source4/setup/provision_configuration.ldif

   1 ###############################
   2 # Configuration Naming Context
   3 ###############################
   4 dn: CN=Partitions,${CONFIGDN}
   5 objectClass: top
   6 objectClass: crossRefContainer
   7 cn: Partitions
   8 systemFlags: 2147483648
   9 msDS-Behavior-Version: 0
  10 fSMORoleOwner: CN=NTDS Settings,${SERVERDN}
  11
  12 dn: CN=Enterprise Configuration,CN=Partitions,${CONFIGDN}
  13 objectClass: top
  14 objectClass: crossRef
  15 cn: Enterprise Configuration
  16 systemFlags: 1
  17 nCName: ${CONFIGDN}
  18 dnsRoot: ${DNSDOMAIN}
  19
  20 dn: CN=Enterprise Schema,CN=Partitions,${CONFIGDN}
  21 objectClass: top
  22 objectClass: crossRef
  23 cn: Enterprise Schema
  24 systemFlags: 1
  25 nCName: ${SCHEMADN}
  26 dnsRoot: ${DNSDOMAIN}
  27
  28 dn: CN=${DOMAIN},CN=Partitions,${CONFIGDN}
  29 objectClass: top
  30 objectClass: crossRef
  31 cn: ${DOMAIN}
  32 systemFlags: 3
  33 nCName: ${DOMAINDN}
  34 nETBIOSName: ${DOMAIN}
  35 dnsRoot: ${DNSDOMAIN}
  36
  37 dn: CN=Sites,${CONFIGDN}
  38 objectClass: top
  39 objectClass: sitesContainer
  40 cn: Sites
  41 systemFlags: 2181038080
  42
  43 dn: CN=${DEFAULTSITE},CN=Sites,${CONFIGDN}
  44 objectClass: top
  45 objectClass: site
  46 cn: ${DEFAULTSITE}
  47 systemFlags: 2181038080
  48
  49 dn: CN=Servers,CN=${DEFAULTSITE},CN=Sites,${CONFIGDN}
  50 objectClass: top
  51 objectClass: serversContainer
  52 cn: Servers
  53 systemFlags: 2181038080
  54
  55 dn: CN=Services,${CONFIGDN}
  56 objectClass: top
  57 objectClass: container
  58 cn: Services
  59 systemFlags: 2147483648
  60
  61 dn: CN=Windows NT,CN=Services,${CONFIGDN}
  62 objectClass: top
  63 objectClass: container
  64 cn: Windows NT
  65
  66 dn: CN=Directory Service,CN=Windows NT,CN=Services,${CONFIGDN}
  67 objectClass: top
  68 objectClass: nTDSService
  69 cn: Directory Service
  70 sPNMappings: host=ldap,dns,cifs,http
  71
  72 dn: CN=Query-Policies,CN=Directory Service,CN=Windows NT,CN=Services,${CONFIGDN}
  73 objectClass: top
  74 objectClass: container
  75 cn: Query-Policies
  76
  77 dn: CN=Default Query Policy,CN=Query-Policies,CN=Directory Service,CN=Windows NT,CN=Services,${CONFIGDN}
  78 objectClass: top
  79 objectClass: queryPolicy
  80 cn: Default Query Policy
  81 lDAPAdminLimits: MaxValRange=1500
  82 lDAPAdminLimits: MaxReceiveBuffer=10485760
  83 lDAPAdminLimits: MaxDatagramRecv=4096
  84 lDAPAdminLimits: MaxPoolThreads=4
  85 lDAPAdminLimits: MaxResultSetSize=262144
  86 lDAPAdminLimits: MaxTempTableSize=10000
  87 lDAPAdminLimits: MaxQueryDuration=120
  88 lDAPAdminLimits: MaxPageSize=1000
  89 lDAPAdminLimits: MaxNotificationPerConn=5
  90 lDAPAdminLimits: MaxActiveQueries=20
  91 lDAPAdminLimits: MaxConnIdleTime=900
  92 lDAPAdminLimits: InitRecvTimeout=120
  93 lDAPAdminLimits: MaxConnections=5000
  94
  95 dn: CN=Extended-Rights,${CONFIGDN}
  96 objectClass: top
  97 objectClass: container
  98 cn: Extended-Rights
  99 instanceType: 4
 100 showInAdvancedViewOnly: TRUE
 101 systemFlags: -2147483648
 102 objectCategory: CN=Container,CN=Schema,${CONFIGDN}
 103
 104 dn: CN=Change-Rid-Master,CN=Extended-Rights,${CONFIGDN}
 105 objectClass: top
 106 objectClass: controlAccessRight
 107 cn: Change-Rid-Master
 108 instanceType: 4
 109 displayName: Change Rid Master
 110 showInAdvancedViewOnly: TRUE
 111 rightsGuid: d58d5f36-0a98-11d1-adbb-00c04fd8d5cd
 112 appliesTo: 6617188d-8f3c-11d0-afda-00c04fd930c9
 113 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 114 localizationDisplayId: 29
 115 validAccesses: 256
 116
 117 dn: CN=Do-Garbage-Collection,CN=Extended-Rights,${CONFIGDN}
 118 objectClass: top
 119 objectClass: controlAccessRight
 120 cn: Do-Garbage-Collection
 121 instanceType: 4
 122 displayName: Do Garbage Collection
 123 showInAdvancedViewOnly: TRUE
 124 rightsGuid: fec364e0-0a98-11d1-adbb-00c04fd8d5cd
 125 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
 126 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 127 localizationDisplayId: 31
 128 validAccesses: 256
 129
 130 dn: CN=Recalculate-Hierarchy,CN=Extended-Rights,${CONFIGDN}
 131 objectClass: top
 132 objectClass: controlAccessRight
 133 cn: Recalculate-Hierarchy
 134 instanceType: 4
 135 displayName: Recalculate Hierarchy
 136 showInAdvancedViewOnly: TRUE
 137 rightsGuid: 0bc1554e-0a99-11d1-adbb-00c04fd8d5cd
 138 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
 139 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 140 localizationDisplayId: 32
 141 validAccesses: 256
 142
 143 dn: CN=Allocate-Rids,CN=Extended-Rights,${CONFIGDN}
 144 objectClass: top
 145 objectClass: controlAccessRight
 146 cn: Allocate-Rids
 147 instanceType: 4
 148 displayName: Allocate Rids
 149 showInAdvancedViewOnly: TRUE
 150 rightsGuid: 1abd7cf8-0a99-11d1-adbb-00c04fd8d5cd
 151 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
 152 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 153 localizationDisplayId: 33
 154 validAccesses: 256
 155
 156 dn: CN=Change-PDC,CN=Extended-Rights,${CONFIGDN}
 157 objectClass: top
 158 objectClass: controlAccessRight
 159 cn: Change-PDC
 160 instanceType: 4
 161 displayName: Change PDC
 162 showInAdvancedViewOnly: TRUE
 163 rightsGuid: bae50096-4752-11d1-9052-00c04fc2d4cf
 164 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 165 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 166 localizationDisplayId: 34
 167 validAccesses: 256
 168
 169 dn: CN=Add-GUID,CN=Extended-Rights,${CONFIGDN}
 170 objectClass: top
 171 objectClass: controlAccessRight
 172 cn: Add-GUID
 173 instanceType: 4
 174 displayName: Add GUID
 175 showInAdvancedViewOnly: TRUE
 176 rightsGuid: 440820ad-65b4-11d1-a3da-0000f875ae0d
 177 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 178 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 179 localizationDisplayId: 35
 180 validAccesses: 256
 181
 182 dn: CN=Change-Domain-Master,CN=Extended-Rights,${CONFIGDN}
 183 objectClass: top
 184 objectClass: controlAccessRight
 185 cn: Change-Domain-Master
 186 instanceType: 4
 187 displayName: Change Domain Master
 188 showInAdvancedViewOnly: TRUE
 189 rightsGuid: 014bf69c-7b3b-11d1-85f6-08002be74fab
 190 appliesTo: ef9e60e0-56f7-11d1-a9c6-0000f80367c1
 191 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 192 localizationDisplayId: 36
 193 validAccesses: 256
 194
 195 dn: CN=Public-Information,CN=Extended-Rights,${CONFIGDN}
 196 objectClass: top
 197 objectClass: controlAccessRight
 198 cn: Public-Information
 199 instanceType: 4
 200 displayName: Public Information
 201 showInAdvancedViewOnly: TRUE
 202 rightsGuid: e48d0154-bcf8-11d1-8702-00c04fb96050
 203 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
 204 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
 205 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
 206 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 207 localizationDisplayId: 37
 208 validAccesses: 48
 209
 210 dn: CN=msmq-Receive-Dead-Letter,CN=Extended-Rights,${CONFIGDN}
 211 objectClass: top
 212 objectClass: controlAccessRight
 213 cn: msmq-Receive-Dead-Letter
 214 instanceType: 4
 215 displayName: Receive Dead Letter
 216 showInAdvancedViewOnly: TRUE
 217 rightsGuid: 4b6e08c0-df3c-11d1-9c86-006008764d0e
 218 appliesTo: 9a0dc344-c100-11d1-bbc5-0080c76670c0
 219 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 220 localizationDisplayId: 38
 221 validAccesses: 256
 222
 223 dn: CN=msmq-Peek-Dead-Letter,CN=Extended-Rights,${CONFIGDN}
 224 objectClass: top
 225 objectClass: controlAccessRight
 226 cn: msmq-Peek-Dead-Letter
 227 instanceType: 4
 228 displayName: Peek Dead Letter
 229 showInAdvancedViewOnly: TRUE
 230 rightsGuid: 4b6e08c1-df3c-11d1-9c86-006008764d0e
 231 appliesTo: 9a0dc344-c100-11d1-bbc5-0080c76670c0
 232 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 233 localizationDisplayId: 39
 234 validAccesses: 256
 235
 236 dn: CN=msmq-Receive-computer-Journal,CN=Extended-Rights,${CONFIGDN}
 237 objectClass: top
 238 objectClass: controlAccessRight
 239 cn: msmq-Receive-computer-Journal
 240 instanceType: 4
 241 displayName: Receive Computer Journal
 242 showInAdvancedViewOnly: TRUE
 243 rightsGuid: 4b6e08c2-df3c-11d1-9c86-006008764d0e
 244 appliesTo: 9a0dc344-c100-11d1-bbc5-0080c76670c0
 245 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 246 localizationDisplayId: 40
 247 validAccesses: 256
 248
 249 dn: CN=msmq-Peek-computer-Journal,CN=Extended-Rights,${CONFIGDN}
 250 objectClass: top
 251 objectClass: controlAccessRight
 252 cn: msmq-Peek-computer-Journal
 253 instanceType: 4
 254 displayName: Peek Computer Journal
 255 showInAdvancedViewOnly: TRUE
 256 rightsGuid: 4b6e08c3-df3c-11d1-9c86-006008764d0e
 257 appliesTo: 9a0dc344-c100-11d1-bbc5-0080c76670c0
 258 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 259 localizationDisplayId: 41
 260 validAccesses: 256
 261
 262 dn: CN=msmq-Receive,CN=Extended-Rights,${CONFIGDN}
 263 objectClass: top
 264 objectClass: controlAccessRight
 265 cn: msmq-Receive
 266 instanceType: 4
 267 displayName: Receive Message
 268 showInAdvancedViewOnly: TRUE
 269 rightsGuid: 06bd3200-df3e-11d1-9c86-006008764d0e
 270 appliesTo: 9a0dc343-c100-11d1-bbc5-0080c76670c0
 271 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 272 localizationDisplayId: 42
 273 validAccesses: 256
 274
 275 dn: CN=msmq-Peek,CN=Extended-Rights,${CONFIGDN}
 276 objectClass: top
 277 objectClass: controlAccessRight
 278 cn: msmq-Peek
 279 instanceType: 4
 280 displayName: Peek Message
 281 showInAdvancedViewOnly: TRUE
 282 rightsGuid: 06bd3201-df3e-11d1-9c86-006008764d0e
 283 appliesTo: 9a0dc343-c100-11d1-bbc5-0080c76670c0
 284 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 285 localizationDisplayId: 43
 286 validAccesses: 256
 287
 288 dn: CN=msmq-Send,CN=Extended-Rights,${CONFIGDN}
 289 objectClass: top
 290 objectClass: controlAccessRight
 291 cn: msmq-Send
 292 instanceType: 4
 293 displayName: Send Message
 294 showInAdvancedViewOnly: TRUE
 295 rightsGuid: 06bd3202-df3e-11d1-9c86-006008764d0e
 296 appliesTo: 46b27aac-aafa-4ffb-b773-e5bf621ee87b
 297 appliesTo: 9a0dc343-c100-11d1-bbc5-0080c76670c0
 298 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 299 localizationDisplayId: 44
 300 validAccesses: 256
 301
 302 dn: CN=msmq-Receive-journal,CN=Extended-Rights,${CONFIGDN}
 303 objectClass: top
 304 objectClass: controlAccessRight
 305 cn: msmq-Receive-journal
 306 instanceType: 4
 307 displayName: Receive Journal
 308 showInAdvancedViewOnly: TRUE
 309 rightsGuid: 06bd3203-df3e-11d1-9c86-006008764d0e
 310 appliesTo: 9a0dc343-c100-11d1-bbc5-0080c76670c0
 311 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 312 localizationDisplayId: 45
 313 validAccesses: 256
 314
 315 dn: CN=msmq-Open-Connector,CN=Extended-Rights,${CONFIGDN}
 316 objectClass: top
 317 objectClass: controlAccessRight
 318 cn: msmq-Open-Connector
 319 instanceType: 4
 320 displayName: Open Connector Queue
 321 showInAdvancedViewOnly: TRUE
 322 rightsGuid: b4e60130-df3f-11d1-9c86-006008764d0e
 323 appliesTo: bf967ab3-0de6-11d0-a285-00aa003049e2
 324 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 325 localizationDisplayId: 46
 326 validAccesses: 256
 327
 328 dn: CN=Apply-Group-Policy,CN=Extended-Rights,${CONFIGDN}
 329 objectClass: top
 330 objectClass: controlAccessRight
 331 cn: Apply-Group-Policy
 332 instanceType: 4
 333 displayName: Apply Group Policy
 334 showInAdvancedViewOnly: TRUE
 335 rightsGuid: edacfd8f-ffb3-11d1-b41d-00a0c968f939
 336 appliesTo: f30e3bc2-9ff0-11d1-b603-0000f80367c1
 337 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 338 localizationDisplayId: 47
 339 validAccesses: 256
 340
 341 dn: CN=RAS-Information,CN=Extended-Rights,${CONFIGDN}
 342 objectClass: top
 343 objectClass: controlAccessRight
 344 cn: RAS-Information
 345 instanceType: 4
 346 displayName: Remote Access Information
 347 showInAdvancedViewOnly: TRUE
 348 rightsGuid: 037088f8-0ae1-11d2-b422-00a0c968f939
 349 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
 350 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
 351 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 352 localizationDisplayId: 48
 353 validAccesses: 48
 354
 355 dn: CN=DS-Install-Replica,CN=Extended-Rights,${CONFIGDN}
 356 objectClass: top
 357 objectClass: controlAccessRight
 358 cn: DS-Install-Replica
 359 instanceType: 4
 360 displayName: Add/Remove Replica In Domain
 361 showInAdvancedViewOnly: TRUE
 362 rightsGuid: 9923a32a-3607-11d2-b9be-0000f87a36b2
 363 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 364 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 365 localizationDisplayId: 49
 366 validAccesses: 256
 367
 368 dn: CN=Change-Infrastructure-Master,CN=Extended-Rights,${CONFIGDN}
 369 objectClass: top
 370 objectClass: controlAccessRight
 371 cn: Change-Infrastructure-Master
 372 instanceType: 4
 373 displayName: Change Infrastructure Master
 374 showInAdvancedViewOnly: TRUE
 375 rightsGuid: cc17b1fb-33d9-11d2-97d4-00c04fd8d5cd
 376 appliesTo: 2df90d89-009f-11d2-aa4c-00c04fd7d83a
 377 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 378 localizationDisplayId: 50
 379 validAccesses: 256
 380
 381 dn: CN=Update-Schema-Cache,CN=Extended-Rights,${CONFIGDN}
 382 objectClass: top
 383 objectClass: controlAccessRight
 384 cn: Update-Schema-Cache
 385 instanceType: 4
 386 displayName: Update Schema Cache
 387 showInAdvancedViewOnly: TRUE
 388 rightsGuid: be2bb760-7f46-11d2-b9ad-00c04f79f805
 389 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
 390 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 391 localizationDisplayId: 51
 392 validAccesses: 256
 393
 394 dn: CN=Recalculate-Security-Inheritance,CN=Extended-Rights,${CONFIGDN}
 395 objectClass: top
 396 objectClass: controlAccessRight
 397 cn: Recalculate-Security-Inheritance
 398 instanceType: 4
 399 displayName: Recalculate Security Inheritance
 400 showInAdvancedViewOnly: TRUE
 401 rightsGuid: 62dd28a8-7f46-11d2-b9ad-00c04f79f805
 402 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
 403 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 404 localizationDisplayId: 52
 405 validAccesses: 256
 406
 407 dn: CN=DS-Check-Stale-Phantoms,CN=Extended-Rights,${CONFIGDN}
 408 objectClass: top
 409 objectClass: controlAccessRight
 410 cn: DS-Check-Stale-Phantoms
 411 instanceType: 4
 412 displayName: Check Stale Phantoms
 413 showInAdvancedViewOnly: TRUE
 414 rightsGuid: 69ae6200-7f46-11d2-b9ad-00c04f79f805
 415 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
 416 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 417 localizationDisplayId: 53
 418 validAccesses: 256
 419
 420 dn: CN=Certificate-Enrollment,CN=Extended-Rights,${CONFIGDN}
 421 objectClass: top
 422 objectClass: controlAccessRight
 423 cn: Certificate-Enrollment
 424 instanceType: 4
 425 displayName: Enroll
 426 showInAdvancedViewOnly: TRUE
 427 rightsGuid: 0e10c968-78fb-11d2-90d4-00c04f79dc55
 428 appliesTo: e5209ca2-3bba-11d2-90cc-00c04fd91ab1
 429 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 430 localizationDisplayId: 54
 431 validAccesses: 256
 432
 433 dn: CN=Self-Membership,CN=Extended-Rights,${CONFIGDN}
 434 objectClass: top
 435 objectClass: controlAccessRight
 436 cn: Self-Membership
 437 instanceType: 4
 438 displayName: Add/Remove self as member
 439 showInAdvancedViewOnly: TRUE
 440 rightsGuid: bf9679c0-0de6-11d0-a285-00aa003049e2
 441 appliesTo: bf967a9c-0de6-11d0-a285-00aa003049e2
 442 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 443 localizationDisplayId: 12
 444 validAccesses: 8
 445
 446 dn: CN=Validated-DNS-Host-Name,CN=Extended-Rights,${CONFIGDN}
 447 objectClass: top
 448 objectClass: controlAccessRight
 449 cn: Validated-DNS-Host-Name
 450 instanceType: 4
 451 displayName: Validated write to DNS host name
 452 showInAdvancedViewOnly: TRUE
 453 rightsGuid: 72e39547-7b18-11d1-adef-00c04fd8d5cd
 454 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
 455 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 456 localizationDisplayId: 13
 457 validAccesses: 8
 458
 459 dn: CN=Validated-SPN,CN=Extended-Rights,${CONFIGDN}
 460 objectClass: top
 461 objectClass: controlAccessRight
 462 cn: Validated-SPN
 463 instanceType: 4
 464 displayName: Validated write to service principal name
 465 showInAdvancedViewOnly: TRUE
 466 rightsGuid: f3a64788-5306-11d1-a9c5-0000f80367c1
 467 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
 468 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 469 localizationDisplayId: 14
 470 validAccesses: 8
 471
 472 dn: CN=Generate-RSoP-Planning,CN=Extended-Rights,${CONFIGDN}
 473 objectClass: top
 474 objectClass: controlAccessRight
 475 cn: Generate-RSoP-Planning
 476 instanceType: 4
 477 displayName: Generate Resultant Set of Policy (Planning)
 478 showInAdvancedViewOnly: TRUE
 479 rightsGuid: b7b1b3dd-ab09-4242-9e30-9980e5d322f7
 480 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 481 appliesTo: bf967aa5-0de6-11d0-a285-00aa003049e2
 482 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 483 localizationDisplayId: 55
 484 validAccesses: 256
 485
 486 dn: CN=Refresh-Group-Cache,CN=Extended-Rights,${CONFIGDN}
 487 objectClass: top
 488 objectClass: controlAccessRight
 489 cn: Refresh-Group-Cache
 490 instanceType: 4
 491 displayName: Refresh Group Cache for Logons
 492 showInAdvancedViewOnly: TRUE
 493 rightsGuid: 9432c620-033c-4db7-8b58-14ef6d0bf477
 494 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
 495 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 496 localizationDisplayId: 56
 497 validAccesses: 256
 498
 499 dn: CN=SAM-Enumerate-Entire-Domain,CN=Extended-Rights,${CONFIGDN}
 500 objectClass: top
 501 objectClass: controlAccessRight
 502 cn: SAM-Enumerate-Entire-Domain
 503 instanceType: 4
 504 displayName: Enumerate Entire SAM Domain
 505 showInAdvancedViewOnly: TRUE
 506 rightsGuid: 91d67418-0135-4acc-8d79-c08e857cfbec
 507 appliesTo: bf967aad-0de6-11d0-a285-00aa003049e2
 508 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 509 localizationDisplayId: 57
 510 validAccesses: 256
 511
 512 dn: CN=Generate-RSoP-Logging,CN=Extended-Rights,${CONFIGDN}
 513 objectClass: top
 514 objectClass: controlAccessRight
 515 cn: Generate-RSoP-Logging
 516 instanceType: 4
 517 displayName: Generate Resultant Set of Policy (Logging)
 518 showInAdvancedViewOnly: TRUE
 519 rightsGuid: b7b1b3de-ab09-4242-9e30-9980e5d322f7
 520 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 521 appliesTo: bf967aa5-0de6-11d0-a285-00aa003049e2
 522 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 523 localizationDisplayId: 58
 524 validAccesses: 256
 525
 526 dn: CN=Domain-Other-Parameters,CN=Extended-Rights,${CONFIGDN}
 527 objectClass: top
 528 objectClass: controlAccessRight
 529 cn: Domain-Other-Parameters
 530 instanceType: 4
 531 displayName: Other Domain Parameters (for use by SAM)
 532 showInAdvancedViewOnly: TRUE
 533 rightsGuid: b8119fd0-04f6-4762-ab7a-4986c76b3f9a
 534 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 535 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 536 localizationDisplayId: 59
 537 validAccesses: 48
 538
 539 dn: CN=DNS-Host-Name-Attributes,CN=Extended-Rights,${CONFIGDN}
 540 objectClass: top
 541 objectClass: controlAccessRight
 542 cn: DNS-Host-Name-Attributes
 543 instanceType: 4
 544 displayName: DNS Host Name Attributes
 545 showInAdvancedViewOnly: TRUE
 546 rightsGuid: 72e39547-7b18-11d1-adef-00c04fd8d5cd
 547 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
 548 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 549 localizationDisplayId: 60
 550 validAccesses: 48
 551
 552 dn: CN=Create-Inbound-Forest-Trust,CN=Extended-Rights,${CONFIGDN}
 553 objectClass: top
 554 objectClass: controlAccessRight
 555 cn: Create-Inbound-Forest-Trust
 556 instanceType: 4
 557 displayName: Create Inbound Forest Trust
 558 showInAdvancedViewOnly: TRUE
 559 rightsGuid: e2a36dc9-ae17-47c3-b58b-be34c55ba633
 560 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 561 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 562 localizationDisplayId: 61
 563 validAccesses: 256
 564
 565 dn: CN=DS-Replication-Get-Changes-All,CN=Extended-Rights,${CONFIGDN}
 566 objectClass: top
 567 objectClass: controlAccessRight
 568 cn: DS-Replication-Get-Changes-All
 569 instanceType: 4
 570 displayName: Replicating Directory Changes All
 571 showInAdvancedViewOnly: TRUE
 572 rightsGuid: 1131f6ad-9c07-11d1-f79f-00c04fc2dcd2
 573 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
 574 appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
 575 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 576 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 577 localizationDisplayId: 62
 578 validAccesses: 256
 579
 580 dn: CN=Migrate-SID-History,CN=Extended-Rights,${CONFIGDN}
 581 objectClass: top
 582 objectClass: controlAccessRight
 583 cn: Migrate-SID-History
 584 instanceType: 4
 585 displayName: Migrate SID History
 586 showInAdvancedViewOnly: TRUE
 587 rightsGuid: BA33815A-4F93-4c76-87F3-57574BFF8109
 588 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 589 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 590 localizationDisplayId: 63
 591 validAccesses: 256
 592
 593 dn: CN=Reanimate-Tombstones,CN=Extended-Rights,${CONFIGDN}
 594 objectClass: top
 595 objectClass: controlAccessRight
 596 cn: Reanimate-Tombstones
 597 instanceType: 4
 598 displayName: Reanimate Tombstones
 599 showInAdvancedViewOnly: TRUE
 600 rightsGuid: 45EC5156-DB7E-47bb-B53F-DBEB2D03C40F
 601 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
 602 appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
 603 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 604 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 605 localizationDisplayId: 64
 606 validAccesses: 256
 607
 608 dn: CN=Allowed-To-Authenticate,CN=Extended-Rights,${CONFIGDN}
 609 objectClass: top
 610 objectClass: controlAccessRight
 611 cn: Allowed-To-Authenticate
 612 instanceType: 4
 613 displayName: Allowed to Authenticate
 614 showInAdvancedViewOnly: TRUE
 615 rightsGuid: 68B1D179-0D15-4d4f-AB71-46152E79A7BC
 616 appliesTo: 4828cc14-1437-45bc-9b07-ad6f015e5f28
 617 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
 618 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
 619 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 620 localizationDisplayId: 65
 621 validAccesses: 256
 622
 623 dn: CN=DS-Execute-Intentions-Script,CN=Extended-Rights,${CONFIGDN}
 624 objectClass: top
 625 objectClass: controlAccessRight
 626 cn: DS-Execute-Intentions-Script
 627 instanceType: 4
 628 displayName: Execute Forest Update Script
 629 showInAdvancedViewOnly: TRUE
 630 rightsGuid: 2f16c4a5-b98e-432c-952a-cb388ba33f2e
 631 appliesTo: ef9e60e0-56f7-11d1-a9c6-0000f80367c1
 632 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 633 localizationDisplayId: 66
 634 validAccesses: 256
 635
 636 dn: CN=DS-Replication-Monitor-Topology,CN=Extended-Rights,${CONFIGDN}
 637 objectClass: top
 638 objectClass: controlAccessRight
 639 cn: DS-Replication-Monitor-Topology
 640 instanceType: 4
 641 displayName: Monitor Active Directory Replication
 642 showInAdvancedViewOnly: TRUE
 643 rightsGuid: f98340fb-7c5b-4cdb-a00b-2ebdfa115a96
 644 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
 645 appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
 646 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 647 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 648 localizationDisplayId: 67
 649 validAccesses: 256
 650
 651 dn: CN=Update-Password-Not-Required-Bit,CN=Extended-Rights,${CONFIGDN}
 652 objectClass: top
 653 objectClass: controlAccessRight
 654 cn: Update-Password-Not-Required-Bit
 655 instanceType: 4
 656 displayName: Update Password Not Required Bit
 657 showInAdvancedViewOnly: TRUE
 658 rightsGuid: 280f369c-67c7-438e-ae98-1d46f3c6f541
 659 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 660 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 661 localizationDisplayId: 68
 662 validAccesses: 256
 663
 664 dn: CN=Unexpire-Password,CN=Extended-Rights,${CONFIGDN}
 665 objectClass: top
 666 objectClass: controlAccessRight
 667 cn: Unexpire-Password
 668 instanceType: 4
 669 displayName: Unexpire Password
 670 showInAdvancedViewOnly: TRUE
 671 rightsGuid: ccc2dc7d-a6ad-4a7a-8846-c04e3cc53501
 672 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 673 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 674 localizationDisplayId: 69
 675 validAccesses: 256
 676
 677 dn: CN=Enable-Per-User-Reversibly-Encrypted-Password,CN=Extended-Rights,${CONFIGDN}
 678 objectClass: top
 679 objectClass: controlAccessRight
 680 cn: Enable-Per-User-Reversibly-Encrypted-Password
 681 instanceType: 4
 682 displayName: Enable Per User Reversibly Encrypted Password
 683 showInAdvancedViewOnly: TRUE
 684 rightsGuid: 05c74c5e-4deb-43b4-bd9f-86664c2a7fd5
 685 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 686 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 687 localizationDisplayId: 70
 688 validAccesses: 256
 689
 690 dn: CN=DS-Query-Self-Quota,CN=Extended-Rights,${CONFIGDN}
 691 objectClass: top
 692 objectClass: controlAccessRight
 693 cn: DS-Query-Self-Quota
 694 instanceType: 4
 695 displayName: Query Self Quota
 696 showInAdvancedViewOnly: TRUE
 697 rightsGuid: 4ecc03fe-ffc0-4947-b630-eb672a8a9dbc
 698 appliesTo: da83fc4f-076f-4aea-b4dc-8f4dab9b5993
 699 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 700 localizationDisplayId: 71
 701 validAccesses: 256
 702
 703 dn: CN=Domain-Administer-Server,CN=Extended-Rights,${CONFIGDN}
 704 objectClass: top
 705 objectClass: controlAccessRight
 706 cn: Domain-Administer-Server
 707 instanceType: 4
 708 displayName: Domain Administer Server
 709 showInAdvancedViewOnly: TRUE
 710 rightsGuid: ab721a52-1e2f-11d0-9819-00aa0040529b
 711 appliesTo: bf967aad-0de6-11d0-a285-00aa003049e2
 712 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 713 localizationDisplayId: 1
 714 validAccesses: 256
 715
 716 dn: CN=User-Change-Password,CN=Extended-Rights,${CONFIGDN}
 717 objectClass: top
 718 objectClass: controlAccessRight
 719 cn: User-Change-Password
 720 instanceType: 4
 721 displayName: Change Password
 722 showInAdvancedViewOnly: TRUE
 723 rightsGuid: ab721a53-1e2f-11d0-9819-00aa0040529b
 724 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
 725 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
 726 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
 727 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 728 localizationDisplayId: 2
 729 validAccesses: 256
 730
 731 dn: CN=User-Force-Change-Password,CN=Extended-Rights,${CONFIGDN}
 732 objectClass: top
 733 objectClass: controlAccessRight
 734 cn: User-Force-Change-Password
 735 instanceType: 4
 736 displayName: Reset Password
 737 showInAdvancedViewOnly: TRUE
 738 rightsGuid: 00299570-246d-11d0-a768-00aa006e0529
 739 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
 740 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
 741 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
 742 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 743 localizationDisplayId: 3
 744 validAccesses: 256
 745
 746 dn: CN=Send-As,CN=Extended-Rights,${CONFIGDN}
 747 objectClass: top
 748 objectClass: controlAccessRight
 749 cn: Send-As
 750 instanceType: 4
 751 displayName: Send As
 752 showInAdvancedViewOnly: TRUE
 753 rightsGuid: ab721a54-1e2f-11d0-9819-00aa0040529b
 754 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
 755 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
 756 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
 757 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 758 localizationDisplayId: 4
 759 validAccesses: 256
 760
 761 dn: CN=Receive-As,CN=Extended-Rights,${CONFIGDN}
 762 objectClass: top
 763 objectClass: controlAccessRight
 764 cn: Receive-As
 765 instanceType: 4
 766 displayName: Receive As
 767 showInAdvancedViewOnly: TRUE
 768 rightsGuid: ab721a56-1e2f-11d0-9819-00aa0040529b
 769 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
 770 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
 771 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
 772 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 773 localizationDisplayId: 5
 774 validAccesses: 256
 775
 776 dn: CN=Send-To,CN=Extended-Rights,${CONFIGDN}
 777 objectClass: top
 778 objectClass: controlAccessRight
 779 cn: Send-To
 780 instanceType: 4
 781 displayName: Send To
 782 showInAdvancedViewOnly: TRUE
 783 rightsGuid: ab721a55-1e2f-11d0-9819-00aa0040529b
 784 appliesTo: bf967a9c-0de6-11d0-a285-00aa003049e2
 785 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 786 localizationDisplayId: 6
 787 validAccesses: 256
 788
 789 dn: CN=Domain-Password,CN=Extended-Rights,${CONFIGDN}
 790 objectClass: top
 791 objectClass: controlAccessRight
 792 cn: Domain-Password
 793 instanceType: 4
 794 displayName: Domain Password & Lockout Policies
 795 showInAdvancedViewOnly: TRUE
 796 rightsGuid: c7407360-20bf-11d0-a768-00aa006e0529
 797 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 798 appliesTo: 19195a5a-6da0-11d0-afd3-00c04fd930c9
 799 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 800 localizationDisplayId: 7
 801 validAccesses: 48
 802
 803 dn: CN=General-Information,CN=Extended-Rights,${CONFIGDN}
 804 objectClass: top
 805 objectClass: controlAccessRight
 806 cn: General-Information
 807 instanceType: 4
 808 displayName: General Information
 809 showInAdvancedViewOnly: TRUE
 810 rightsGuid: 59ba2f42-79a2-11d0-9020-00c04fc2d3cf
 811 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
 812 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
 813 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 814 localizationDisplayId: 8
 815 validAccesses: 48
 816
 817 dn: CN=User-Account-Restrictions,CN=Extended-Rights,${CONFIGDN}
 818 objectClass: top
 819 objectClass: controlAccessRight
 820 cn: User-Account-Restrictions
 821 instanceType: 4
 822 displayName: Account Restrictions
 823 showInAdvancedViewOnly: TRUE
 824 rightsGuid: 4c164200-20c0-11d0-a768-00aa006e0529
 825 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
 826 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
 827 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
 828 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 829 localizationDisplayId: 9
 830 validAccesses: 48
 831
 832 dn: CN=User-Logon,CN=Extended-Rights,${CONFIGDN}
 833 objectClass: top
 834 objectClass: controlAccessRight
 835 cn: User-Logon
 836 instanceType: 4
 837 displayName: Logon Information
 838 showInAdvancedViewOnly: TRUE
 839 rightsGuid: 5f202010-79a5-11d0-9020-00c04fc2d4cf
 840 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
 841 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
 842 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 843 localizationDisplayId: 10
 844 validAccesses: 48
 845
 846 dn: CN=Membership,CN=Extended-Rights,${CONFIGDN}
 847 objectClass: top
 848 objectClass: controlAccessRight
 849 cn: Membership
 850 instanceType: 4
 851 displayName: Group Membership
 852 showInAdvancedViewOnly: TRUE
 853 rightsGuid: bc0ac240-79a9-11d0-9020-00c04fc2d4cf
 854 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
 855 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
 856 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 857 localizationDisplayId: 11
 858 validAccesses: 48
 859
 860 dn: CN=Open-Address-Book,CN=Extended-Rights,${CONFIGDN}
 861 objectClass: top
 862 objectClass: controlAccessRight
 863 cn: Open-Address-Book
 864 instanceType: 4
 865 displayName: Open Address List
 866 showInAdvancedViewOnly: TRUE
 867 rightsGuid: a1990816-4298-11d1-ade2-00c04fd8d5cd
 868 appliesTo: 3e74f60f-3e73-11d1-a9c0-0000f80367c1
 869 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 870 localizationDisplayId: 21
 871 validAccesses: 256
 872
 873 dn: CN=Personal-Information,CN=Extended-Rights,${CONFIGDN}
 874 objectClass: top
 875 objectClass: controlAccessRight
 876 cn: Personal-Information
 877 instanceType: 4
 878 displayName: Personal Information
 879 showInAdvancedViewOnly: TRUE
 880 rightsGuid: 77B5B886-944A-11d1-AEBD-0000F80367C1
 881 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
 882 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
 883 appliesTo: 5cb41ed0-0e4c-11d0-a286-00aa003049e2
 884 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
 885 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 886 localizationDisplayId: 23
 887 validAccesses: 48
 888
 889 dn: CN=Email-Information,CN=Extended-Rights,${CONFIGDN}
 890 objectClass: top
 891 objectClass: controlAccessRight
 892 cn: Email-Information
 893 instanceType: 4
 894 displayName: Phone and Mail Options
 895 showInAdvancedViewOnly: TRUE
 896 rightsGuid: E45795B2-9455-11d1-AEBD-0000F80367C1
 897 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
 898 appliesTo: bf967a9c-0de6-11d0-a285-00aa003049e2
 899 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
 900 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 901 localizationDisplayId: 22
 902 validAccesses: 48
 903
 904 dn: CN=Web-Information,CN=Extended-Rights,${CONFIGDN}
 905 objectClass: top
 906 objectClass: controlAccessRight
 907 cn: Web-Information
 908 instanceType: 4
 909 displayName: Web Information
 910 showInAdvancedViewOnly: TRUE
 911 rightsGuid: E45795B3-9455-11d1-AEBD-0000F80367C1
 912 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
 913 appliesTo: 5cb41ed0-0e4c-11d0-a286-00aa003049e2
 914 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
 915 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 916 localizationDisplayId: 24
 917 validAccesses: 48
 918
 919 dn: CN=DS-Replication-Get-Changes,CN=Extended-Rights,${CONFIGDN}
 920 objectClass: top
 921 objectClass: controlAccessRight
 922 cn: DS-Replication-Get-Changes
 923 instanceType: 4
 924 displayName: Replicating Directory Changes
 925 showInAdvancedViewOnly: TRUE
 926 rightsGuid: 1131f6aa-9c07-11d1-f79f-00c04fc2dcd2
 927 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
 928 appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
 929 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 930 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 931 localizationDisplayId: 25
 932 validAccesses: 256
 933
 934 dn: CN=DS-Replication-Synchronize,CN=Extended-Rights,${CONFIGDN}
 935 objectClass: top
 936 objectClass: controlAccessRight
 937 cn: DS-Replication-Synchronize
 938 instanceType: 4
 939 displayName: Replication Synchronization
 940 showInAdvancedViewOnly: TRUE
 941 rightsGuid: 1131f6ab-9c07-11d1-f79f-00c04fc2dcd2
 942 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
 943 appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
 944 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 945 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 946 localizationDisplayId: 26
 947 validAccesses: 256
 948
 949 dn: CN=DS-Replication-Manage-Topology,CN=Extended-Rights,${CONFIGDN}
 950 objectClass: top
 951 objectClass: controlAccessRight
 952 cn: DS-Replication-Manage-Topology
 953 instanceType: 4
 954 displayName: Manage Replication Topology
 955 showInAdvancedViewOnly: TRUE
 956 rightsGuid: 1131f6ac-9c07-11d1-f79f-00c04fc2dcd2
 957 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
 958 appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
 959 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 960 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 961 localizationDisplayId: 27
 962 validAccesses: 256
 963
 964 dn: CN=Change-Schema-Master,CN=Extended-Rights,${CONFIGDN}
 965 objectClass: top
 966 objectClass: controlAccessRight
 967 cn: Change-Schema-Master
 968 instanceType: 4
 969 displayName: Change Schema Master
 970 showInAdvancedViewOnly: TRUE
 971 rightsGuid: e12b56b6-0a95-11d1-adbb-00c04fd8d5cd
 972 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
 973 objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
 974 localizationDisplayId: 28
 975 validAccesses: 256