source4/setup/provision_users.ldif

   1 dn: CN=Administrator,CN=Users,${DOMAINDN}
   2 objectClass: user
   3 cn: Administrator
   4 description: Built-in account for administering the computer/domain
   5 memberOf: CN=Group Policy Creator Owners,CN=Users,${DOMAINDN}
   6 memberOf: CN=Domain Admins,CN=Users,${DOMAINDN}
   7 memberOf: CN=Enterprise Admins,CN=Users,${DOMAINDN}
   8 memberOf: CN=Schema Admins,CN=Users,${DOMAINDN}
   9 memberOf: CN=Administrators,CN=Builtin,${DOMAINDN}
  10 userAccountControl: 66048
  11 objectSid: ${DOMAINSID}-500
  12 adminCount: 1
  13 accountExpires: -1
  14 sAMAccountName: Administrator
  15 isCriticalSystemObject: TRUE
  16 sambaPassword: ${ADMINPASS}
  17
  18 dn: CN=Guest,CN=Users,${DOMAINDN}
  19 objectClass: user
  20 cn: Guest
  21 description: Built-in account for guest access to the computer/domain
  22 memberOf: CN=Guests,CN=Builtin,${DOMAINDN}
  23 userAccountControl: 66082
  24 primaryGroupID: 514
  25 objectSid: ${DOMAINSID}-501
  26 sAMAccountName: Guest
  27 isCriticalSystemObject: TRUE
  28
  29 dn: CN=Administrators,CN=Builtin,${DOMAINDN}
  30 objectClass: top
  31 objectClass: group
  32 cn: Administrators
  33 description: Administrators have complete and unrestricted access to the computer/domain
  34 member: CN=Domain Admins,CN=Users,${DOMAINDN}
  35 member: CN=Enterprise Admins,CN=Users,${DOMAINDN}
  36 member: CN=Administrator,CN=Users,${DOMAINDN}
  37 objectSid: S-1-5-32-544
  38 adminCount: 1
  39 sAMAccountName: Administrators
  40 sAMAccountType: 536870912
  41 systemFlags: 2348810240
  42 groupType: 2147483653
  43 isCriticalSystemObject: TRUE
  44 privilege: SeSecurityPrivilege
  45 privilege: SeBackupPrivilege
  46 privilege: SeRestorePrivilege
  47 privilege: SeSystemtimePrivilege
  48 privilege: SeShutdownPrivilege
  49 privilege: SeRemoteShutdownPrivilege
  50 privilege: SeTakeOwnershipPrivilege
  51 privilege: SeDebugPrivilege
  52 privilege: SeSystemEnvironmentPrivilege
  53 privilege: SeSystemProfilePrivilege
  54 privilege: SeProfileSingleProcessPrivilege
  55 privilege: SeIncreaseBasePriorityPrivilege
  56 privilege: SeLoadDriverPrivilege
  57 privilege: SeCreatePagefilePrivilege
  58 privilege: SeIncreaseQuotaPrivilege
  59 privilege: SeChangeNotifyPrivilege
  60 privilege: SeUndockPrivilege
  61 privilege: SeManageVolumePrivilege
  62 privilege: SeImpersonatePrivilege
  63 privilege: SeCreateGlobalPrivilege
  64 privilege: SeEnableDelegationPrivilege
  65 privilege: SeInteractiveLogonRight
  66 privilege: SeNetworkLogonRight
  67 privilege: SeRemoteInteractiveLogonRight
  68
  69 dn: CN=Users,CN=Builtin,${DOMAINDN}
  70 objectClass: top
  71 objectClass: group
  72 cn: Users
  73 description: Users are prevented from making accidental or intentional system-wide changes.  Thus, Users can run certified applications, but not most legacy applications
  74 member: CN=Domain Users,CN=Users,${DOMAINDN}
  75 objectSid: S-1-5-32-545
  76 sAMAccountName: Users
  77 sAMAccountType: 536870912
  78 systemFlags: 2348810240
  79 groupType: 2147483653
  80 isCriticalSystemObject: TRUE
  81
  82 dn: CN=Guests,CN=Builtin,${DOMAINDN}
  83 objectClass: top
  84 objectClass: group
  85 cn: Guests
  86 description: Guests have the same access as members of the Users group by default, except for the Guest account which is further restricted
  87 member: CN=Domain Guests,CN=Users,${DOMAINDN}
  88 member: CN=Guest,CN=Users,${DOMAINDN}
  89 objectSid: S-1-5-32-546
  90 sAMAccountName: Guests
  91 sAMAccountType: 536870912
  92 systemFlags: 2348810240
  93 groupType: 2147483653
  94 isCriticalSystemObject: TRUE
  95
  96 dn: CN=Print Operators,CN=Builtin,${DOMAINDN}
  97 objectClass: top
  98 objectClass: group
  99 cn: Print Operators
 100 description: Members can administer domain printers
 101 objectSid: S-1-5-32-550
 102 adminCount: 1
 103 sAMAccountName: Print Operators
 104 sAMAccountType: 536870912
 105 systemFlags: 2348810240
 106 groupType: 2147483653
 107 isCriticalSystemObject: TRUE
 108 privilege: SeLoadDriverPrivilege
 109 privilege: SeShutdownPrivilege
 110 privilege: SeInteractiveLogonRight
 111
 112 dn: CN=Backup Operators,CN=Builtin,${DOMAINDN}
 113 objectClass: top
 114 objectClass: group
 115 cn: Backup Operators
 116 description: Backup Operators can override security restrictions for the sole purpose of backing up or restoring files
 117 objectSid: S-1-5-32-551
 118 adminCount: 1
 119 sAMAccountName: Backup Operators
 120 sAMAccountType: 536870912
 121 systemFlags: 2348810240
 122 groupType: 2147483653
 123 isCriticalSystemObject: TRUE
 124 privilege: SeBackupPrivilege
 125 privilege: SeRestorePrivilege
 126 privilege: SeShutdownPrivilege
 127 privilege: SeInteractiveLogonRight
 128
 129 dn: CN=Replicator,CN=Builtin,${DOMAINDN}
 130 objectClass: top
 131 objectClass: group
 132 cn: Replicator
 133 description: Supports file replication in a domain
 134 objectSid: S-1-5-32-552
 135 adminCount: 1
 136 sAMAccountName: Replicator
 137 sAMAccountType: 536870912
 138 systemFlags: 2348810240
 139 groupType: 2147483653
 140 isCriticalSystemObject: TRUE
 141
 142 dn: CN=Remote Desktop Users,CN=Builtin,${DOMAINDN}
 143 objectClass: top
 144 objectClass: group
 145 cn: Remote Desktop Users
 146 description: Members in this group are granted the right to logon remotely
 147 objectSid: S-1-5-32-555
 148 sAMAccountName: Remote Desktop Users
 149 sAMAccountType: 536870912
 150 systemFlags: 2348810240
 151 groupType: 2147483653
 152 isCriticalSystemObject: TRUE
 153
 154 dn: CN=Network Configuration Operators,CN=Builtin,${DOMAINDN}
 155 objectClass: top
 156 objectClass: group
 157 cn: Network Configuration Operators
 158 description: Members in this group can have some administrative privileges to manage configuration of networking features
 159 objectSid: S-1-5-32-556
 160 sAMAccountName: Network Configuration Operators
 161 sAMAccountType: 536870912
 162 systemFlags: 2348810240
 163 groupType: 2147483653
 164 isCriticalSystemObject: TRUE
 165
 166 dn: CN=Performance Monitor Users,CN=Builtin,${DOMAINDN}
 167 objectClass: top
 168 objectClass: group
 169 cn: Performance Monitor Users
 170 description: Members of this group have remote access to monitor this computer
 171 objectSid: S-1-5-32-558
 172 sAMAccountName: Performance Monitor Users
 173 sAMAccountType: 536870912
 174 systemFlags: 2348810240
 175 groupType: 2147483653
 176 isCriticalSystemObject: TRUE
 177
 178 dn: CN=Performance Log Users,CN=Builtin,${DOMAINDN}
 179 objectClass: top
 180 objectClass: group
 181 cn: Performance Log Users
 182 description: Members of this group have remote access to schedule logging of performance counters on this computer
 183 objectSid: S-1-5-32-559
 184 sAMAccountName: Performance Log Users
 185 sAMAccountType: 536870912
 186 systemFlags: 2348810240
 187 groupType: 2147483653
 188 isCriticalSystemObject: TRUE
 189
 190 dn: CN=krbtgt,CN=Users,${DOMAINDN}
 191 objectClass: top
 192 objectClass: person
 193 objectClass: organizationalPerson
 194 objectClass: user
 195 cn: krbtgt
 196 description: Key Distribution Center Service Account
 197 showInAdvancedViewOnly: TRUE
 198 userAccountControl: 514
 199 objectSid: ${DOMAINSID}-502
 200 adminCount: 1
 201 accountExpires: 9223372036854775807
 202 sAMAccountName: krbtgt
 203 sAMAccountType: 805306368
 204 servicePrincipalName: kadmin/changepw
 205 isCriticalSystemObject: TRUE
 206 sambaPassword: ${KRBTGTPASS}
 207
 208 dn: CN=Domain Computers,CN=Users,${DOMAINDN}
 209 objectClass: top
 210 objectClass: group
 211 cn: Domain Computers
 212 description: All workstations and servers joined to the domain
 213 objectSid: ${DOMAINSID}-515
 214 sAMAccountName: Domain Computers
 215 isCriticalSystemObject: TRUE
 216
 217 dn: CN=Domain Controllers,CN=Users,${DOMAINDN}
 218 objectClass: top
 219 objectClass: group
 220 cn: Domain Controllers
 221 description: All domain controllers in the domain
 222 objectSid: ${DOMAINSID}-516
 223 adminCount: 1
 224 sAMAccountName: Domain Controllers
 225 isCriticalSystemObject: TRUE
 226
 227 dn: CN=Schema Admins,CN=Users,${DOMAINDN}
 228 objectClass: top
 229 objectClass: group
 230 cn: Schema Admins
 231 description: Designated administrators of the schema
 232 member: CN=Administrator,CN=Users,${DOMAINDN}
 233 objectSid: ${DOMAINSID}-518
 234 adminCount: 1
 235 sAMAccountName: Schema Admins
 236 isCriticalSystemObject: TRUE
 237
 238 dn: CN=Enterprise Admins,CN=Users,${DOMAINDN}
 239 objectClass: top
 240 objectClass: group
 241 cn: Enterprise Admins
 242 description: Designated administrators of the enterprise
 243 member: CN=Administrator,CN=Users,${DOMAINDN}
 244 memberOf: CN=Administrators,CN=Builtin,${DOMAINDN}
 245 objectSid: ${DOMAINSID}-519
 246 adminCount: 1
 247 sAMAccountName: Enterprise Admins
 248 isCriticalSystemObject: TRUE
 249
 250 dn: CN=Cert Publishers,CN=Users,${DOMAINDN}
 251 objectClass: top
 252 objectClass: group
 253 cn: Cert Publishers
 254 description: Members of this group are permitted to publish certificates to the Active Directory
 255 groupType: 2147483652
 256 sAMAccountType: 536870912
 257 objectSid: ${DOMAINSID}-517
 258 sAMAccountName: Cert Publishers
 259 isCriticalSystemObject: TRUE
 260
 261 dn: CN=Domain Admins,CN=Users,${DOMAINDN}
 262 objectClass: top
 263 objectClass: group
 264 cn: Domain Admins
 265 description: Designated administrators of the domain
 266 member: CN=Administrator,CN=Users,${DOMAINDN}
 267 memberOf: CN=Administrators,CN=Builtin,${DOMAINDN}
 268 objectSid: ${DOMAINSID}-512
 269 adminCount: 1
 270 sAMAccountName: Domain Admins
 271 isCriticalSystemObject: TRUE
 272
 273 dn: CN=Domain Users,CN=Users,${DOMAINDN}
 274 objectClass: top
 275 objectClass: group
 276 cn: Domain Users
 277 description: All domain users
 278 memberOf: CN=Users,CN=Builtin,${DOMAINDN}
 279 objectSid: ${DOMAINSID}-513
 280 sAMAccountName: Domain Users
 281 isCriticalSystemObject: TRUE
 282
 283 dn: CN=Domain Guests,CN=Users,${DOMAINDN}
 284 objectClass: top
 285 objectClass: group
 286 cn: Domain Guests
 287 description: All domain guests
 288 memberOf: CN=Guests,CN=Builtin,${DOMAINDN}
 289 objectSid: ${DOMAINSID}-514
 290 sAMAccountName: Domain Guests
 291 isCriticalSystemObject: TRUE
 292
 293 dn: CN=Group Policy Creator Owners,CN=Users,${DOMAINDN}
 294 objectClass: top
 295 objectClass: group
 296 cn: Group Policy Creator Owners
 297 description: Members in this group can modify group policy for the domain
 298 member: CN=Administrator,CN=Users,${DOMAINDN}
 299 objectSid: ${DOMAINSID}-520
 300 sAMAccountName: Group Policy Creator Owners
 301 isCriticalSystemObject: TRUE
 302
 303 dn: CN=RAS and IAS Servers,CN=Users,${DOMAINDN}
 304 objectClass: top
 305 objectClass: group
 306 cn: RAS and IAS Servers
 307 description: Servers in this group can access remote access properties of users
 308 instanceType: 4
 309 objectSid: ${DOMAINSID}-553
 310 sAMAccountName: RAS and IAS Servers
 311 sAMAccountType: 536870912
 312 groupType: 2147483652
 313 isCriticalSystemObject: TRUE
 314
 315 dn: CN=Server Operators,CN=Builtin,${DOMAINDN}
 316 objectClass: top
 317 objectClass: group
 318 cn: Server Operators
 319 description: Members can administer domain servers
 320 instanceType: 4
 321 objectSid: S-1-5-32-549
 322 adminCount: 1
 323 sAMAccountName: Server Operators
 324 sAMAccountType: 536870912
 325 systemFlags: 2348810240
 326 groupType: 2147483653
 327 isCriticalSystemObject: TRUE
 328 privilege: SeBackupPrivilege
 329 privilege: SeSystemtimePrivilege
 330 privilege: SeRemoteShutdownPrivilege
 331 privilege: SeRestorePrivilege
 332 privilege: SeShutdownPrivilege
 333 privilege: SeInteractiveLogonRight
 334
 335 dn: CN=Account Operators,CN=Builtin,${DOMAINDN}
 336 objectClass: top
 337 objectClass: group
 338 cn: Account Operators
 339 description: Members can administer domain user and group accounts
 340 instanceType: 4
 341 objectSid: S-1-5-32-548
 342 adminCount: 1
 343 sAMAccountName: Account Operators
 344 sAMAccountType: 536870912
 345 systemFlags: 2348810240
 346 groupType: 2147483653
 347 isCriticalSystemObject: TRUE
 348 privilege: SeInteractiveLogonRight
 349