s4: Add additional well-known SID's/RID's.
authorAndrew Kroeger <andrew@id10ts.net>
Fri, 29 May 2009 01:02:42 +0000 (20:02 -0500)
committerAndrew Bartlett <abartlet@samba.org>
Fri, 29 May 2009 02:37:25 +0000 (12:37 +1000)
Information was found at http://support.microsoft.com/kb/243330

Not all well-known identifiers were included - only those necessary for
enhancing the 2-letter mappings used in SDDL strings were added.

librpc/gen_ndr/security.h
librpc/idl/security.idl

index 9db2108f82a6259b809295ab9cc9a96564e166a4..d1dcbe552a8fc6dbf9b78b53102fb7a9c73ad857 100644 (file)
 #define SID_BUILTIN_REPLICATOR ( "S-1-5-32-552" )
 #define SID_BUILTIN_RAS_SERVERS        ( "S-1-5-32-553" )
 #define SID_BUILTIN_PREW2K     ( "S-1-5-32-554" )
+#define SID_BUILTIN_REMOTE_DESKTOP_USERS       ( "S-1-5-32-555" )
+#define SID_BUILTIN_NETWORK_CONF_OPERATORS     ( "S-1-5-32-556" )
 #define DOMAIN_RID_LOGON       ( 9 )
 #define DOMAIN_RID_ADMINISTRATOR       ( 500 )
 #define DOMAIN_RID_GUEST       ( 501 )
 #define DOMAIN_RID_KRBTGT      ( 502 )
 #define DOMAIN_RID_ADMINS      ( 512 )
 #define DOMAIN_RID_USERS       ( 513 )
+#define DOMAIN_RID_GUESTS      ( 514 )
 #define DOMAIN_RID_DOMAIN_MEMBERS      ( 515 )
 #define DOMAIN_RID_DCS ( 516 )
 #define DOMAIN_RID_CERT_ADMINS ( 517 )
 #define DOMAIN_RID_SCHEMA_ADMINS       ( 518 )
 #define DOMAIN_RID_ENTERPRISE_ADMINS   ( 519 )
+#define DOMAIN_RID_POLICY_ADMINS       ( 520 )
 #define NT4_ACL_REVISION       ( SECURITY_ACL_REVISION_NT4 )
 #define SD_REVISION    ( SECURITY_DESCRIPTOR_REVISION_1 )
 struct dom_sid {
index 941883f64465a8f244529cce9cb21c92eb4a246d..9728c7fb07110bc67de0ca413d9a94ae5f26bbdf 100644 (file)
@@ -219,6 +219,8 @@ interface security
        const string SID_BUILTIN_REPLICATOR        = "S-1-5-32-552";
        const string SID_BUILTIN_RAS_SERVERS       = "S-1-5-32-553";
        const string SID_BUILTIN_PREW2K            = "S-1-5-32-554";
+       const string SID_BUILTIN_REMOTE_DESKTOP_USERS   = "S-1-5-32-555";
+       const string SID_BUILTIN_NETWORK_CONF_OPERATORS = "S-1-5-32-556";
 
        /* well-known domain RIDs */
        const int DOMAIN_RID_LOGON                 = 9;
@@ -227,11 +229,13 @@ interface security
        const int DOMAIN_RID_KRBTGT                = 502;
        const int DOMAIN_RID_ADMINS                = 512;
        const int DOMAIN_RID_USERS                 = 513;
+       const int DOMAIN_RID_GUESTS                = 514;
        const int DOMAIN_RID_DOMAIN_MEMBERS        = 515;
        const int DOMAIN_RID_DCS                   = 516;
        const int DOMAIN_RID_CERT_ADMINS           = 517;
        const int DOMAIN_RID_SCHEMA_ADMINS         = 518;
        const int DOMAIN_RID_ENTERPRISE_ADMINS     = 519;
+       const int DOMAIN_RID_POLICY_ADMINS         = 520;
 
 
        /*