3 @IDXATTR
: sAMAccountName
12 realm
: CASE_INSENSITIVE
13 userPrincipalName
: CASE_INSENSITIVE
14 servicePrincipalName
: CASE_INSENSITIVE
15 name
: CASE_INSENSITIVE WILDCARD
16 dn: CASE_INSENSITIVE WILDCARD
17 sAMAccountName
: CASE_INSENSITIVE WILDCARD
18 objectClass: CASE_INSENSITIVE
24 createTimestamp: HIDDEN
25 modifyTimestamp: HIDDEN
33 person: organizationalPerson
34 organizationalPerson: user
36 template
: userTemplate
37 template
: groupTemplate
45 objectClass: domainDNS
48 dnsDomain
: $
{DNSDOMAIN
}
50 objectGUID
: $
{DOMAINGUID
}
51 creationTime
: $
{NTTIME
}
52 forceLogoff
: 0x8000000000000000
53 lockoutDuration
: -18000000000
54 lockOutObservationWindow
: -18000000000
56 whenCreated
: $
{LDAPTIME
}
57 whenChanged
: $
{LDAPTIME
}
60 maxPwdAge
: -37108517437440
63 modifiedCountAtLastProm
: 0
67 objectSid
: $
{DOMAINSID
}
71 objectCategory
: CN=Domain
-DNS
,CN=Schema
,CN=Configuration
,$
{BASEDN
}
72 isCriticalSystemObject
: TRUE
74 dn: CN=Users
,$
{BASEDN
}
76 objectClass: container
78 description: Default container for upgraded user accounts
80 whenCreated
: $
{LDAPTIME
}
81 whenChanged
: $
{LDAPTIME
}
84 showInAdvancedViewOnly
: FALSE
86 objectGUID
: $
{NEWGUID
}
87 systemFlags
: 0x8c000000
88 objectCategory
: CN=Container
,CN=Schema
,CN=Configuration
,$
{BASEDN
}
89 isCriticalSystemObject
: TRUE
91 dn: CN=Computers
,$
{BASEDN
}
93 objectClass: container
95 description: Default container for upgraded computer accounts
97 whenCreated
: $
{LDAPTIME
}
98 whenChanged
: $
{LDAPTIME
}
101 showInAdvancedViewOnly
: FALSE
103 objectGUID
: $
{NEWGUID
}
104 systemFlags
: 0x8c000000
105 objectCategory
: CN=Container
,CN=Schema
,CN=Configuration
,$
{BASEDN
}
106 isCriticalSystemObject
: TRUE
108 dn: OU=Domain Controllers
,$
{BASEDN
}
110 objectClass: organizationalUnit
111 ou: Domain Controllers
112 description: Default container for domain controllers
114 whenCreated
: $
{LDAPTIME
}
115 whenChanged
: $
{LDAPTIME
}
118 showInAdvancedViewOnly
: FALSE
119 name
: Domain Controllers
120 objectGUID
: $
{NEWGUID
}
121 systemFlags
: 0x8c000000
122 objectCategory
: CN=Organizational
-Unit
,CN=Schema
,CN=Configuration
,$
{BASEDN
}
123 isCriticalSystemObject
: TRUE
125 dn: CN=ForeignSecurityPrincipals
,$
{BASEDN
}
127 objectClass: container
128 cn: ForeignSecurityPrincipals
129 description: Default container for security identifiers
(SIDs
) associated with objects from external
, trusted domains
131 whenCreated
: $
{LDAPTIME
}
132 whenChanged
: $
{LDAPTIME
}
135 showInAdvancedViewOnly
: FALSE
136 name
: ForeignSecurityPrincipals
137 objectGUID
: $
{NEWGUID
}
138 systemFlags
: 0x8c000000
139 objectCategory
: CN=Container
,CN=Schema
,CN=Configuration
,$
{BASEDN
}
140 isCriticalSystemObject
: TRUE
142 dn: CN=Builtin
,$
{BASEDN
}
144 objectClass: builtinDomain
147 showInAdvancedViewOnly
: FALSE
149 forceLogoff
: 0x8000000000000000
150 lockoutDuration
: -18000000000
151 lockOutObservationWindow
: -18000000000
153 maxPwdAge
: -37108517437440
156 modifiedCountAtLastProm
: 0
164 objectCategory
: CN=Builtin
-Domain
,CN=Schema
,CN=Configuration
,$
{BASEDN
}
165 isCriticalSystemObject
: TRUE
167 dn: CN=Administrator
,CN=Users
,$
{BASEDN
}
170 objectClass: organizationalPerson
173 description: Built
-in account for administering the computer
/domain
175 whenCreated
: $
{LDAPTIME
}
176 whenChanged
: $
{LDAPTIME
}
178 memberOf
: CN=Group Policy Creator Owners
,CN=Users
,$
{BASEDN
}
179 memberOf
: CN=Domain Admins
,CN=Users
,$
{BASEDN
}
180 memberOf
: CN=Enterprise Admins
,CN=Users
,$
{BASEDN
}
181 memberOf
: CN=Schema Admins
,CN=Users
,$
{BASEDN
}
182 memberOf
: CN=Administrators
,CN=Builtin
,$
{BASEDN
}
185 objectGUID
: $
{NEWGUID
}
186 userAccountControl
: 0x10200
195 objectSid
: $
{DOMAINSID
}-500
199 sAMAccountName
: Administrator
200 sAMAccountType
: 0x30000000
201 objectCategory
: CN=Person,CN=Schema
,CN=Configuration
,$
{BASEDN
}
202 isCriticalSystemObject
: TRUE
203 unicodePwd
: $
{ADMINPASS
}
206 dn: CN=Guest
,CN=Users
,$
{BASEDN
}
209 objectClass: organizationalPerson
212 description: Built
-in account for guest access to the computer
/domain
214 whenCreated
: $
{LDAPTIME
}
215 whenChanged
: $
{LDAPTIME
}
217 memberOf
: CN=Guests
,CN=Builtin
,$
{BASEDN
}
220 objectGUID
: $
{NEWGUID
}
221 userAccountControl
: 0x10222
230 objectSid
: $
{DOMAINSID
}-501
233 sAMAccountName
: Guest
234 sAMAccountType
: 0x30000000
235 objectCategory
: CN=Person,CN=Schema
,CN=Configuration
,$
{BASEDN
}
236 isCriticalSystemObject
: TRUE
238 dn: CN=Administrators
,CN=Builtin
,$
{BASEDN
}
242 description: Administrators have complete and unrestricted access to the computer
/domain
243 member
: CN=Domain Admins
,CN=Users
,$
{BASEDN
}
244 member
: CN=Enterprise Admins
,CN=Users
,$
{BASEDN
}
245 member
: CN=Administrator
,CN=Users
,$
{BASEDN
}
247 whenCreated
: $
{LDAPTIME
}
248 whenChanged
: $
{LDAPTIME
}
252 objectGUID
: $
{NEWGUID
}
253 objectSid
: S
-1-5-32-544
255 sAMAccountName
: Administrators
256 sAMAccountType
: 0x20000000
257 systemFlags
: 0x8c000000
258 groupType
: 0x80000005
259 objectCategory
: CN=Group
,CN=Schema
,CN=Configuration
,$
{BASEDN
}
260 isCriticalSystemObject
: TRUE
262 privilege
: SeSecurityPrivilege
263 privilege
: SeBackupPrivilege
264 privilege
: SeRestorePrivilege
265 privilege
: SeSystemtimePrivilege
266 privilege
: SeShutdownPrivilege
267 privilege
: SeRemoteShutdownPrivilege
268 privilege
: SeTakeOwnershipPrivilege
269 privilege
: SeDebugPrivilege
270 privilege
: SeSystemEnvironmentPrivilege
271 privilege
: SeSystemProfilePrivilege
272 privilege
: SeProfileSingleProcessPrivilege
273 privilege
: SeIncreaseBasePriorityPrivilege
274 privilege
: SeLoadDriverPrivilege
275 privilege
: SeCreatePagefilePrivilege
276 privilege
: SeIncreaseQuotaPrivilege
277 privilege
: SeChangeNotifyPrivilege
278 privilege
: SeUndockPrivilege
279 privilege
: SeManageVolumePrivilege
280 privilege
: SeImpersonatePrivilege
281 privilege
: SeCreateGlobalPrivilege
282 privilege
: SeEnableDelegationPrivilege
283 privilege
: SeInteractiveLogonRight
284 privilege
: SeNetworkLogonRight
285 privilege
: SeRemoteInteractiveLogonRight
288 dn: CN=Users
,CN=Builtin
,$
{BASEDN
}
292 description: Users are prevented from making accidental or intentional system
-wide changes. Thus
, Users can run certified applications
, but not most legacy applications
293 member
: CN=Domain Users
,CN=Users
,$
{BASEDN
}
295 whenCreated
: $
{LDAPTIME
}
296 whenChanged
: $
{LDAPTIME
}
300 objectGUID
: $
{NEWGUID
}
301 objectSid
: S
-1-5-32-545
302 sAMAccountName
: Users
303 sAMAccountType
: 0x20000000
304 systemFlags
: 0x8c000000
305 groupType
: 0x80000005
306 objectCategory
: CN=Group
,CN=Schema
,CN=Configuration
,$
{BASEDN
}
307 isCriticalSystemObject
: TRUE
309 dn: CN=Guests
,CN=Builtin
,$
{BASEDN
}
313 description: Guests have the same access as members of the Users group by default
, except for the Guest account which is further restricted
314 member
: CN=Domain Guests
,CN=Users
,$
{BASEDN
}
315 member
: CN=Guest
,CN=Users
,$
{BASEDN
}
317 whenCreated
: $
{LDAPTIME
}
318 whenChanged
: $
{LDAPTIME
}
322 objectGUID
: $
{NEWGUID
}
323 objectSid
: S
-1-5-32-546
324 sAMAccountName
: Guests
325 sAMAccountType
: 0x20000000
326 systemFlags
: 0x8c000000
327 groupType
: 0x80000005
328 objectCategory
: CN=Group
,CN=Schema
,CN=Configuration
,$
{BASEDN
}
329 isCriticalSystemObject
: TRUE
332 dn: CN=Print Operators
,CN=Builtin
,$
{BASEDN
}
336 description: Members can administer domain printers
338 whenCreated
: $
{LDAPTIME
}
339 whenChanged
: $
{LDAPTIME
}
342 name
: Print Operators
343 objectGUID
: $
{NEWGUID
}
344 objectSid
: S
-1-5-32-550
346 sAMAccountName
: Print Operators
347 sAMAccountType
: 0x20000000
348 systemFlags
: 0x8c000000
349 groupType
: 0x80000005
350 objectCategory
: CN=Group
,CN=Schema
,CN=Configuration
,$
{BASEDN
}
351 isCriticalSystemObject
: TRUE
352 privilege
: SeLoadDriverPrivilege
353 privilege
: SeShutdownPrivilege
354 privilege
: SeInteractiveLogonRight
356 dn: CN=Backup Operators
,CN=Builtin
,$
{BASEDN
}
360 description: Backup Operators can override security restrictions for the sole purpose of backing up or restoring files
362 whenCreated
: $
{LDAPTIME
}
363 whenChanged
: $
{LDAPTIME
}
366 name
: Backup Operators
367 objectGUID
: $
{NEWGUID
}
368 objectSid
: S
-1-5-32-551
370 sAMAccountName
: Backup Operators
371 sAMAccountType
: 0x20000000
372 systemFlags
: 0x8c000000
373 groupType
: 0x80000005
374 objectCategory
: CN=Group
,CN=Schema
,CN=Configuration
,$
{BASEDN
}
375 isCriticalSystemObject
: TRUE
376 privilege
: SeBackupPrivilege
377 privilege
: SeRestorePrivilege
378 privilege
: SeShutdownPrivilege
379 privilege
: SeInteractiveLogonRight
381 dn: CN=Replicator
,CN=Builtin
,$
{BASEDN
}
385 description: Supports file replication in a domain
387 whenCreated
: $
{LDAPTIME
}
388 whenChanged
: $
{LDAPTIME
}
392 objectGUID
: $
{NEWGUID
}
393 objectSid
: S
-1-5-32-552
395 sAMAccountName
: Replicator
396 sAMAccountType
: 0x20000000
397 systemFlags
: 0x8c000000
398 groupType
: 0x80000005
399 objectCategory
: CN=Group
,CN=Schema
,CN=Configuration
,$
{BASEDN
}
400 isCriticalSystemObject
: TRUE
402 dn: CN=Remote Desktop Users
,CN=Builtin
,$
{BASEDN
}
405 cn: Remote Desktop Users
406 description: Members in this group are granted the right to logon remotely
408 whenCreated
: $
{LDAPTIME
}
409 whenChanged
: $
{LDAPTIME
}
412 name
: Remote Desktop Users
413 objectGUID
: $
{NEWGUID
}
414 objectSid
: S
-1-5-32-555
415 sAMAccountName
: Remote Desktop Users
416 sAMAccountType
: 0x20000000
417 systemFlags
: 0x8c000000
418 groupType
: 0x80000005
419 objectCategory
: CN=Group
,CN=Schema
,CN=Configuration
,$
{BASEDN
}
420 isCriticalSystemObject
: TRUE
422 dn: CN=Network Configuration Operators
,CN=Builtin
,$
{BASEDN
}
425 cn: Network Configuration Operators
426 description: Members in this group can have some administrative privileges to manage configuration of networking features
428 whenCreated
: $
{LDAPTIME
}
429 whenChanged
: $
{LDAPTIME
}
432 name
: Network Configuration Operators
433 objectGUID
: $
{NEWGUID
}
434 objectSid
: S
-1-5-32-556
435 sAMAccountName
: Network Configuration Operators
436 sAMAccountType
: 0x20000000
437 systemFlags
: 0x8c000000
438 groupType
: 0x80000005
439 objectCategory
: CN=Group
,CN=Schema
,CN=Configuration
,$
{BASEDN
}
440 isCriticalSystemObject
: TRUE
442 dn: CN=Performance Monitor Users
,CN=Builtin
,$
{BASEDN
}
445 cn: Performance Monitor Users
446 description: Members of this group have remote access to monitor this computer
448 whenCreated
: $
{LDAPTIME
}
449 whenChanged
: $
{LDAPTIME
}
452 name
: Performance Monitor Users
453 objectGUID
: $
{NEWGUID
}
454 objectSid
: S
-1-5-32-558
455 sAMAccountName
: Performance Monitor Users
456 sAMAccountType
: 0x20000000
457 systemFlags
: 0x8c000000
458 groupType
: 0x80000005
459 objectCategory
: CN=Group
,CN=Schema
,CN=Configuration
,$
{BASEDN
}
460 isCriticalSystemObject
: TRUE
462 dn: CN=Performance Log Users
,CN=Builtin
,$
{BASEDN
}
465 cn: Performance Log Users
466 description: Members of this group have remote access to schedule logging of performance counters on this computer
468 whenCreated
: $
{LDAPTIME
}
469 whenChanged
: $
{LDAPTIME
}
472 name
: Performance Log Users
473 objectGUID
: $
{NEWGUID
}
474 objectSid
: S
-1-5-32-559
475 sAMAccountName
: Performance Log Users
476 sAMAccountType
: 0x20000000
477 systemFlags
: 0x8c000000
478 groupType
: 0x80000005
479 objectCategory
: CN=Group
,CN=Schema
,CN=Configuration
,$
{BASEDN
}
480 isCriticalSystemObject
: TRUE
482 dn: CN=$
{NETBIOSNAME
},OU=Domain Controllers
,$
{BASEDN
}
485 objectClass: organizationalPerson
487 objectClass: computer
490 whenCreated
: $
{LDAPTIME
}
491 whenChanged
: $
{LDAPTIME
}
495 objectGUID
: $
{HOSTGUID
}
496 userAccountControl
: 532480
502 lastLogon
: 127273269057298624
504 pwdLastSet
: 127258826171655328
506 objectSid
: $
{DOMAINSID
}-1000
507 accountExpires
: 9223372036854775807
509 sAMAccountName
: $
{NETBIOSNAME
}$
510 sAMAccountType
: 805306369
511 operatingSystem
: Samba
512 operatingSystemVersion
: 4.0
513 dNSHostName
: $
{DNSNAME
}
514 objectCategory
: CN=Computer
,CN=Schema
,CN=Configuration
,$
{BASEDN
}
515 isCriticalSystemObject
: TRUE
516 unicodePwd
: $
{RANDPASS
}
517 servicePrincipalName
: HOST
/$
{DNSNAME
}
518 servicePrincipalName
: HOST
/$
{NETBIOSNAME
}
519 servicePrincipalName
: CIFS
/$
{DNSNAME
}
520 servicePrincipalName
: CIFS
/$
{NETBIOSNAME
}
521 servicePrincipalName
: LDAP
/$
{DNSNAME
}
522 servicePrincipalName
: LDAP
/$
{NETBIOSNAME
}
524 dn: CN=krbtgt
,CN=Users
,$
{BASEDN
}
527 objectClass: organizationalPerson
530 description: Key Distribution Center Service Account
532 whenCreated
: $
{LDAPTIME
}
533 whenChanged
: $
{LDAPTIME
}
536 showInAdvancedViewOnly
: TRUE
538 objectGUID
: $
{NEWGUID
}
539 userAccountControl
: 514
546 pwdLastSet
: 127258826179466560
548 objectSid
: $
{DOMAINSID
}-502
550 accountExpires
: 9223372036854775807
552 sAMAccountName
: krbtgt
553 sAMAccountType
: 805306368
554 servicePrincipalName
: kadmin
/changepw
555 objectCategory
: CN=Person,CN=Schema
,CN=Configuration
,$
{BASEDN
}
556 isCriticalSystemObject
: TRUE
557 unicodePwd
: $
{RANDPASS
}
559 dn: CN=Domain Computers
,CN=Users
,$
{BASEDN
}
563 description: All workstations and servers joined to the domain
565 whenCreated
: $
{LDAPTIME
}
566 whenChanged
: $
{LDAPTIME
}
569 name
: Domain Computers
570 objectGUID
: $
{NEWGUID
}
571 objectSid
: $
{DOMAINSID
}-515
572 sAMAccountName
: Domain Computers
573 sAMAccountType
: 0x10000000
574 groupType
: 0x80000002
575 objectCategory
: CN=Group
,CN=Schema
,CN=Configuration
,$
{BASEDN
}
576 isCriticalSystemObject
: TRUE
578 dn: CN=Domain Controllers
,CN=Users
,$
{BASEDN
}
581 cn: Domain Controllers
582 description: All domain controllers in the domain
584 whenCreated
: $
{LDAPTIME
}
585 whenChanged
: $
{LDAPTIME
}
588 name
: Domain Controllers
589 objectGUID
: $
{NEWGUID
}
590 objectSid
: $
{DOMAINSID
}-516
592 sAMAccountName
: Domain Controllers
593 sAMAccountType
: 0x10000000
594 groupType
: 0x80000002
595 objectCategory
: CN=Group
,CN=Schema
,CN=Configuration
,$
{BASEDN
}
596 isCriticalSystemObject
: TRUE
598 dn: CN=Schema Admins
,CN=Users
,$
{BASEDN
}
602 description: Designated administrators of the schema
603 member
: CN=Administrator
,CN=Users
,$
{BASEDN
}
605 whenCreated
: $
{LDAPTIME
}
606 whenChanged
: $
{LDAPTIME
}
610 objectGUID
: $
{NEWGUID
}
611 objectSid
: $
{DOMAINSID
}-518
613 sAMAccountName
: Schema Admins
614 sAMAccountType
: 0x10000000
615 groupType
: 0x80000002
616 objectCategory
: CN=Group
,CN=Schema
,CN=Configuration
,$
{BASEDN
}
617 isCriticalSystemObject
: TRUE
620 dn: CN=Enterprise Admins
,CN=Users
,$
{BASEDN
}
623 cn: Enterprise Admins
624 description: Designated administrators of the enterprise
625 member
: CN=Administrator
,CN=Users
,$
{BASEDN
}
627 whenCreated
: $
{LDAPTIME
}
628 whenChanged
: $
{LDAPTIME
}
630 memberOf
: CN=Administrators
,CN=Builtin
,$
{BASEDN
}
632 name
: Enterprise Admins
633 objectGUID
: $
{NEWGUID
}
634 objectSid
: $
{DOMAINSID
}-519
636 sAMAccountName
: Enterprise Admins
637 sAMAccountType
: 0x10000000
638 groupType
: 0x80000002
639 objectCategory
: CN=Group
,CN=Schema
,CN=Configuration
,$
{BASEDN
}
640 isCriticalSystemObject
: TRUE
643 dn: CN=Cert Publishers
,CN=Users
,$
{BASEDN
}
647 description: Members of this group are permitted to publish certificates to the Active Directory
649 whenCreated
: $
{LDAPTIME
}
650 whenChanged
: $
{LDAPTIME
}
653 name
: Cert Publishers
654 objectGUID
: $
{NEWGUID
}
655 objectSid
: $
{DOMAINSID
}-517
656 sAMAccountName
: Cert Publishers
657 sAMAccountType
: 0x20000000
658 groupType
: 0x80000004
659 objectCategory
: CN=Group
,CN=Schema
,CN=Configuration
,$
{BASEDN
}
660 isCriticalSystemObject
: TRUE
662 dn: CN=Domain Admins
,CN=Users
,$
{BASEDN
}
666 description: Designated administrators of the domain
667 member
: CN=Administrator
,CN=Users
,$
{BASEDN
}
669 whenCreated
: $
{LDAPTIME
}
670 whenChanged
: $
{LDAPTIME
}
672 memberOf
: CN=Administrators
,CN=Builtin
,$
{BASEDN
}
675 objectGUID
: $
{NEWGUID
}
676 objectSid
: $
{DOMAINSID
}-512
678 sAMAccountName
: Domain Admins
679 sAMAccountType
: 0x10000000
680 groupType
: 0x80000002
681 objectCategory
: CN=Group
,CN=Schema
,CN=Configuration
,$
{BASEDN
}
682 isCriticalSystemObject
: TRUE
685 dn: CN=Domain Users
,CN=Users
,$
{BASEDN
}
689 description: All domain users
691 whenCreated
: $
{LDAPTIME
}
692 whenChanged
: $
{LDAPTIME
}
694 memberOf
: CN=Users
,CN=Builtin
,$
{BASEDN
}
697 objectGUID
: $
{NEWGUID
}
698 objectSid
: $
{DOMAINSID
}-513
699 sAMAccountName
: Domain Users
700 sAMAccountType
: 0x10000000
701 groupType
: 0x80000002
702 objectCategory
: CN=Group
,CN=Schema
,CN=Configuration
,$
{BASEDN
}
703 isCriticalSystemObject
: TRUE
706 dn: CN=Domain Guests
,CN=Users
,$
{BASEDN
}
710 description: All domain guests
712 whenCreated
: $
{LDAPTIME
}
713 whenChanged
: $
{LDAPTIME
}
715 memberOf
: CN=Guests
,CN=Builtin
,$
{BASEDN
}
718 objectGUID
: $
{NEWGUID
}
719 objectSid
: $
{DOMAINSID
}-514
720 sAMAccountName
: Domain Guests
721 sAMAccountType
: 0x10000000
722 groupType
: 0x80000002
723 objectCategory
: CN=Group
,CN=Schema
,CN=Configuration
,$
{BASEDN
}
724 isCriticalSystemObject
: TRUE
726 dn: CN=Group Policy Creator Owners
,CN=Users
,$
{BASEDN
}
729 cn: Group Policy Creator Owners
730 description: Members in this group can
modify group policy for the domain
731 member
: CN=Administrator
,CN=Users
,$
{BASEDN
}
733 whenCreated
: $
{LDAPTIME
}
734 whenChanged
: $
{LDAPTIME
}
737 name
: Group Policy Creator Owners
738 objectGUID
: $
{NEWGUID
}
739 objectSid
: $
{DOMAINSID
}-520
740 sAMAccountName
: Group Policy Creator Owners
741 sAMAccountType
: 0x10000000
742 groupType
: 0x80000002
743 objectCategory
: CN=Group
,CN=Schema
,CN=Configuration
,$
{BASEDN
}
744 isCriticalSystemObject
: TRUE
747 dn: CN=RAS and IAS Servers
,CN=Users
,$
{BASEDN
}
750 cn: RAS and IAS Servers
751 description: Servers in this group can access remote access properties of users
753 whenCreated
: $
{LDAPTIME
}
754 whenChanged
: $
{LDAPTIME
}
757 name
: RAS and IAS Servers
758 objectGUID
: $
{NEWGUID
}
759 objectSid
: $
{DOMAINSID
}-553
760 sAMAccountName
: RAS and IAS Servers
761 sAMAccountType
: 0x20000000
762 groupType
: 0x80000004
763 objectCategory
: CN=Group
,CN=Schema
,CN=Configuration
,$
{BASEDN
}
764 isCriticalSystemObject
: TRUE
766 dn: CN=Server Operators
,CN=Builtin
,$
{BASEDN
}
770 description: Members can administer domain servers
772 whenCreated
: $
{LDAPTIME
}
773 whenChanged
: $
{LDAPTIME
}
776 name
: Server Operators
777 objectGUID
: $
{NEWGUID
}
778 objectSid
: S
-1-5-32-549
780 sAMAccountName
: Server Operators
781 sAMAccountType
: 0x20000000
782 systemFlags
: 0x8c000000
783 groupType
: 0x80000005
784 objectCategory
: CN=Group
,CN=Schema
,CN=Configuration
,$
{BASEDN
}
785 isCriticalSystemObject
: TRUE
786 privilege
: SeBackupPrivilege
787 privilege
: SeSystemtimePrivilege
788 privilege
: SeRemoteShutdownPrivilege
789 privilege
: SeRestorePrivilege
790 privilege
: SeShutdownPrivilege
791 privilege
: SeInteractiveLogonRight
793 dn: CN=Account Operators
,CN=Builtin
,$
{BASEDN
}
796 cn: Account Operators
797 description: Members can administer domain user and group accounts
799 whenCreated
: $
{LDAPTIME
}
800 whenChanged
: $
{LDAPTIME
}
803 name
: Account Operators
804 objectGUID
: $
{NEWGUID
}
805 objectSid
: S
-1-5-32-548
807 sAMAccountName
: Account Operators
808 sAMAccountType
: 0x20000000
809 systemFlags
: 0x8c000000
810 groupType
: 0x80000005
811 objectCategory
: CN=Group
,CN=Schema
,CN=Configuration
,$
{BASEDN
}
812 isCriticalSystemObject
: TRUE
813 privilege
: SeInteractiveLogonRight
815 dn: CN=Templates
,$
{BASEDN
}
817 objectClass: container
819 description: Container for SAM account templates
821 whenCreated
: $
{LDAPTIME
}
822 whenChanged
: $
{LDAPTIME
}
825 showInAdvancedViewOnly
: FALSE
827 objectGUID
: $
{NEWGUID
}
828 systemFlags
: 0x8c000000
829 objectCategory
: CN=Container
,CN=Schema
,CN=Configuration
,$
{BASEDN
}
830 isCriticalSystemObject
: TRUE
833 # note! the template users must not match normal searches. Be careful
834 # with what classes you put them in
837 dn: CN=TemplateUser
,CN=Templates
,$
{BASEDN
}
840 objectClass: organizationalPerson
841 objectClass: Template
842 objectClass: userTemplate
846 userAccountControl
: 0x202
857 sAMAccountType
: 0x30000000
859 dn: CN=TemplateMemberServer
,CN=Templates
,$
{BASEDN
}
861 objectClass: Template
862 objectClass: userTemplate
863 cn: TemplateMemberServer
864 name
: TemplateMemberServer
866 userAccountControl
: 0x1002
877 sAMAccountType
: 0x30000001
879 dn: CN=TemplateDomainController
,CN=Templates
,$
{BASEDN
}
881 objectClass: Template
882 objectClass: userTemplate
883 cn: TemplateDomainController
884 name
: TemplateDomainController
886 userAccountControl
: 0x2002
897 sAMAccountType
: 0x30000001
899 dn: CN=TemplateTrustingDomain
,CN=Templates
,$
{BASEDN
}
901 objectClass: Template
902 objectClass: userTemplate
903 cn: TemplateTrustingDomain
904 name
: TemplateTrustingDomain
906 userAccountControl
: 0x820
917 sAMAccountType
: 0x30000002
919 dn: CN=TemplateGroup
,CN=Templates
,$
{BASEDN
}
921 objectClass: Template
922 objectClass: groupTemplate
926 groupType
: 0x80000002
927 sAMAccountType
: 0x10000000
929 dn: CN=TemplateAlias
,CN=Templates
,$
{BASEDN
}
931 objectClass: Template
932 objectClass: aliasTemplate
936 groupType
: 0x80000004
937 sAMAccountType
: 0x10000000
939 dn: CN=TemplateForeignSecurityPrincipal
,CN=Templates
,$
{BASEDN
}
941 objectClass: Template
942 objectClass: foreignSecurityPrincipalTemplate
943 cn: TemplateForeignSecurityPrincipal
944 name
: TemplateForeignSecurityPrincipal