source4/setup/provision_users.ldif

   1 dn: CN=Administrator,CN=Users,${BASEDN}
   2 objectClass: user
   3 cn: Administrator
   4 description: Built-in account for administering the computer/domain
   5 uSNCreated: 1
   6 memberOf: CN=Group Policy Creator Owners,CN=Users,${BASEDN}
   7 memberOf: CN=Domain Admins,CN=Users,${BASEDN}
   8 memberOf: CN=Enterprise Admins,CN=Users,${BASEDN}
   9 memberOf: CN=Schema Admins,CN=Users,${BASEDN}
  10 memberOf: CN=Administrators,CN=Builtin,${BASEDN}
  11 uSNChanged: 1
  12 userAccountControl: 0x10200
  13 objectSid: ${DOMAINSID}-500
  14 adminCount: 1
  15 accountExpires: -1
  16 sAMAccountName: Administrator
  17 isCriticalSystemObject: TRUE
  18 sambaPassword: ${ADMINPASS}
  19 unixName: ${ROOT}
  20
  21 dn: CN=Guest,CN=Users,${BASEDN}
  22 objectClass: user
  23 cn: Guest
  24 description: Built-in account for guest access to the computer/domain
  25 uSNCreated: 1
  26 memberOf: CN=Guests,CN=Builtin,${BASEDN}
  27 uSNChanged: 1
  28 userAccountControl: 0x10222
  29 primaryGroupID: 514
  30 objectSid: ${DOMAINSID}-501
  31 sAMAccountName: Guest
  32 isCriticalSystemObject: TRUE
  33
  34 dn: CN=Administrators,CN=Builtin,${BASEDN}
  35 objectClass: top
  36 objectClass: group
  37 cn: Administrators
  38 description: Administrators have complete and unrestricted access to the computer/domain
  39 member: CN=Domain Admins,CN=Users,${BASEDN}
  40 member: CN=Enterprise Admins,CN=Users,${BASEDN}
  41 member: CN=Administrator,CN=Users,${BASEDN}
  42 uSNCreated: 1
  43 uSNChanged: 1
  44 objectSid: S-1-5-32-544
  45 adminCount: 1
  46 sAMAccountName: Administrators
  47 sAMAccountType: 0x20000000
  48 systemFlags: 0x8c000000
  49 groupType: 0x80000005
  50 objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
  51 isCriticalSystemObject: TRUE
  52 unixName: ${WHEEL}
  53 privilege: SeSecurityPrivilege
  54 privilege: SeBackupPrivilege
  55 privilege: SeRestorePrivilege
  56 privilege: SeSystemtimePrivilege
  57 privilege: SeShutdownPrivilege
  58 privilege: SeRemoteShutdownPrivilege
  59 privilege: SeTakeOwnershipPrivilege
  60 privilege: SeDebugPrivilege
  61 privilege: SeSystemEnvironmentPrivilege
  62 privilege: SeSystemProfilePrivilege
  63 privilege: SeProfileSingleProcessPrivilege
  64 privilege: SeIncreaseBasePriorityPrivilege
  65 privilege: SeLoadDriverPrivilege
  66 privilege: SeCreatePagefilePrivilege
  67 privilege: SeIncreaseQuotaPrivilege
  68 privilege: SeChangeNotifyPrivilege
  69 privilege: SeUndockPrivilege
  70 privilege: SeManageVolumePrivilege
  71 privilege: SeImpersonatePrivilege
  72 privilege: SeCreateGlobalPrivilege
  73 privilege: SeEnableDelegationPrivilege
  74 privilege: SeInteractiveLogonRight
  75 privilege: SeNetworkLogonRight
  76 privilege: SeRemoteInteractiveLogonRight
  77
  78
  79 dn: CN=${NETBIOSNAME},OU=Domain Controllers,${BASEDN}
  80 objectClass: computer
  81 cn: ${NETBIOSNAME}
  82 uSNCreated: 1
  83 uSNChanged: 1
  84 objectGUID: ${HOSTGUID}
  85 userAccountControl: 532480
  86 localPolicyFlags: 0
  87 primaryGroupID: 516
  88 objectSid: ${DOMAINSID}-1000
  89 accountExpires: 9223372036854775807
  90 sAMAccountName: ${NETBIOSNAME}$
  91 sAMAccountType: 805306369
  92 operatingSystem: Samba
  93 operatingSystemVersion: 4.0
  94 dNSHostName: ${DNSNAME}
  95 isCriticalSystemObject: TRUE
  96 sambaPassword: ${MACHINEPASS}
  97 servicePrincipalName: HOST/${DNSNAME}
  98 servicePrincipalName: HOST/${NETBIOSNAME}
  99 servicePrincipalName: HOST/${DNSNAME}/${REALM}
 100 servicePrincipalName: HOST/${NETBIOSNAME}/${REALM}
 101 servicePrincipalName: HOST/${DNSNAME}/${DOMAIN}
 102 servicePrincipalName: HOST/${NETBIOSNAME}/${DOMAIN}
 103
 104
 105 dn: CN=Users,CN=Builtin,${BASEDN}
 106 objectClass: top
 107 objectClass: group
 108 cn: Users
 109 description: Users are prevented from making accidental or intentional system-wide changes.  Thus, Users can run certified applications, but not most legacy applications
 110 member: CN=Domain Users,CN=Users,${BASEDN}
 111 uSNCreated: 1
 112 uSNChanged: 1
 113 objectSid: S-1-5-32-545
 114 sAMAccountName: Users
 115 sAMAccountType: 0x20000000
 116 systemFlags: 0x8c000000
 117 groupType: 0x80000005
 118 objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
 119 isCriticalSystemObject: TRUE
 120
 121 dn: CN=Guests,CN=Builtin,${BASEDN}
 122 objectClass: top
 123 objectClass: group
 124 cn: Guests
 125 description: Guests have the same access as members of the Users group by default, except for the Guest account which is further restricted
 126 member: CN=Domain Guests,CN=Users,${BASEDN}
 127 member: CN=Guest,CN=Users,${BASEDN}
 128 uSNCreated: 1
 129 uSNChanged: 1
 130 objectSid: S-1-5-32-546
 131 sAMAccountName: Guests
 132 sAMAccountType: 0x20000000
 133 systemFlags: 0x8c000000
 134 groupType: 0x80000005
 135 objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
 136 isCriticalSystemObject: TRUE
 137 unixName: ${NOGROUP}
 138
 139 dn: CN=Print Operators,CN=Builtin,${BASEDN}
 140 objectClass: top
 141 objectClass: group
 142 cn: Print Operators
 143 description: Members can administer domain printers
 144 uSNCreated: 1
 145 uSNChanged: 1
 146 objectSid: S-1-5-32-550
 147 adminCount: 1
 148 sAMAccountName: Print Operators
 149 sAMAccountType: 0x20000000
 150 systemFlags: 0x8c000000
 151 groupType: 0x80000005
 152 objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
 153 isCriticalSystemObject: TRUE
 154 privilege: SeLoadDriverPrivilege
 155 privilege: SeShutdownPrivilege
 156 privilege: SeInteractiveLogonRight
 157
 158 dn: CN=Backup Operators,CN=Builtin,${BASEDN}
 159 objectClass: top
 160 objectClass: group
 161 cn: Backup Operators
 162 description: Backup Operators can override security restrictions for the sole purpose of backing up or restoring files
 163 uSNCreated: 1
 164 uSNChanged: 1
 165 objectSid: S-1-5-32-551
 166 adminCount: 1
 167 sAMAccountName: Backup Operators
 168 sAMAccountType: 0x20000000
 169 systemFlags: 0x8c000000
 170 groupType: 0x80000005
 171 objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
 172 isCriticalSystemObject: TRUE
 173 privilege: SeBackupPrivilege
 174 privilege: SeRestorePrivilege
 175 privilege: SeShutdownPrivilege
 176 privilege: SeInteractiveLogonRight
 177
 178 dn: CN=Replicator,CN=Builtin,${BASEDN}
 179 objectClass: top
 180 objectClass: group
 181 cn: Replicator
 182 description: Supports file replication in a domain
 183 uSNCreated: 1
 184 uSNChanged: 1
 185 objectSid: S-1-5-32-552
 186 adminCount: 1
 187 sAMAccountName: Replicator
 188 sAMAccountType: 0x20000000
 189 systemFlags: 0x8c000000
 190 groupType: 0x80000005
 191 objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
 192 isCriticalSystemObject: TRUE
 193
 194 dn: CN=Remote Desktop Users,CN=Builtin,${BASEDN}
 195 objectClass: top
 196 objectClass: group
 197 cn: Remote Desktop Users
 198 description: Members in this group are granted the right to logon remotely
 199 uSNCreated: 1
 200 uSNChanged: 1
 201 objectSid: S-1-5-32-555
 202 sAMAccountName: Remote Desktop Users
 203 sAMAccountType: 0x20000000
 204 systemFlags: 0x8c000000
 205 groupType: 0x80000005
 206 objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
 207 isCriticalSystemObject: TRUE
 208
 209 dn: CN=Network Configuration Operators,CN=Builtin,${BASEDN}
 210 objectClass: top
 211 objectClass: group
 212 cn: Network Configuration Operators
 213 description: Members in this group can have some administrative privileges to manage configuration of networking features
 214 uSNCreated: 1
 215 uSNChanged: 1
 216 objectSid: S-1-5-32-556
 217 sAMAccountName: Network Configuration Operators
 218 sAMAccountType: 0x20000000
 219 systemFlags: 0x8c000000
 220 groupType: 0x80000005
 221 objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
 222 isCriticalSystemObject: TRUE
 223
 224 dn: CN=Performance Monitor Users,CN=Builtin,${BASEDN}
 225 objectClass: top
 226 objectClass: group
 227 cn: Performance Monitor Users
 228 description: Members of this group have remote access to monitor this computer
 229 uSNCreated: 1
 230 uSNChanged: 1
 231 objectSid: S-1-5-32-558
 232 sAMAccountName: Performance Monitor Users
 233 sAMAccountType: 0x20000000
 234 systemFlags: 0x8c000000
 235 groupType: 0x80000005
 236 objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
 237 isCriticalSystemObject: TRUE
 238
 239 dn: CN=Performance Log Users,CN=Builtin,${BASEDN}
 240 objectClass: top
 241 objectClass: group
 242 cn: Performance Log Users
 243 description: Members of this group have remote access to schedule logging of performance counters on this computer
 244 uSNCreated: 1
 245 uSNChanged: 1
 246 objectSid: S-1-5-32-559
 247 sAMAccountName: Performance Log Users
 248 sAMAccountType: 0x20000000
 249 systemFlags: 0x8c000000
 250 groupType: 0x80000005
 251 objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
 252 isCriticalSystemObject: TRUE
 253
 254 dn: CN=krbtgt,CN=Users,${BASEDN}
 255 objectClass: top
 256 objectClass: person
 257 objectClass: organizationalPerson
 258 objectClass: user
 259 cn: krbtgt
 260 description: Key Distribution Center Service Account
 261 uSNCreated: 1
 262 uSNChanged: 1
 263 showInAdvancedViewOnly: TRUE
 264 userAccountControl: 514
 265 objectSid: ${DOMAINSID}-502
 266 adminCount: 1
 267 accountExpires: 9223372036854775807
 268 sAMAccountName: krbtgt
 269 sAMAccountType: 805306368
 270 servicePrincipalName: kadmin/changepw
 271 isCriticalSystemObject: TRUE
 272 sambaPassword: ${KRBTGTPASS}
 273
 274 dn: CN=Domain Computers,CN=Users,${BASEDN}
 275 objectClass: top
 276 objectClass: group
 277 cn: Domain Computers
 278 description: All workstations and servers joined to the domain
 279 uSNCreated: 1
 280 uSNChanged: 1
 281 objectSid: ${DOMAINSID}-515
 282 sAMAccountName: Domain Computers
 283 objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
 284 isCriticalSystemObject: TRUE
 285
 286 dn: CN=Domain Controllers,CN=Users,${BASEDN}
 287 objectClass: top
 288 objectClass: group
 289 cn: Domain Controllers
 290 description: All domain controllers in the domain
 291 uSNCreated: 1
 292 uSNChanged: 1
 293 objectSid: ${DOMAINSID}-516
 294 adminCount: 1
 295 sAMAccountName: Domain Controllers
 296 isCriticalSystemObject: TRUE
 297
 298 dn: CN=Schema Admins,CN=Users,${BASEDN}
 299 objectClass: top
 300 objectClass: group
 301 cn: Schema Admins
 302 description: Designated administrators of the schema
 303 member: CN=Administrator,CN=Users,${BASEDN}
 304 uSNCreated: 1
 305 uSNChanged: 1
 306 objectSid: ${DOMAINSID}-518
 307 adminCount: 1
 308 sAMAccountName: Schema Admins
 309 isCriticalSystemObject: TRUE
 310 unixName: ${WHEEL}
 311
 312 dn: CN=Enterprise Admins,CN=Users,${BASEDN}
 313 objectClass: top
 314 objectClass: group
 315 cn: Enterprise Admins
 316 description: Designated administrators of the enterprise
 317 member: CN=Administrator,CN=Users,${BASEDN}
 318 uSNCreated: 1
 319 memberOf: CN=Administrators,CN=Builtin,${BASEDN}
 320 uSNChanged: 1
 321 objectSid: ${DOMAINSID}-519
 322 adminCount: 1
 323 sAMAccountName: Enterprise Admins
 324 isCriticalSystemObject: TRUE
 325 unixName: ${WHEEL}
 326
 327 dn: CN=Cert Publishers,CN=Users,${BASEDN}
 328 objectClass: top
 329 objectClass: group
 330 cn: Cert Publishers
 331 description: Members of this group are permitted to publish certificates to the Active Directory
 332 uSNCreated: 1
 333 uSNChanged: 1
 334 groupType: 0x80000004
 335 sAMAccountType: 0x20000000
 336 objectSid: ${DOMAINSID}-517
 337 sAMAccountName: Cert Publishers
 338 objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
 339 isCriticalSystemObject: TRUE
 340
 341 dn: CN=Domain Admins,CN=Users,${BASEDN}
 342 objectClass: top
 343 objectClass: group
 344 cn: Domain Admins
 345 description: Designated administrators of the domain
 346 member: CN=Administrator,CN=Users,${BASEDN}
 347 uSNCreated: 1
 348 memberOf: CN=Administrators,CN=Builtin,${BASEDN}
 349 uSNChanged: 1
 350 objectSid: ${DOMAINSID}-512
 351 adminCount: 1
 352 sAMAccountName: Domain Admins
 353 isCriticalSystemObject: TRUE
 354 unixName: ${WHEEL}
 355
 356 dn: CN=Domain Users,CN=Users,${BASEDN}
 357 objectClass: top
 358 objectClass: group
 359 cn: Domain Users
 360 description: All domain users
 361 uSNCreated: 1
 362 memberOf: CN=Users,CN=Builtin,${BASEDN}
 363 uSNChanged: 1
 364 objectSid: ${DOMAINSID}-513
 365 sAMAccountName: Domain Users
 366 isCriticalSystemObject: TRUE
 367 unixName: ${USERS}
 368
 369 dn: CN=Domain Guests,CN=Users,${BASEDN}
 370 objectClass: top
 371 objectClass: group
 372 cn: Domain Guests
 373 description: All domain guests
 374 uSNCreated: 1
 375 memberOf: CN=Guests,CN=Builtin,${BASEDN}
 376 uSNChanged: 1
 377 objectSid: ${DOMAINSID}-514
 378 sAMAccountName: Domain Guests
 379 isCriticalSystemObject: TRUE
 380
 381 dn: CN=Group Policy Creator Owners,CN=Users,${BASEDN}
 382 objectClass: top
 383 objectClass: group
 384 cn: Group Policy Creator Owners
 385 description: Members in this group can modify group policy for the domain
 386 member: CN=Administrator,CN=Users,${BASEDN}
 387 uSNCreated: 1
 388 uSNChanged: 1
 389 objectSid: ${DOMAINSID}-520
 390 sAMAccountName: Group Policy Creator Owners
 391 objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
 392 isCriticalSystemObject: TRUE
 393 unixName: ${WHEEL}
 394
 395 dn: CN=RAS and IAS Servers,CN=Users,${BASEDN}
 396 objectClass: top
 397 objectClass: group
 398 cn: RAS and IAS Servers
 399 description: Servers in this group can access remote access properties of users
 400 instanceType: 4
 401 uSNCreated: 1
 402 uSNChanged: 1
 403 objectSid: ${DOMAINSID}-553
 404 sAMAccountName: RAS and IAS Servers
 405 sAMAccountType: 0x20000000
 406 groupType: 0x80000004
 407 objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
 408 isCriticalSystemObject: TRUE
 409
 410 dn: CN=Server Operators,CN=Builtin,${BASEDN}
 411 objectClass: top
 412 objectClass: group
 413 cn: Server Operators
 414 description: Members can administer domain servers
 415 instanceType: 4
 416 uSNCreated: 1
 417 uSNChanged: 1
 418 objectSid: S-1-5-32-549
 419 adminCount: 1
 420 sAMAccountName: Server Operators
 421 sAMAccountType: 0x20000000
 422 systemFlags: 0x8c000000
 423 groupType: 0x80000005
 424 objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
 425 isCriticalSystemObject: TRUE
 426 privilege: SeBackupPrivilege
 427 privilege: SeSystemtimePrivilege
 428 privilege: SeRemoteShutdownPrivilege
 429 privilege: SeRestorePrivilege
 430 privilege: SeShutdownPrivilege
 431 privilege: SeInteractiveLogonRight
 432
 433 dn: CN=Account Operators,CN=Builtin,${BASEDN}
 434 objectClass: top
 435 objectClass: group
 436 cn: Account Operators
 437 description: Members can administer domain user and group accounts
 438 instanceType: 4
 439 uSNCreated: 1
 440 uSNChanged: 1
 441 objectSid: S-1-5-32-548
 442 adminCount: 1
 443 sAMAccountName: Account Operators
 444 sAMAccountType: 0x20000000
 445 systemFlags: 0x8c000000
 446 groupType: 0x80000005
 447 objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
 448 isCriticalSystemObject: TRUE
 449 privilege: SeInteractiveLogonRight
 450