scripting ntacls: Do not place a SACL in the GPO filesystem ACL
[Samba/bb.git] / source4 / setup / provision_configuration.ldif
blob9fab2b567204a765958eb687c4b07de32ce3271d
1 ###############################
2 # Configuration Naming Context
3 ###############################
5 # Display specifiers are located in
6 # display-specifiers/DisplaySpecifiers-Win2k8R2.txt"
7 # This file is parsed during provision using the ms_display_specifiers.py
8 # script.
10 dn: CN=Deleted Objects,${CONFIGDN}
11 objectClass: top
12 objectClass: container
13 description: Container for deleted objects
14 isDeleted: TRUE
15 isCriticalSystemObject: TRUE
16 systemFlags: -1946157056
18 # Extended rights
20 dn: CN=Extended-Rights,${CONFIGDN}
21 objectClass: top
22 objectClass: container
23 systemFlags: -2147483648
25 dn: CN=Change-Rid-Master,CN=Extended-Rights,${CONFIGDN}
26 objectClass: top
27 objectClass: controlAccessRight
28 displayName: Change Rid Master
29 rightsGuid: d58d5f36-0a98-11d1-adbb-00c04fd8d5cd
30 appliesTo: 6617188d-8f3c-11d0-afda-00c04fd930c9
31 localizationDisplayId: 29
32 validAccesses: 256
34 dn: CN=Do-Garbage-Collection,CN=Extended-Rights,${CONFIGDN}
35 objectClass: top
36 objectClass: controlAccessRight
37 displayName: Do Garbage Collection
38 rightsGuid: fec364e0-0a98-11d1-adbb-00c04fd8d5cd
39 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
40 localizationDisplayId: 31
41 validAccesses: 256
43 dn: CN=Recalculate-Hierarchy,CN=Extended-Rights,${CONFIGDN}
44 objectClass: top
45 objectClass: controlAccessRight
46 displayName: Recalculate Hierarchy
47 rightsGuid: 0bc1554e-0a99-11d1-adbb-00c04fd8d5cd
48 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
49 localizationDisplayId: 32
50 validAccesses: 256
52 dn: CN=Allocate-Rids,CN=Extended-Rights,${CONFIGDN}
53 objectClass: top
54 objectClass: controlAccessRight
55 displayName: Allocate Rids
56 rightsGuid: 1abd7cf8-0a99-11d1-adbb-00c04fd8d5cd
57 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
58 localizationDisplayId: 33
59 validAccesses: 256
61 dn: CN=Change-PDC,CN=Extended-Rights,${CONFIGDN}
62 objectClass: top
63 objectClass: controlAccessRight
64 displayName: Change PDC
65 rightsGuid: bae50096-4752-11d1-9052-00c04fc2d4cf
66 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
67 localizationDisplayId: 34
68 validAccesses: 256
70 dn: CN=Add-GUID,CN=Extended-Rights,${CONFIGDN}
71 objectClass: top
72 objectClass: controlAccessRight
73 displayName: Add GUID
74 rightsGuid: 440820ad-65b4-11d1-a3da-0000f875ae0d
75 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
76 localizationDisplayId: 35
77 validAccesses: 256
79 dn: CN=Change-Domain-Master,CN=Extended-Rights,${CONFIGDN}
80 objectClass: top
81 objectClass: controlAccessRight
82 displayName: Change Domain Master
83 rightsGuid: 014bf69c-7b3b-11d1-85f6-08002be74fab
84 appliesTo: ef9e60e0-56f7-11d1-a9c6-0000f80367c1
85 localizationDisplayId: 36
86 validAccesses: 256
88 dn: CN=Public-Information,CN=Extended-Rights,${CONFIGDN}
89 objectClass: top
90 objectClass: controlAccessRight
91 displayName: Public Information
92 rightsGuid: e48d0154-bcf8-11d1-8702-00c04fb96050
93 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
94 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
95 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
96 localizationDisplayId: 37
97 validAccesses: 48
99 dn: CN=msmq-Receive-Dead-Letter,CN=Extended-Rights,${CONFIGDN}
100 objectClass: top
101 objectClass: controlAccessRight
102 displayName: Receive Dead Letter
103 rightsGuid: 4b6e08c0-df3c-11d1-9c86-006008764d0e
104 appliesTo: 9a0dc344-c100-11d1-bbc5-0080c76670c0
105 localizationDisplayId: 38
106 validAccesses: 256
108 dn: CN=msmq-Peek-Dead-Letter,CN=Extended-Rights,${CONFIGDN}
109 objectClass: top
110 objectClass: controlAccessRight
111 displayName: Peek Dead Letter
112 rightsGuid: 4b6e08c1-df3c-11d1-9c86-006008764d0e
113 appliesTo: 9a0dc344-c100-11d1-bbc5-0080c76670c0
114 localizationDisplayId: 39
115 validAccesses: 256
117 dn: CN=msmq-Receive-computer-Journal,CN=Extended-Rights,${CONFIGDN}
118 objectClass: top
119 objectClass: controlAccessRight
120 displayName: Receive Computer Journal
121 rightsGuid: 4b6e08c2-df3c-11d1-9c86-006008764d0e
122 appliesTo: 9a0dc344-c100-11d1-bbc5-0080c76670c0
123 localizationDisplayId: 40
124 validAccesses: 256
126 dn: CN=msmq-Peek-computer-Journal,CN=Extended-Rights,${CONFIGDN}
127 objectClass: top
128 objectClass: controlAccessRight
129 displayName: Peek Computer Journal
130 rightsGuid: 4b6e08c3-df3c-11d1-9c86-006008764d0e
131 appliesTo: 9a0dc344-c100-11d1-bbc5-0080c76670c0
132 localizationDisplayId: 41
133 validAccesses: 256
135 dn: CN=msmq-Receive,CN=Extended-Rights,${CONFIGDN}
136 objectClass: top
137 objectClass: controlAccessRight
138 displayName: Receive Message
139 rightsGuid: 06bd3200-df3e-11d1-9c86-006008764d0e
140 appliesTo: 9a0dc343-c100-11d1-bbc5-0080c76670c0
141 localizationDisplayId: 42
142 validAccesses: 256
144 dn: CN=msmq-Peek,CN=Extended-Rights,${CONFIGDN}
145 objectClass: top
146 objectClass: controlAccessRight
147 displayName: Peek Message
148 rightsGuid: 06bd3201-df3e-11d1-9c86-006008764d0e
149 appliesTo: 9a0dc343-c100-11d1-bbc5-0080c76670c0
150 localizationDisplayId: 43
151 validAccesses: 256
153 dn: CN=msmq-Send,CN=Extended-Rights,${CONFIGDN}
154 objectClass: top
155 objectClass: controlAccessRight
156 displayName: Send Message
157 rightsGuid: 06bd3202-df3e-11d1-9c86-006008764d0e
158 appliesTo: 46b27aac-aafa-4ffb-b773-e5bf621ee87b
159 appliesTo: 9a0dc343-c100-11d1-bbc5-0080c76670c0
160 localizationDisplayId: 44
161 validAccesses: 256
163 dn: CN=msmq-Receive-journal,CN=Extended-Rights,${CONFIGDN}
164 objectClass: top
165 objectClass: controlAccessRight
166 displayName: Receive Journal
167 rightsGuid: 06bd3203-df3e-11d1-9c86-006008764d0e
168 appliesTo: 9a0dc343-c100-11d1-bbc5-0080c76670c0
169 localizationDisplayId: 45
170 validAccesses: 256
172 dn: CN=msmq-Open-Connector,CN=Extended-Rights,${CONFIGDN}
173 objectClass: top
174 objectClass: controlAccessRight
175 displayName: Open Connector Queue
176 rightsGuid: b4e60130-df3f-11d1-9c86-006008764d0e
177 appliesTo: bf967ab3-0de6-11d0-a285-00aa003049e2
178 localizationDisplayId: 46
179 validAccesses: 256
181 dn: CN=Apply-Group-Policy,CN=Extended-Rights,${CONFIGDN}
182 objectClass: top
183 objectClass: controlAccessRight
184 displayName: Apply Group Policy
185 rightsGuid: edacfd8f-ffb3-11d1-b41d-00a0c968f939
186 appliesTo: f30e3bc2-9ff0-11d1-b603-0000f80367c1
187 localizationDisplayId: 47
188 validAccesses: 256
190 dn: CN=RAS-Information,CN=Extended-Rights,${CONFIGDN}
191 objectClass: top
192 objectClass: controlAccessRight
193 displayName: Remote Access Information
194 rightsGuid: 037088f8-0ae1-11d2-b422-00a0c968f939
195 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
196 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
197 localizationDisplayId: 48
198 validAccesses: 48
200 dn: CN=DS-Install-Replica,CN=Extended-Rights,${CONFIGDN}
201 objectClass: top
202 objectClass: controlAccessRight
203 displayName: Add/Remove Replica In Domain
204 rightsGuid: 9923a32a-3607-11d2-b9be-0000f87a36b2
205 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
206 localizationDisplayId: 49
207 validAccesses: 256
209 dn: CN=Change-Infrastructure-Master,CN=Extended-Rights,${CONFIGDN}
210 objectClass: top
211 objectClass: controlAccessRight
212 displayName: Change Infrastructure Master
213 rightsGuid: cc17b1fb-33d9-11d2-97d4-00c04fd8d5cd
214 appliesTo: 2df90d89-009f-11d2-aa4c-00c04fd7d83a
215 localizationDisplayId: 50
216 validAccesses: 256
218 dn: CN=Update-Schema-Cache,CN=Extended-Rights,${CONFIGDN}
219 objectClass: top
220 objectClass: controlAccessRight
221 displayName: Update Schema Cache
222 rightsGuid: be2bb760-7f46-11d2-b9ad-00c04f79f805
223 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
224 localizationDisplayId: 51
225 validAccesses: 256
227 dn: CN=Recalculate-Security-Inheritance,CN=Extended-Rights,${CONFIGDN}
228 objectClass: top
229 objectClass: controlAccessRight
230 displayName: Recalculate Security Inheritance
231 rightsGuid: 62dd28a8-7f46-11d2-b9ad-00c04f79f805
232 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
233 localizationDisplayId: 52
234 validAccesses: 256
236 dn: CN=DS-Check-Stale-Phantoms,CN=Extended-Rights,${CONFIGDN}
237 objectClass: top
238 objectClass: controlAccessRight
239 displayName: Check Stale Phantoms
240 rightsGuid: 69ae6200-7f46-11d2-b9ad-00c04f79f805
241 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
242 localizationDisplayId: 53
243 validAccesses: 256
245 dn: CN=Certificate-Enrollment,CN=Extended-Rights,${CONFIGDN}
246 objectClass: top
247 objectClass: controlAccessRight
248 displayName: Enroll
249 rightsGuid: 0e10c968-78fb-11d2-90d4-00c04f79dc55
250 appliesTo: e5209ca2-3bba-11d2-90cc-00c04fd91ab1
251 localizationDisplayId: 54
252 validAccesses: 256
254 dn: CN=Self-Membership,CN=Extended-Rights,${CONFIGDN}
255 objectClass: top
256 objectClass: controlAccessRight
257 displayName: Add/Remove self as member
258 rightsGuid: bf9679c0-0de6-11d0-a285-00aa003049e2
259 appliesTo: bf967a9c-0de6-11d0-a285-00aa003049e2
260 localizationDisplayId: 12
261 validAccesses: 8
263 dn: CN=Validated-DNS-Host-Name,CN=Extended-Rights,${CONFIGDN}
264 objectClass: top
265 objectClass: controlAccessRight
266 displayName: Validated write to DNS host name
267 rightsGuid: 72e39547-7b18-11d1-adef-00c04fd8d5cd
268 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
269 localizationDisplayId: 13
270 validAccesses: 8
272 dn: CN=Validated-SPN,CN=Extended-Rights,${CONFIGDN}
273 objectClass: top
274 objectClass: controlAccessRight
275 displayName: Validated write to service principal name
276 rightsGuid: f3a64788-5306-11d1-a9c5-0000f80367c1
277 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
278 localizationDisplayId: 14
279 validAccesses: 8
281 dn: CN=Generate-RSoP-Planning,CN=Extended-Rights,${CONFIGDN}
282 objectClass: top
283 objectClass: controlAccessRight
284 displayName: Generate Resultant Set of Policy (Planning)
285 rightsGuid: b7b1b3dd-ab09-4242-9e30-9980e5d322f7
286 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
287 appliesTo: bf967aa5-0de6-11d0-a285-00aa003049e2
288 localizationDisplayId: 55
289 validAccesses: 256
291 dn: CN=Refresh-Group-Cache,CN=Extended-Rights,${CONFIGDN}
292 objectClass: top
293 objectClass: controlAccessRight
294 displayName: Refresh Group Cache for Logons
295 rightsGuid: 9432c620-033c-4db7-8b58-14ef6d0bf477
296 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
297 localizationDisplayId: 56
298 validAccesses: 256
300 dn: CN=SAM-Enumerate-Entire-Domain,CN=Extended-Rights,${CONFIGDN}
301 objectClass: top
302 objectClass: controlAccessRight
303 displayName: Enumerate Entire SAM Domain
304 rightsGuid: 91d67418-0135-4acc-8d79-c08e857cfbec
305 appliesTo: bf967aad-0de6-11d0-a285-00aa003049e2
306 localizationDisplayId: 57
307 validAccesses: 256
309 dn: CN=Generate-RSoP-Logging,CN=Extended-Rights,${CONFIGDN}
310 objectClass: top
311 objectClass: controlAccessRight
312 displayName: Generate Resultant Set of Policy (Logging)
313 rightsGuid: b7b1b3de-ab09-4242-9e30-9980e5d322f7
314 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
315 appliesTo: bf967aa5-0de6-11d0-a285-00aa003049e2
316 localizationDisplayId: 58
317 validAccesses: 256
319 dn: CN=Domain-Other-Parameters,CN=Extended-Rights,${CONFIGDN}
320 objectClass: top
321 objectClass: controlAccessRight
322 displayName: Other Domain Parameters (for use by SAM)
323 rightsGuid: b8119fd0-04f6-4762-ab7a-4986c76b3f9a
324 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
325 localizationDisplayId: 59
326 validAccesses: 48
328 dn: CN=DNS-Host-Name-Attributes,CN=Extended-Rights,${CONFIGDN}
329 objectClass: top
330 objectClass: controlAccessRight
331 displayName: DNS Host Name Attributes
332 rightsGuid: 72e39547-7b18-11d1-adef-00c04fd8d5cd
333 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
334 localizationDisplayId: 60
335 validAccesses: 48
337 dn: CN=Create-Inbound-Forest-Trust,CN=Extended-Rights,${CONFIGDN}
338 objectClass: top
339 objectClass: controlAccessRight
340 displayName: Create Inbound Forest Trust
341 rightsGuid: e2a36dc9-ae17-47c3-b58b-be34c55ba633
342 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
343 localizationDisplayId: 61
344 validAccesses: 256
346 dn: CN=DS-Replication-Get-Changes-All,CN=Extended-Rights,${CONFIGDN}
347 objectClass: top
348 objectClass: controlAccessRight
349 displayName: Replicating Directory Changes All
350 rightsGuid: 1131f6ad-9c07-11d1-f79f-00c04fc2dcd2
351 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
352 appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
353 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
354 localizationDisplayId: 62
355 validAccesses: 256
357 dn: CN=Migrate-SID-History,CN=Extended-Rights,${CONFIGDN}
358 objectClass: top
359 objectClass: controlAccessRight
360 displayName: Migrate SID History
361 rightsGuid: BA33815A-4F93-4c76-87F3-57574BFF8109
362 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
363 localizationDisplayId: 63
364 validAccesses: 256
366 dn: CN=Reanimate-Tombstones,CN=Extended-Rights,${CONFIGDN}
367 objectClass: top
368 objectClass: controlAccessRight
369 displayName: Reanimate Tombstones
370 rightsGuid: 45EC5156-DB7E-47bb-B53F-DBEB2D03C40F
371 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
372 appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
373 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
374 localizationDisplayId: 64
375 validAccesses: 256
377 dn: CN=Allowed-To-Authenticate,CN=Extended-Rights,${CONFIGDN}
378 objectClass: top
379 objectClass: controlAccessRight
380 displayName: Allowed to Authenticate
381 rightsGuid: 68B1D179-0D15-4d4f-AB71-46152E79A7BC
382 appliesTo: 4828cc14-1437-45bc-9b07-ad6f015e5f28
383 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
384 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
385 localizationDisplayId: 65
386 validAccesses: 256
388 dn: CN=DS-Execute-Intentions-Script,CN=Extended-Rights,${CONFIGDN}
389 objectClass: top
390 objectClass: controlAccessRight
391 displayName: Execute Forest Update Script
392 rightsGuid: 2f16c4a5-b98e-432c-952a-cb388ba33f2e
393 appliesTo: ef9e60e0-56f7-11d1-a9c6-0000f80367c1
394 localizationDisplayId: 66
395 validAccesses: 256
397 dn: CN=DS-Replication-Monitor-Topology,CN=Extended-Rights,${CONFIGDN}
398 objectClass: top
399 objectClass: controlAccessRight
400 displayName: Monitor Active Directory Replication
401 rightsGuid: f98340fb-7c5b-4cdb-a00b-2ebdfa115a96
402 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
403 appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
404 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
405 localizationDisplayId: 67
406 validAccesses: 256
408 dn: CN=Update-Password-Not-Required-Bit,CN=Extended-Rights,${CONFIGDN}
409 objectClass: top
410 objectClass: controlAccessRight
411 displayName: Update Password Not Required Bit
412 rightsGuid: 280f369c-67c7-438e-ae98-1d46f3c6f541
413 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
414 localizationDisplayId: 68
415 validAccesses: 256
417 dn: CN=Unexpire-Password,CN=Extended-Rights,${CONFIGDN}
418 objectClass: top
419 objectClass: controlAccessRight
420 displayName: Unexpire Password
421 rightsGuid: ccc2dc7d-a6ad-4a7a-8846-c04e3cc53501
422 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
423 localizationDisplayId: 69
424 validAccesses: 256
426 dn: CN=Enable-Per-User-Reversibly-Encrypted-Password,CN=Extended-Rights,${CONFIGDN}
427 objectClass: top
428 objectClass: controlAccessRight
429 displayName: Enable Per User Reversibly Encrypted Password
430 rightsGuid: 05c74c5e-4deb-43b4-bd9f-86664c2a7fd5
431 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
432 localizationDisplayId: 70
433 validAccesses: 256
435 dn: CN=DS-Query-Self-Quota,CN=Extended-Rights,${CONFIGDN}
436 objectClass: top
437 objectClass: controlAccessRight
438 displayName: Query Self Quota
439 rightsGuid: 4ecc03fe-ffc0-4947-b630-eb672a8a9dbc
440 appliesTo: da83fc4f-076f-4aea-b4dc-8f4dab9b5993
441 localizationDisplayId: 71
442 validAccesses: 256
444 dn: CN=Domain-Administer-Server,CN=Extended-Rights,${CONFIGDN}
445 objectClass: top
446 objectClass: controlAccessRight
447 displayName: Domain Administer Server
448 rightsGuid: ab721a52-1e2f-11d0-9819-00aa0040529b
449 appliesTo: bf967aad-0de6-11d0-a285-00aa003049e2
450 localizationDisplayId: 1
451 validAccesses: 256
453 dn: CN=User-Change-Password,CN=Extended-Rights,${CONFIGDN}
454 objectClass: top
455 objectClass: controlAccessRight
456 displayName: Change Password
457 rightsGuid: ab721a53-1e2f-11d0-9819-00aa0040529b
458 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
459 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
460 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
461 localizationDisplayId: 2
462 validAccesses: 256
464 dn: CN=User-Force-Change-Password,CN=Extended-Rights,${CONFIGDN}
465 objectClass: top
466 objectClass: controlAccessRight
467 displayName: Reset Password
468 rightsGuid: 00299570-246d-11d0-a768-00aa006e0529
469 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
470 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
471 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
472 localizationDisplayId: 3
473 validAccesses: 256
475 dn: CN=Send-As,CN=Extended-Rights,${CONFIGDN}
476 objectClass: top
477 objectClass: controlAccessRight
478 displayName: Send As
479 rightsGuid: ab721a54-1e2f-11d0-9819-00aa0040529b
480 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
481 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
482 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
483 localizationDisplayId: 4
484 validAccesses: 256
486 dn: CN=Receive-As,CN=Extended-Rights,${CONFIGDN}
487 objectClass: top
488 objectClass: controlAccessRight
489 displayName: Receive As
490 rightsGuid: ab721a56-1e2f-11d0-9819-00aa0040529b
491 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
492 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
493 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
494 localizationDisplayId: 5
495 validAccesses: 256
497 dn: CN=Send-To,CN=Extended-Rights,${CONFIGDN}
498 objectClass: top
499 objectClass: controlAccessRight
500 displayName: Send To
501 rightsGuid: ab721a55-1e2f-11d0-9819-00aa0040529b
502 appliesTo: bf967a9c-0de6-11d0-a285-00aa003049e2
503 localizationDisplayId: 6
504 validAccesses: 256
506 dn: CN=Domain-Password,CN=Extended-Rights,${CONFIGDN}
507 objectClass: top
508 objectClass: controlAccessRight
509 displayName: Domain Password & Lockout Policies
510 rightsGuid: c7407360-20bf-11d0-a768-00aa006e0529
511 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
512 appliesTo: 19195a5a-6da0-11d0-afd3-00c04fd930c9
513 localizationDisplayId: 7
514 validAccesses: 48
516 dn: CN=General-Information,CN=Extended-Rights,${CONFIGDN}
517 objectClass: top
518 objectClass: controlAccessRight
519 displayName: General Information
520 rightsGuid: 59ba2f42-79a2-11d0-9020-00c04fc2d3cf
521 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
522 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
523 localizationDisplayId: 8
524 validAccesses: 48
526 dn: CN=User-Account-Restrictions,CN=Extended-Rights,${CONFIGDN}
527 objectClass: top
528 objectClass: controlAccessRight
529 displayName: Account Restrictions
530 rightsGuid: 4c164200-20c0-11d0-a768-00aa006e0529
531 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
532 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
533 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
534 localizationDisplayId: 9
535 validAccesses: 48
537 dn: CN=User-Logon,CN=Extended-Rights,${CONFIGDN}
538 objectClass: top
539 objectClass: controlAccessRight
540 displayName: Logon Information
541 rightsGuid: 5f202010-79a5-11d0-9020-00c04fc2d4cf
542 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
543 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
544 localizationDisplayId: 10
545 validAccesses: 48
547 dn: CN=Membership,CN=Extended-Rights,${CONFIGDN}
548 objectClass: top
549 objectClass: controlAccessRight
550 displayName: Group Membership
551 rightsGuid: bc0ac240-79a9-11d0-9020-00c04fc2d4cf
552 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
553 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
554 localizationDisplayId: 11
555 validAccesses: 48
557 dn: CN=Open-Address-Book,CN=Extended-Rights,${CONFIGDN}
558 objectClass: top
559 objectClass: controlAccessRight
560 displayName: Open Address List
561 rightsGuid: a1990816-4298-11d1-ade2-00c04fd8d5cd
562 appliesTo: 3e74f60f-3e73-11d1-a9c0-0000f80367c1
563 localizationDisplayId: 21
564 validAccesses: 256
566 dn: CN=Personal-Information,CN=Extended-Rights,${CONFIGDN}
567 objectClass: top
568 objectClass: controlAccessRight
569 displayName: Personal Information
570 rightsGuid: 77B5B886-944A-11d1-AEBD-0000F80367C1
571 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
572 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
573 appliesTo: 5cb41ed0-0e4c-11d0-a286-00aa003049e2
574 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
575 localizationDisplayId: 23
576 validAccesses: 48
578 dn: CN=Email-Information,CN=Extended-Rights,${CONFIGDN}
579 objectClass: top
580 objectClass: controlAccessRight
581 displayName: Phone and Mail Options
582 rightsGuid: E45795B2-9455-11d1-AEBD-0000F80367C1
583 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
584 appliesTo: bf967a9c-0de6-11d0-a285-00aa003049e2
585 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
586 localizationDisplayId: 22
587 validAccesses: 48
589 dn: CN=Web-Information,CN=Extended-Rights,${CONFIGDN}
590 objectClass: top
591 objectClass: controlAccessRight
592 displayName: Web Information
593 rightsGuid: E45795B3-9455-11d1-AEBD-0000F80367C1
594 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
595 appliesTo: 5cb41ed0-0e4c-11d0-a286-00aa003049e2
596 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
597 localizationDisplayId: 24
598 validAccesses: 48
600 dn: CN=DS-Replication-Get-Changes,CN=Extended-Rights,${CONFIGDN}
601 objectClass: top
602 objectClass: controlAccessRight
603 displayName: Replicating Directory Changes
604 rightsGuid: 1131f6aa-9c07-11d1-f79f-00c04fc2dcd2
605 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
606 appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
607 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
608 localizationDisplayId: 25
609 validAccesses: 256
611 dn: CN=DS-Replication-Synchronize,CN=Extended-Rights,${CONFIGDN}
612 objectClass: top
613 objectClass: controlAccessRight
614 displayName: Replication Synchronization
615 rightsGuid: 1131f6ab-9c07-11d1-f79f-00c04fc2dcd2
616 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
617 appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
618 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
619 localizationDisplayId: 26
620 validAccesses: 256
622 dn: CN=DS-Replication-Manage-Topology,CN=Extended-Rights,${CONFIGDN}
623 objectClass: top
624 objectClass: controlAccessRight
625 displayName: Manage Replication Topology
626 rightsGuid: 1131f6ac-9c07-11d1-f79f-00c04fc2dcd2
627 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
628 appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
629 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
630 localizationDisplayId: 27
631 validAccesses: 256
633 dn: CN=Change-Schema-Master,CN=Extended-Rights,${CONFIGDN}
634 objectClass: top
635 objectClass: controlAccessRight
636 displayName: Change Schema Master
637 rightsGuid: e12b56b6-0a95-11d1-adbb-00c04fd8d5cd
638 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
639 localizationDisplayId: 28
640 validAccesses: 256
642 dn: CN=DS-Replication-Get-Changes-In-Filtered-Set,CN=Extended-Rights,${CONFIGDN}
643 objectClass: top
644 objectClass: controlAccessRight
645 displayName: Replicating Directory Changes In Filtered Set
646 rightsGuid: 89e95b76-444d-4c62-991a-0facbeda640c
647 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
648 appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
649 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
650 localizationDisplayId: 77
651 validAccesses: 256
653 dn: CN=MS-TS-GatewayAccess,CN=Extended-Rights,${CONFIGDN}
654 objectClass: top
655 objectClass: controlAccessRight
656 displayName: MS-TS-GatewayAccess
657 rightsGuid: ffa6f046-ca4b-4feb-b40d-04dfee722543
658 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
659 localizationDisplayId: 74
660 validAccesses: 48
662 dn: CN=Private-Information,CN=Extended-Rights,${CONFIGDN}
663 objectClass: top
664 objectClass: controlAccessRight
665 displayName: Private Information
666 rightsGuid: 91e647de-d96f-4b70-9557-d63ff4f3ccd8
667 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
668 appliesTo: 4828cc14-1437-45bc-9b07-ad6f015e5f28
669 localizationDisplayId: 72
670 validAccesses: 48
672 dn: CN=Read-Only-Replication-Secret-Synchronization,CN=Extended-Rights,${CONFIGDN}
673 objectClass: top
674 objectClass: controlAccessRight
675 displayName: Read Only Replication Secret Synchronization
676 rightsGuid: 1131f6ae-9c07-11d1-f79f-00c04fc2dcd2
677 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
678 appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
679 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
680 localizationDisplayId: 73
681 validAccesses: 256
683 dn: CN=Reload-SSL-Certificate,CN=Extended-Rights,${CONFIGDN}
684 objectClass: top
685 objectClass: controlAccessRight
686 displayName: Reload SSL/TLS Certificate
687 rightsGuid: 1a60ea8d-58a6-4b20-bcdc-fb71eb8a9ff8
688 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
689 localizationDisplayId: 76
690 validAccesses: 256
692 dn: CN=Terminal-Server-License-Server,CN=Extended-Rights,${CONFIGDN}
693 objectClass: top
694 objectClass: controlAccessRight
695 displayName: Terminal Server License Server
696 rightsGuid: 5805bc62-bdc9-4428-a5e2-856a0f4c185e
697 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
698 appliesTo: 4828cc14-1437-45bc-9b07-ad6f015e5f28
699 localizationDisplayId: 75
700 validAccesses: 48
702 # End extended rights
704 # Forest updates
706 dn: CN=ForestUpdates,${CONFIGDN}
707 objectClass: top
708 objectClass: container
710 dn: CN=ActiveDirectoryRodcUpdate,CN=ForestUpdates,${CONFIGDN}
711 objectClass: top
712 objectClass: container
713 revision: 5
715 dn: CN=ActiveDirectoryUpdate,CN=ForestUpdates,${CONFIGDN}
716 objectClass: top
717 objectClass: container
718 revision: 5
720 dn: CN=Operations,CN=ForestUpdates,${CONFIGDN}
721 objectClass: top
722 objectClass: container
724 dn: CN=6b800a81-affe-4a15-8e41-6ea0c7aa89e4,CN=Operations,CN=ForestUpdates,${CONFIGDN}
725 objectClass: top
726 objectClass: container
728 dn: CN=dd07182c-3174-4c95-902a-d64fee285bbf,CN=Operations,CN=ForestUpdates,${CONFIGDN}
729 objectClass: top
730 objectClass: container
732 dn: CN=ffa5ee3c-1405-476d-b344-7ad37d69cc25,CN=Operations,CN=ForestUpdates,${CONFIGDN}
733 objectClass: top
734 objectClass: container
736 dn: CN=099f1587-af70-49c6-ab6c-7b3e82be0fe2,CN=Operations,CN=ForestUpdates,${CONFIGDN}
737 objectClass: top
738 objectClass: container
740 dn: CN=94fdebc6-8eeb-4640-80de-ec52b9ca17fa,CN=Operations,CN=ForestUpdates,${CONFIGDN}
741 objectClass: top
742 objectClass: container
743 objectVersion: 3
745 dn: CN=1a3f6b15-55f2-4752-ba27-3d38a8232c4d,CN=Operations,CN=ForestUpdates,${CONFIGDN}
746 objectClass: top
747 objectClass: container
749 dn: CN=dee21a17-4e8e-4f40-a58c-c0c009b685a7,CN=Operations,CN=ForestUpdates,${CONFIGDN}
750 objectClass: top
751 objectClass: container
753 dn: CN=9bd98bb4-4047-4de5-bf4c-7bd1d0f6d21d,CN=Operations,CN=ForestUpdates,${CONFIGDN}
754 objectClass: top
755 objectClass: container
757 dn: CN=3fe80fbf-bf39-4773-b5bd-3e5767a30d2d,CN=Operations,CN=ForestUpdates,${CONFIGDN}
758 objectClass: top
759 objectClass: container
761 dn: CN=f02915e2-9141-4f73-b8e7-2804662782da,CN=Operations,CN=ForestUpdates,${CONFIGDN}
762 objectClass: top
763 objectClass: container
765 dn: CN=39902c52-ef24-4b4b-8033-2c9dfdd173a2,CN=Operations,CN=ForestUpdates,${CONFIGDN}
766 objectClass: top
767 objectClass: container
769 dn: CN=20bf09b4-6d0b-4cd1-9c09-4231edf1209b,CN=Operations,CN=ForestUpdates,${CONFIGDN}
770 objectClass: top
771 objectClass: container
773 dn: CN=94f238bb-831c-11d6-977b-00c04f613221,CN=Operations,CN=ForestUpdates,${CONFIGDN}
774 objectClass: top
775 objectClass: container
777 dn: CN=94f238bc-831c-11d6-977b-00c04f613221,CN=Operations,CN=ForestUpdates,${CONFIGDN}
778 objectClass: top
779 objectClass: container
781 dn: CN=94f238bd-831c-11d6-977b-00c04f613221,CN=Operations,CN=ForestUpdates,${CONFIGDN}
782 objectClass: top
783 objectClass: container
785 dn: CN=94f238be-831c-11d6-977b-00c04f613221,CN=Operations,CN=ForestUpdates,${CONFIGDN}
786 objectClass: top
787 objectClass: container
789 dn: CN=94f238bf-831c-11d6-977b-00c04f613221,CN=Operations,CN=ForestUpdates,${CONFIGDN}
790 objectClass: top
791 objectClass: container
793 dn: CN=94f238c0-831c-11d6-977b-00c04f613221,CN=Operations,CN=ForestUpdates,${CONFIGDN}
794 objectClass: top
795 objectClass: container
797 dn: CN=eda27b47-e610-11d6-9793-00c04f613221,CN=Operations,CN=ForestUpdates,${CONFIGDN}
798 objectClass: top
799 objectClass: container
801 dn: CN=eda27b48-e610-11d6-9793-00c04f613221,CN=Operations,CN=ForestUpdates,${CONFIGDN}
802 objectClass: top
803 objectClass: container
805 dn: CN=eda27b49-e610-11d6-9793-00c04f613221,CN=Operations,CN=ForestUpdates,${CONFIGDN}
806 objectClass: top
807 objectClass: container
809 dn: CN=eda27b4a-e610-11d6-9793-00c04f613221,CN=Operations,CN=ForestUpdates,${CONFIGDN}
810 objectClass: top
811 objectClass: container
813 dn: CN=26d9c510-e61a-11d6-9793-00c04f613221,CN=Operations,CN=ForestUpdates,${CONFIGDN}
814 objectClass: top
815 objectClass: container
817 dn: CN=26d9c511-e61a-11d6-9793-00c04f613221,CN=Operations,CN=ForestUpdates,${CONFIGDN}
818 objectClass: top
819 objectClass: container
821 dn: CN=3467dae5-dedd-4648-9066-f48ac186b20a,CN=Operations,CN=ForestUpdates,${CONFIGDN}
822 objectClass: top
823 objectClass: container
825 dn: CN=33b7ee33-1386-47cf-baa1-b03e06473253,CN=Operations,CN=ForestUpdates,${CONFIGDN}
826 objectClass: top
827 objectClass: container
829 dn: CN=e9ee8d55-c2fb-4723-a333-c80ff4dfbf45,CN=Operations,CN=ForestUpdates,${CONFIGDN}
830 objectClass: top
831 objectClass: container
833 dn: CN=ccfae63a-7fb5-454c-83ab-0e8e1214974e,CN=Operations,CN=ForestUpdates,${CONFIGDN}
834 objectClass: top
835 objectClass: container
837 dn: CN=ad3c7909-b154-4c16-8bf7-2c3a7870bb3d,CN=Operations,CN=ForestUpdates,${CONFIGDN}
838 objectClass: top
839 objectClass: container
841 dn: CN=26ad2ebf-f8f5-44a4-b97c-a616c8b9d09a,CN=Operations,CN=ForestUpdates,${CONFIGDN}
842 objectClass: top
843 objectClass: container
845 dn: CN=4444c516-f43a-4c12-9c4b-b5c064941d61,CN=Operations,CN=ForestUpdates,${CONFIGDN}
846 objectClass: top
847 objectClass: container
849 dn: CN=436a1a4b-f41a-46e6-ac86-427720ef29f3,CN=Operations,CN=ForestUpdates,${CONFIGDN}
850 objectClass: top
851 objectClass: container
853 dn: CN=b2b7fb45-f50d-41bc-a73b-8f580f3b636a,CN=Operations,CN=ForestUpdates,${CONFIGDN}
854 objectClass: top
855 objectClass: container
857 dn: CN=1bdf6366-c3db-4d0b-b8cb-f99ba9bce20f,CN=Operations,CN=ForestUpdates,${CONFIGDN}
858 objectClass: top
859 objectClass: container
861 dn: CN=63c0f51a-067c-4640-8a4f-044fb33f1049,CN=Operations,CN=ForestUpdates,${CONFIGDN}
862 objectClass: top
863 objectClass: container
865 dn: CN=dae441c0-366e-482e-98d9-60a99a1898cc,CN=Operations,CN=ForestUpdates,${CONFIGDN}
866 objectClass: top
867 objectClass: container
869 dn: CN=7dd09ca6-f0d6-43bf-b7f8-ef348f435617,CN=Operations,CN=ForestUpdates,${CONFIGDN}
870 objectClass: top
871 objectClass: container
873 dn: CN=002fb291-0d00-4b0c-8c00-fe7f50ce6f8d,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
874 objectClass: top
875 objectClass: container
877 dn: CN=07e57d28-ad40-44fc-8334-8a0dc119b3f4,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
878 objectClass: top
879 objectClass: container
881 dn: CN=0fc5a978-0059-4b0a-9dc2-9896e8e389a1,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
882 objectClass: top
883 objectClass: container
885 dn: CN=10338d31-2423-4dff-b4b5-ef025144b01f,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
886 objectClass: top
887 objectClass: container
889 dn: CN=2a858903-5696-4364-b4e5-4cac027ca7a6,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
890 objectClass: top
891 objectClass: container
893 dn: CN=2b9e0609-6d75-498a-9727-c9fcc93f0e42,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
894 objectClass: top
895 objectClass: container
897 dn: CN=3b3adbdb-4485-4559-aed8-9811c4bf90e4,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
898 objectClass: top
899 objectClass: container
901 dn: CN=429a6334-1a00-4515-bf48-676deb55954a,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
902 objectClass: top
903 objectClass: container
905 dn: CN=4c022fd1-adab-4d84-a7f1-9580f03da856,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
906 objectClass: top
907 objectClass: container
909 dn: CN=4c0672a2-437c-4944-b953-5db8f111d665,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
910 objectClass: top
911 objectClass: container
913 dn: CN=4d753a29-26ac-4d1a-bc80-311f947e4f0a,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
914 objectClass: top
915 objectClass: container
917 dn: CN=56040c71-fe93-4037-8fe9-1a4d1a283009,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
918 objectClass: top
919 objectClass: container
921 dn: CN=560cf82d-9572-48a3-9024-6f2b56f1f866,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
922 objectClass: top
923 objectClass: container
925 dn: CN=613bd063-e8e9-4a62-8f4c-cda566f7eb6f,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
926 objectClass: top
927 objectClass: container
929 dn: CN=6eb8eaf9-3403-4ba5-8b4b-ce349a4680ad,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
930 objectClass: top
931 objectClass: container
933 dn: CN=6fd48655-1698-497a-ac8d-8267ce01c80b,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
934 objectClass: top
935 objectClass: container
937 dn: CN=782370ce-3d38-438d-8b0c-464220a3039d,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
938 objectClass: top
939 objectClass: container
941 dn: CN=8f86b825-c322-4101-adc4-579f12d445db,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
942 objectClass: top
943 objectClass: container
945 dn: CN=96541a16-910a-4b66-acde-720a0dff03c7,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
946 objectClass: top
947 objectClass: container
949 dn: CN=9fea28ff-387f-4d57-866d-3893c50f373f,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
950 objectClass: top
951 objectClass: container
953 dn: CN=a96e2ed5-7a7c-4d5c-9d5d-965eca0051da,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
954 objectClass: top
955 objectClass: container
957 dn: CN=abd97102-88dd-4013-a009-0e2c2f967ff6,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
958 objectClass: top
959 objectClass: container
961 dn: CN=bd3413c0-9559-469b-9f3d-51d7faabd81a,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
962 objectClass: top
963 objectClass: container
965 dn: CN=c03b1f37-c240-4910-93c8-1544a452b4b5,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
966 objectClass: top
967 objectClass: container
969 dn: CN=caa2bfad-0cca-483b-8d00-347f943292a8,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
970 objectClass: top
971 objectClass: container
973 dn: CN=d668ad1f-cedd-4565-ab02-9385926ce4f5,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
974 objectClass: top
975 objectClass: container
977 dn: CN=dcb3c95d-deb7-4c51-ad13-43a7d5d06fc7,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
978 objectClass: top
979 objectClass: container
981 dn: CN=ea08c04c-f474-4212-b19e-5e754f9210d4,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
982 objectClass: top
983 objectClass: container
985 dn: CN=ef010a1e-bd88-48c8-a7af-2affd250d77d,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
986 objectClass: top
987 objectClass: container
989 dn: CN=f814097b-3e3d-49ba-8a3a-092c25085f06,CN=Operations,CN=ForestUpdates,CN=Configuration,${DOMAINDN}
990 objectClass: top
991 objectClass: container
993 dn: CN=Windows2003Update,CN=ForestUpdates,${CONFIGDN}
994 objectClass: top
995 objectClass: container
996 revision: 10
998 # End forest updates
1000 dn: CN=LostAndFoundConfig,${CONFIGDN}
1001 objectClass: top
1002 objectClass: lostAndFound
1003 systemFlags: -2147483648
1005 dn: CN=NTDS Quotas,${CONFIGDN}
1006 objectClass: top
1007 objectClass: msDS-QuotaContainer
1008 description: Quota specifications container
1009 isCriticalSystemObject: TRUE
1010 msDS-TombstoneQuotaFactor: 100
1011 systemFlags: -2147483648
1013 # Partitions
1015 dn: CN=Partitions,${CONFIGDN}
1016 objectClass: top
1017 objectClass: crossRefContainer
1018 systemFlags: -2147483648
1019 msDS-Behavior-Version: ${FOREST_FUNCTIONALITY}
1020 showInAdvancedViewOnly: TRUE
1022 # Partitions for DNS are missing here, they are added from provision_dnszones.ldif
1024 dn: CN=Enterprise Configuration,CN=Partitions,${CONFIGDN}
1025 objectClass: top
1026 objectClass: crossRef
1027 dnsRoot: ${DNSDOMAIN}
1028 nCName: ${CONFIGDN}
1029 systemFlags: 1
1031 dn: CN=Enterprise Schema,CN=Partitions,${CONFIGDN}
1032 objectClass: top
1033 objectClass: crossRef
1034 dnsRoot: ${DNSDOMAIN}
1035 nCName: ${SCHEMADN}
1036 systemFlags: 1
1038 dn: CN=${DOMAIN},CN=Partitions,${CONFIGDN}
1039 objectClass: top
1040 objectClass: crossRef
1041 dnsRoot: ${DNSDOMAIN}
1042 msDS-Behavior-Version: ${DOMAIN_FUNCTIONALITY}
1043 nCName: ${DOMAINDN}
1044 nETBIOSName: ${DOMAIN}
1045 nTMixedDomain: 0
1046 systemFlags: 3
1048 # End partitions
1050 dn: CN=Physical Locations,${CONFIGDN}
1051 objectClass: top
1052 objectClass: locality
1053 objectClass: physicalLocation
1054 l: Physical Locations tree root
1056 # Schema located in "ad-schema/*.txt"
1058 # Services
1060 dn: CN=Services,${CONFIGDN}
1061 objectClass: top
1062 objectClass: container
1063 systemFlags: -2147483648
1065 dn: CN=MsmqServices,CN=Services,${CONFIGDN}
1066 objectClass: top
1067 objectClass: mSMQEnterpriseSettings
1068 mSMQVersion: 200
1070 dn: CN=NetServices,CN=Services,${CONFIGDN}
1071 objectClass: top
1072 objectClass: container
1074 dn: CN=Public Key Services,CN=Services,${CONFIGDN}
1075 objectClass: top
1076 objectClass: container
1078 dn: CN=Certificate Templates,CN=Public Key Services,CN=Services,${CONFIGDN}
1079 objectClass: top
1080 objectClass: container
1082 dn: CN=Enrollment Services,CN=Public Key Services,CN=Services,${CONFIGDN}
1083 objectClass: top
1084 objectClass: container
1086 dn: CN=Certification Authorities,CN=Public Key Services,CN=Services,${CONFIGDN}
1087 objectClass: top
1088 objectClass: container
1090 dn: CN=AIA,CN=Public Key Services,CN=Services,${CONFIGDN}
1091 objectClass: top
1092 objectClass: container
1094 dn: CN=CDP,CN=Public Key Services,CN=Services,${CONFIGDN}
1095 objectClass: top
1096 objectClass: container
1098 dn: CN=KRA,CN=Public Key Services,CN=Services,${CONFIGDN}
1099 objectClass: top
1100 objectClass: container
1102 dn: CN=OID,CN=Public Key Services,CN=Services,${CONFIGDN}
1103 objectClass: top
1104 objectClass: msPKI-Enterprise-Oid
1106 dn: CN=RRAS,CN=Services,${CONFIGDN}
1107 objectClass: top
1108 objectClass: container
1110 dn: CN=IdentityDictionary,CN=RRAS,CN=Services,${CONFIGDN}
1111 objectClass: top
1112 objectClass: rRASAdministrationDictionary
1113 msRRASVendorAttributeEntry: 311:6:803:RADIUS Accouting
1114 msRRASVendorAttributeEntry: 311:6:802:RADIUS Authentication
1115 msRRASVendorAttributeEntry: 311:6:801:NT Domain Authentication
1116 msRRASVendorAttributeEntry: 311:6:714:Point to point parallel connection
1117 msRRASVendorAttributeEntry: 311:6:713:Point to point serial connection
1118 msRRASVendorAttributeEntry: 311:6:712:Generic LAN
1119 msRRASVendorAttributeEntry: 311:6:711:Generic WAN
1120 msRRASVendorAttributeEntry: 311:6:710:X.25
1121 msRRASVendorAttributeEntry: 311:6:709:IrDA
1122 msRRASVendorAttributeEntry: 311:6:708:Switched 56
1123 msRRASVendorAttributeEntry: 311:6:707:SONET
1124 msRRASVendorAttributeEntry: 311:6:706:Modem
1125 msRRASVendorAttributeEntry: 311:6:705:ISDN
1126 msRRASVendorAttributeEntry: 311:6:704:ATM
1127 msRRASVendorAttributeEntry: 311:6:703:Frame Relay
1128 msRRASVendorAttributeEntry: 311:6:702:Layer 2 Tunneling Protocol
1129 msRRASVendorAttributeEntry: 311:6:701:Point-to-Point Tunneling Protocol
1130 msRRASVendorAttributeEntry: 311:6:604:Network Address and Port Translation
1131 msRRASVendorAttributeEntry: 311:6:603:Demand Dial Router
1132 msRRASVendorAttributeEntry: 311:6:602:Remote Access Server
1133 msRRASVendorAttributeEntry: 311:6:601:LAN-to- LAN Router
1134 msRRASVendorAttributeEntry: 311:6:503:AppleTalk Forwarding Enabled
1135 msRRASVendorAttributeEntry: 311:6:502:IPX Forwarding Enabled
1136 msRRASVendorAttributeEntry: 311:6:501:IP Forwarding Enabled
1137 msRRASVendorAttributeEntry: 311:5:2:IPX SAP
1138 msRRASVendorAttributeEntry: 311::5:1:IPX RIP
1139 msRRASVendorAttributeEntry: 311:1:10:IGMP Only
1140 msRRASVendorAttributeEntry: 311:0:13:OSPF
1141 msRRASVendorAttributeEntry: 311:0:8:RIP (version 1 or 2)
1143 dn: CN=Windows NT,CN=Services,${CONFIGDN}
1144 objectClass: top
1145 objectClass: container
1147 dn: CN=Directory Service,CN=Windows NT,CN=Services,${CONFIGDN}
1148 objectClass: top
1149 objectClass: nTDSService
1150 msDS-Other-Settings: DisableVLVSupport=0
1151 msDS-Other-Settings: DynamicObjectMinTTL=900
1152 msDS-Other-Settings: DynamicObjectDefaultTTL=86400
1153 sPNMappings: host=alerter,appmgmt,cisvc,clipsrv,browser,dhcp,dnscache,replicator,eventlog,eventsystem,policyagent,oakley,dmserver,dns,mcsvc,fax,msiserver,ias,messenger,netlogon,netman,netdde,netddedsm,nmagent,plugplay,protectedstorage,rasman,rpclocator,rpc,rpcss,remoteaccess,rsvp,samss,scardsvr,scesrv,seclogon,scm,dcom,cifs,spooler,snmp,schedule,tapisrv,trksvr,trkwks,ups,time,wins,www,http,w3svc,iisadmin,msdtc
1154 tombstoneLifetime: 180
1156 dn: CN=Optional Features,CN=Directory Service,CN=Windows NT,CN=Services,${CONFIGDN}
1157 objectClass: top
1158 objectClass: container
1160 dn: CN=Recycle Bin Feature,CN=Optional Features,CN=Directory Service,CN=Windows NT,CN=Services,${CONFIGDN}
1161 objectClass: top
1162 objectClass: msDS-OptionalFeature
1163 msDS-OptionalFeatureGUID: 766ddcd8-acd0-445e-f3b9-a7f9b6744f2a
1164 msDS-OptionalFeatureFlags: 1
1165 msDS-RequiredForestBehaviorVersion: 4
1166 systemFlags: -1946157056
1168 dn: CN=Query-Policies,CN=Directory Service,CN=Windows NT,CN=Services,${CONFIGDN}
1169 objectClass: top
1170 objectClass: container
1172 dn: CN=Default Query Policy,CN=Query-Policies,CN=Directory Service,CN=Windows NT,CN=Services,${CONFIGDN}
1173 objectClass: top
1174 objectClass: queryPolicy
1175 lDAPAdminLimits: MaxValRange=1500
1176 lDAPAdminLimits: MaxReceiveBuffer=10485760
1177 lDAPAdminLimits: MaxDatagramRecv=4096
1178 lDAPAdminLimits: MaxPoolThreads=4
1179 lDAPAdminLimits: MaxResultSetSize=262144
1180 lDAPAdminLimits: MaxTempTableSize=10000
1181 lDAPAdminLimits: MaxQueryDuration=120
1182 lDAPAdminLimits: MaxPageSize=1000
1183 lDAPAdminLimits: MaxNotificationPerConn=5
1184 lDAPAdminLimits: MaxActiveQueries=20
1185 lDAPAdminLimits: MaxConnIdleTime=900
1186 lDAPAdminLimits: InitRecvTimeout=120
1187 lDAPAdminLimits: MaxConnections=5000
1189 # End services
1191 # Sites
1193 dn: CN=Sites,${CONFIGDN}
1194 objectClass: top
1195 objectClass: sitesContainer
1196 systemFlags: -2113929216
1198 dn: CN=${DEFAULTSITE},CN=Sites,${CONFIGDN}
1199 objectClass: top
1200 objectClass: site
1201 systemFlags: 1107296256
1203 dn: CN=Inter-Site Transports,CN=Sites,${CONFIGDN}
1204 objectClass: top
1205 objectClass: interSiteTransportContainer
1206 systemFlags: -2147483648
1208 dn: CN=IP,CN=Inter-Site Transports,CN=Sites,${CONFIGDN}
1209 objectClass: top
1210 objectClass: interSiteTransport
1211 transportAddressAttribute: dNSHostName
1212 transportDLLName: ismip.dll
1213 systemFlags: -2147483648
1215 dn: CN=DEFAULTIPSITELINK,CN=IP,CN=Inter-Site Transports,CN=Sites,${CONFIGDN}
1216 objectClass: top
1217 objectClass: siteLink
1218 cost: 100
1219 replInterval: 180
1220 showInAdvancedViewOnly: TRUE
1221 siteList: CN=${DEFAULTSITE},CN=Sites,${CONFIGDN}
1222 systemFlags: 1073741824
1224 dn: CN=SMTP,CN=Inter-Site Transports,CN=Sites,${CONFIGDN}
1225 objectClass: top
1226 objectClass: interSiteTransport
1227 transportAddressAttribute: mailAddress
1228 transportDLLName: ismsmtp.dll
1229 options: 1
1231 dn: CN=NTDS Site Settings,CN=${DEFAULTSITE},CN=Sites,${CONFIGDN}
1232 objectClass: top
1233 objectClass: applicationSiteSettings
1234 objectClass: nTDSSiteSettings
1235 schedule:: vAAAAAAAAAABAAAAAAAAABQAAAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQE=
1237 dn: CN=Servers,CN=${DEFAULTSITE},CN=Sites,${CONFIGDN}
1238 objectClass: top
1239 objectClass: serversContainer
1240 systemFlags: 33554432
1242 dn: CN=Subnets,CN=Sites,${CONFIGDN}
1243 objectClass: top
1244 objectClass: subnetContainer
1245 systemFlags: -2147483648