dn: CN=Users,${DOMAINDN} objectClass: top objectClass: container nTSecurityDescriptor:: ${USERS_DESCRIPTOR}