source4/setup/provision_users.ldif

   1 dn: CN=Administrator,CN=Users,${BASEDN}
   2 objectClass: user
   3 cn: Administrator
   4 description: Built-in account for administering the computer/domain
   5 memberOf: CN=Group Policy Creator Owners,CN=Users,${BASEDN}
   6 memberOf: CN=Domain Admins,CN=Users,${BASEDN}
   7 memberOf: CN=Enterprise Admins,CN=Users,${BASEDN}
   8 memberOf: CN=Schema Admins,CN=Users,${BASEDN}
   9 memberOf: CN=Administrators,CN=Builtin,${BASEDN}
  10 userAccountControl: 66048
  11 objectSid: ${DOMAINSID}-500
  12 adminCount: 1
  13 accountExpires: -1
  14 sAMAccountName: Administrator
  15 isCriticalSystemObject: TRUE
  16 sambaPassword: ${ADMINPASS}
  17
  18 dn: CN=Guest,CN=Users,${BASEDN}
  19 objectClass: user
  20 cn: Guest
  21 description: Built-in account for guest access to the computer/domain
  22 memberOf: CN=Guests,CN=Builtin,${BASEDN}
  23 userAccountControl: 66082
  24 primaryGroupID: 514
  25 objectSid: ${DOMAINSID}-501
  26 sAMAccountName: Guest
  27 isCriticalSystemObject: TRUE
  28
  29 dn: CN=Administrators,CN=Builtin,${BASEDN}
  30 objectClass: top
  31 objectClass: group
  32 cn: Administrators
  33 description: Administrators have complete and unrestricted access to the computer/domain
  34 member: CN=Domain Admins,CN=Users,${BASEDN}
  35 member: CN=Enterprise Admins,CN=Users,${BASEDN}
  36 member: CN=Administrator,CN=Users,${BASEDN}
  37 objectSid: S-1-5-32-544
  38 adminCount: 1
  39 sAMAccountName: Administrators
  40 sAMAccountType: 536870912
  41 systemFlags: 2348810240
  42 groupType: 2147483653
  43 objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
  44 isCriticalSystemObject: TRUE
  45 privilege: SeSecurityPrivilege
  46 privilege: SeBackupPrivilege
  47 privilege: SeRestorePrivilege
  48 privilege: SeSystemtimePrivilege
  49 privilege: SeShutdownPrivilege
  50 privilege: SeRemoteShutdownPrivilege
  51 privilege: SeTakeOwnershipPrivilege
  52 privilege: SeDebugPrivilege
  53 privilege: SeSystemEnvironmentPrivilege
  54 privilege: SeSystemProfilePrivilege
  55 privilege: SeProfileSingleProcessPrivilege
  56 privilege: SeIncreaseBasePriorityPrivilege
  57 privilege: SeLoadDriverPrivilege
  58 privilege: SeCreatePagefilePrivilege
  59 privilege: SeIncreaseQuotaPrivilege
  60 privilege: SeChangeNotifyPrivilege
  61 privilege: SeUndockPrivilege
  62 privilege: SeManageVolumePrivilege
  63 privilege: SeImpersonatePrivilege
  64 privilege: SeCreateGlobalPrivilege
  65 privilege: SeEnableDelegationPrivilege
  66 privilege: SeInteractiveLogonRight
  67 privilege: SeNetworkLogonRight
  68 privilege: SeRemoteInteractiveLogonRight
  69
  70
  71 dn: CN=${NETBIOSNAME},CN=Domain Controllers,${BASEDN}
  72 objectClass: computer
  73 cn: ${NETBIOSNAME}
  74 userAccountControl: 532480
  75 localPolicyFlags: 0
  76 primaryGroupID: 516
  77 accountExpires: 9223372036854775807
  78 sAMAccountName: ${NETBIOSNAME}$
  79 sAMAccountType: 805306369
  80 operatingSystem: Samba
  81 operatingSystemVersion: 4.0
  82 dNSHostName: ${DNSNAME}
  83 isCriticalSystemObject: TRUE
  84 sambaPassword: ${MACHINEPASS}
  85 servicePrincipalName: HOST/${DNSNAME}
  86 servicePrincipalName: HOST/${NETBIOSNAME}
  87 servicePrincipalName: HOST/${DNSNAME}/${REALM}
  88 servicePrincipalName: HOST/${NETBIOSNAME}/${REALM}
  89 servicePrincipalName: HOST/${DNSNAME}/${DOMAIN}
  90 servicePrincipalName: HOST/${NETBIOSNAME}/${DOMAIN}
  91 ${HOSTGUID_ADD}
  92
  93 dn: CN=Users,CN=Builtin,${BASEDN}
  94 objectClass: top
  95 objectClass: group
  96 cn: Users
  97 description: Users are prevented from making accidental or intentional system-wide changes.  Thus, Users can run certified applications, but not most legacy applications
  98 member: CN=Domain Users,CN=Users,${BASEDN}
  99 objectSid: S-1-5-32-545
 100 sAMAccountName: Users
 101 sAMAccountType: 536870912
 102 systemFlags: 2348810240
 103 groupType: 2147483653
 104 objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
 105 isCriticalSystemObject: TRUE
 106
 107 dn: CN=Guests,CN=Builtin,${BASEDN}
 108 objectClass: top
 109 objectClass: group
 110 cn: Guests
 111 description: Guests have the same access as members of the Users group by default, except for the Guest account which is further restricted
 112 member: CN=Domain Guests,CN=Users,${BASEDN}
 113 member: CN=Guest,CN=Users,${BASEDN}
 114 objectSid: S-1-5-32-546
 115 sAMAccountName: Guests
 116 sAMAccountType: 536870912
 117 systemFlags: 2348810240
 118 groupType: 2147483653
 119 objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
 120 isCriticalSystemObject: TRUE
 121
 122 dn: CN=Print Operators,CN=Builtin,${BASEDN}
 123 objectClass: top
 124 objectClass: group
 125 cn: Print Operators
 126 description: Members can administer domain printers
 127 objectSid: S-1-5-32-550
 128 adminCount: 1
 129 sAMAccountName: Print Operators
 130 sAMAccountType: 536870912
 131 systemFlags: 2348810240
 132 groupType: 2147483653
 133 objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
 134 isCriticalSystemObject: TRUE
 135 privilege: SeLoadDriverPrivilege
 136 privilege: SeShutdownPrivilege
 137 privilege: SeInteractiveLogonRight
 138
 139 dn: CN=Backup Operators,CN=Builtin,${BASEDN}
 140 objectClass: top
 141 objectClass: group
 142 cn: Backup Operators
 143 description: Backup Operators can override security restrictions for the sole purpose of backing up or restoring files
 144 objectSid: S-1-5-32-551
 145 adminCount: 1
 146 sAMAccountName: Backup Operators
 147 sAMAccountType: 536870912
 148 systemFlags: 2348810240
 149 groupType: 2147483653
 150 objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
 151 isCriticalSystemObject: TRUE
 152 privilege: SeBackupPrivilege
 153 privilege: SeRestorePrivilege
 154 privilege: SeShutdownPrivilege
 155 privilege: SeInteractiveLogonRight
 156
 157 dn: CN=Replicator,CN=Builtin,${BASEDN}
 158 objectClass: top
 159 objectClass: group
 160 cn: Replicator
 161 description: Supports file replication in a domain
 162 objectSid: S-1-5-32-552
 163 adminCount: 1
 164 sAMAccountName: Replicator
 165 sAMAccountType: 536870912
 166 systemFlags: 2348810240
 167 groupType: 2147483653
 168 objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
 169 isCriticalSystemObject: TRUE
 170
 171 dn: CN=Remote Desktop Users,CN=Builtin,${BASEDN}
 172 objectClass: top
 173 objectClass: group
 174 cn: Remote Desktop Users
 175 description: Members in this group are granted the right to logon remotely
 176 objectSid: S-1-5-32-555
 177 sAMAccountName: Remote Desktop Users
 178 sAMAccountType: 536870912
 179 systemFlags: 2348810240
 180 groupType: 2147483653
 181 objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
 182 isCriticalSystemObject: TRUE
 183
 184 dn: CN=Network Configuration Operators,CN=Builtin,${BASEDN}
 185 objectClass: top
 186 objectClass: group
 187 cn: Network Configuration Operators
 188 description: Members in this group can have some administrative privileges to manage configuration of networking features
 189 objectSid: S-1-5-32-556
 190 sAMAccountName: Network Configuration Operators
 191 sAMAccountType: 536870912
 192 systemFlags: 2348810240
 193 groupType: 2147483653
 194 objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
 195 isCriticalSystemObject: TRUE
 196
 197 dn: CN=Performance Monitor Users,CN=Builtin,${BASEDN}
 198 objectClass: top
 199 objectClass: group
 200 cn: Performance Monitor Users
 201 description: Members of this group have remote access to monitor this computer
 202 objectSid: S-1-5-32-558
 203 sAMAccountName: Performance Monitor Users
 204 sAMAccountType: 536870912
 205 systemFlags: 2348810240
 206 groupType: 2147483653
 207 objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
 208 isCriticalSystemObject: TRUE
 209
 210 dn: CN=Performance Log Users,CN=Builtin,${BASEDN}
 211 objectClass: top
 212 objectClass: group
 213 cn: Performance Log Users
 214 description: Members of this group have remote access to schedule logging of performance counters on this computer
 215 objectSid: S-1-5-32-559
 216 sAMAccountName: Performance Log Users
 217 sAMAccountType: 536870912
 218 systemFlags: 2348810240
 219 groupType: 2147483653
 220 objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
 221 isCriticalSystemObject: TRUE
 222
 223 dn: CN=krbtgt,CN=Users,${BASEDN}
 224 objectClass: top
 225 objectClass: person
 226 objectClass: organizationalPerson
 227 objectClass: user
 228 cn: krbtgt
 229 description: Key Distribution Center Service Account
 230 showInAdvancedViewOnly: TRUE
 231 userAccountControl: 514
 232 objectSid: ${DOMAINSID}-502
 233 adminCount: 1
 234 accountExpires: 9223372036854775807
 235 sAMAccountName: krbtgt
 236 sAMAccountType: 805306368
 237 servicePrincipalName: kadmin/changepw
 238 isCriticalSystemObject: TRUE
 239 sambaPassword: ${KRBTGTPASS}
 240
 241 dn: CN=Domain Computers,CN=Users,${BASEDN}
 242 objectClass: top
 243 objectClass: group
 244 cn: Domain Computers
 245 description: All workstations and servers joined to the domain
 246 objectSid: ${DOMAINSID}-515
 247 sAMAccountName: Domain Computers
 248 objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
 249 isCriticalSystemObject: TRUE
 250
 251 dn: CN=Domain Controllers,CN=Users,${BASEDN}
 252 objectClass: top
 253 objectClass: group
 254 cn: Domain Controllers
 255 description: All domain controllers in the domain
 256 objectSid: ${DOMAINSID}-516
 257 adminCount: 1
 258 sAMAccountName: Domain Controllers
 259 isCriticalSystemObject: TRUE
 260
 261 dn: CN=Schema Admins,CN=Users,${BASEDN}
 262 objectClass: top
 263 objectClass: group
 264 cn: Schema Admins
 265 description: Designated administrators of the schema
 266 member: CN=Administrator,CN=Users,${BASEDN}
 267 objectSid: ${DOMAINSID}-518
 268 adminCount: 1
 269 sAMAccountName: Schema Admins
 270 isCriticalSystemObject: TRUE
 271
 272 dn: CN=Enterprise Admins,CN=Users,${BASEDN}
 273 objectClass: top
 274 objectClass: group
 275 cn: Enterprise Admins
 276 description: Designated administrators of the enterprise
 277 member: CN=Administrator,CN=Users,${BASEDN}
 278 memberOf: CN=Administrators,CN=Builtin,${BASEDN}
 279 objectSid: ${DOMAINSID}-519
 280 adminCount: 1
 281 sAMAccountName: Enterprise Admins
 282 isCriticalSystemObject: TRUE
 283
 284 dn: CN=Cert Publishers,CN=Users,${BASEDN}
 285 objectClass: top
 286 objectClass: group
 287 cn: Cert Publishers
 288 description: Members of this group are permitted to publish certificates to the Active Directory
 289 groupType: 2147483652
 290 sAMAccountType: 536870912
 291 objectSid: ${DOMAINSID}-517
 292 sAMAccountName: Cert Publishers
 293 objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
 294 isCriticalSystemObject: TRUE
 295
 296 dn: CN=Domain Admins,CN=Users,${BASEDN}
 297 objectClass: top
 298 objectClass: group
 299 cn: Domain Admins
 300 description: Designated administrators of the domain
 301 member: CN=Administrator,CN=Users,${BASEDN}
 302 memberOf: CN=Administrators,CN=Builtin,${BASEDN}
 303 objectSid: ${DOMAINSID}-512
 304 adminCount: 1
 305 sAMAccountName: Domain Admins
 306 isCriticalSystemObject: TRUE
 307
 308 dn: CN=Domain Users,CN=Users,${BASEDN}
 309 objectClass: top
 310 objectClass: group
 311 cn: Domain Users
 312 description: All domain users
 313 memberOf: CN=Users,CN=Builtin,${BASEDN}
 314 objectSid: ${DOMAINSID}-513
 315 sAMAccountName: Domain Users
 316 isCriticalSystemObject: TRUE
 317
 318 dn: CN=Domain Guests,CN=Users,${BASEDN}
 319 objectClass: top
 320 objectClass: group
 321 cn: Domain Guests
 322 description: All domain guests
 323 memberOf: CN=Guests,CN=Builtin,${BASEDN}
 324 objectSid: ${DOMAINSID}-514
 325 sAMAccountName: Domain Guests
 326 isCriticalSystemObject: TRUE
 327
 328 dn: CN=Group Policy Creator Owners,CN=Users,${BASEDN}
 329 objectClass: top
 330 objectClass: group
 331 cn: Group Policy Creator Owners
 332 description: Members in this group can modify group policy for the domain
 333 member: CN=Administrator,CN=Users,${BASEDN}
 334 objectSid: ${DOMAINSID}-520
 335 sAMAccountName: Group Policy Creator Owners
 336 objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
 337 isCriticalSystemObject: TRUE
 338
 339 dn: CN=RAS and IAS Servers,CN=Users,${BASEDN}
 340 objectClass: top
 341 objectClass: group
 342 cn: RAS and IAS Servers
 343 description: Servers in this group can access remote access properties of users
 344 instanceType: 4
 345 objectSid: ${DOMAINSID}-553
 346 sAMAccountName: RAS and IAS Servers
 347 sAMAccountType: 536870912
 348 groupType: 2147483652
 349 objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
 350 isCriticalSystemObject: TRUE
 351
 352 dn: CN=Server Operators,CN=Builtin,${BASEDN}
 353 objectClass: top
 354 objectClass: group
 355 cn: Server Operators
 356 description: Members can administer domain servers
 357 instanceType: 4
 358 objectSid: S-1-5-32-549
 359 adminCount: 1
 360 sAMAccountName: Server Operators
 361 sAMAccountType: 536870912
 362 systemFlags: 2348810240
 363 groupType: 2147483653
 364 objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
 365 isCriticalSystemObject: TRUE
 366 privilege: SeBackupPrivilege
 367 privilege: SeSystemtimePrivilege
 368 privilege: SeRemoteShutdownPrivilege
 369 privilege: SeRestorePrivilege
 370 privilege: SeShutdownPrivilege
 371 privilege: SeInteractiveLogonRight
 372
 373 dn: CN=Account Operators,CN=Builtin,${BASEDN}
 374 objectClass: top
 375 objectClass: group
 376 cn: Account Operators
 377 description: Members can administer domain user and group accounts
 378 instanceType: 4
 379 objectSid: S-1-5-32-548
 380 adminCount: 1
 381 sAMAccountName: Account Operators
 382 sAMAccountType: 536870912
 383 systemFlags: 2348810240
 384 groupType: 2147483653
 385 objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
 386 isCriticalSystemObject: TRUE
 387 privilege: SeInteractiveLogonRight
 388