source4/setup/provision_users.ldif

   1 dn: CN=Administrator,CN=Users,${BASEDN}
   2 objectClass: user
   3 cn: Administrator
   4 description: Built-in account for administering the computer/domain
   5 memberOf: CN=Group Policy Creator Owners,CN=Users,${BASEDN}
   6 memberOf: CN=Domain Admins,CN=Users,${BASEDN}
   7 memberOf: CN=Enterprise Admins,CN=Users,${BASEDN}
   8 memberOf: CN=Schema Admins,CN=Users,${BASEDN}
   9 memberOf: CN=Administrators,CN=Builtin,${BASEDN}
  10 userAccountControl: 66048
  11 objectSid: ${DOMAINSID}-500
  12 adminCount: 1
  13 accountExpires: -1
  14 sAMAccountName: Administrator
  15 isCriticalSystemObject: TRUE
  16 sambaPassword: ${ADMINPASS}
  17
  18 dn: CN=Guest,CN=Users,${BASEDN}
  19 objectClass: user
  20 cn: Guest
  21 description: Built-in account for guest access to the computer/domain
  22 memberOf: CN=Guests,CN=Builtin,${BASEDN}
  23 userAccountControl: 66082
  24 primaryGroupID: 514
  25 objectSid: ${DOMAINSID}-501
  26 sAMAccountName: Guest
  27 isCriticalSystemObject: TRUE
  28
  29 dn: CN=Administrators,CN=Builtin,${BASEDN}
  30 objectClass: top
  31 objectClass: group
  32 cn: Administrators
  33 description: Administrators have complete and unrestricted access to the computer/domain
  34 member: CN=Domain Admins,CN=Users,${BASEDN}
  35 member: CN=Enterprise Admins,CN=Users,${BASEDN}
  36 member: CN=Administrator,CN=Users,${BASEDN}
  37 objectSid: S-1-5-32-544
  38 adminCount: 1
  39 sAMAccountName: Administrators
  40 sAMAccountType: 536870912
  41 systemFlags: 2348810240
  42 groupType: 2147483653
  43 objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
  44 isCriticalSystemObject: TRUE
  45 privilege: SeSecurityPrivilege
  46 privilege: SeBackupPrivilege
  47 privilege: SeRestorePrivilege
  48 privilege: SeSystemtimePrivilege
  49 privilege: SeShutdownPrivilege
  50 privilege: SeRemoteShutdownPrivilege
  51 privilege: SeTakeOwnershipPrivilege
  52 privilege: SeDebugPrivilege
  53 privilege: SeSystemEnvironmentPrivilege
  54 privilege: SeSystemProfilePrivilege
  55 privilege: SeProfileSingleProcessPrivilege
  56 privilege: SeIncreaseBasePriorityPrivilege
  57 privilege: SeLoadDriverPrivilege
  58 privilege: SeCreatePagefilePrivilege
  59 privilege: SeIncreaseQuotaPrivilege
  60 privilege: SeChangeNotifyPrivilege
  61 privilege: SeUndockPrivilege
  62 privilege: SeManageVolumePrivilege
  63 privilege: SeImpersonatePrivilege
  64 privilege: SeCreateGlobalPrivilege
  65 privilege: SeEnableDelegationPrivilege
  66 privilege: SeInteractiveLogonRight
  67 privilege: SeNetworkLogonRight
  68 privilege: SeRemoteInteractiveLogonRight
  69
  70
  71 dn: CN=${NETBIOSNAME},CN=Domain Controllers,${BASEDN}
  72 objectClass: computer
  73 cn: ${NETBIOSNAME}
  74 objectGUID: ${HOSTGUID}
  75 userAccountControl: 532480
  76 localPolicyFlags: 0
  77 primaryGroupID: 516
  78 accountExpires: 9223372036854775807
  79 sAMAccountName: ${NETBIOSNAME}$
  80 sAMAccountType: 805306369
  81 operatingSystem: Samba
  82 operatingSystemVersion: 4.0
  83 dNSHostName: ${DNSNAME}
  84 isCriticalSystemObject: TRUE
  85 sambaPassword: ${MACHINEPASS}
  86 servicePrincipalName: HOST/${DNSNAME}
  87 servicePrincipalName: HOST/${NETBIOSNAME}
  88 servicePrincipalName: HOST/${DNSNAME}/${REALM}
  89 servicePrincipalName: HOST/${NETBIOSNAME}/${REALM}
  90 servicePrincipalName: HOST/${DNSNAME}/${DOMAIN}
  91 servicePrincipalName: HOST/${NETBIOSNAME}/${DOMAIN}
  92
  93
  94 dn: CN=Users,CN=Builtin,${BASEDN}
  95 objectClass: top
  96 objectClass: group
  97 cn: Users
  98 description: Users are prevented from making accidental or intentional system-wide changes.  Thus, Users can run certified applications, but not most legacy applications
  99 member: CN=Domain Users,CN=Users,${BASEDN}
 100 objectSid: S-1-5-32-545
 101 sAMAccountName: Users
 102 sAMAccountType: 536870912
 103 systemFlags: 2348810240
 104 groupType: 2147483653
 105 objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
 106 isCriticalSystemObject: TRUE
 107
 108 dn: CN=Guests,CN=Builtin,${BASEDN}
 109 objectClass: top
 110 objectClass: group
 111 cn: Guests
 112 description: Guests have the same access as members of the Users group by default, except for the Guest account which is further restricted
 113 member: CN=Domain Guests,CN=Users,${BASEDN}
 114 member: CN=Guest,CN=Users,${BASEDN}
 115 objectSid: S-1-5-32-546
 116 sAMAccountName: Guests
 117 sAMAccountType: 536870912
 118 systemFlags: 2348810240
 119 groupType: 2147483653
 120 objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
 121 isCriticalSystemObject: TRUE
 122
 123 dn: CN=Print Operators,CN=Builtin,${BASEDN}
 124 objectClass: top
 125 objectClass: group
 126 cn: Print Operators
 127 description: Members can administer domain printers
 128 objectSid: S-1-5-32-550
 129 adminCount: 1
 130 sAMAccountName: Print Operators
 131 sAMAccountType: 536870912
 132 systemFlags: 2348810240
 133 groupType: 2147483653
 134 objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
 135 isCriticalSystemObject: TRUE
 136 privilege: SeLoadDriverPrivilege
 137 privilege: SeShutdownPrivilege
 138 privilege: SeInteractiveLogonRight
 139
 140 dn: CN=Backup Operators,CN=Builtin,${BASEDN}
 141 objectClass: top
 142 objectClass: group
 143 cn: Backup Operators
 144 description: Backup Operators can override security restrictions for the sole purpose of backing up or restoring files
 145 objectSid: S-1-5-32-551
 146 adminCount: 1
 147 sAMAccountName: Backup Operators
 148 sAMAccountType: 536870912
 149 systemFlags: 2348810240
 150 groupType: 2147483653
 151 objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
 152 isCriticalSystemObject: TRUE
 153 privilege: SeBackupPrivilege
 154 privilege: SeRestorePrivilege
 155 privilege: SeShutdownPrivilege
 156 privilege: SeInteractiveLogonRight
 157
 158 dn: CN=Replicator,CN=Builtin,${BASEDN}
 159 objectClass: top
 160 objectClass: group
 161 cn: Replicator
 162 description: Supports file replication in a domain
 163 objectSid: S-1-5-32-552
 164 adminCount: 1
 165 sAMAccountName: Replicator
 166 sAMAccountType: 536870912
 167 systemFlags: 2348810240
 168 groupType: 2147483653
 169 objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
 170 isCriticalSystemObject: TRUE
 171
 172 dn: CN=Remote Desktop Users,CN=Builtin,${BASEDN}
 173 objectClass: top
 174 objectClass: group
 175 cn: Remote Desktop Users
 176 description: Members in this group are granted the right to logon remotely
 177 objectSid: S-1-5-32-555
 178 sAMAccountName: Remote Desktop Users
 179 sAMAccountType: 536870912
 180 systemFlags: 2348810240
 181 groupType: 2147483653
 182 objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
 183 isCriticalSystemObject: TRUE
 184
 185 dn: CN=Network Configuration Operators,CN=Builtin,${BASEDN}
 186 objectClass: top
 187 objectClass: group
 188 cn: Network Configuration Operators
 189 description: Members in this group can have some administrative privileges to manage configuration of networking features
 190 objectSid: S-1-5-32-556
 191 sAMAccountName: Network Configuration Operators
 192 sAMAccountType: 536870912
 193 systemFlags: 2348810240
 194 groupType: 2147483653
 195 objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
 196 isCriticalSystemObject: TRUE
 197
 198 dn: CN=Performance Monitor Users,CN=Builtin,${BASEDN}
 199 objectClass: top
 200 objectClass: group
 201 cn: Performance Monitor Users
 202 description: Members of this group have remote access to monitor this computer
 203 objectSid: S-1-5-32-558
 204 sAMAccountName: Performance Monitor Users
 205 sAMAccountType: 536870912
 206 systemFlags: 2348810240
 207 groupType: 2147483653
 208 objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
 209 isCriticalSystemObject: TRUE
 210
 211 dn: CN=Performance Log Users,CN=Builtin,${BASEDN}
 212 objectClass: top
 213 objectClass: group
 214 cn: Performance Log Users
 215 description: Members of this group have remote access to schedule logging of performance counters on this computer
 216 objectSid: S-1-5-32-559
 217 sAMAccountName: Performance Log Users
 218 sAMAccountType: 536870912
 219 systemFlags: 2348810240
 220 groupType: 2147483653
 221 objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
 222 isCriticalSystemObject: TRUE
 223
 224 dn: CN=krbtgt,CN=Users,${BASEDN}
 225 objectClass: top
 226 objectClass: person
 227 objectClass: organizationalPerson
 228 objectClass: user
 229 cn: krbtgt
 230 description: Key Distribution Center Service Account
 231 showInAdvancedViewOnly: TRUE
 232 userAccountControl: 514
 233 objectSid: ${DOMAINSID}-502
 234 adminCount: 1
 235 accountExpires: 9223372036854775807
 236 sAMAccountName: krbtgt
 237 sAMAccountType: 805306368
 238 servicePrincipalName: kadmin/changepw
 239 isCriticalSystemObject: TRUE
 240 sambaPassword: ${KRBTGTPASS}
 241
 242 dn: CN=Domain Computers,CN=Users,${BASEDN}
 243 objectClass: top
 244 objectClass: group
 245 cn: Domain Computers
 246 description: All workstations and servers joined to the domain
 247 objectSid: ${DOMAINSID}-515
 248 sAMAccountName: Domain Computers
 249 objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
 250 isCriticalSystemObject: TRUE
 251
 252 dn: CN=Domain Controllers,CN=Users,${BASEDN}
 253 objectClass: top
 254 objectClass: group
 255 cn: Domain Controllers
 256 description: All domain controllers in the domain
 257 objectSid: ${DOMAINSID}-516
 258 adminCount: 1
 259 sAMAccountName: Domain Controllers
 260 isCriticalSystemObject: TRUE
 261
 262 dn: CN=Schema Admins,CN=Users,${BASEDN}
 263 objectClass: top
 264 objectClass: group
 265 cn: Schema Admins
 266 description: Designated administrators of the schema
 267 member: CN=Administrator,CN=Users,${BASEDN}
 268 objectSid: ${DOMAINSID}-518
 269 adminCount: 1
 270 sAMAccountName: Schema Admins
 271 isCriticalSystemObject: TRUE
 272
 273 dn: CN=Enterprise Admins,CN=Users,${BASEDN}
 274 objectClass: top
 275 objectClass: group
 276 cn: Enterprise Admins
 277 description: Designated administrators of the enterprise
 278 member: CN=Administrator,CN=Users,${BASEDN}
 279 memberOf: CN=Administrators,CN=Builtin,${BASEDN}
 280 objectSid: ${DOMAINSID}-519
 281 adminCount: 1
 282 sAMAccountName: Enterprise Admins
 283 isCriticalSystemObject: TRUE
 284
 285 dn: CN=Cert Publishers,CN=Users,${BASEDN}
 286 objectClass: top
 287 objectClass: group
 288 cn: Cert Publishers
 289 description: Members of this group are permitted to publish certificates to the Active Directory
 290 groupType: 2147483652
 291 sAMAccountType: 536870912
 292 objectSid: ${DOMAINSID}-517
 293 sAMAccountName: Cert Publishers
 294 objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
 295 isCriticalSystemObject: TRUE
 296
 297 dn: CN=Domain Admins,CN=Users,${BASEDN}
 298 objectClass: top
 299 objectClass: group
 300 cn: Domain Admins
 301 description: Designated administrators of the domain
 302 member: CN=Administrator,CN=Users,${BASEDN}
 303 memberOf: CN=Administrators,CN=Builtin,${BASEDN}
 304 objectSid: ${DOMAINSID}-512
 305 adminCount: 1
 306 sAMAccountName: Domain Admins
 307 isCriticalSystemObject: TRUE
 308
 309 dn: CN=Domain Users,CN=Users,${BASEDN}
 310 objectClass: top
 311 objectClass: group
 312 cn: Domain Users
 313 description: All domain users
 314 memberOf: CN=Users,CN=Builtin,${BASEDN}
 315 objectSid: ${DOMAINSID}-513
 316 sAMAccountName: Domain Users
 317 isCriticalSystemObject: TRUE
 318
 319 dn: CN=Domain Guests,CN=Users,${BASEDN}
 320 objectClass: top
 321 objectClass: group
 322 cn: Domain Guests
 323 description: All domain guests
 324 memberOf: CN=Guests,CN=Builtin,${BASEDN}
 325 objectSid: ${DOMAINSID}-514
 326 sAMAccountName: Domain Guests
 327 isCriticalSystemObject: TRUE
 328
 329 dn: CN=Group Policy Creator Owners,CN=Users,${BASEDN}
 330 objectClass: top
 331 objectClass: group
 332 cn: Group Policy Creator Owners
 333 description: Members in this group can modify group policy for the domain
 334 member: CN=Administrator,CN=Users,${BASEDN}
 335 objectSid: ${DOMAINSID}-520
 336 sAMAccountName: Group Policy Creator Owners
 337 objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
 338 isCriticalSystemObject: TRUE
 339
 340 dn: CN=RAS and IAS Servers,CN=Users,${BASEDN}
 341 objectClass: top
 342 objectClass: group
 343 cn: RAS and IAS Servers
 344 description: Servers in this group can access remote access properties of users
 345 instanceType: 4
 346 objectSid: ${DOMAINSID}-553
 347 sAMAccountName: RAS and IAS Servers
 348 sAMAccountType: 536870912
 349 groupType: 2147483652
 350 objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
 351 isCriticalSystemObject: TRUE
 352
 353 dn: CN=Server Operators,CN=Builtin,${BASEDN}
 354 objectClass: top
 355 objectClass: group
 356 cn: Server Operators
 357 description: Members can administer domain servers
 358 instanceType: 4
 359 objectSid: S-1-5-32-549
 360 adminCount: 1
 361 sAMAccountName: Server Operators
 362 sAMAccountType: 536870912
 363 systemFlags: 2348810240
 364 groupType: 2147483653
 365 objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
 366 isCriticalSystemObject: TRUE
 367 privilege: SeBackupPrivilege
 368 privilege: SeSystemtimePrivilege
 369 privilege: SeRemoteShutdownPrivilege
 370 privilege: SeRestorePrivilege
 371 privilege: SeShutdownPrivilege
 372 privilege: SeInteractiveLogonRight
 373
 374 dn: CN=Account Operators,CN=Builtin,${BASEDN}
 375 objectClass: top
 376 objectClass: group
 377 cn: Account Operators
 378 description: Members can administer domain user and group accounts
 379 instanceType: 4
 380 objectSid: S-1-5-32-548
 381 adminCount: 1
 382 sAMAccountName: Account Operators
 383 sAMAccountType: 536870912
 384 systemFlags: 2348810240
 385 groupType: 2147483653
 386 objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
 387 isCriticalSystemObject: TRUE
 388 privilege: SeInteractiveLogonRight
 389