef
675 systemFlags: 1
676 nCName: ${CONFIGDN}
677 dnsRoot: ${DNSDOMAIN}
679 dn: CN=Enterprise Schema,CN=Partitions,${CONFIGDN}
680 objectClass: top
681 objectClass: crossRef
682 systemFlags: 1
683 nCName: ${SCHEMADN}
684 dnsRoot: ${DNSDOMAIN}
686 dn: CN=${DOMAIN},CN=Partitions,${CONFIGDN}
687 objectClass: top
688 objectClass: crossRef
689 systemFlags: 3
690 nCName: ${DOMAINDN}
691 nETBIOSName: ${DOMAIN}
692 dnsRoot: ${DNSDOMAIN}
694 dn: CN=Physical Locations,${CONFIGDN}
695 objectClass: top
696 objectClass: locality
697 objectClass: physicalLocation
698 l: Physical Locations tree root
700 # Schema located in "ad-schema/*.txt"
702 dn: CN=Services,${CONFIGDN}
703 objectClass: top
704 objectClass: container
705 systemFlags: -2147483648
707 dn: CN=Windows NT,CN=Services,${CONFIGDN}
708 objectClass: top
709 objectClass: container
711 dn: CN=Directory Service,CN=Windows NT,CN=Services,${CONFIGDN}
712 objectClass: top
713 objectClass: nTDSService
714 sPNMappings: host=ldap,dns,cifs,http
716 dn: CN=Query-Policies,CN=Directory Service,CN=Windows NT,CN=Services,${CONFIGDN}
717 objectClass: top
718 objectClass: container
720 dn: CN=Default Query Policy,CN=Query-Policies,CN=Directory Service,CN=Windows NT,CN=Services,${CONFIGDN}
721 objectClass: top
722 objectClass: queryPolicy
723 lDAPAdminLimits: MaxValRange=1500
724 lDAPAdminLimits: MaxReceiveBuffer=10485760
725 lDAPAdminLimits: MaxDatagramRecv=4096
726 lDAPAdminLimits: MaxPoolThreads=4
727 lDAPAdminLimits: MaxResultSetSize=262144
728 lDAPAdminLimits: MaxTempTableSize=10000
729 lDAPAdminLimits: MaxQueryDuration=120
730 lDAPAdminLimits: MaxPageSize=1000
731 lDAPAdminLimits: MaxNotificationPerConn=5
732 lDAPAdminLimits: MaxActiveQueries=20
733 lDAPAdminLimits: MaxConnIdleTime=900
734 lDAPAdminLimits: InitRecvTimeout=120
735 lDAPAdminLimits: MaxConnections=5000
737 dn: CN=Sites,${CONFIGDN}
738 objectClass: top
739 objectClass: sitesContainer
740 systemFlags: -2113929216
742 dn: CN=${DEFAULTSITE},CN=Sites,${CONFIGDN}
743 objectClass: top
744 objectClass: site
745 systemFlags: 1107296256
747 dn: CN=Licensing Site Settings,CN=${DEFAULTSITE},CN=Sites,${CONFIGDN}
748 objectClass: top
749 objectClass: applicationSiteSettings
750 objectClass: licensingSiteSettings
752 dn: CN=Inter-Site Transports,CN=Sites,${CONFIGDN}
753 objectClass: top
754 objectClass: interSiteTransportContainer
755 systemFlags: -2147483648
757 dn: CN=IP,CN=Inter-Site Transports,CN=Sites,${CONFIGDN}
758 objectClass: top
759 objectClass: interSiteTransport
760 transportAddressAttribute: dNSHostName
761 transportDLLName: ismip.dll
763 dn: CN=DEFAULTIPSITELINK,CN=IP,CN=Inter-Site Transports,CN=Sites,${CONFIGDN}
764 objectClass: top
765 objectClass: siteLink
766 cost: 100
767 replInterval: 180
768 siteList: CN=${DEFAULTSITE},CN=Sites,${CONFIGDN}
769 systemFlags: 1073741824
771 dn: CN=SMTP,CN=Inter-Site Transports,CN=Sites,${CONFIGDN}
772 objectClass: top
773 objectClass: interSiteTransport
774 transportAddressAttribute: mailAddress
775 transportDLLName: ismsmtp.dll
776 options: 1
778 dn: CN=NTDS Site Settings,CN=${DEFAULTSITE},CN=Sites,${CONFIGDN}
779 objectClass: top
780 objectClass: applicationSiteSettings
781 objectClass: nTDSSiteSettings
783 dn: CN=Servers,CN=${DEFAULTSITE},CN=Sites,${CONFIGDN}
784 objectClass: top
785 objectClass: serversContainer
786 systemFlags: 33554432