diff options
author | Andrew Bartlett <abartlet@samba.org> | 2017-12-11 10:51:32 +1300 |
---|---|---|
committer | Andrew Bartlett <abartlet@samba.org> | 2017-12-14 08:20:15 +0100 |
commit | 7fad4896f61f833d29a49ca20766abfbbd7874b4 (patch) | |
tree | 4dbe8bbb73f8a45cee2b3eba4bbf24a26b47c9cf /source4/setup | |
parent | 7bc9c20037c908a2211d92ddb960325a45972969 (diff) | |
download | samba-7fad4896f61f833d29a49ca20766abfbbd7874b4.tar.gz |
provision: Remove section numbers from extended rights, replace with dn
This makes this file more like LDIF so we can process it automatically as well as
use it as a text document.
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Garming Sam <garming@catalyst.net.nz>
Diffstat (limited to 'source4/setup')
-rw-r--r-- | source4/setup/extended-rights.ldif | 653 |
1 files changed, 407 insertions, 246 deletions
diff --git a/source4/setup/extended-rights.ldif b/source4/setup/extended-rights.ldif index 90dd5239894..5207afe3513 100644 --- a/source4/setup/extended-rights.ldif +++ b/source4/setup/extended-rights.ldif @@ -4,7 +4,7 @@ # create the appropritate objects in the AD database, which are used # by the administrative tools. # -# The primary source is MS-ADTS 12/1/2017 v47.0 +# The primary source is MS-ADTS 12/1/2017 v47.0 under 6.1.1.2.7 # That document is licenced thusly: # # Intellectual Property Rights Notice for Open Specifications Documentation @@ -77,12 +77,6 @@ # Support. For questions and support, please contact dochelp@microsoft.com. - -6.1.1.2.7 Extended Rights -name: Extended Rights -parent: Config NC root object -objectClass: container -systemFlags: { FLAG_DISALLOW_DELETE } 6.1.1.2.7.1 controlAccessRight objects All controlAccessRight objects have: objectClass: controlAccessRight @@ -90,44 +84,60 @@ rightsGuid: This value is the identifier of the control access right used for se appliesTo: Each value in this attribute is a GUID, with each GUID equaling an attribute schemaIDGUID on a schema object defining a class in the schema NC. This class defines the objects in which the control access right can be a security descriptor for. The appliesTo values on the controlAccessRight are not enforced by the directory server; that is, the controlAccessRight can be included in security descriptors of objects of classes not specified in the appliesTo attribute. localizationDisplayId: This is implementation-specific information for the administrative application. validAccesses: This is implementation-specific information for the administrative application. -6.1.1.2.7.2 Change-Rid-Master -This object is present in AD DS only. -name: Change-Rid-Master + +dn: CN=Change-Rid-Master,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: Change-Rid-Master rightsGuid: d58d5f36-0a98-11d1-adbb-00c04fd8d5cd appliesTo: 6617188d-8f3c-11d0-afda-00c04fd930c9 -6.1.1.2.7.3 Do-Garbage-Collection -This object is present in AD DS and AD LDS. -name: Do-Garbage-Collection + +dn: CN=Do-Garbage-Collection,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: Do-Garbage-Collection rightsGuid: fec364e0-0a98-11d1-adbb-00c04fd8d5cd appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed -6.1.1.2.7.4 Recalculate-Hierarchy -This object is present in AD DS only. -name: Recalculate-Hierarchy + +dn: CN=Recalculate-Hierarchy,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: Recalculate-Hierarchy rightsGuid: 0bc1554e-0a99-11d1-adbb-00c04fd8d5cd appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed -6.1.1.2.7.5 Allocate-Rids -This object is present in AD DS only. -name: Allocate-Rids + +dn: CN=Allocate-Rids,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: Allocate-Rids rightsGuid: 1abd7cf8-0a99-11d1-adbb-00c04fd8d5cd appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed -6.1.1.2.7.6 Change-PDC -This object is present in AD DS only. -name: Change-PDC + +dn: CN=Change-PDC,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: Change-PDC rightsGuid: bae50096-4752-11d1-9052-00c04fc2d4cf appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9 -6.1.1.2.7.7 Add-GUID -This object is present in AD DS and AD LDS. -name: Add-GUID + +dn: CN=Add-GUID,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: Add-GUID rightsGuid: 440820ad-65b4-11d1-a3da-0000f875ae0d appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9 -6.1.1.2.7.8 Change-Domain-Master -This object is present in AD DS only. -name: Change-Domain-Master + +dn: CN=Change-Domain-Master,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: Change-Domain-Master rightsGuid: 014bf69c-7b3b-11d1-85f6-08002be74fab appliesTo: ef9e60e0-56f7-11d1-a9c6-0000f80367c1 -6.1.1.2.7.9 Public-Information -This object is present in AD DS and AD LDS. -name: Public-Information + +dn: CN=Public-Information,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: Public-Information rightsGuid: e48d0154-bcf8-11d1-8702-00c04fb96050 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28 @@ -135,187 +145,251 @@ bf967a86-0de6-11d0-a285-00aa003049e2 bf967aba-0de6-11d0-a285-00aa003049e2 ce206244-5827-4a86-ba1c-1c0c386c1b64 (for AD DS only) 7b8b558a-93a5-4af7-adca-c017e67f1057 (only in AD DS schema version 87 and greater) -6.1.1.2.7.10 msmq-Receive-Dead-Letter -This object is present in AD DS only. -name: msmq-Receive-Dead-Letter + +dn: CN=msmq-Receive-Dead-Letter,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: msmq-Receive-Dead-Letter rightsGuid: 4b6e08c0-df3c-11d1-9c86-006008764d0e appliesTo: 9a0dc344-c100-11d1-bbc5-0080c76670c0 -6.1.1.2.7.11 msmq-Peek-Dead-Letter -This object is present in AD DS only. -name: msmq-Peek-Dead-Letter + +dn: CN=msmq-Peek-Dead-Letter,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: msmq-Peek-Dead-Letter rightsGuid: 4b6e08c1-df3c-11d1-9c86-006008764d0e appliesTo: 9a0dc344-c100-11d1-bbc5-0080c76670c0 -6.1.1.2.7.12 msmq-Receive-computer-Journal -This object is present in AD DS only. -name: msmq-Receive-computer-Journal + +dn: CN=msmq-Receive-computer-Journal,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: msmq-Receive-computer-Journal rightsGuid: 4b6e08c2-df3c-11d1-9c86-006008764d0e appliesTo: 9a0dc344-c100-11d1-bbc5-0080c76670c0 -6.1.1.2.7.13 msmq-Peek-computer-Journal -This object is present in AD DS only. -name: msmq-Peek-computer-Journal + +dn: CN=msmq-Peek-computer-Journal,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: msmq-Peek-computer-Journal rightsGuid: 4b6e08c3-df3c-11d1-9c86-006008764d0e appliesTo: 9a0dc344-c100-11d1-bbc5-0080c76670c0 -6.1.1.2.7.14 msmq-Receive -This object is present in AD DS only. -name: msmq-Receive + +dn: CN=msmq-Receive,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: msmq-Receive rightsGuid: 06bd3200-df3e-11d1-9c86-006008764d0e appliesTo: 9a0dc343-c100-11d1-bbc5-0080c76670c0 -6.1.1.2.7.15 msmq-Peek -This object is present in AD DS only. -name: msmq-Peek + +dn: CN=msmq-Peek,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: msmq-Peek rightsGuid: 06bd3201-df3e-11d1-9c86-006008764d0e appliesTo: 9a0dc343-c100-11d1-bbc5-0080c76670c0 -6.1.1.2.7.16 msmq-Send -This object is present in AD DS only. -name: msmq-Send + +dn: CN=msmq-Send,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: msmq-Send rightsGuid: 06bd3202-df3e-11d1-9c86-006008764d0e appliesTo: 9a0dc343-c100-11d1-bbc5-0080c76670c0 46b27aac-aafa-4ffb-b773-e5bf621ee87b (only in schema version 30 and greater) -6.1.1.2.7.17 msmq-Receive-journal -This object is present in AD DS only. -name: msmq-Receive-journal + +dn: CN=msmq-Receive-journal,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: msmq-Receive-journal rightsGuid: 06bd3203-df3e-11d1-9c86-006008764d0e appliesTo: 9a0dc343-c100-11d1-bbc5-0080c76670c0 -6.1.1.2.7.18 msmq-Open-Connector -This object is present in AD DS only. -name: msmq-Open-Connector + +dn: CN=msmq-Open-Connector,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: msmq-Open-Connector rightsGuid: b4e60130-df3f-11d1-9c86-006008764d0e appliesTo: bf967ab3-0de6-11d0-a285-00aa003049e2 -6.1.1.2.7.19 Apply-Group-Policy -This object is present in AD DS only. -name: Apply-Group-Policy + +dn: CN=Apply-Group-Policy,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: Apply-Group-Policy rightsGuid: edacfd8f-ffb3-11d1-b41d-00a0c968f939 appliesTo: f30e3bc2-9ff0-11d1-b603-0000f80367c1 -6.1.1.2.7.20 RAS-Information -This object is present in AD DS only. -name: RAS-Information + +dn: CN=RAS-Information,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: RAS-Information rightsGuid: 037088f8-0ae1-11d2-b422-00a0c968f939 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28 bf967aba-0de6-11d0-a285-00aa003049e2 -6.1.1.2.7.21 DS-Install-Replica -This object is present in AD DS and AD LDS. -name: DS-Install-Replica + +dn: CN=DS-Install-Replica,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: DS-Install-Replica rightsGuid: 9923a32a-3607-11d2-b9be-0000f87a36b2 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9 -6.1.1.2.7.22 Change-Infrastructure-Master -This object is present in AD DS only. -name: Change-Infrastructure-Master + +dn: CN=Change-Infrastructure-Master,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: Change-Infrastructure-Master rightsGuid: cc17b1fb-33d9-11d2-97d4-00c04fd8d5cd appliesTo: 2df90d89-009f-11d2-aa4c-00c04fd7d83a -6.1.1.2.7.23 Update-Schema-Cache -This object is present in AD DS and AD LDS. -name: Update-Schema-Cache + +dn: CN=Update-Schema-Cache,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: Update-Schema-Cache rightsGuid: be2bb760-7f46-11d2-b9ad-00c04f79f805 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2 -6.1.1.2.7.24 Recalculate-Security-Inheritance -This object is present in AD DS and AD LDS. -name: Recalculate-Security-Inheritance + +dn: CN=Recalculate-Security-Inheritance,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: Recalculate-Security-Inheritance rightsGuid: 62dd28a8-7f46-11d2-b9ad-00c04f79f805 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed -6.1.1.2.7.25 DS-Check-Stale-Phantoms -This object is present in AD DS only. -name: DS-Check-Stale-Phantoms + +dn: CN=DS-Check-Stale-Phantoms,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: DS-Check-Stale-Phantoms rightsGuid: 69ae6200-7f46-11d2-b9ad-00c04f79f805 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed -6.1.1.2.7.26 Certificate-Enrollment -This object is present in AD DS only. -name: Certificate-Enrollment + +dn: CN=Certificate-Enrollment,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: Certificate-Enrollment rightsGuid: 0e10c968-78fb-11d2-90d4-00c04f79dc55 appliesTo: e5209ca2-3bba-11d2-90cc-00c04fd91ab1 -6.1.1.2.7.27 Self-Membership -This object is present in AD DS and AD LDS. -name: Self-Membership + +dn: CN=Self-Membership,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: Self-Membership rightsGuid: bf9679c0-0de6-11d0-a285-00aa003049e2 appliesTo: bf967a9c-0de6-11d0-a285-00aa003049e2 -6.1.1.2.7.28 Validated-DNS-Host-Name -This object is present in AD DS only. -name: Validated-DNS-Host-Name + +dn: CN=Validated-DNS-Host-Name,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: Validated-DNS-Host-Name rightsGuid: 72e39547-7b18-11d1-adef-00c04fd8d5cd appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2 ce206244-5827-4a86-ba1c-1c0c386c1b64 (only in schema version 45 and greater) 7b8b558a-93a5-4af7-adca-c017e67f1057 (only in schema version 55 and greater) -6.1.1.2.7.29 Validated-SPN -This object is present in AD DS only. -name: Validated-SPN + +dn: CN=Validated-SPN,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: Validated-SPN rightsGuid: f3a64788-5306-11d1-a9c5-0000f80367c1 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2 ce206244-5827-4a86-ba1c-1c0c386c1b64 (only in schema version 45 and greater) 7b8b558a-93a5-4af7-adca-c017e67f1057 (only in schema version 87 and greater) -6.1.1.2.7.30 Generate-RSoP-Planning -This object is present in AD DS only. -name: Generate-RSoP-Planning + +dn: CN=Generate-RSoP-Planning,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: Generate-RSoP-Planning rightsGuid: b7b1b3dd-ab09-4242-9e30-9980e5d322f7 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9 bf967aa5-0de6-11d0-a285-00aa003049e2 -6.1.1.2.7.31 Refresh-Group-Cache -This object is present in AD DS only. -name: Refresh-Group-Cache + +dn: CN=Refresh-Group-Cache,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: Refresh-Group-Cache rightsGuid: 9432c620-033c-4db7-8b58-14ef6d0bf477 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed -6.1.1.2.7.32 Reload-SSL-Certificate -This object is present in AD DS and AD LDS. -name: Reload-SSL-Certificate + +dn: CN=Reload-SSL-Certificate,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: Reload-SSL-Certificate rightsGuid: 1a60ea8d-58a6-4b20-bcdc-fb71eb8a9ff8 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed -6.1.1.2.7.33 SAM-Enumerate-Entire-Domain -This object is present in AD DS only. -name: SAM-Enumerate-Entire-Domain + +dn: CN=SAM-Enumerate-Entire-Domain,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: SAM-Enumerate-Entire-Domain rightsGuid: 91d67418-0135-4acc-8d79-c08e857cfbec appliesTo: bf967aad-0de6-11d0-a285-00aa003049e2 -6.1.1.2.7.34 Generate-RSoP-Logging -This object is present in AD DS only. -name: Generate-RSoP-Logging + +dn: CN=Generate-RSoP-Logging,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: Generate-RSoP-Logging rightsGuid: b7b1b3de-ab09-4242-9e30-9980e5d322f7 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9 bf967aa5-0de6-11d0-a285-00aa003049e2 -6.1.1.2.7.35 Domain-Other-Parameters -This object is present in AD DS only. -name: Domain-Other-Parameters + +dn: CN=Domain-Other-Parameters,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: Domain-Other-Parameters rightsGuid: b8119fd0-04f6-4762-ab7a-4986c76b3f9a appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9 -6.1.1.2.7.36 DNS-Host-Name-Attributes -This object is present in AD DS only. -name: DNS-Host-Name-Attributes + +dn: CN=DNS-Host-Name-Attributes,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: DNS-Host-Name-Attributes rightsGuid: 72e39547-7b18-11d1-adef-00c04fd8d5cd appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2 ce206244-5827-4a86-ba1c-1c0c386c1b64 7b8b558a-93a5-4af7-adca-c017e67f1057 (only in schema version 55 and greater) -6.1.1.2.7.37 Create-Inbound-Forest-Trust -This object is present in AD DS only. -name: Create-Inbound-Forest-Trust + +dn: CN=Create-Inbound-Forest-Trust,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: Create-Inbound-Forest-Trust rightsGuid: e2a36dc9-ae17-47c3-b58b-be34c55ba633 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9 -6.1.1.2.7.38 DS-Replication-Get-Changes-All -This object is present in AD DS and AD LDS. -name: DS-Replication-Get-Changes-All + +dn: CN=DS-Replication-Get-Changes-All,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: DS-Replication-Get-Changes-All rightsGuid: 1131f6ad-9c07-11d1-f79f-00c04fc2dcd2 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2 bf967a87-0de6-11d0-a285-00aa003049e2 19195a5b-6da0-11d0-afd3-00c04fd930c9 -6.1.1.2.7.39 Migrate-SID-History -This object is present in AD DS only. -name: Migrate-SID-History + +dn: CN=Migrate-SID-History,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: Migrate-SID-History rightsGuid: BA33815A-4F93-4c76-87F3-57574BFF8109 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9 -6.1.1.2.7.40 Reanimate-Tombstones -This object is present in AD DS and AD LDS. -name: Reanimate-Tombstones + +dn: CN=Reanimate-Tombstones,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: Reanimate-Tombstones rightsGuid: 45EC5156-DB7E-47bb-B53F-DBEB2D03C40F appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2 bf967a87-0de6-11d0-a285-00aa003049e2 19195a5b-6da0-11d0-afd3-00c04fd930c9 -6.1.1.2.7.41 Allowed-To-Authenticate -This object is present in AD DS only. -name: Allowed-To-Authenticate + +dn: CN=Allowed-To-Authenticate,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: Allowed-To-Authenticate rightsGuid: 68B1D179-0D15-4d4f-AB71-46152E79A7BC appliesTo: 4828cc14-1437-45bc-9b07-ad6f015e5f28 @@ -323,87 +397,113 @@ bf967aba-0de6-11d0-a285-00aa003049e2 bf967a86-0de6-11d0-a285-00aa003049e2 ce206244-5827-4a86-ba1c-1c0c386c1b64 (only in schema version 45 and greater) 7b8b558a-93a5-4af7-adca-c017e67f1057 (only in schema version 87 and greater) -6.1.1.2.7.42 DS-Execute-Intentions-Script -This object is present in AD DS and AD LDS. -name: DS-Execute-Intentions-Script + +dn: CN=DS-Execute-Intentions-Script,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: DS-Execute-Intentions-Script rightsGuid: 2f16c4a5-b98e-432c-952a-cb388ba33f2e appliesTo: ef9e60e0-56f7-11d1-a9c6-0000f80367c1 -6.1.1.2.7.43 DS-Replication-Monitor-Topology -This object is present in AD DS and AD LDS. -name: DS-Replication-Monitor-Topology + +dn: CN=DS-Replication-Monitor-Topology,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: DS-Replication-Monitor-Topology rightsGuid: f98340fb-7c5b-4cdb-a00b-2ebdfa115a96 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2 bf967a87-0de6-11d0-a285-00aa003049e2 19195a5b-6da0-11d0-afd3-00c04fd930c9 -6.1.1.2.7.44 Update-Password-Not-Required-Bit -This object is present in AD DS only. -name: Update-Password-Not-Required-Bit + +dn: CN=Update-Password-Not-Required-Bit,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: Update-Password-Not-Required-Bit rightsGuid: 280f369c-67c7-438e-ae98-1d46f3c6f541 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9 -6.1.1.2.7.45 Unexpire-Password -This object is present in AD DS and AD LDS. -name: Unexpire-Password + +dn: CN=Unexpire-Password,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: Unexpire-Password rightsGuid: ccc2dc7d-a6ad-4a7a-8846-c04e3cc53501 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9 -6.1.1.2.7.46 Enable-Per-User-Reversibly-Encrypted-Password -This object is present in AD DS only. -name: Enable-Per-User-Reversibly-Encrypted-Password + +dn: CN=Enable-Per-User-Reversibly-Encrypted-Password,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: Enable-Per-User-Reversibly-Encrypted-Password rightsGuid: 05c74c5e-4deb-43b4-bd9f-86664c2a7fd5 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9 -6.1.1.2.7.47 DS-Query-Self-Quota -This object is present in AD DS and AD LDS. -name: DS-Query-Self-Quota + +dn: CN=DS-Query-Self-Quota,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: DS-Query-Self-Quota rightsGuid: 4ecc03fe-ffc0-4947-b630-eb672a8a9dbc appliesTo: da83fc4f-076f-4aea-b4dc-8f4dab9b5993 -6.1.1.2.7.48 Private-Information -This object is present in AD DS only. -name: Private-Information + +dn: CN=Private-Information,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: Private-Information rightsGuid: 91e647de-d96f-4b70-9557-d63ff4f3ccd8 appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2 4828cc14-1437-45bc-9b07-ad6f015e5f28 -6.1.1.2.7.49 MS-TS-GatewayAccess -This object is present in AD DS only. -name: MS-TS-GatewayAccess + +dn: CN=MS-TS-GatewayAccess,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: MS-TS-GatewayAccess rightsGuid: ffa6f046-ca4b-4feb-b40d-04dfee722543 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2 ce206244-5827-4a86-ba1c-1c0c386c1b64 7b8b558a-93a5-4af7-adca-c017e67f1057 (only in schema version 87 and greater) -6.1.1.2.7.50 Terminal-Server-License-Server -This object is present in AD DS only. -name: Terminal-Server-License-Server + +dn: CN=Terminal-Server-License-Server,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: Terminal-Server-License-Server rightsGuid: 5805bc62-bdc9-4428-a5e2-856a0f4c185e appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2 4828cc14-1437-45bc-9b07-ad6f015e5f28 -6.1.1.2.7.51 Domain-Administer-Server -This object is present in AD DS only. -name: Domain-Administer-Server + +dn: CN=Domain-Administer-Server,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: Domain-Administer-Server rightsGuid: ab721a52-1e2f-11d0-9819-00aa0040529b appliesTo: bf967aad-0de6-11d0-a285-00aa003049e2 -6.1.1.2.7.52 User-Change-Password -This object is present in AD DS and AD LDS. -name: User-Change-Password + +dn: CN=User-Change-Password,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: User-Change-Password rightsGuid: ab721a53-1e2f-11d0-9819-00aa0040529b appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2 bf967aba-0de6-11d0-a285-00aa003049e2 4828CC14-1437-45bc-9B07-AD6F015E5F28 (only in schema version 30 and greater) ce206244-5827-4a86-ba1c-1c0c386c1b64 (only in schema version 45 and greater, for AD DS only) -6.1.1.2.7.53 User-Force-Change-Password -This object is present in AD DS and AD LDS. -name: User-Force-Change-Password + +dn: CN=User-Force-Change-Password,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: User-Force-Change-Password rightsGuid: 00299570-246d-11d0-a768-00aa006e0529 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2 bf967aba-0de6-11d0-a285-00aa003049e2 4828CC14-1437-45bc-9B07-AD6F015E5F28 (only in schema version 30 and greater) ce206244-5827-4a86-ba1c-1c0c386c1b64 (only in schema version 45 and greater, for AD DS only) -6.1.1.2.7.54 Send-As -This object is present in AD DS only. -name: Send-As + +dn: CN=Send-As,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: Send-As rightsGuid: ab721a54-1e2f-11d0-9819-00aa0040529b appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2 @@ -411,9 +511,11 @@ bf967aba-0de6-11d0-a285-00aa003049e2 4828CC14-1437-45bc-9B07-AD6F015E5F28 (only in schema version 30 and greater) ce206244-5827-4a86-ba1c-1c0c386c1b64 (only in schema version 45 and greater) 7b8b558a-93a5-4af7-adca-c017e67f1057 (only in schema version 87 and greater) -6.1.1.2.7.55 Receive-As -This object is present in AD DS only. -name: Receive-As + +dn: CN=Receive-As,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: Receive-As rightsGuid: ab721a56-1e2f-11d0-9819-00aa0040529b appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2 @@ -421,28 +523,36 @@ bf967aba-0de6-11d0-a285-00aa003049e2 4828CC14-1437-45bc-9B07-AD6F015E5F28 (only in schema version 30 and greater) ce206244-5827-4a86-ba1c-1c0c386c1b64 (only in schema version 45 and greater) 7b8b558a-93a5-4af7-adca-c017e67f1057 (only in schema version 87 and greater) -6.1.1.2.7.56 Send-To -This object is present in AD DS only. -name: Send-To + +dn: CN=Send-To,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: Send-To rightsGuid: ab721a55-1e2f-11d0-9819-00aa0040529b appliesTo: bf967a9c-0de6-11d0-a285-00aa003049e2 -6.1.1.2.7.57 Domain-Password -This object is present in AD DS only. -name: Domain-Password + +dn: CN=Domain-Password,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: Domain-Password rightsGuid: c7407360-20bf-11d0-a768-00aa006e0529 appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9 19195a5a-6da0-11d0-afd3-00c04fd930c9 -6.1.1.2.7.58 General-Information -This object is present in AD DS and AD LDS. -name: General-Information + +dn: CN=General-Information,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: General-Information rightsGuid: 59ba2f42-79a2-11d0-9020-00c04fc2d3cf appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28 bf967aba-0de6-11d0-a285-00aa003049e2 -6.1.1.2.7.59 User-Account-Restrictions -This object is present in AD DS and AD LDS. -name: User-Account-Restrictions + +dn: CN=User-Account-Restrictions,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: User-Account-Restrictions rightsGuid: 4c164200-20c0-11d0-a768-00aa006e0529 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28 @@ -450,28 +560,36 @@ bf967a86-0de6-11d0-a285-00aa003049e2 bf967aba-0de6-11d0-a285-00aa003049e2 ce206244-5827-4a86-ba1c-1c0c386c1b64 (for AD DS only) 7b8b558a-93a5-4af7-adca-c017e67f1057 (only in schema version 54 and greater, for AD DS only) -6.1.1.2.7.60 User-Logon -This object is present in AD DS and AD LDS. -name: User-Logon + +dn: CN=User-Logon,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: User-Logon rightsGuid: 5f202010-79a5-11d0-9020-00c04fc2d4cf appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28 bf967aba-0de6-11d0-a285-00aa003049e2 -6.1.1.2.7.61 Membership -This object is present in AD DS and AD LDS. -name: Membership + +dn: CN=Membership,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: Membership rightsGuid: bc0ac240-79a9-11d0-9020-00c04fc2d4cf appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28 bf967aba-0de6-11d0-a285-00aa003049e2 -6.1.1.2.7.62 Open-Address-Book -This object is present in AD DS only. -name: Open-Address-Book + +dn: CN=Open-Address-Book,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: Open-Address-Book rightsGuid: a1990816-4298-11d1-ade2-00c04fd8d5cd appliesTo: 3e74f60f-3e73-11d1-a9c0-0000f80367c1 -6.1.1.2.7.63 Personal-Information -This object is present in AD DS and AD LDS. -name: Personal-Information + +dn: CN=Personal-Information,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: Personal-Information rightsGuid: 77B5B886-944A-11d1-AEBD-0000F80367C1 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28 @@ -481,115 +599,158 @@ bf967aba-0de6-11d0-a285-00aa003049e2 ce206244-5827-4a86-ba1c-1c0c386c1b64 (for AD DS only) 641e87a4-8326-4771-ba2d-c706df35e35a (only in AD DS schema version 52 and greater) 7b8b558a-93a5-4af7-adca-c017e67f1057 (only in AD DS schema version 87 and greater) -6.1.1.2.7.64 Email-Information -This object is present in AD DS and AD LDS. -name: Email-Information + +dn: CN=Email-Information,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: Email-Information rightsGuid: E45795B2-9455-11d1-AEBD-0000F80367C1 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28 bf967a9c-0de6-11d0-a285-00aa003049e2 bf967aba-0de6-11d0-a285-00aa003049e2 -6.1.1.2.7.65 Web-Information -This object is present in AD DS and AD LDS. -name: Web-Information + +dn: CN=Web-Information,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: Web-Information rightsGuid: E45795B3-9455-11d1-AEBD-0000F80367C1 appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28 5cb41ed0-0e4c-11d0-a286-00aa003049e2 bf967aba-0de6-11d0-a285-00aa003049e2 -6.1.1.2.7.66 DS-Replication-Get-Changes -This object is present in AD DS and AD LDS. -name: DS-Replication-Get-Changes + +dn: CN=DS-Replication-Get-Changes,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: DS-Replication-Get-Changes rightsGuid: 1131f6aa-9c07-11d1-f79f-00c04fc2dcd2 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2 bf967a87-0de6-11d0-a285-00aa003049e2 19195a5b-6da0-11d0-afd3-00c04fd930c9 -6.1.1.2.7.67 DS-Replication-Synchronize -This object is present in AD DS and AD LDS. -name: DS-Replication-Synchronize + +dn: CN=DS-Replication-Synchronize,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: DS-Replication-Synchronize rightsGuid: 1131f6ab-9c07-11d1-f79f-00c04fc2dcd2 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2 bf967a87-0de6-11d0-a285-00aa003049e2 19195a5b-6da0-11d0-afd3-00c04fd930c9 -6.1.1.2.7.68 DS-Replication-Manage-Topology -This object is present in AD DS and AD LDS. -name: DS-Replication-Manage-Topology + +dn: CN=DS-Replication-Manage-Topology,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: DS-Replication-Manage-Topology rightsGuid: 1131f6ac-9c07-11d1-f79f-00c04fc2dcd2 appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2 bf967a87-0de6-11d0-a285-00aa003049e2 19195a5b-6da0-11d0-afd3-00c04fd930c9 -6.1.1.2.7.69 Change-Schema-Master -This object is present in AD DS and AD LDS. -name: Change-Schema-Master + +dn: CN=Change-Schema-Master,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: Change-Schema-Master rightsGuid: e12b56b6-0a95-11d1-adbb-00c04fd8d5cd appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2 -6.1.1.2.7.70 DS-Replication-Get-Changes-In-Filtered-Set -This object is present in AD DS only. -name: DS-Replication-Get-Changes-In-Filtered-Set + +dn: CN=DS-Replication-Get-Changes-In-Filtered-Set,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: DS-Replication-Get-Changes-In-Filtered-Set rightsGuid: 89e95b76-444d-4c62-991a-0facbeda640c appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9 bf967a87-0de6-11d0-a285-00aa003049e2 bf967a8f-0de6-11d0-a285-00aa003049e2 -6.1.1.2.7.71 Run-Protect-Admin-Groups-Task -This object is present in AD DS only. -name: Run-Protect-Admin-Groups-Task + +dn: CN=Run-Protect-Admin-Groups-Task,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: Run-Protect-Admin-Groups-Task rightsGuid: 7726b9d5-a4b4-4288-a6b2-dce952e80a7f appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9 -6.1.1.2.7.72 Manage-Optional-Features -This object is present in AD DS and AD LDS. -name: Manage-Optional-Features + +dn: CN=Manage-Optional-Features,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: Manage-Optional-Features rightsGuid: 7c0e2a7c-a419-48e4-a995-10180aad54dd appliesTo: ef9e60e0-56f7-11d1-a9c6-0000f80367c1 -6.1.1.2.7.73 Read-Only-Replication-Secret-Synchronization -This object is present in AD DS only. -name: Read-Only-Replication-Secret-Synchronization + +dn: CN=Read-Only-Replication-Secret-Synchronization,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: Read-Only-Replication-Secret-Synchronization rightsGuid: 1131f6ae-9c07-11d1-f79f-00c04fc2dcd2 appliesTo bf967a8f-0de6-11d0-a285-00aa003049e2 bf967a87-0de6-11d0-a285-00aa003049e2 19195a5b-6da0-11d0-afd3-00c04fd930c9 -6.1.1.2.7.74 Validated-MS-DS-Additional-DNS-Host-Name -This object is present in AD DS only. -name: Validated-MS-DS-Additional-DNS-Host-Name + +dn: CN=Validated-MS-DS-Additional-DNS-Host-Name,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: Validated-MS-DS-Additional-DNS-Host-Name rightsGuid: 80863791-dbe9-4eb8-837e-7f0ab55d9ac7 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2 -6.1.1.2.7.75 Validated-MS-DS-Behavior-Version -This object is present in AD DS only. -name: Validated-MS-DS-Behavior-Version + +dn: CN=Validated-MS-DS-Behavior-Version,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: Validated-MS-DS-Behavior-Version rightsGuid: d31a8757-2447-4545-8081-3bb610cacbf2 appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed -6.1.1.2.7.76 DS-Clone-Domain-Controller -This object is present in AD DS only. -name: DS-Clone-Domain-Controller + +dn: CN=DS-Clone-Domain-Controller,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: DS-Clone-Domain-Controller rightsGuid: 3e0f7e18-2c7a-4c10-ba82-4d926db99a3e appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9 -6.1.1.2.7.77 Certificate-AutoEnrollment -This object is present in AD DS only. -name: Certificate-AutoEnrollment + +dn: CN=Certificate-AutoEnrollment,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: Certificate-AutoEnrollment rightsGuid: a05b8cc2-17bc-4802-a710-e7c15ab866a2 appliesTo: e5209ca2-3bba-11d2-90cc-00c04fd91ab1 -6.1.1.2.7.78 DS-Read-Partition-Secrets -name: DS-Read-Partition-Secrets + +dn: CN=DS-Read-Partition-Secrets,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: DS-Read-Partition-Secrets rightsGuid: 084c93a2-620d-4879-a836-f0ae47de0e89 appliesTo: 26f11b08-a29d-4869-99bb-ef0b99fd883e -6.1.1.2.7.79 DS-Write-Partition-Secrets -name: DS-Write-Partition-Secrets + +dn: CN=DS-Write-Partition-Secrets,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: DS-Write-Partition-Secrets rightsGuid: 94825a8d-b171-4116-8146-1e34d8f54401 appliesTo: 26f11b08-a29d-4869-99bb-ef0b99fd883e -6.1.1.2.7.80 DS-Set-Owner -name: DS-Set-Owner + +dn: CN=DS-Set-Owner,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: DS-Set-Owner rightsGuid: 4125c71f-7fac-4ff0-bcb7-f09a41325286 appliesTo: 26f11b08-a29d-4869-99bb-ef0b99fd883e -6.1.1.2.7.81 DS-Bypass-Quota -name: DS-Bypass-Quota + +dn: CN=DS-Bypass-Quota,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: DS-Bypass-Quota rightsGuid: 88a9933e-e5c8-4f2a-9dd7-2527416b8092 appliesTo: 26f11b08-a29d-4869-99bb-ef0b99fd883e -6.1.1.2.7.82 DS-Validated-Write-Computer -This object is present in AD DS only. -name: DS-Validated-Write-Computer + +dn: CN=DS-Validated-Write-Computer,CN=Extended-Rights,${CONFIGDN} +objectClass: top +objectClass: controlAccessRight +displayName: DS-Validated-Write-Computer rightsGuid: 9b026da6-0d3c-465c-8bee-5199d7165cba appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2 + |