s4:sites & services - Adds Intersite transport containers
[ira/wip.git] / source4 / setup / provision_configuration.ldif
1 ###############################
2 # Configuration Naming Context
3 ###############################
4
5 # Display specifiers are located in
6 # display-specifiers/DisplaySpecifiers-Win2k8R2.txt"
7 # This file is parsed during provision using the ms_display_specifiers.py
8 # script.
9
10 dn: CN=Extended-Rights,${CONFIGDN}
11 objectClass: top
12 objectClass: container
13 systemFlags: -2147483648
14
15 dn: CN=Change-Rid-Master,CN=Extended-Rights,${CONFIGDN}
16 objectClass: top
17 objectClass: controlAccessRight
18 displayName: Change Rid Master
19 rightsGuid: d58d5f36-0a98-11d1-adbb-00c04fd8d5cd
20 appliesTo: 6617188d-8f3c-11d0-afda-00c04fd930c9
21 localizationDisplayId: 29
22 validAccesses: 256
23
24 dn: CN=Do-Garbage-Collection,CN=Extended-Rights,${CONFIGDN}
25 objectClass: top
26 objectClass: controlAccessRight
27 displayName: Do Garbage Collection
28 rightsGuid: fec364e0-0a98-11d1-adbb-00c04fd8d5cd
29 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
30 localizationDisplayId: 31
31 validAccesses: 256
32
33 dn: CN=Recalculate-Hierarchy,CN=Extended-Rights,${CONFIGDN}
34 objectClass: top
35 objectClass: controlAccessRight
36 displayName: Recalculate Hierarchy
37 rightsGuid: 0bc1554e-0a99-11d1-adbb-00c04fd8d5cd
38 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
39 localizationDisplayId: 32
40 validAccesses: 256
41
42 dn: CN=Allocate-Rids,CN=Extended-Rights,${CONFIGDN}
43 objectClass: top
44 objectClass: controlAccessRight
45 displayName: Allocate Rids
46 rightsGuid: 1abd7cf8-0a99-11d1-adbb-00c04fd8d5cd
47 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
48 localizationDisplayId: 33
49 validAccesses: 256
50
51 dn: CN=Change-PDC,CN=Extended-Rights,${CONFIGDN}
52 objectClass: top
53 objectClass: controlAccessRight
54 displayName: Change PDC
55 rightsGuid: bae50096-4752-11d1-9052-00c04fc2d4cf
56 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
57 localizationDisplayId: 34
58 validAccesses: 256
59
60 dn: CN=Add-GUID,CN=Extended-Rights,${CONFIGDN}
61 objectClass: top
62 objectClass: controlAccessRight
63 displayName: Add GUID
64 rightsGuid: 440820ad-65b4-11d1-a3da-0000f875ae0d
65 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
66 localizationDisplayId: 35
67 validAccesses: 256
68
69 dn: CN=Change-Domain-Master,CN=Extended-Rights,${CONFIGDN}
70 objectClass: top
71 objectClass: controlAccessRight
72 displayName: Change Domain Master
73 rightsGuid: 014bf69c-7b3b-11d1-85f6-08002be74fab
74 appliesTo: ef9e60e0-56f7-11d1-a9c6-0000f80367c1
75 localizationDisplayId: 36
76 validAccesses: 256
77
78 dn: CN=Public-Information,CN=Extended-Rights,${CONFIGDN}
79 objectClass: top
80 objectClass: controlAccessRight
81 displayName: Public Information
82 rightsGuid: e48d0154-bcf8-11d1-8702-00c04fb96050
83 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
84 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
85 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
86 localizationDisplayId: 37
87 validAccesses: 48
88
89 dn: CN=msmq-Receive-Dead-Letter,CN=Extended-Rights,${CONFIGDN}
90 objectClass: top
91 objectClass: controlAccessRight
92 displayName: Receive Dead Letter
93 rightsGuid: 4b6e08c0-df3c-11d1-9c86-006008764d0e
94 appliesTo: 9a0dc344-c100-11d1-bbc5-0080c76670c0
95 localizationDisplayId: 38
96 validAccesses: 256
97
98 dn: CN=msmq-Peek-Dead-Letter,CN=Extended-Rights,${CONFIGDN}
99 objectClass: top
100 objectClass: controlAccessRight
101 displayName: Peek Dead Letter
102 rightsGuid: 4b6e08c1-df3c-11d1-9c86-006008764d0e
103 appliesTo: 9a0dc344-c100-11d1-bbc5-0080c76670c0
104 localizationDisplayId: 39
105 validAccesses: 256
106
107 dn: CN=msmq-Receive-computer-Journal,CN=Extended-Rights,${CONFIGDN}
108 objectClass: top
109 objectClass: controlAccessRight
110 displayName: Receive Computer Journal
111 rightsGuid: 4b6e08c2-df3c-11d1-9c86-006008764d0e
112 appliesTo: 9a0dc344-c100-11d1-bbc5-0080c76670c0
113 localizationDisplayId: 40
114 validAccesses: 256
115
116 dn: CN=msmq-Peek-computer-Journal,CN=Extended-Rights,${CONFIGDN}
117 objectClass: top
118 objectClass: controlAccessRight
119 displayName: Peek Computer Journal
120 rightsGuid: 4b6e08c3-df3c-11d1-9c86-006008764d0e
121 appliesTo: 9a0dc344-c100-11d1-bbc5-0080c76670c0
122 localizationDisplayId: 41
123 validAccesses: 256
124
125 dn: CN=msmq-Receive,CN=Extended-Rights,${CONFIGDN}
126 objectClass: top
127 objectClass: controlAccessRight
128 displayName: Receive Message
129 rightsGuid: 06bd3200-df3e-11d1-9c86-006008764d0e
130 appliesTo: 9a0dc343-c100-11d1-bbc5-0080c76670c0
131 localizationDisplayId: 42
132 validAccesses: 256
133
134 dn: CN=msmq-Peek,CN=Extended-Rights,${CONFIGDN}
135 objectClass: top
136 objectClass: controlAccessRight
137 displayName: Peek Message
138 rightsGuid: 06bd3201-df3e-11d1-9c86-006008764d0e
139 appliesTo: 9a0dc343-c100-11d1-bbc5-0080c76670c0
140 localizationDisplayId: 43
141 validAccesses: 256
142
143 dn: CN=msmq-Send,CN=Extended-Rights,${CONFIGDN}
144 objectClass: top
145 objectClass: controlAccessRight
146 displayName: Send Message
147 rightsGuid: 06bd3202-df3e-11d1-9c86-006008764d0e
148 appliesTo: 46b27aac-aafa-4ffb-b773-e5bf621ee87b
149 appliesTo: 9a0dc343-c100-11d1-bbc5-0080c76670c0
150 localizationDisplayId: 44
151 validAccesses: 256
152
153 dn: CN=msmq-Receive-journal,CN=Extended-Rights,${CONFIGDN}
154 objectClass: top
155 objectClass: controlAccessRight
156 displayName: Receive Journal
157 rightsGuid: 06bd3203-df3e-11d1-9c86-006008764d0e
158 appliesTo: 9a0dc343-c100-11d1-bbc5-0080c76670c0
159 localizationDisplayId: 45
160 validAccesses: 256
161
162 dn: CN=msmq-Open-Connector,CN=Extended-Rights,${CONFIGDN}
163 objectClass: top
164 objectClass: controlAccessRight
165 displayName: Open Connector Queue
166 rightsGuid: b4e60130-df3f-11d1-9c86-006008764d0e
167 appliesTo: bf967ab3-0de6-11d0-a285-00aa003049e2
168 localizationDisplayId: 46
169 validAccesses: 256
170
171 dn: CN=Apply-Group-Policy,CN=Extended-Rights,${CONFIGDN}
172 objectClass: top
173 objectClass: controlAccessRight
174 displayName: Apply Group Policy
175 rightsGuid: edacfd8f-ffb3-11d1-b41d-00a0c968f939
176 appliesTo: f30e3bc2-9ff0-11d1-b603-0000f80367c1
177 localizationDisplayId: 47
178 validAccesses: 256
179
180 dn: CN=RAS-Information,CN=Extended-Rights,${CONFIGDN}
181 objectClass: top
182 objectClass: controlAccessRight
183 displayName: Remote Access Information
184 rightsGuid: 037088f8-0ae1-11d2-b422-00a0c968f939
185 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
186 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
187 localizationDisplayId: 48
188 validAccesses: 48
189
190 dn: CN=DS-Install-Replica,CN=Extended-Rights,${CONFIGDN}
191 objectClass: top
192 objectClass: controlAccessRight
193 displayName: Add/Remove Replica In Domain
194 rightsGuid: 9923a32a-3607-11d2-b9be-0000f87a36b2
195 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
196 localizationDisplayId: 49
197 validAccesses: 256
198
199 dn: CN=Change-Infrastructure-Master,CN=Extended-Rights,${CONFIGDN}
200 objectClass: top
201 objectClass: controlAccessRight
202 displayName: Change Infrastructure Master
203 rightsGuid: cc17b1fb-33d9-11d2-97d4-00c04fd8d5cd
204 appliesTo: 2df90d89-009f-11d2-aa4c-00c04fd7d83a
205 localizationDisplayId: 50
206 validAccesses: 256
207
208 dn: CN=Update-Schema-Cache,CN=Extended-Rights,${CONFIGDN}
209 objectClass: top
210 objectClass: controlAccessRight
211 displayName: Update Schema Cache
212 rightsGuid: be2bb760-7f46-11d2-b9ad-00c04f79f805
213 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
214 localizationDisplayId: 51
215 validAccesses: 256
216
217 dn: CN=Recalculate-Security-Inheritance,CN=Extended-Rights,${CONFIGDN}
218 objectClass: top
219 objectClass: controlAccessRight
220 displayName: Recalculate Security Inheritance
221 rightsGuid: 62dd28a8-7f46-11d2-b9ad-00c04f79f805
222 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
223 localizationDisplayId: 52
224 validAccesses: 256
225
226 dn: CN=DS-Check-Stale-Phantoms,CN=Extended-Rights,${CONFIGDN}
227 objectClass: top
228 objectClass: controlAccessRight
229 displayName: Check Stale Phantoms
230 rightsGuid: 69ae6200-7f46-11d2-b9ad-00c04f79f805
231 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
232 localizationDisplayId: 53
233 validAccesses: 256
234
235 dn: CN=Certificate-Enrollment,CN=Extended-Rights,${CONFIGDN}
236 objectClass: top
237 objectClass: controlAccessRight
238 displayName: Enroll
239 rightsGuid: 0e10c968-78fb-11d2-90d4-00c04f79dc55
240 appliesTo: e5209ca2-3bba-11d2-90cc-00c04fd91ab1
241 localizationDisplayId: 54
242 validAccesses: 256
243
244 dn: CN=Self-Membership,CN=Extended-Rights,${CONFIGDN}
245 objectClass: top
246 objectClass: controlAccessRight
247 displayName: Add/Remove self as member
248 rightsGuid: bf9679c0-0de6-11d0-a285-00aa003049e2
249 appliesTo: bf967a9c-0de6-11d0-a285-00aa003049e2
250 localizationDisplayId: 12
251 validAccesses: 8
252
253 dn: CN=Validated-DNS-Host-Name,CN=Extended-Rights,${CONFIGDN}
254 objectClass: top
255 objectClass: controlAccessRight
256 displayName: Validated write to DNS host name
257 rightsGuid: 72e39547-7b18-11d1-adef-00c04fd8d5cd
258 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
259 localizationDisplayId: 13
260 validAccesses: 8
261
262 dn: CN=Validated-SPN,CN=Extended-Rights,${CONFIGDN}
263 objectClass: top
264 objectClass: controlAccessRight
265 displayName: Validated write to service principal name
266 rightsGuid: f3a64788-5306-11d1-a9c5-0000f80367c1
267 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
268 localizationDisplayId: 14
269 validAccesses: 8
270
271 dn: CN=Generate-RSoP-Planning,CN=Extended-Rights,${CONFIGDN}
272 objectClass: top
273 objectClass: controlAccessRight
274 displayName: Generate Resultant Set of Policy (Planning)
275 rightsGuid: b7b1b3dd-ab09-4242-9e30-9980e5d322f7
276 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
277 appliesTo: bf967aa5-0de6-11d0-a285-00aa003049e2
278 localizationDisplayId: 55
279 validAccesses: 256
280
281 dn: CN=Refresh-Group-Cache,CN=Extended-Rights,${CONFIGDN}
282 objectClass: top
283 objectClass: controlAccessRight
284 displayName: Refresh Group Cache for Logons
285 rightsGuid: 9432c620-033c-4db7-8b58-14ef6d0bf477
286 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
287 localizationDisplayId: 56
288 validAccesses: 256
289
290 dn: CN=SAM-Enumerate-Entire-Domain,CN=Extended-Rights,${CONFIGDN}
291 objectClass: top
292 objectClass: controlAccessRight
293 displayName: Enumerate Entire SAM Domain
294 rightsGuid: 91d67418-0135-4acc-8d79-c08e857cfbec
295 appliesTo: bf967aad-0de6-11d0-a285-00aa003049e2
296 localizationDisplayId: 57
297 validAccesses: 256
298
299 dn: CN=Generate-RSoP-Logging,CN=Extended-Rights,${CONFIGDN}
300 objectClass: top
301 objectClass: controlAccessRight
302 displayName: Generate Resultant Set of Policy (Logging)
303 rightsGuid: b7b1b3de-ab09-4242-9e30-9980e5d322f7
304 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
305 appliesTo: bf967aa5-0de6-11d0-a285-00aa003049e2
306 localizationDisplayId: 58
307 validAccesses: 256
308
309 dn: CN=Domain-Other-Parameters,CN=Extended-Rights,${CONFIGDN}
310 objectClass: top
311 objectClass: controlAccessRight
312 displayName: Other Domain Parameters (for use by SAM)
313 rightsGuid: b8119fd0-04f6-4762-ab7a-4986c76b3f9a
314 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
315 localizationDisplayId: 59
316 validAccesses: 48
317
318 dn: CN=DNS-Host-Name-Attributes,CN=Extended-Rights,${CONFIGDN}
319 objectClass: top
320 objectClass: controlAccessRight
321 displayName: DNS Host Name Attributes
322 rightsGuid: 72e39547-7b18-11d1-adef-00c04fd8d5cd
323 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
324 localizationDisplayId: 60
325 validAccesses: 48
326
327 dn: CN=Create-Inbound-Forest-Trust,CN=Extended-Rights,${CONFIGDN}
328 objectClass: top
329 objectClass: controlAccessRight
330 displayName: Create Inbound Forest Trust
331 rightsGuid: e2a36dc9-ae17-47c3-b58b-be34c55ba633
332 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
333 localizationDisplayId: 61
334 validAccesses: 256
335
336 dn: CN=DS-Replication-Get-Changes-All,CN=Extended-Rights,${CONFIGDN}
337 objectClass: top
338 objectClass: controlAccessRight
339 displayName: Replicating Directory Changes All
340 rightsGuid: 1131f6ad-9c07-11d1-f79f-00c04fc2dcd2
341 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
342 appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
343 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
344 localizationDisplayId: 62
345 validAccesses: 256
346
347 dn: CN=Migrate-SID-History,CN=Extended-Rights,${CONFIGDN}
348 objectClass: top
349 objectClass: controlAccessRight
350 displayName: Migrate SID History
351 rightsGuid: BA33815A-4F93-4c76-87F3-57574BFF8109
352 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
353 localizationDisplayId: 63
354 validAccesses: 256
355
356 dn: CN=Reanimate-Tombstones,CN=Extended-Rights,${CONFIGDN}
357 objectClass: top
358 objectClass: controlAccessRight
359 displayName: Reanimate Tombstones
360 rightsGuid: 45EC5156-DB7E-47bb-B53F-DBEB2D03C40F
361 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
362 appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
363 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
364 localizationDisplayId: 64
365 validAccesses: 256
366
367 dn: CN=Allowed-To-Authenticate,CN=Extended-Rights,${CONFIGDN}
368 objectClass: top
369 objectClass: controlAccessRight
370 displayName: Allowed to Authenticate
371 rightsGuid: 68B1D179-0D15-4d4f-AB71-46152E79A7BC
372 appliesTo: 4828cc14-1437-45bc-9b07-ad6f015e5f28
373 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
374 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
375 localizationDisplayId: 65
376 validAccesses: 256
377
378 dn: CN=DS-Execute-Intentions-Script,CN=Extended-Rights,${CONFIGDN}
379 objectClass: top
380 objectClass: controlAccessRight
381 displayName: Execute Forest Update Script
382 rightsGuid: 2f16c4a5-b98e-432c-952a-cb388ba33f2e
383 appliesTo: ef9e60e0-56f7-11d1-a9c6-0000f80367c1
384 localizationDisplayId: 66
385 validAccesses: 256
386
387 dn: CN=DS-Replication-Monitor-Topology,CN=Extended-Rights,${CONFIGDN}
388 objectClass: top
389 objectClass: controlAccessRight
390 displayName: Monitor Active Directory Replication
391 rightsGuid: f98340fb-7c5b-4cdb-a00b-2ebdfa115a96
392 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
393 appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
394 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
395 localizationDisplayId: 67
396 validAccesses: 256
397
398 dn: CN=Update-Password-Not-Required-Bit,CN=Extended-Rights,${CONFIGDN}
399 objectClass: top
400 objectClass: controlAccessRight
401 displayName: Update Password Not Required Bit
402 rightsGuid: 280f369c-67c7-438e-ae98-1d46f3c6f541
403 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
404 localizationDisplayId: 68
405 validAccesses: 256
406
407 dn: CN=Unexpire-Password,CN=Extended-Rights,${CONFIGDN}
408 objectClass: top
409 objectClass: controlAccessRight
410 displayName: Unexpire Password
411 rightsGuid: ccc2dc7d-a6ad-4a7a-8846-c04e3cc53501
412 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
413 localizationDisplayId: 69
414 validAccesses: 256
415
416 dn: CN=Enable-Per-User-Reversibly-Encrypted-Password,CN=Extended-Rights,${CONFIGDN}
417 objectClass: top
418 objectClass: controlAccessRight
419 displayName: Enable Per User Reversibly Encrypted Password
420 rightsGuid: 05c74c5e-4deb-43b4-bd9f-86664c2a7fd5
421 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
422 localizationDisplayId: 70
423 validAccesses: 256
424
425 dn: CN=DS-Query-Self-Quota,CN=Extended-Rights,${CONFIGDN}
426 objectClass: top
427 objectClass: controlAccessRight
428 displayName: Query Self Quota
429 rightsGuid: 4ecc03fe-ffc0-4947-b630-eb672a8a9dbc
430 appliesTo: da83fc4f-076f-4aea-b4dc-8f4dab9b5993
431 localizationDisplayId: 71
432 validAccesses: 256
433
434 dn: CN=Domain-Administer-Server,CN=Extended-Rights,${CONFIGDN}
435 objectClass: top
436 objectClass: controlAccessRight
437 displayName: Domain Administer Server
438 rightsGuid: ab721a52-1e2f-11d0-9819-00aa0040529b
439 appliesTo: bf967aad-0de6-11d0-a285-00aa003049e2
440 localizationDisplayId: 1
441 validAccesses: 256
442
443 dn: CN=User-Change-Password,CN=Extended-Rights,${CONFIGDN}
444 objectClass: top
445 objectClass: controlAccessRight
446 displayName: Change Password
447 rightsGuid: ab721a53-1e2f-11d0-9819-00aa0040529b
448 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
449 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
450 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
451 localizationDisplayId: 2
452 validAccesses: 256
453
454 dn: CN=User-Force-Change-Password,CN=Extended-Rights,${CONFIGDN}
455 objectClass: top
456 objectClass: controlAccessRight
457 displayName: Reset Password
458 rightsGuid: 00299570-246d-11d0-a768-00aa006e0529
459 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
460 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
461 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
462 localizationDisplayId: 3
463 validAccesses: 256
464
465 dn: CN=Send-As,CN=Extended-Rights,${CONFIGDN}
466 objectClass: top
467 objectClass: controlAccessRight
468 displayName: Send As
469 rightsGuid: ab721a54-1e2f-11d0-9819-00aa0040529b
470 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
471 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
472 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
473 localizationDisplayId: 4
474 validAccesses: 256
475
476 dn: CN=Receive-As,CN=Extended-Rights,${CONFIGDN}
477 objectClass: top
478 objectClass: controlAccessRight
479 displayName: Receive As
480 rightsGuid: ab721a56-1e2f-11d0-9819-00aa0040529b
481 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
482 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
483 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
484 localizationDisplayId: 5
485 validAccesses: 256
486
487 dn: CN=Send-To,CN=Extended-Rights,${CONFIGDN}
488 objectClass: top
489 objectClass: controlAccessRight
490 displayName: Send To
491 rightsGuid: ab721a55-1e2f-11d0-9819-00aa0040529b
492 appliesTo: bf967a9c-0de6-11d0-a285-00aa003049e2
493 localizationDisplayId: 6
494 validAccesses: 256
495
496 dn: CN=Domain-Password,CN=Extended-Rights,${CONFIGDN}
497 objectClass: top
498 objectClass: controlAccessRight
499 displayName: Domain Password & Lockout Policies
500 rightsGuid: c7407360-20bf-11d0-a768-00aa006e0529
501 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
502 appliesTo: 19195a5a-6da0-11d0-afd3-00c04fd930c9
503 localizationDisplayId: 7
504 validAccesses: 48
505
506 dn: CN=General-Information,CN=Extended-Rights,${CONFIGDN}
507 objectClass: top
508 objectClass: controlAccessRight
509 displayName: General Information
510 rightsGuid: 59ba2f42-79a2-11d0-9020-00c04fc2d3cf
511 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
512 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
513 localizationDisplayId: 8
514 validAccesses: 48
515
516 dn: CN=User-Account-Restrictions,CN=Extended-Rights,${CONFIGDN}
517 objectClass: top
518 objectClass: controlAccessRight
519 displayName: Account Restrictions
520 rightsGuid: 4c164200-20c0-11d0-a768-00aa006e0529
521 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
522 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
523 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
524 localizationDisplayId: 9
525 validAccesses: 48
526
527 dn: CN=User-Logon,CN=Extended-Rights,${CONFIGDN}
528 objectClass: top
529 objectClass: controlAccessRight
530 displayName: Logon Information
531 rightsGuid: 5f202010-79a5-11d0-9020-00c04fc2d4cf
532 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
533 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
534 localizationDisplayId: 10
535 validAccesses: 48
536
537 dn: CN=Membership,CN=Extended-Rights,${CONFIGDN}
538 objectClass: top
539 objectClass: controlAccessRight
540 displayName: Group Membership
541 rightsGuid: bc0ac240-79a9-11d0-9020-00c04fc2d4cf
542 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
543 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
544 localizationDisplayId: 11
545 validAccesses: 48
546
547 dn: CN=Open-Address-Book,CN=Extended-Rights,${CONFIGDN}
548 objectClass: top
549 objectClass: controlAccessRight
550 displayName: Open Address List
551 rightsGuid: a1990816-4298-11d1-ade2-00c04fd8d5cd
552 appliesTo: 3e74f60f-3e73-11d1-a9c0-0000f80367c1
553 localizationDisplayId: 21
554 validAccesses: 256
555
556 dn: CN=Personal-Information,CN=Extended-Rights,${CONFIGDN}
557 objectClass: top
558 objectClass: controlAccessRight
559 displayName: Personal Information
560 rightsGuid: 77B5B886-944A-11d1-AEBD-0000F80367C1
561 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
562 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
563 appliesTo: 5cb41ed0-0e4c-11d0-a286-00aa003049e2
564 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
565 localizationDisplayId: 23
566 validAccesses: 48
567
568 dn: CN=Email-Information,CN=Extended-Rights,${CONFIGDN}
569 objectClass: top
570 objectClass: controlAccessRight
571 displayName: Phone and Mail Options
572 rightsGuid: E45795B2-9455-11d1-AEBD-0000F80367C1
573 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
574 appliesTo: bf967a9c-0de6-11d0-a285-00aa003049e2
575 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
576 localizationDisplayId: 22
577 validAccesses: 48
578
579 dn: CN=Web-Information,CN=Extended-Rights,${CONFIGDN}
580 objectClass: top
581 objectClass: controlAccessRight
582 displayName: Web Information
583 rightsGuid: E45795B3-9455-11d1-AEBD-0000F80367C1
584 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
585 appliesTo: 5cb41ed0-0e4c-11d0-a286-00aa003049e2
586 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
587 localizationDisplayId: 24
588 validAccesses: 48
589
590 dn: CN=DS-Replication-Get-Changes,CN=Extended-Rights,${CONFIGDN}
591 objectClass: top
592 objectClass: controlAccessRight
593 displayName: Replicating Directory Changes
594 rightsGuid: 1131f6aa-9c07-11d1-f79f-00c04fc2dcd2
595 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
596 appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
597 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
598 localizationDisplayId: 25
599 validAccesses: 256
600
601 dn: CN=DS-Replication-Synchronize,CN=Extended-Rights,${CONFIGDN}
602 objectClass: top
603 objectClass: controlAccessRight
604 displayName: Replication Synchronization
605 rightsGuid: 1131f6ab-9c07-11d1-f79f-00c04fc2dcd2
606 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
607 appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
608 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
609 localizationDisplayId: 26
610 validAccesses: 256
611
612 dn: CN=DS-Replication-Manage-Topology,CN=Extended-Rights,${CONFIGDN}
613 objectClass: top
614 objectClass: controlAccessRight
615 displayName: Manage Replication Topology
616 rightsGuid: 1131f6ac-9c07-11d1-f79f-00c04fc2dcd2
617 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
618 appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
619 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
620 localizationDisplayId: 27
621 validAccesses: 256
622
623 dn: CN=Change-Schema-Master,CN=Extended-Rights,${CONFIGDN}
624 objectClass: top
625 objectClass: controlAccessRight
626 displayName: Change Schema Master
627 rightsGuid: e12b56b6-0a95-11d1-adbb-00c04fd8d5cd
628 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
629 localizationDisplayId: 28
630 validAccesses: 256
631
632 dn: CN=ForestUpdates,${CONFIGDN}
633 objectClass: top
634 objectClass: container
635
636 dn: CN=Operations,CN=ForestUpdates,${CONFIGDN}
637 objectClass: top
638 objectClass: container
639
640 dn: CN=Windows2003Update,CN=ForestUpdates,${CONFIGDN}
641 objectClass: top
642 objectClass: container
643 revision: 9
644
645 dn: CN=LostAndFoundConfig,${CONFIGDN}
646 objectClass: top
647 objectClass: lostAndFound
648 systemFlags: -2147483648
649
650 dn: CN=NTDS Quotas,${CONFIGDN}
651 objectClass: top
652 objectClass: msDS-QuotaContainer
653 description: Quota specifications container
654 msDS-TombstoneQuotaFactor: 100
655 systemFlags: -2147483648
656
657 dn: CN=Partitions,${CONFIGDN}
658 objectClass: top
659 objectClass: crossRefContainer
660 systemFlags: -2147483648
661 msDS-Behavior-Version: ${FOREST_FUNCTIONALALITY}
662 showInAdvancedViewOnly: TRUE
663
664 dn: CN=Enterprise Configuration,CN=Partitions,${CONFIGDN}
665 objectClass: top
666 objectClass: crossRef
667 systemFlags: 1
668 nCName: ${CONFIGDN}
669 dnsRoot: ${DNSDOMAIN}
670
671 dn: CN=Enterprise Schema,CN=Partitions,${CONFIGDN}
672 objectClass: top
673 objectClass: crossRef
674 systemFlags: 1
675 nCName: ${SCHEMADN}
676 dnsRoot: ${DNSDOMAIN}
677
678 dn: CN=${DOMAIN},CN=Partitions,${CONFIGDN}
679 objectClass: top
680 objectClass: crossRef
681 systemFlags: 3
682 nCName: ${DOMAINDN}
683 nETBIOSName: ${DOMAIN}
684 dnsRoot: ${DNSDOMAIN}
685
686 dn: CN=Physical Locations,${CONFIGDN}
687 objectClass: top
688 objectClass: locality
689 objectClass: physicalLocation
690 l: Physical Locations tree root
691
692 dn: CN=Deleted Objects,${CONFIGDN}
693 objectClass: top
694 objectClass: container
695 description: Container for deleted objects
696 isDeleted: TRUE
697
698 # Schema located in "ad-schema/*.txt"
699
700 dn: CN=Services,${CONFIGDN}
701 objectClass: top
702 objectClass: container
703 systemFlags: -2147483648
704
705 dn: CN=Windows NT,CN=Services,${CONFIGDN}
706 objectClass: top
707 objectClass: container
708
709 dn: CN=Directory Service,CN=Windows NT,CN=Services,${CONFIGDN}
710 objectClass: top
711 objectClass: nTDSService
712 sPNMappings: host=ldap,dns,cifs,http
713
714 dn: CN=Query-Policies,CN=Directory Service,CN=Windows NT,CN=Services,${CONFIGDN}
715 objectClass: top
716 objectClass: container
717
718 dn: CN=Default Query Policy,CN=Query-Policies,CN=Directory Service,CN=Windows NT,CN=Services,${CONFIGDN}
719 objectClass: top
720 objectClass: queryPolicy
721 lDAPAdminLimits: MaxValRange=1500
722 lDAPAdminLimits: MaxReceiveBuffer=10485760
723 lDAPAdminLimits: MaxDatagramRecv=4096
724 lDAPAdminLimits: MaxPoolThreads=4
725 lDAPAdminLimits: MaxResultSetSize=262144
726 lDAPAdminLimits: MaxTempTableSize=10000
727 lDAPAdminLimits: MaxQueryDuration=120
728 lDAPAdminLimits: MaxPageSize=1000
729 lDAPAdminLimits: MaxNotificationPerConn=5
730 lDAPAdminLimits: MaxActiveQueries=20
731 lDAPAdminLimits: MaxConnIdleTime=900
732 lDAPAdminLimits: InitRecvTimeout=120
733 lDAPAdminLimits: MaxConnections=5000
734
735 dn: CN=Sites,${CONFIGDN}
736 objectClass: top
737 objectClass: sitesContainer
738 systemFlags: -2113929216
739
740 dn: CN=${DEFAULTSITE},CN=Sites,${CONFIGDN}
741 objectClass: top
742 objectClass: site
743 systemFlags: 1107296256
744
745 dn: CN=Licensing Site Settings,CN=${DEFAULTSITE},CN=Sites,${CONFIGDN}
746 objectClass: top
747 objectClass: applicationSiteSettings
748 objectClass: licensingSiteSettings
749
750 dn: CN=Inter-Site Transports,CN=Sites,${CONFIGDN}
751 objectClass: top
752 objectClass: interSiteTransportContainer
753 systemFlags: -2147483648
754
755 dn: CN=IP,CN=Inter-Site Transports,CN=Sites,${CONFIGDN}
756 objectClass: top
757 objectClass: interSiteTransport
758 transportAddressAttribute: dNSHostName
759 transportDLLName: ismip.dll
760
761 dn: CN=DEFAULTIPSITELINK,CN=IP,CN=Inter-Site Transports,CN=Sites,${CONFIGDN}
762 objectClass: top
763 objectClass: siteLink
764 cost: 100
765 replInterval: 180
766 siteList: CN=${DEFAULTSITE},CN=Sites,${CONFIGDN}
767 systemFlags: 1073741824
768
769 dn: CN=SMTP,CN=Inter-Site Transports,CN=Sites,${CONFIGDN}
770 objectClass: top
771 objectClass: interSiteTransport
772 transportAddressAttribute: mailAddress
773 transportDLLName: ismsmtp.dll
774 options: 1
775
776 dn: CN=NTDS Site Settings,CN=${DEFAULTSITE},CN=Sites,${CONFIGDN}
777 objectClass: top
778 objectClass: applicationSiteSettings
779 objectClass: nTDSSiteSettings
780
781 dn: CN=Servers,CN=${DEFAULTSITE},CN=Sites,${CONFIGDN}
782 objectClass: top
783 objectClass: serversContainer
784 systemFlags: 33554432
785