source4/setup/provision_configuration.ldif

   1 ###############################
   2 # Configuration Naming Context
   3 ###############################
   4 dn: CN=Partitions,${CONFIGDN}
   5 objectClass: top
   6 objectClass: crossRefContainer
   7 cn: Partitions
   8 systemFlags: 2147483648
   9 msDS-Behavior-Version: 0
  10 fSMORoleOwner: CN=NTDS Settings,${SERVERDN}
  11
  12 dn: CN=Enterprise Configuration,CN=Partitions,${CONFIGDN}
  13 objectClass: top
  14 objectClass: crossRef
  15 cn: Enterprise Configuration
  16 systemFlags: 1
  17 nCName: ${CONFIGDN}
  18 dnsRoot: ${DNSDOMAIN}
  19
  20 dn: CN=Enterprise Schema,CN=Partitions,${CONFIGDN}
  21 objectClass: top
  22 objectClass: crossRef
  23 cn: Enterprise Schema
  24 systemFlags: 1
  25 nCName: ${SCHEMADN}
  26 dnsRoot: ${DNSDOMAIN}
  27
  28 dn: CN=${DOMAIN},CN=Partitions,${CONFIGDN}
  29 objectClass: top
  30 objectClass: crossRef
  31 cn: ${DOMAIN}
  32 systemFlags: 3
  33 nCName: ${DOMAINDN}
  34 nETBIOSName: ${DOMAIN}
  35 dnsRoot: ${DNSDOMAIN}
  36
  37 dn: CN=Sites,${CONFIGDN}
  38 objectClass: top
  39 objectClass: sitesContainer
  40 cn: Sites
  41 systemFlags: 2181038080
  42
  43 dn: CN=${DEFAULTSITE},CN=Sites,${CONFIGDN}
  44 objectClass: top
  45 objectClass: site
  46 cn: ${DEFAULTSITE}
  47 systemFlags: 2181038080
  48
  49 dn: CN=Servers,CN=${DEFAULTSITE},CN=Sites,${CONFIGDN}
  50 objectClass: top
  51 objectClass: serversContainer
  52 cn: Servers
  53 systemFlags: 2181038080
  54
  55 dn: CN=Services,${CONFIGDN}
  56 objectClass: top
  57 objectClass: container
  58 cn: Services
  59 systemFlags: 2147483648
  60
  61 dn: CN=Windows NT,CN=Services,${CONFIGDN}
  62 objectClass: top
  63 objectClass: container
  64 cn: Windows NT
  65
  66 dn: CN=Directory Service,CN=Windows NT,CN=Services,${CONFIGDN}
  67 objectClass: top
  68 objectClass: nTDSService
  69 cn: Directory Service
  70 sPNMappings: host=ldap,dns,cifs,http
  71
  72 dn: CN=Query-Policies,CN=Directory Service,CN=Windows NT,CN=Services,${CONFIGDN}
  73 objectClass: top
  74 objectClass: container
  75 cn: Query-Policies
  76
  77 dn: CN=Default Query Policy,CN=Query-Policies,CN=Directory Service,CN=Windows NT,CN=Services,${CONFIGDN}
  78 objectClass: top
  79 objectClass: queryPolicy
  80 cn: Default Query Policy
  81 lDAPAdminLimits: MaxValRange=1500
  82 lDAPAdminLimits: MaxReceiveBuffer=10485760
  83 lDAPAdminLimits: MaxDatagramRecv=4096
  84 lDAPAdminLimits: MaxPoolThreads=4
  85 lDAPAdminLimits: MaxResultSetSize=262144
  86 lDAPAdminLimits: MaxTempTableSize=10000
  87 lDAPAdminLimits: MaxQueryDuration=120
  88 lDAPAdminLimits: MaxPageSize=1000
  89 lDAPAdminLimits: MaxNotificationPerConn=5
  90 lDAPAdminLimits: MaxActiveQueries=20
  91 lDAPAdminLimits: MaxConnIdleTime=900
  92 lDAPAdminLimits: InitRecvTimeout=120
  93 lDAPAdminLimits: MaxConnections=5000
  94
  95 dn: CN=Extended-Rights,${CONFIGDN}
  96 objectClass: top
  97 objectClass: container
  98 cn: Extended-Rights
  99 systemFlags: -2147483648
 100
 101 dn: CN=Change-Rid-Master,CN=Extended-Rights,${CONFIGDN}
 102 objectClass: top
 103 objectClass: controlAccessRight
 104 cn: Change-Rid-Master
 105 displayName: Change Rid Master
 106 rightsGuid: d58d5f36-0a98-11d1-adbb-00c04fd8d5cd
 107 appliesTo: 6617188d-8f3c-11d0-afda-00c04fd930c9
 108 localizationDisplayId: 29
 109 validAccesses: 256
 110
 111 dn: CN=Do-Garbage-Collection,CN=Extended-Rights,${CONFIGDN}
 112 objectClass: top
 113 objectClass: controlAccessRight
 114 cn: Do-Garbage-Collection
 115 displayName: Do Garbage Collection
 116 rightsGuid: fec364e0-0a98-11d1-adbb-00c04fd8d5cd
 117 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
 118 localizationDisplayId: 31
 119 validAccesses: 256
 120
 121 dn: CN=Recalculate-Hierarchy,CN=Extended-Rights,${CONFIGDN}
 122 objectClass: top
 123 objectClass: controlAccessRight
 124 cn: Recalculate-Hierarchy
 125 displayName: Recalculate Hierarchy
 126 rightsGuid: 0bc1554e-0a99-11d1-adbb-00c04fd8d5cd
 127 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
 128 localizationDisplayId: 32
 129 validAccesses: 256
 130
 131 dn: CN=Allocate-Rids,CN=Extended-Rights,${CONFIGDN}
 132 objectClass: top
 133 objectClass: controlAccessRight
 134 cn: Allocate-Rids
 135 displayName: Allocate Rids
 136 rightsGuid: 1abd7cf8-0a99-11d1-adbb-00c04fd8d5cd
 137 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
 138 localizationDisplayId: 33
 139 validAccesses: 256
 140
 141 dn: CN=Change-PDC,CN=Extended-Rights,${CONFIGDN}
 142 objectClass: top
 143 objectClass: controlAccessRight
 144 cn: Change-PDC
 145 displayName: Change PDC
 146 rightsGuid: bae50096-4752-11d1-9052-00c04fc2d4cf
 147 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 148 localizationDisplayId: 34
 149 validAccesses: 256
 150
 151 dn: CN=Add-GUID,CN=Extended-Rights,${CONFIGDN}
 152 objectClass: top
 153 objectClass: controlAccessRight
 154 cn: Add-GUID
 155 displayName: Add GUID
 156 rightsGuid: 440820ad-65b4-11d1-a3da-0000f875ae0d
 157 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 158 localizationDisplayId: 35
 159 validAccesses: 256
 160
 161 dn: CN=Change-Domain-Master,CN=Extended-Rights,${CONFIGDN}
 162 objectClass: top
 163 objectClass: controlAccessRight
 164 cn: Change-Domain-Master
 165 displayName: Change Domain Master
 166 rightsGuid: 014bf69c-7b3b-11d1-85f6-08002be74fab
 167 appliesTo: ef9e60e0-56f7-11d1-a9c6-0000f80367c1
 168 localizationDisplayId: 36
 169 validAccesses: 256
 170
 171 dn: CN=Public-Information,CN=Extended-Rights,${CONFIGDN}
 172 objectClass: top
 173 objectClass: controlAccessRight
 174 cn: Public-Information
 175 displayName: Public Information
 176 rightsGuid: e48d0154-bcf8-11d1-8702-00c04fb96050
 177 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
 178 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
 179 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
 180 localizationDisplayId: 37
 181 validAccesses: 48
 182
 183 dn: CN=msmq-Receive-Dead-Letter,CN=Extended-Rights,${CONFIGDN}
 184 objectClass: top
 185 objectClass: controlAccessRight
 186 cn: msmq-Receive-Dead-Letter
 187 displayName: Receive Dead Letter
 188 rightsGuid: 4b6e08c0-df3c-11d1-9c86-006008764d0e
 189 appliesTo: 9a0dc344-c100-11d1-bbc5-0080c76670c0
 190 localizationDisplayId: 38
 191 validAccesses: 256
 192
 193 dn: CN=msmq-Peek-Dead-Letter,CN=Extended-Rights,${CONFIGDN}
 194 objectClass: top
 195 objectClass: controlAccessRight
 196 cn: msmq-Peek-Dead-Letter
 197 displayName: Peek Dead Letter
 198 rightsGuid: 4b6e08c1-df3c-11d1-9c86-006008764d0e
 199 appliesTo: 9a0dc344-c100-11d1-bbc5-0080c76670c0
 200 localizationDisplayId: 39
 201 validAccesses: 256
 202
 203 dn: CN=msmq-Receive-computer-Journal,CN=Extended-Rights,${CONFIGDN}
 204 objectClass: top
 205 objectClass: controlAccessRight
 206 cn: msmq-Receive-computer-Journal
 207 displayName: Receive Computer Journal
 208 rightsGuid: 4b6e08c2-df3c-11d1-9c86-006008764d0e
 209 appliesTo: 9a0dc344-c100-11d1-bbc5-0080c76670c0
 210 localizationDisplayId: 40
 211 validAccesses: 256
 212
 213 dn: CN=msmq-Peek-computer-Journal,CN=Extended-Rights,${CONFIGDN}
 214 objectClass: top
 215 objectClass: controlAccessRight
 216 cn: msmq-Peek-computer-Journal
 217 displayName: Peek Computer Journal
 218 rightsGuid: 4b6e08c3-df3c-11d1-9c86-006008764d0e
 219 appliesTo: 9a0dc344-c100-11d1-bbc5-0080c76670c0
 220 localizationDisplayId: 41
 221 validAccesses: 256
 222
 223 dn: CN=msmq-Receive,CN=Extended-Rights,${CONFIGDN}
 224 objectClass: top
 225 objectClass: controlAccessRight
 226 cn: msmq-Receive
 227 displayName: Receive Message
 228 rightsGuid: 06bd3200-df3e-11d1-9c86-006008764d0e
 229 appliesTo: 9a0dc343-c100-11d1-bbc5-0080c76670c0
 230 localizationDisplayId: 42
 231 validAccesses: 256
 232
 233 dn: CN=msmq-Peek,CN=Extended-Rights,${CONFIGDN}
 234 objectClass: top
 235 objectClass: controlAccessRight
 236 cn: msmq-Peek
 237 displayName: Peek Message
 238 rightsGuid: 06bd3201-df3e-11d1-9c86-006008764d0e
 239 appliesTo: 9a0dc343-c100-11d1-bbc5-0080c76670c0
 240 localizationDisplayId: 43
 241 validAccesses: 256
 242
 243 dn: CN=msmq-Send,CN=Extended-Rights,${CONFIGDN}
 244 objectClass: top
 245 objectClass: controlAccessRight
 246 cn: msmq-Send
 247 displayName: Send Message
 248 rightsGuid: 06bd3202-df3e-11d1-9c86-006008764d0e
 249 appliesTo: 46b27aac-aafa-4ffb-b773-e5bf621ee87b
 250 appliesTo: 9a0dc343-c100-11d1-bbc5-0080c76670c0
 251 localizationDisplayId: 44
 252 validAccesses: 256
 253
 254 dn: CN=msmq-Receive-journal,CN=Extended-Rights,${CONFIGDN}
 255 objectClass: top
 256 objectClass: controlAccessRight
 257 cn: msmq-Receive-journal
 258 displayName: Receive Journal
 259 rightsGuid: 06bd3203-df3e-11d1-9c86-006008764d0e
 260 appliesTo: 9a0dc343-c100-11d1-bbc5-0080c76670c0
 261 localizationDisplayId: 45
 262 validAccesses: 256
 263
 264 dn: CN=msmq-Open-Connector,CN=Extended-Rights,${CONFIGDN}
 265 objectClass: top
 266 objectClass: controlAccessRight
 267 cn: msmq-Open-Connector
 268 displayName: Open Connector Queue
 269 rightsGuid: b4e60130-df3f-11d1-9c86-006008764d0e
 270 appliesTo: bf967ab3-0de6-11d0-a285-00aa003049e2
 271 localizationDisplayId: 46
 272 validAccesses: 256
 273
 274 dn: CN=Apply-Group-Policy,CN=Extended-Rights,${CONFIGDN}
 275 objectClass: top
 276 objectClass: controlAccessRight
 277 cn: Apply-Group-Policy
 278 displayName: Apply Group Policy
 279 rightsGuid: edacfd8f-ffb3-11d1-b41d-00a0c968f939
 280 appliesTo: f30e3bc2-9ff0-11d1-b603-0000f80367c1
 281 localizationDisplayId: 47
 282 validAccesses: 256
 283
 284 dn: CN=RAS-Information,CN=Extended-Rights,${CONFIGDN}
 285 objectClass: top
 286 objectClass: controlAccessRight
 287 cn: RAS-Information
 288 displayName: Remote Access Information
 289 rightsGuid: 037088f8-0ae1-11d2-b422-00a0c968f939
 290 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
 291 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
 292 localizationDisplayId: 48
 293 validAccesses: 48
 294
 295 dn: CN=DS-Install-Replica,CN=Extended-Rights,${CONFIGDN}
 296 objectClass: top
 297 objectClass: controlAccessRight
 298 cn: DS-Install-Replica
 299 displayName: Add/Remove Replica In Domain
 300 rightsGuid: 9923a32a-3607-11d2-b9be-0000f87a36b2
 301 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 302 localizationDisplayId: 49
 303 validAccesses: 256
 304
 305 dn: CN=Change-Infrastructure-Master,CN=Extended-Rights,${CONFIGDN}
 306 objectClass: top
 307 objectClass: controlAccessRight
 308 cn: Change-Infrastructure-Master
 309 displayName: Change Infrastructure Master
 310 rightsGuid: cc17b1fb-33d9-11d2-97d4-00c04fd8d5cd
 311 appliesTo: 2df90d89-009f-11d2-aa4c-00c04fd7d83a
 312 localizationDisplayId: 50
 313 validAccesses: 256
 314
 315 dn: CN=Update-Schema-Cache,CN=Extended-Rights,${CONFIGDN}
 316 objectClass: top
 317 objectClass: controlAccessRight
 318 cn: Update-Schema-Cache
 319 displayName: Update Schema Cache
 320 rightsGuid: be2bb760-7f46-11d2-b9ad-00c04f79f805
 321 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
 322 localizationDisplayId: 51
 323 validAccesses: 256
 324
 325 dn: CN=Recalculate-Security-Inheritance,CN=Extended-Rights,${CONFIGDN}
 326 objectClass: top
 327 objectClass: controlAccessRight
 328 cn: Recalculate-Security-Inheritance
 329 displayName: Recalculate Security Inheritance
 330 rightsGuid: 62dd28a8-7f46-11d2-b9ad-00c04f79f805
 331 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
 332 localizationDisplayId: 52
 333 validAccesses: 256
 334
 335 dn: CN=DS-Check-Stale-Phantoms,CN=Extended-Rights,${CONFIGDN}
 336 objectClass: top
 337 objectClass: controlAccessRight
 338 cn: DS-Check-Stale-Phantoms
 339 displayName: Check Stale Phantoms
 340 rightsGuid: 69ae6200-7f46-11d2-b9ad-00c04f79f805
 341 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
 342 localizationDisplayId: 53
 343 validAccesses: 256
 344
 345 dn: CN=Certificate-Enrollment,CN=Extended-Rights,${CONFIGDN}
 346 objectClass: top
 347 objectClass: controlAccessRight
 348 cn: Certificate-Enrollment
 349 displayName: Enroll
 350 rightsGuid: 0e10c968-78fb-11d2-90d4-00c04f79dc55
 351 appliesTo: e5209ca2-3bba-11d2-90cc-00c04fd91ab1
 352 localizationDisplayId: 54
 353 validAccesses: 256
 354
 355 dn: CN=Self-Membership,CN=Extended-Rights,${CONFIGDN}
 356 objectClass: top
 357 objectClass: controlAccessRight
 358 cn: Self-Membership
 359 displayName: Add/Remove self as member
 360 rightsGuid: bf9679c0-0de6-11d0-a285-00aa003049e2
 361 appliesTo: bf967a9c-0de6-11d0-a285-00aa003049e2
 362 localizationDisplayId: 12
 363 validAccesses: 8
 364
 365 dn: CN=Validated-DNS-Host-Name,CN=Extended-Rights,${CONFIGDN}
 366 objectClass: top
 367 objectClass: controlAccessRight
 368 cn: Validated-DNS-Host-Name
 369 displayName: Validated write to DNS host name
 370 rightsGuid: 72e39547-7b18-11d1-adef-00c04fd8d5cd
 371 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
 372 localizationDisplayId: 13
 373 validAccesses: 8
 374
 375 dn: CN=Validated-SPN,CN=Extended-Rights,${CONFIGDN}
 376 objectClass: top
 377 objectClass: controlAccessRight
 378 cn: Validated-SPN
 379 displayName: Validated write to service principal name
 380 rightsGuid: f3a64788-5306-11d1-a9c5-0000f80367c1
 381 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
 382 localizationDisplayId: 14
 383 validAccesses: 8
 384
 385 dn: CN=Generate-RSoP-Planning,CN=Extended-Rights,${CONFIGDN}
 386 objectClass: top
 387 objectClass: controlAccessRight
 388 cn: Generate-RSoP-Planning
 389 displayName: Generate Resultant Set of Policy (Planning)
 390 rightsGuid: b7b1b3dd-ab09-4242-9e30-9980e5d322f7
 391 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 392 appliesTo: bf967aa5-0de6-11d0-a285-00aa003049e2
 393 localizationDisplayId: 55
 394 validAccesses: 256
 395
 396 dn: CN=Refresh-Group-Cache,CN=Extended-Rights,${CONFIGDN}
 397 objectClass: top
 398 objectClass: controlAccessRight
 399 cn: Refresh-Group-Cache
 400 displayName: Refresh Group Cache for Logons
 401 rightsGuid: 9432c620-033c-4db7-8b58-14ef6d0bf477
 402 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
 403 localizationDisplayId: 56
 404 validAccesses: 256
 405
 406 dn: CN=SAM-Enumerate-Entire-Domain,CN=Extended-Rights,${CONFIGDN}
 407 objectClass: top
 408 objectClass: controlAccessRight
 409 cn: SAM-Enumerate-Entire-Domain
 410 displayName: Enumerate Entire SAM Domain
 411 rightsGuid: 91d67418-0135-4acc-8d79-c08e857cfbec
 412 appliesTo: bf967aad-0de6-11d0-a285-00aa003049e2
 413 localizationDisplayId: 57
 414 validAccesses: 256
 415
 416 dn: CN=Generate-RSoP-Logging,CN=Extended-Rights,${CONFIGDN}
 417 objectClass: top
 418 objectClass: controlAccessRight
 419 cn: Generate-RSoP-Logging
 420 displayName: Generate Resultant Set of Policy (Logging)
 421 rightsGuid: b7b1b3de-ab09-4242-9e30-9980e5d322f7
 422 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 423 appliesTo: bf967aa5-0de6-11d0-a285-00aa003049e2
 424 localizationDisplayId: 58
 425 validAccesses: 256
 426
 427 dn: CN=Domain-Other-Parameters,CN=Extended-Rights,${CONFIGDN}
 428 objectClass: top
 429 objectClass: controlAccessRight
 430 cn: Domain-Other-Parameters
 431 displayName: Other Domain Parameters (for use by SAM)
 432 rightsGuid: b8119fd0-04f6-4762-ab7a-4986c76b3f9a
 433 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 434 localizationDisplayId: 59
 435 validAccesses: 48
 436
 437 dn: CN=DNS-Host-Name-Attributes,CN=Extended-Rights,${CONFIGDN}
 438 objectClass: top
 439 objectClass: controlAccessRight
 440 cn: DNS-Host-Name-Attributes
 441 displayName: DNS Host Name Attributes
 442 rightsGuid: 72e39547-7b18-11d1-adef-00c04fd8d5cd
 443 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
 444 localizationDisplayId: 60
 445 validAccesses: 48
 446
 447 dn: CN=Create-Inbound-Forest-Trust,CN=Extended-Rights,${CONFIGDN}
 448 objectClass: top
 449 objectClass: controlAccessRight
 450 cn: Create-Inbound-Forest-Trust
 451 displayName: Create Inbound Forest Trust
 452 rightsGuid: e2a36dc9-ae17-47c3-b58b-be34c55ba633
 453 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 454 localizationDisplayId: 61
 455 validAccesses: 256
 456
 457 dn: CN=DS-Replication-Get-Changes-All,CN=Extended-Rights,${CONFIGDN}
 458 objectClass: top
 459 objectClass: controlAccessRight
 460 cn: DS-Replication-Get-Changes-All
 461 displayName: Replicating Directory Changes All
 462 rightsGuid: 1131f6ad-9c07-11d1-f79f-00c04fc2dcd2
 463 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
 464 appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
 465 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 466 localizationDisplayId: 62
 467 validAccesses: 256
 468
 469 dn: CN=Migrate-SID-History,CN=Extended-Rights,${CONFIGDN}
 470 objectClass: top
 471 objectClass: controlAccessRight
 472 cn: Migrate-SID-History
 473 displayName: Migrate SID History
 474 rightsGuid: BA33815A-4F93-4c76-87F3-57574BFF8109
 475 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 476 localizationDisplayId: 63
 477 validAccesses: 256
 478
 479 dn: CN=Reanimate-Tombstones,CN=Extended-Rights,${CONFIGDN}
 480 objectClass: top
 481 objectClass: controlAccessRight
 482 cn: Reanimate-Tombstones
 483 displayName: Reanimate Tombstones
 484 rightsGuid: 45EC5156-DB7E-47bb-B53F-DBEB2D03C40F
 485 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
 486 appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
 487 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 488 localizationDisplayId: 64
 489 validAccesses: 256
 490
 491 dn: CN=Allowed-To-Authenticate,CN=Extended-Rights,${CONFIGDN}
 492 objectClass: top
 493 objectClass: controlAccessRight
 494 cn: Allowed-To-Authenticate
 495 displayName: Allowed to Authenticate
 496 rightsGuid: 68B1D179-0D15-4d4f-AB71-46152E79A7BC
 497 appliesTo: 4828cc14-1437-45bc-9b07-ad6f015e5f28
 498 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
 499 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
 500 localizationDisplayId: 65
 501 validAccesses: 256
 502
 503 dn: CN=DS-Execute-Intentions-Script,CN=Extended-Rights,${CONFIGDN}
 504 objectClass: top
 505 objectClass: controlAccessRight
 506 cn: DS-Execute-Intentions-Script
 507 displayName: Execute Forest Update Script
 508 rightsGuid: 2f16c4a5-b98e-432c-952a-cb388ba33f2e
 509 appliesTo: ef9e60e0-56f7-11d1-a9c6-0000f80367c1
 510 localizationDisplayId: 66
 511 validAccesses: 256
 512
 513 dn: CN=DS-Replication-Monitor-Topology,CN=Extended-Rights,${CONFIGDN}
 514 objectClass: top
 515 objectClass: controlAccessRight
 516 cn: DS-Replication-Monitor-Topology
 517 displayName: Monitor Active Directory Replication
 518 rightsGuid: f98340fb-7c5b-4cdb-a00b-2ebdfa115a96
 519 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
 520 appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
 521 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 522 localizationDisplayId: 67
 523 validAccesses: 256
 524
 525 dn: CN=Update-Password-Not-Required-Bit,CN=Extended-Rights,${CONFIGDN}
 526 objectClass: top
 527 objectClass: controlAccessRight
 528 cn: Update-Password-Not-Required-Bit
 529 displayName: Update Password Not Required Bit
 530 rightsGuid: 280f369c-67c7-438e-ae98-1d46f3c6f541
 531 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 532 localizationDisplayId: 68
 533 validAccesses: 256
 534
 535 dn: CN=Unexpire-Password,CN=Extended-Rights,${CONFIGDN}
 536 objectClass: top
 537 objectClass: controlAccessRight
 538 cn: Unexpire-Password
 539 displayName: Unexpire Password
 540 rightsGuid: ccc2dc7d-a6ad-4a7a-8846-c04e3cc53501
 541 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 542 localizationDisplayId: 69
 543 validAccesses: 256
 544
 545 dn: CN=Enable-Per-User-Reversibly-Encrypted-Password,CN=Extended-Rights,${CONFIGDN}
 546 objectClass: top
 547 objectClass: controlAccessRight
 548 cn: Enable-Per-User-Reversibly-Encrypted-Password
 549 displayName: Enable Per User Reversibly Encrypted Password
 550 rightsGuid: 05c74c5e-4deb-43b4-bd9f-86664c2a7fd5
 551 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 552 localizationDisplayId: 70
 553 validAccesses: 256
 554
 555 dn: CN=DS-Query-Self-Quota,CN=Extended-Rights,${CONFIGDN}
 556 objectClass: top
 557 objectClass: controlAccessRight
 558 cn: DS-Query-Self-Quota
 559 displayName: Query Self Quota
 560 rightsGuid: 4ecc03fe-ffc0-4947-b630-eb672a8a9dbc
 561 appliesTo: da83fc4f-076f-4aea-b4dc-8f4dab9b5993
 562 localizationDisplayId: 71
 563 validAccesses: 256
 564
 565 dn: CN=Domain-Administer-Server,CN=Extended-Rights,${CONFIGDN}
 566 objectClass: top
 567 objectClass: controlAccessRight
 568 cn: Domain-Administer-Server
 569 displayName: Domain Administer Server
 570 rightsGuid: ab721a52-1e2f-11d0-9819-00aa0040529b
 571 appliesTo: bf967aad-0de6-11d0-a285-00aa003049e2
 572 localizationDisplayId: 1
 573 validAccesses: 256
 574
 575 dn: CN=User-Change-Password,CN=Extended-Rights,${CONFIGDN}
 576 objectClass: top
 577 objectClass: controlAccessRight
 578 cn: User-Change-Password
 579 displayName: Change Password
 580 rightsGuid: ab721a53-1e2f-11d0-9819-00aa0040529b
 581 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
 582 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
 583 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
 584 localizationDisplayId: 2
 585 validAccesses: 256
 586
 587 dn: CN=User-Force-Change-Password,CN=Extended-Rights,${CONFIGDN}
 588 objectClass: top
 589 objectClass: controlAccessRight
 590 cn: User-Force-Change-Password
 591 displayName: Reset Password
 592 rightsGuid: 00299570-246d-11d0-a768-00aa006e0529
 593 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
 594 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
 595 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
 596 localizationDisplayId: 3
 597 validAccesses: 256
 598
 599 dn: CN=Send-As,CN=Extended-Rights,${CONFIGDN}
 600 objectClass: top
 601 objectClass: controlAccessRight
 602 cn: Send-As
 603 displayName: Send As
 604 rightsGuid: ab721a54-1e2f-11d0-9819-00aa0040529b
 605 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
 606 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
 607 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
 608 localizationDisplayId: 4
 609 validAccesses: 256
 610
 611 dn: CN=Receive-As,CN=Extended-Rights,${CONFIGDN}
 612 objectClass: top
 613 objectClass: controlAccessRight
 614 cn: Receive-As
 615 displayName: Receive As
 616 rightsGuid: ab721a56-1e2f-11d0-9819-00aa0040529b
 617 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
 618 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
 619 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
 620 localizationDisplayId: 5
 621 validAccesses: 256
 622
 623 dn: CN=Send-To,CN=Extended-Rights,${CONFIGDN}
 624 objectClass: top
 625 objectClass: controlAccessRight
 626 cn: Send-To
 627 displayName: Send To
 628 rightsGuid: ab721a55-1e2f-11d0-9819-00aa0040529b
 629 appliesTo: bf967a9c-0de6-11d0-a285-00aa003049e2
 630 localizationDisplayId: 6
 631 validAccesses: 256
 632
 633 dn: CN=Domain-Password,CN=Extended-Rights,${CONFIGDN}
 634 objectClass: top
 635 objectClass: controlAccessRight
 636 cn: Domain-Password
 637 displayName: Domain Password & Lockout Policies
 638 rightsGuid: c7407360-20bf-11d0-a768-00aa006e0529
 639 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 640 appliesTo: 19195a5a-6da0-11d0-afd3-00c04fd930c9
 641 localizationDisplayId: 7
 642 validAccesses: 48
 643
 644 dn: CN=General-Information,CN=Extended-Rights,${CONFIGDN}
 645 objectClass: top
 646 objectClass: controlAccessRight
 647 cn: General-Information
 648 displayName: General Information
 649 rightsGuid: 59ba2f42-79a2-11d0-9020-00c04fc2d3cf
 650 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
 651 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
 652 localizationDisplayId: 8
 653 validAccesses: 48
 654
 655 dn: CN=User-Account-Restrictions,CN=Extended-Rights,${CONFIGDN}
 656 objectClass: top
 657 objectClass: controlAccessRight
 658 cn: User-Account-Restrictions
 659 displayName: Account Restrictions
 660 rightsGuid: 4c164200-20c0-11d0-a768-00aa006e0529
 661 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
 662 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
 663 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
 664 localizationDisplayId: 9
 665 validAccesses: 48
 666
 667 dn: CN=User-Logon,CN=Extended-Rights,${CONFIGDN}
 668 objectClass: top
 669 objectClass: controlAccessRight
 670 cn: User-Logon
 671 displayName: Logon Information
 672 rightsGuid: 5f202010-79a5-11d0-9020-00c04fc2d4cf
 673 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
 674 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
 675 localizationDisplayId: 10
 676 validAccesses: 48
 677
 678 dn: CN=Membership,CN=Extended-Rights,${CONFIGDN}
 679 objectClass: top
 680 objectClass: controlAccessRight
 681 cn: Membership
 682 displayName: Group Membership
 683 rightsGuid: bc0ac240-79a9-11d0-9020-00c04fc2d4cf
 684 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
 685 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
 686 localizationDisplayId: 11
 687 validAccesses: 48
 688
 689 dn: CN=Open-Address-Book,CN=Extended-Rights,${CONFIGDN}
 690 objectClass: top
 691 objectClass: controlAccessRight
 692 cn: Open-Address-Book
 693 displayName: Open Address List
 694 rightsGuid: a1990816-4298-11d1-ade2-00c04fd8d5cd
 695 appliesTo: 3e74f60f-3e73-11d1-a9c0-0000f80367c1
 696 localizationDisplayId: 21
 697 validAccesses: 256
 698
 699 dn: CN=Personal-Information,CN=Extended-Rights,${CONFIGDN}
 700 objectClass: top
 701 objectClass: controlAccessRight
 702 cn: Personal-Information
 703 displayName: Personal Information
 704 rightsGuid: 77B5B886-944A-11d1-AEBD-0000F80367C1
 705 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
 706 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
 707 appliesTo: 5cb41ed0-0e4c-11d0-a286-00aa003049e2
 708 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
 709 localizationDisplayId: 23
 710 validAccesses: 48
 711
 712 dn: CN=Email-Information,CN=Extended-Rights,${CONFIGDN}
 713 objectClass: top
 714 objectClass: controlAccessRight
 715 cn: Email-Information
 716 displayName: Phone and Mail Options
 717 rightsGuid: E45795B2-9455-11d1-AEBD-0000F80367C1
 718 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
 719 appliesTo: bf967a9c-0de6-11d0-a285-00aa003049e2
 720 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
 721 localizationDisplayId: 22
 722 validAccesses: 48
 723
 724 dn: CN=Web-Information,CN=Extended-Rights,${CONFIGDN}
 725 objectClass: top
 726 objectClass: controlAccessRight
 727 cn: Web-Information
 728 displayName: Web Information
 729 rightsGuid: E45795B3-9455-11d1-AEBD-0000F80367C1
 730 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
 731 appliesTo: 5cb41ed0-0e4c-11d0-a286-00aa003049e2
 732 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
 733 localizationDisplayId: 24
 734 validAccesses: 48
 735
 736 dn: CN=DS-Replication-Get-Changes,CN=Extended-Rights,${CONFIGDN}
 737 objectClass: top
 738 objectClass: controlAccessRight
 739 cn: DS-Replication-Get-Changes
 740 displayName: Replicating Directory Changes
 741 rightsGuid: 1131f6aa-9c07-11d1-f79f-00c04fc2dcd2
 742 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
 743 appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
 744 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 745 localizationDisplayId: 25
 746 validAccesses: 256
 747
 748 dn: CN=DS-Replication-Synchronize,CN=Extended-Rights,${CONFIGDN}
 749 objectClass: top
 750 objectClass: controlAccessRight
 751 cn: DS-Replication-Synchronize
 752 displayName: Replication Synchronization
 753 rightsGuid: 1131f6ab-9c07-11d1-f79f-00c04fc2dcd2
 754 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
 755 appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
 756 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 757 localizationDisplayId: 26
 758 validAccesses: 256
 759
 760 dn: CN=DS-Replication-Manage-Topology,CN=Extended-Rights,${CONFIGDN}
 761 objectClass: top
 762 objectClass: controlAccessRight
 763 cn: DS-Replication-Manage-Topology
 764 displayName: Manage Replication Topology
 765 rightsGuid: 1131f6ac-9c07-11d1-f79f-00c04fc2dcd2
 766 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
 767 appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
 768 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
 769 localizationDisplayId: 27
 770 validAccesses: 256
 771
 772 dn: CN=Change-Schema-Master,CN=Extended-Rights,${CONFIGDN}
 773 objectClass: top
 774 objectClass: controlAccessRight
 775 cn: Change-Schema-Master
 776 displayName: Change Schema Master
 777 rightsGuid: e12b56b6-0a95-11d1-adbb-00c04fd8d5cd
 778 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
 779 localizationDisplayId: 28
 780 validAccesses: 256