summaryrefslogtreecommitdiff
path: root/source4
diff options
context:
space:
mode:
Diffstat (limited to 'source4')
-rw-r--r--source4/setup/display_specifiers.ldif369
-rw-r--r--source4/setup/provision.ldif5
-rw-r--r--source4/setup/provision_configuration.ldif881
3 files changed, 1255 insertions, 0 deletions
diff --git a/source4/setup/display_specifiers.ldif b/source4/setup/display_specifiers.ldif
index 7d6633244d..9ec3abcbc7 100644
--- a/source4/setup/display_specifiers.ldif
+++ b/source4/setup/display_specifiers.ldif
@@ -11,6 +11,7 @@ dn: CN=user-Display,CN=409,CN=DisplaySpecifiers,${CONFIGDN}
objectClass: top
objectClass: displaySpecifier
cn: user-Display
+classDisplayName: User
contextMenu: 0,{62AE1F9A-126A-11D0-A14B-0800361B1103}
adminPropertyPages: 9,{FA3E1D55-16DF-446d-872E-BD04D4F39C93}
adminPropertyPages: 8,{0910dd01-df8c-11d1-ae27-00c04fa35813}
@@ -24,11 +25,67 @@ shellPropertyPages: 2,{dde2c5e9-c8ae-11d0-bcdb-00c04fd8d5b6}
shellPropertyPages: 1,{f5d121ed-c8ac-11d0-bcdb-00c04fd8d5b6}
adminContextMenu: 1,{08eb4fa6-6ffd-11d1-b0e0-00c04fd8dca6}
adminMultiselectPropertyPages: 1,{50d30564-9911-11d1-b9af-00c04fd8d5b0}
+attributeDisplayNames: assistant,Assistant
+attributeDisplayNames: c,Country Abbreviation
+attributeDisplayNames: cn,Name
+attributeDisplayNames: co,Country
+attributeDisplayNames: comment,Comment
+attributeDisplayNames: company,Company
+attributeDisplayNames: department,Department
+attributeDisplayNames: description,Description
+attributeDisplayNames: directReports,Direct Reports
+attributeDisplayNames: displayName,Display Name
+attributeDisplayNames: distinguishedName,X500 Distinguished Name
+attributeDisplayNames: division,Division
+attributeDisplayNames: employeeID,Employee ID
+attributeDisplayNames: facsimileTelephoneNumber,Fax Number
+attributeDisplayNames: generationQualifier,Generational Suffix
+attributeDisplayNames: givenName,First Name
+attributeDisplayNames: homeDirectory,Home Folder
+attributeDisplayNames: homeDrive,Home Drive
+attributeDisplayNames: homePhone,Home Phone
+attributeDisplayNames: homePostalAddress,Home Address
+attributeDisplayNames: info,Notes
+attributeDisplayNames: initials,Initials
+attributeDisplayNames: internationalISDNNumber,International ISDN Number (Others)
+attributeDisplayNames: ipPhone,IP Phone Number
+attributeDisplayNames: l,City
+attributeDisplayNames: mail,E-Mail Address
+attributeDisplayNames: manager,Manager
+attributeDisplayNames: memberOf,Member Of
+attributeDisplayNames: middleName,Middle Name
+attributeDisplayNames: mobile,Mobile Number
+attributeDisplayNames: otherFacsimileTelephoneNumber,Fax Number (Others)
+attributeDisplayNames: otherHomePhone,Home Phone Number (Others)
+attributeDisplayNames: otherIpPhone,IP Phone Number (Others)
+attributeDisplayNames: otherMailbox,E-Mail Address (Others)
+attributeDisplayNames: otherMobile,Mobile Number (Others)
+attributeDisplayNames: otherPager,Pager Number (Others)
+attributeDisplayNames: otherTelephone,Phone Number (Others)
+attributeDisplayNames: pager,Pager Number
+attributeDisplayNames: personalTitle,Title
+attributeDisplayNames: physicalDeliveryOfficeName,Office Location
+attributeDisplayNames: postalCode,ZIP/Postal Code
+attributeDisplayNames: postOfficeBox,Post Office Box
+attributeDisplayNames: primaryInternationalISDNNumber,International ISDN Number
+attributeDisplayNames: primaryTelexNumber,Telex Number
+attributeDisplayNames: samAccountName,Logon Name (pre-Windows 2000)
+attributeDisplayNames: sn,Last Name
+attributeDisplayNames: streetAddress,Street Address
+attributeDisplayNames: st,State/Province
+attributeDisplayNames: telephoneNumber,Telephone Number
+attributeDisplayNames: telexNumber,Telex Number (Others)
+attributeDisplayNames: title,Job Title
+attributeDisplayNames: url,Web Page Address (Others)
+attributeDisplayNames: userPrincipalName,Logon Name
+attributeDisplayNames: userWorkstations,Logon Workstations
+attributeDisplayNames: wWWHomePage,Web Page Address
dn: CN=group-Display,CN=409,CN=DisplaySpecifiers,${CONFIGDN}
objectClass: top
objectClass: displaySpecifier
cn: group-Display
+classDisplayName: Group
contextMenu: 0,{62AE1F9A-126A-11D0-A14B-0800361B1103}
adminPropertyPages: 4,{4E40F770-369C-11d0-8922-00A024AB2DBB}
adminPropertyPages: 3,{6dfe6488-a212-11d0-bcd5-00c04fd8d5b6}
@@ -37,11 +94,24 @@ adminPropertyPages: 1,{6dfe6489-a212-11d0-bcd5-00c04fd8d5b6}
shellPropertyPages: 2,{dde2c5e9-c8ae-11d0-bcdb-00c04fd8d5b6}
shellPropertyPages: 1,{f5d121ee-c8ac-11d0-bcdb-00c04fd8d5b6}
adminContextMenu: 1,{08eb4fa6-6ffd-11d1-b0e0-00c04fd8dca6}
+attributeDisplayNames: c,Country Abbreviation
+attributeDisplayNames: cn,Name
+attributeDisplayNames: description,Description
+attributeDisplayNames: distinguishedName,X500 Distinguished Name
+attributeDisplayNames: info,Notes
+attributeDisplayNames: l,City
+attributeDisplayNames: managedBy,Managed By
+attributeDisplayNames: member,Members
+attributeDisplayNames: physicalDeliveryOfficeName,Office Location
+attributeDisplayNames: samAccountName,Group name (pre-Windows 2000)
+attributeDisplayNames: url,Web Page Address (Others)
+attributeDisplayNames: wWWHomePage,Web Page Address
dn: CN=domainDNS-Display,CN=409,CN=DisplaySpecifiers,${CONFIGDN}
objectClass: top
objectClass: displaySpecifier
cn: domainDNS-Display
+classDisplayName: Domain
name: domainDNS-Display
adminPropertyPages: 5,{4E40F770-369C-11d0-8922-00A024AB2DBB}
adminPropertyPages: 4,{6dfe6488-a212-11d0-bcd5-00c04fd8d5b6}
@@ -51,11 +121,14 @@ shellPropertyPages: 2,{dde2c5e9-c8ae-11d0-bcdb-00c04fd8d5b6}
shellPropertyPages: 1,{f5d121ef-c8ac-11d0-bcdb-00c04fd8d5b6}
adminContextMenu: 2,{08eb4fa6-6ffd-11d1-b0e0-00c04fd8dca6}
adminContextMenu: 1,{6BA3F852-23C6-11D1-B91F-00A0C9A06D2D}
+attributeDisplayNames: dc,Name
+attributeDisplayNames: description,Description
dn: CN=computer-Display,CN=409,CN=DisplaySpecifiers,${CONFIGDN}
objectClass: top
objectClass: displaySpecifier
cn: computer-Display
+classDisplayName: Computer
contextMenu: 0,{62AE1F9A-126A-11D0-A14B-0800361B1103}
adminPropertyPages: 10,{0F65B1BF-740F-11d1-BBE6-0060081692B3}
adminPropertyPages: 7,{B52C1E50-1DD2-11D1-BC43-00C04FC31FD3}
@@ -68,11 +141,18 @@ shellPropertyPages: 2,{dde2c5e9-c8ae-11d0-bcdb-00c04fd8d5b6}
shellPropertyPages: 1,{f5d121f4-c8ac-11d0-bcdb-00c04fd8d5b6}
adminContextMenu: 1,{08eb4fa6-6ffd-11d1-b0e0-00c04fd8dca6}
createWizardExt: 1,{D6D8C25A-4E83-11d2-8424-00C04FA372D4}
+attributeDisplayNames: cn,Name
+attributeDisplayNames: description,Description
+attributeDisplayNames: managedBy,Managed By
+attributeDisplayNames: operatingSystem,Operating System
+attributeDisplayNames: operatingSystemVersion,Operating System Version
+attributeDisplayNames: samAccountName,Computer name (pre-Windows 2000)
dn: CN=organizationalUnit-Display,CN=409,CN=DisplaySpecifiers,${CONFIGDN}
objectClass: top
objectClass: displaySpecifier
cn: organizationalUnit-Display
+classDisplayName: Organizational Unit
contextMenu: 0,{62AE1F9A-126A-11D0-A14B-0800361B1103}
adminPropertyPages: 6,{FA3E1D55-16DF-446d-872E-BD04D4F39C93}
adminPropertyPages: 5,{4E40F770-369C-11d0-8922-00A024AB2DBB}
@@ -83,11 +163,15 @@ shellPropertyPages: 2,{dde2c5e9-c8ae-11d0-bcdb-00c04fd8d5b6}
shellPropertyPages: 1,{f2c3faae-c8ac-11d0-bcdb-00c04fd8d5b6}
adminContextMenu: 2,{08eb4fa6-6ffd-11d1-b0e0-00c04fd8dca6}
adminContextMenu: 1,{6BA3F852-23C6-11D1-B91F-00A0C9A06D2D}
+attributeDisplayNames: description,Description
+attributeDisplayNames: managedBy,Managed By
+attributeDisplayNames: ou,Name
dn: CN=container-Display,CN=409,CN=DisplaySpecifiers,${CONFIGDN}
objectClass: top
objectClass: displaySpecifier
cn: container-Display
+classDisplayName: Container
contextMenu: 0,{62AE1F9A-126A-11D0-A14B-0800361B1103}
adminPropertyPages: 3,{4E40F770-369C-11d0-8922-00A024AB2DBB}
adminPropertyPages: 2,{6dfe6488-a212-11d0-bcd5-00c04fd8d5b6}
@@ -97,6 +181,289 @@ adminContextMenu: 4,{AB790AA1-CDC1-478a-9351-B2E05CFCAD09}
adminContextMenu: 3,{EEBD2F15-87EE-4F93-856F-6AD7E31787B3}
adminContextMenu: 2,{08eb4fa6-6ffd-11d1-b0e0-00c04fd8dca6}
adminContextMenu: 1,{6BA3F852-23C6-11D1-B91F-00A0C9A06D2D}
+attributeDisplayNames: cn,Name
+attributeDisplayNames: description,Description
+
+dn: CN=contact-Display,CN=409,CN=DisplaySpecifiers,${CONFIGDN}
+objectClass: top
+objectClass: displaySpecifier
+cn: contact-Display
+classDisplayName: Contact
+contextMenu: 0,{62AE1F9A-126A-11D0-A14B-0800361B1103}
+adminPropertyPages: 4,{4E40F770-369C-11d0-8922-00A024AB2DBB}
+adminPropertyPages: 3,{6dfe6488-a212-11d0-bcd5-00c04fd8d5b6}
+adminPropertyPages: 1,{c5f1645c-c8c9-11d0-bcdb-00c04fd8d5b6}
+shellPropertyPages: 2,{dde2c5e9-c8ae-11d0-bcdb-00c04fd8d5b6}
+shellPropertyPages: 1,{f5d121f0-c8ac-11d0-bcdb-00c04fd8d5b6}
+adminContextMenu: 1,{08eb4fa6-6ffd-11d1-b0e0-00c04fd8dca6}
+attributeDisplayNames: assistant,Assistant
+attributeDisplayNames: c,Country Abbreviation
+attributeDisplayNames: cn,Name
+attributeDisplayNames: co,Country
+attributeDisplayNames: comment,Comment
+attributeDisplayNames: company,Company
+attributeDisplayNames: department,Department
+attributeDisplayNames: description,Description
+attributeDisplayNames: directReports,Direct Reports
+attributeDisplayNames: displayName,Display Name
+attributeDisplayNames: distinguishedName,X500 Distinguished Name
+attributeDisplayNames: division,Division
+attributeDisplayNames: employeeID,Employee ID
+attributeDisplayNames: facsimileTelephoneNumber,Fax Number
+attributeDisplayNames: generationQualifier,Generational Suffix
+attributeDisplayNames: givenName,First Name
+attributeDisplayNames: homePhone,Home Phone
+attributeDisplayNames: homePostalAddress,Home Address
+attributeDisplayNames: info,Notes
+attributeDisplayNames: initials,Initials
+attributeDisplayNames: internationalISDNNumber,International ISDN Number (Others)
+attributeDisplayNames: ipPhone,IP Phone Number
+attributeDisplayNames: l,City
+attributeDisplayNames: mail,E-Mail Address
+attributeDisplayNames: manager,Manager
+attributeDisplayNames: memberOf,Member Of
+attributeDisplayNames: middleName,Middle Name
+attributeDisplayNames: mobile,Mobile Number
+attributeDisplayNames: otherFacsimileTelephoneNumber,Fax Number (Others)
+attributeDisplayNames: otherHomePhone,Home Phone Number (Others)
+attributeDisplayNames: otherIpPhone,IP Phone Number (Others)
+attributeDisplayNames: otherMailbox,E-Mail Address (Others)
+attributeDisplayNames: otherMobile,Mobile Number (Others)
+attributeDisplayNames: otherPager,Pager Number (Others)
+attributeDisplayNames: otherTelephone,Phone Number (Others)
+attributeDisplayNames: pager,Pager Number
+attributeDisplayNames: personalTitle,Title
+attributeDisplayNames: physicalDeliveryOfficeName,Office Location
+attributeDisplayNames: postalCode,ZIP/Postal Code
+attributeDisplayNames: postOfficeBox,Post Office Box
+attributeDisplayNames: primaryInternationalISDNNumber,International ISDN Number
+attributeDisplayNames: primaryTelexNumber,Telex Number
+attributeDisplayNames: sn,Last Name
+attributeDisplayNames: streetAddress,Street Address
+attributeDisplayNames: st,State/Province
+attributeDisplayNames: telephoneNumber,Telephone Number
+attributeDisplayNames: telexNumber,Telex Number (Others)
+attributeDisplayNames: title,Job Title
+attributeDisplayNames: url,Web Page Address (Others)
+attributeDisplayNames: wWWHomePage,Web Page Address
+
+dn: CN=foreignSecurityPrincipal-Display,CN=409,CN=DisplaySpecifiers,${CONFIGDN}
+objectClass: top
+objectClass: displaySpecifier
+cn: foreignSecurityPrincipal-Display
+classDisplayName: Foreign Security Principal
+adminPropertyPages: 3,{4E40F770-369C-11d0-8922-00A024AB2DBB}
+adminPropertyPages: 2,{6dfe6488-a212-11d0-bcd5-00c04fd8d5b6}
+adminPropertyPages: 1,{6dfe6486-a212-11d0-bcd5-00c04fd8d5b6}
+adminContextMenu: 1,{08eb4fa6-6ffd-11d1-b0e0-00c04fd8dca6}
+attributeDisplayNames: cn,Name
+attributeDisplayNames: description,Description
+
+dn: CN=inetOrgPerson-Display,CN=409,CN=DisplaySpecifiers,${CONFIGDN}
+objectClass: top
+objectClass: displaySpecifier
+cn: inetOrgPerson-Display
+classDisplayName: InetOrgPerson
+contextMenu: 0,{62AE1F9A-126A-11D0-A14B-0800361B1103}
+adminPropertyPages: 1,{6dfe6485-a212-11d0-bcd5-00c04fd8d5b6}
+adminPropertyPages: 3,{B52C1E50-1DD2-11D1-BC43-00C04FC31FD3}
+adminPropertyPages: 4,{FD57D295-4FD9-11D1-854E-00C04FC31FD3}
+adminPropertyPages: 5,{6dfe6488-a212-11d0-bcd5-00c04fd8d5b6}
+adminPropertyPages: 6,{4E40F770-369C-11d0-8922-00A024AB2DBB}
+adminPropertyPages: 7,{8c5b1b50-d46e-11d1-8091-00a024c48131}
+adminPropertyPages: 8,{0910dd01-df8c-11d1-ae27-00c04fa35813}
+adminPropertyPages: 9,{FA3E1D55-16DF-446D-872E-BD04D4F39C93}
+shellPropertyPages: 1,{f5d121ed-c8ac-11d0-bcdb-00c04fd8d5b6}
+shellPropertyPages: 2,{dde2c5e9-c8ae-11d0-bcdb-00c04fd8d5b6}
+adminContextMenu: 1,{08eb4fa6-6ffd-11d1-b0e0-00c04fd8dca6}
+attributeDisplayNames: assistant,Assistant
+attributeDisplayNames: cn,Name
+attributeDisplayNames: c,Country Abbreviation
+attributeDisplayNames: co,Country
+attributeDisplayNames: comment,Comment
+attributeDisplayNames: company,Company
+attributeDisplayNames: department,Department
+attributeDisplayNames: description,Description
+attributeDisplayNames: directReports,Direct Reports
+attributeDisplayNames: distinguishedName,X500 Distinguished Name
+attributeDisplayNames: division,Division
+attributeDisplayNames: employeeID,Employee ID
+attributeDisplayNames: facsimileTelephoneNumber,Fax Number
+attributeDisplayNames: generationQualifier,Generational Suffix
+attributeDisplayNames: givenName,First Name
+attributeDisplayNames: homeDirectory,Home Folder
+attributeDisplayNames: homeDrive,Home Drive
+attributeDisplayNames: homePhone,Home Phone
+attributeDisplayNames: homePostalAddress,Home Address
+attributeDisplayNames: initials,Initials
+attributeDisplayNames: internationalISDNNumber,International ISDN Number (Others)
+attributeDisplayNames: ipPhone,IP Phone Number
+attributeDisplayNames: l,City
+attributeDisplayNames: mail,E-Mail Address
+attributeDisplayNames: manager,Manager
+attributeDisplayNames: memberOf,Member Of
+attributeDisplayNames: middleName,Middle Name
+attributeDisplayNames: mobile,Mobile Number
+attributeDisplayNames: info,Notes
+attributeDisplayNames: otherFacsimileTelephoneNumber,Fax Number (Others)
+attributeDisplayNames: otherHomePhone,Home Phone (Others)
+attributeDisplayNames: otherIpPhone,IP Phone Number (Others)
+attributeDisplayNames: otherMailbox,E-Mail Address (Others)
+attributeDisplayNames: otherMobile,Mobile Number (Others)
+attributeDisplayNames: otherPager,Pager Number (Others)
+attributeDisplayNames: otherTelephone,Phone Number (Others)
+attributeDisplayNames: pager,Pager Number
+attributeDisplayNames: personalTitle,Title
+attributeDisplayNames: physicalDeliveryOfficeName,Office Location
+attributeDisplayNames: postalCode,ZIP/Postal Code
+attributeDisplayNames: postOfficeBox,Post Office Box
+attributeDisplayNames: primaryInternationalISDNNumber,International ISDN Number
+attributeDisplayNames: primaryTelexNumber,Telex Number
+attributeDisplayNames: samAccountName,Logon Name (pre-Windows 2000)
+attributeDisplayNames: sn,Last Name
+attributeDisplayNames: st,State/Province
+attributeDisplayNames: streetAddress,Street Address
+attributeDisplayNames: telephoneNumber,Telephone Number
+attributeDisplayNames: telexNumber,Telex Number (Others)
+attributeDisplayNames: title,Job Title
+attributeDisplayNames: url,Web Page Address (Others)
+attributeDisplayNames: displayName,Display Name
+attributeDisplayNames: userWorkstations,Logon Workstations
+attributeDisplayNames: userPrincipalName,Logon Name
+attributeDisplayNames: wWWHomePage,Web Page Address
+adminMultiselectPropertyPages: 1,{50D30564-9911-11D1-B9AF-00C04FD8D5B0}
+
+dn: CN=msMQ-Custom-Recipient-Display,CN=409,CN=DisplaySpecifiers,${CONFIGDN}
+objectClass: top
+objectClass: displaySpecifier
+cn: msMQ-Custom-Recipient-Display
+classDisplayName: MSMQ Queue Alias
+creationWizard: {9e4ab987-3cca-4de0-ae36-3d163df44d36}
+adminPropertyPages: 2,{4E40F770-369C-11d0-8922-00A024AB2DBB}
+adminPropertyPages: 1,{9e4ab987-3cca-4de0-ae36-3d163df44d36}
+adminContextMenu: 1,{9e4ab987-3cca-4de0-ae36-3d163df44d36}
+attributeDisplayNames: cn,Name
+attributeDisplayNames: description,Description
+attributeDisplayNames: msMQ-Recipient-FormatName,Format Name
+
+dn: CN=msMQ-Group-Display,CN=409,CN=DisplaySpecifiers,${CONFIGDN}
+objectClass: top
+objectClass: displaySpecifier
+cn: msMQ-Group-Display
+classDisplayName: MSMQ Group
+adminPropertyPages: 1,{7e93454a-976a-4228-90f1-f7648010b8e6}
+adminContextMenu: 1,{7e93454a-976a-4228-90f1-f7648010b8e6}
+attributeDisplayNames: cn,Name
+attributeDisplayNames: description,Description
+attributeDisplayNames: member,Member Queues
+
+dn: CN=pKICertificateTemplate-Display,CN=409,CN=DisplaySpecifiers,${CONFIGDN}
+objectClass: top
+objectClass: displaySpecifier
+cn: pKICertificateTemplate-Display
+classDisplayName: Certificate Template
+contextMenu: 0,{11BDCE06-D55C-44e9-BC0B-8655F89E8CC5}
+adminPropertyPages: 2,{6dfe6488-a212-11d0-bcd5-00c04fd8d5b6}
+adminPropertyPages: 1,{11BDCE06-D55C-44e9-BC0B-8655F89E8CC5}
+shellPropertyPages: 1,{11BDCE06-D55C-44e9-BC0B-8655F89E8CC5}
+adminContextMenu: 0,{11BDCE06-D55C-44e9-BC0B-8655F89E8CC5}
+attributeDisplayNames: cn,Name
+attributeDisplayNames: description,Description
+
+dn: CN=printQueue-Display,CN=409,CN=DisplaySpecifiers,${CONFIGDN}
+objectClass: top
+objectClass: displaySpecifier
+cn: printQueue-Display
+classDisplayName: Printer
+contextMenu: 0,{62AE1F9A-126A-11D0-A14B-0800361B1103}
+adminPropertyPages: 3,{4E40F770-369C-11d0-8922-00A024AB2DBB}
+adminPropertyPages: 2,{6dfe6488-a212-11d0-bcd5-00c04fd8d5b6}
+adminPropertyPages: 1,{6dfe6493-a212-11d0-bcd5-00c04fd8d5b6}
+shellPropertyPages: 2,{dde2c5e9-c8ae-11d0-bcdb-00c04fd8d5b6}
+shellPropertyPages: 1,{f5d121f5-c8ac-11d0-bcdb-00c04fd8d5b6}
+adminContextMenu: 1,{08eb4fa6-6ffd-11d1-b0e0-00c04fd8dca6}
+attributeDisplayNames: assetNumber,Asset Number
+attributeDisplayNames: cn,Directory Service Name
+attributeDisplayNames: contactName,Contact
+attributeDisplayNames: description,Comment
+attributeDisplayNames: driverName,Model
+attributeDisplayNames: location,Location
+attributeDisplayNames: portName,Port
+attributeDisplayNames: printBinNames,Input Trays
+attributeDisplayNames: printCollate,Supports Collation
+attributeDisplayNames: printColor,Supports Color Printing
+attributeDisplayNames: printDuplexSupported,Supports Double-sided Printing
+attributeDisplayNames: printerName,Name
+attributeDisplayNames: printLanguage,Printer Language
+attributeDisplayNames: printMaxResolutionSupported,Maximum Resolution
+attributeDisplayNames: printMediaReady,Paper Available
+attributeDisplayNames: printMediaSupported,Paper Types Supported
+attributeDisplayNames: printMemory,Installed Memory
+attributeDisplayNames: printOwner,Owner Name
+attributeDisplayNames: printPagesPerMinute,Pages per Minute
+attributeDisplayNames: printRate,Speed
+attributeDisplayNames: printRateUnit,Speed Units
+attributeDisplayNames: printShareName,Share Name
+attributeDisplayNames: printStaplingSupported,Supports Stapling
+attributeDisplayNames: serverName,Server Name
+attributeDisplayNames: uNCName,Network Name
+attributeDisplayNames: url,Web Page Address
+attributeDisplayNames: versionNumber,Object Version
+
+dn: CN=remoteStorageServicePoint-Display,CN=409,CN=DisplaySpecifiers,${CONFIGDN}
+objectClass: top
+objectClass: displaySpecifier
+cn: remoteStorageServicePoint-Display
+classDisplayName: Remote Storage Service
+adminPropertyPages: 3,{4E40F770-369C-11d0-8922-00A024AB2DBB}
+adminPropertyPages: 2,{6dfe6488-a212-11d0-bcd5-00c04fd8d5b6}
+adminPropertyPages: 1,{6384e23e-736d-11d1-bd0d-00c04fd8d5b6}
+adminContextMenu: 0,&Manage...,RsAdmin.msc
+attributeDisplayNames: cn,Name
+
+dn: CN=rpcContainer-Display,CN=409,CN=DisplaySpecifiers,${CONFIGDN}
+objectClass: top
+objectClass: displaySpecifier
+cn: rpcContainer-Display
+classDisplayName: RPC Services
+contextMenu: 0,{62AE1F9A-126A-11D0-A14B-0800361B1103}
+adminPropertyPages: 3,{4E40F770-369C-11d0-8922-00A024AB2DBB}
+adminPropertyPages: 2,{6dfe6488-a212-11d0-bcd5-00c04fd8d5b6}
+adminPropertyPages: 1,{50d30572-9911-11d1-b9af-00c04fd8d5b0}
+adminContextMenu: 1,{08eb4fa6-6ffd-11d1-b0e0-00c04fd8dca6}
+attributeDisplayNames: cn,Name
+attributeDisplayNames: description,Description
+
+dn: CN=trustedDomain-Display,CN=409,CN=DisplaySpecifiers,${CONFIGDN}
+objectClass: top
+objectClass: displaySpecifier
+cn: trustedDomain-Display
+classDisplayName: Trusted Domain
+adminPropertyPages: 3,{4E40F770-369C-11d0-8922-00A024AB2DBB}
+adminPropertyPages: 2,{6dfe6488-a212-11d0-bcd5-00c04fd8d5b6}
+adminPropertyPages: 1,{9da6fd67-c63b-11d0-b94d-00c04fd8d5b0}
+adminContextMenu: 1,{08eb4fa6-6ffd-11d1-b0e0-00c04fd8dca6}
+attributeDisplayNames: cn,Name
+attributeDisplayNames: description,Description
+
+dn: CN=volume-Display,CN=409,CN=DisplaySpecifiers,${CONFIGDN}
+objectClass: top
+objectClass: displaySpecifier
+cn: volume-Display
+classDisplayName: Shared Folder
+contextMenu: 0,{62AE1F9A-126A-11D0-A14B-0800361B1103}
+adminPropertyPages: 5,{4E40F770-369C-11d0-8922-00A024AB2DBB}
+adminPropertyPages: 4,{6dfe6488-a212-11d0-bcd5-00c04fd8d5b6}
+adminPropertyPages: 3,{6dfe648b-a212-11d0-bcd5-00c04fd8d5b6}
+adminPropertyPages: 1,{6dfe6490-a212-11d0-bcd5-00c04fd8d5b6}
+shellPropertyPages: 2,{dde2c5e9-c8ae-11d0-bcdb-00c04fd8d5b6}
+shellPropertyPages: 1,{f5d121f3-c8ac-11d0-bcdb-00c04fd8d5b6}
+adminContextMenu: 1,{08eb4fa6-6ffd-11d1-b0e0-00c04fd8dca6}
+attributeDisplayNames: cn,Name
+attributeDisplayNames: description,Description
+attributeDisplayNames: managedBy,Managed By
+attributeDisplayNames: keywords,Keywords
+attributeDisplayNames: uNCName,Network Path
dn: CN=default-Display,CN=409,CN=DisplaySpecifiers,${CONFIGDN}
objectClass: top
@@ -108,4 +475,6 @@ adminPropertyPages: 1,{6384e23e-736d-11d1-bd0d-00c04fd8d5b6}
shellPropertyPages: 1,{f2c3faae-c8ac-11d0-bcdb-00c04fd8d5b6}
adminContextMenu: 0,{08eb4fa6-6ffd-11d1-b0e0-00c04fd8dca6}
adminMultiselectPropertyPages: 1,{50d30563-9911-11d1-b9af-00c04fd8d5b0}
+attributeDisplayNames: cn,Name
+attributeDisplayNames: description,Description
diff --git a/source4/setup/provision.ldif b/source4/setup/provision.ldif
index 2f734e83b2..1afe72f6e2 100644
--- a/source4/setup/provision.ldif
+++ b/source4/setup/provision.ldif
@@ -82,3 +82,8 @@ dn: CN=IP Security,CN=System,${DOMAINDN}
objectClass: top
objectClass: container
+dn: CN=ComPartitionSets,CN=System,${DOMAINDN}
+objectClass: top
+objectClass: container
+systemFlags: -1946157056
+
diff --git a/source4/setup/provision_configuration.ldif b/source4/setup/provision_configuration.ldif
index 2a7357d7ad..63b807ba4a 100644
--- a/source4/setup/provision_configuration.ldif
+++ b/source4/setup/provision_configuration.ldif
@@ -92,3 +92,884 @@ lDAPAdminLimits: MaxConnIdleTime=900
lDAPAdminLimits: InitRecvTimeout=120
lDAPAdminLimits: MaxConnections=5000
+dn: CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: container
+cn: Extended-Rights
+instanceType: 4
+showInAdvancedViewOnly: TRUE
+systemFlags: -2147483648
+objectCategory: CN=Container,CN=Schema,${CONFIGDN}
+
+dn: CN=Change-Rid-Master,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: Change-Rid-Master
+instanceType: 4
+displayName: Change Rid Master
+showInAdvancedViewOnly: TRUE
+rightsGuid: d58d5f36-0a98-11d1-adbb-00c04fd8d5cd
+appliesTo: 6617188d-8f3c-11d0-afda-00c04fd930c9
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 29
+validAccesses: 256
+
+dn: CN=Do-Garbage-Collection,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: Do-Garbage-Collection
+instanceType: 4
+displayName: Do Garbage Collection
+showInAdvancedViewOnly: TRUE
+rightsGuid: fec364e0-0a98-11d1-adbb-00c04fd8d5cd
+appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 31
+validAccesses: 256
+
+dn: CN=Recalculate-Hierarchy,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: Recalculate-Hierarchy
+instanceType: 4
+displayName: Recalculate Hierarchy
+showInAdvancedViewOnly: TRUE
+rightsGuid: 0bc1554e-0a99-11d1-adbb-00c04fd8d5cd
+appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 32
+validAccesses: 256
+
+dn: CN=Allocate-Rids,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: Allocate-Rids
+instanceType: 4
+displayName: Allocate Rids
+showInAdvancedViewOnly: TRUE
+rightsGuid: 1abd7cf8-0a99-11d1-adbb-00c04fd8d5cd
+appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 33
+validAccesses: 256
+
+dn: CN=Change-PDC,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: Change-PDC
+instanceType: 4
+displayName: Change PDC
+showInAdvancedViewOnly: TRUE
+rightsGuid: bae50096-4752-11d1-9052-00c04fc2d4cf
+appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 34
+validAccesses: 256
+
+dn: CN=Add-GUID,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: Add-GUID
+instanceType: 4
+displayName: Add GUID
+showInAdvancedViewOnly: TRUE
+rightsGuid: 440820ad-65b4-11d1-a3da-0000f875ae0d
+appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 35
+validAccesses: 256
+
+dn: CN=Change-Domain-Master,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: Change-Domain-Master
+instanceType: 4
+displayName: Change Domain Master
+showInAdvancedViewOnly: TRUE
+rightsGuid: 014bf69c-7b3b-11d1-85f6-08002be74fab
+appliesTo: ef9e60e0-56f7-11d1-a9c6-0000f80367c1
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 36
+validAccesses: 256
+
+dn: CN=Public-Information,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: Public-Information
+instanceType: 4
+displayName: Public Information
+showInAdvancedViewOnly: TRUE
+rightsGuid: e48d0154-bcf8-11d1-8702-00c04fb96050
+appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
+appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
+appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 37
+validAccesses: 48
+
+dn: CN=msmq-Receive-Dead-Letter,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: msmq-Receive-Dead-Letter
+instanceType: 4
+displayName: Receive Dead Letter
+showInAdvancedViewOnly: TRUE
+rightsGuid: 4b6e08c0-df3c-11d1-9c86-006008764d0e
+appliesTo: 9a0dc344-c100-11d1-bbc5-0080c76670c0
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 38
+validAccesses: 256
+
+dn: CN=msmq-Peek-Dead-Letter,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: msmq-Peek-Dead-Letter
+instanceType: 4
+displayName: Peek Dead Letter
+showInAdvancedViewOnly: TRUE
+rightsGuid: 4b6e08c1-df3c-11d1-9c86-006008764d0e
+appliesTo: 9a0dc344-c100-11d1-bbc5-0080c76670c0
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 39
+validAccesses: 256
+
+dn: CN=msmq-Receive-computer-Journal,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: msmq-Receive-computer-Journal
+instanceType: 4
+displayName: Receive Computer Journal
+showInAdvancedViewOnly: TRUE
+rightsGuid: 4b6e08c2-df3c-11d1-9c86-006008764d0e
+appliesTo: 9a0dc344-c100-11d1-bbc5-0080c76670c0
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 40
+validAccesses: 256
+
+dn: CN=msmq-Peek-computer-Journal,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: msmq-Peek-computer-Journal
+instanceType: 4
+displayName: Peek Computer Journal
+showInAdvancedViewOnly: TRUE
+rightsGuid: 4b6e08c3-df3c-11d1-9c86-006008764d0e
+appliesTo: 9a0dc344-c100-11d1-bbc5-0080c76670c0
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 41
+validAccesses: 256
+
+dn: CN=msmq-Receive,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: msmq-Receive
+instanceType: 4
+displayName: Receive Message
+showInAdvancedViewOnly: TRUE
+rightsGuid: 06bd3200-df3e-11d1-9c86-006008764d0e
+appliesTo: 9a0dc343-c100-11d1-bbc5-0080c76670c0
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 42
+validAccesses: 256
+
+dn: CN=msmq-Peek,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: msmq-Peek
+instanceType: 4
+displayName: Peek Message
+showInAdvancedViewOnly: TRUE
+rightsGuid: 06bd3201-df3e-11d1-9c86-006008764d0e
+appliesTo: 9a0dc343-c100-11d1-bbc5-0080c76670c0
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 43
+validAccesses: 256
+
+dn: CN=msmq-Send,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: msmq-Send
+instanceType: 4
+displayName: Send Message
+showInAdvancedViewOnly: TRUE
+rightsGuid: 06bd3202-df3e-11d1-9c86-006008764d0e
+appliesTo: 46b27aac-aafa-4ffb-b773-e5bf621ee87b
+appliesTo: 9a0dc343-c100-11d1-bbc5-0080c76670c0
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 44
+validAccesses: 256
+
+dn: CN=msmq-Receive-journal,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: msmq-Receive-journal
+instanceType: 4
+displayName: Receive Journal
+showInAdvancedViewOnly: TRUE
+rightsGuid: 06bd3203-df3e-11d1-9c86-006008764d0e
+appliesTo: 9a0dc343-c100-11d1-bbc5-0080c76670c0
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 45
+validAccesses: 256
+
+dn: CN=msmq-Open-Connector,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: msmq-Open-Connector
+instanceType: 4
+displayName: Open Connector Queue
+showInAdvancedViewOnly: TRUE
+rightsGuid: b4e60130-df3f-11d1-9c86-006008764d0e
+appliesTo: bf967ab3-0de6-11d0-a285-00aa003049e2
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 46
+validAccesses: 256
+
+dn: CN=Apply-Group-Policy,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: Apply-Group-Policy
+instanceType: 4
+displayName: Apply Group Policy
+showInAdvancedViewOnly: TRUE
+rightsGuid: edacfd8f-ffb3-11d1-b41d-00a0c968f939
+appliesTo: f30e3bc2-9ff0-11d1-b603-0000f80367c1
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 47
+validAccesses: 256
+
+dn: CN=RAS-Information,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: RAS-Information
+instanceType: 4
+displayName: Remote Access Information
+showInAdvancedViewOnly: TRUE
+rightsGuid: 037088f8-0ae1-11d2-b422-00a0c968f939
+appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
+appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 48
+validAccesses: 48
+
+dn: CN=DS-Install-Replica,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: DS-Install-Replica
+instanceType: 4
+displayName: Add/Remove Replica In Domain
+showInAdvancedViewOnly: TRUE
+rightsGuid: 9923a32a-3607-11d2-b9be-0000f87a36b2
+appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 49
+validAccesses: 256
+
+dn: CN=Change-Infrastructure-Master,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: Change-Infrastructure-Master
+instanceType: 4
+displayName: Change Infrastructure Master
+showInAdvancedViewOnly: TRUE
+rightsGuid: cc17b1fb-33d9-11d2-97d4-00c04fd8d5cd
+appliesTo: 2df90d89-009f-11d2-aa4c-00c04fd7d83a
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 50
+validAccesses: 256
+
+dn: CN=Update-Schema-Cache,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: Update-Schema-Cache
+instanceType: 4
+displayName: Update Schema Cache
+showInAdvancedViewOnly: TRUE
+rightsGuid: be2bb760-7f46-11d2-b9ad-00c04f79f805
+appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 51
+validAccesses: 256
+
+dn: CN=Recalculate-Security-Inheritance,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: Recalculate-Security-Inheritance
+instanceType: 4
+displayName: Recalculate Security Inheritance
+showInAdvancedViewOnly: TRUE
+rightsGuid: 62dd28a8-7f46-11d2-b9ad-00c04f79f805
+appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 52
+validAccesses: 256
+
+dn: CN=DS-Check-Stale-Phantoms,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: DS-Check-Stale-Phantoms
+instanceType: 4
+displayName: Check Stale Phantoms
+showInAdvancedViewOnly: TRUE
+rightsGuid: 69ae6200-7f46-11d2-b9ad-00c04f79f805
+appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 53
+validAccesses: 256
+
+dn: CN=Certificate-Enrollment,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: Certificate-Enrollment
+instanceType: 4
+displayName: Enroll
+showInAdvancedViewOnly: TRUE
+rightsGuid: 0e10c968-78fb-11d2-90d4-00c04f79dc55
+appliesTo: e5209ca2-3bba-11d2-90cc-00c04fd91ab1
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 54
+validAccesses: 256
+
+dn: CN=Self-Membership,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: Self-Membership
+instanceType: 4
+displayName: Add/Remove self as member
+showInAdvancedViewOnly: TRUE
+rightsGuid: bf9679c0-0de6-11d0-a285-00aa003049e2
+appliesTo: bf967a9c-0de6-11d0-a285-00aa003049e2
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 12
+validAccesses: 8
+
+dn: CN=Validated-DNS-Host-Name,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: Validated-DNS-Host-Name
+instanceType: 4
+displayName: Validated write to DNS host name
+showInAdvancedViewOnly: TRUE
+rightsGuid: 72e39547-7b18-11d1-adef-00c04fd8d5cd
+appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 13
+validAccesses: 8
+
+dn: CN=Validated-SPN,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: Validated-SPN
+instanceType: 4
+displayName: Validated write to service principal name
+showInAdvancedViewOnly: TRUE
+rightsGuid: f3a64788-5306-11d1-a9c5-0000f80367c1
+appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 14
+validAccesses: 8
+
+dn: CN=Generate-RSoP-Planning,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: Generate-RSoP-Planning
+instanceType: 4
+displayName: Generate Resultant Set of Policy (Planning)
+showInAdvancedViewOnly: TRUE
+rightsGuid: b7b1b3dd-ab09-4242-9e30-9980e5d322f7
+appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
+appliesTo: bf967aa5-0de6-11d0-a285-00aa003049e2
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 55
+validAccesses: 256
+
+dn: CN=Refresh-Group-Cache,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: Refresh-Group-Cache
+instanceType: 4
+displayName: Refresh Group Cache for Logons
+showInAdvancedViewOnly: TRUE
+rightsGuid: 9432c620-033c-4db7-8b58-14ef6d0bf477
+appliesTo: f0f8ffab-1191-11d0-a060-00aa006c33ed
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 56
+validAccesses: 256
+
+dn: CN=SAM-Enumerate-Entire-Domain,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: SAM-Enumerate-Entire-Domain
+instanceType: 4
+displayName: Enumerate Entire SAM Domain
+showInAdvancedViewOnly: TRUE
+rightsGuid: 91d67418-0135-4acc-8d79-c08e857cfbec
+appliesTo: bf967aad-0de6-11d0-a285-00aa003049e2
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 57
+validAccesses: 256
+
+dn: CN=Generate-RSoP-Logging,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: Generate-RSoP-Logging
+instanceType: 4
+displayName: Generate Resultant Set of Policy (Logging)
+showInAdvancedViewOnly: TRUE
+rightsGuid: b7b1b3de-ab09-4242-9e30-9980e5d322f7
+appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
+appliesTo: bf967aa5-0de6-11d0-a285-00aa003049e2
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 58
+validAccesses: 256
+
+dn: CN=Domain-Other-Parameters,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: Domain-Other-Parameters
+instanceType: 4
+displayName: Other Domain Parameters (for use by SAM)
+showInAdvancedViewOnly: TRUE
+rightsGuid: b8119fd0-04f6-4762-ab7a-4986c76b3f9a
+appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 59
+validAccesses: 48
+
+dn: CN=DNS-Host-Name-Attributes,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: DNS-Host-Name-Attributes
+instanceType: 4
+displayName: DNS Host Name Attributes
+showInAdvancedViewOnly: TRUE
+rightsGuid: 72e39547-7b18-11d1-adef-00c04fd8d5cd
+appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 60
+validAccesses: 48
+
+dn: CN=Create-Inbound-Forest-Trust,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: Create-Inbound-Forest-Trust
+instanceType: 4
+displayName: Create Inbound Forest Trust
+showInAdvancedViewOnly: TRUE
+rightsGuid: e2a36dc9-ae17-47c3-b58b-be34c55ba633
+appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 61
+validAccesses: 256
+
+dn: CN=DS-Replication-Get-Changes-All,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: DS-Replication-Get-Changes-All
+instanceType: 4
+displayName: Replicating Directory Changes All
+showInAdvancedViewOnly: TRUE
+rightsGuid: 1131f6ad-9c07-11d1-f79f-00c04fc2dcd2
+appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
+appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
+appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 62
+validAccesses: 256
+
+dn: CN=Migrate-SID-History,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: Migrate-SID-History
+instanceType: 4
+displayName: Migrate SID History
+showInAdvancedViewOnly: TRUE
+rightsGuid: BA33815A-4F93-4c76-87F3-57574BFF8109
+appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 63
+validAccesses: 256
+
+dn: CN=Reanimate-Tombstones,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: Reanimate-Tombstones
+instanceType: 4
+displayName: Reanimate Tombstones
+showInAdvancedViewOnly: TRUE
+rightsGuid: 45EC5156-DB7E-47bb-B53F-DBEB2D03C40F
+appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
+appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
+appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 64
+validAccesses: 256
+
+dn: CN=Allowed-To-Authenticate,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: Allowed-To-Authenticate
+instanceType: 4
+displayName: Allowed to Authenticate
+showInAdvancedViewOnly: TRUE
+rightsGuid: 68B1D179-0D15-4d4f-AB71-46152E79A7BC
+appliesTo: 4828cc14-1437-45bc-9b07-ad6f015e5f28
+appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
+appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 65
+validAccesses: 256
+
+dn: CN=DS-Execute-Intentions-Script,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: DS-Execute-Intentions-Script
+instanceType: 4
+displayName: Execute Forest Update Script
+showInAdvancedViewOnly: TRUE
+rightsGuid: 2f16c4a5-b98e-432c-952a-cb388ba33f2e
+appliesTo: ef9e60e0-56f7-11d1-a9c6-0000f80367c1
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 66
+validAccesses: 256
+
+dn: CN=DS-Replication-Monitor-Topology,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: DS-Replication-Monitor-Topology
+instanceType: 4
+displayName: Monitor Active Directory Replication
+showInAdvancedViewOnly: TRUE
+rightsGuid: f98340fb-7c5b-4cdb-a00b-2ebdfa115a96
+appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
+appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
+appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 67
+validAccesses: 256
+
+dn: CN=Update-Password-Not-Required-Bit,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: Update-Password-Not-Required-Bit
+instanceType: 4
+displayName: Update Password Not Required Bit
+showInAdvancedViewOnly: TRUE
+rightsGuid: 280f369c-67c7-438e-ae98-1d46f3c6f541
+appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 68
+validAccesses: 256
+
+dn: CN=Unexpire-Password,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: Unexpire-Password
+instanceType: 4
+displayName: Unexpire Password
+showInAdvancedViewOnly: TRUE
+rightsGuid: ccc2dc7d-a6ad-4a7a-8846-c04e3cc53501
+appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 69
+validAccesses: 256
+
+dn: CN=Enable-Per-User-Reversibly-Encrypted-Password,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: Enable-Per-User-Reversibly-Encrypted-Password
+instanceType: 4
+displayName: Enable Per User Reversibly Encrypted Password
+showInAdvancedViewOnly: TRUE
+rightsGuid: 05c74c5e-4deb-43b4-bd9f-86664c2a7fd5
+appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 70
+validAccesses: 256
+
+dn: CN=DS-Query-Self-Quota,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: DS-Query-Self-Quota
+instanceType: 4
+displayName: Query Self Quota
+showInAdvancedViewOnly: TRUE
+rightsGuid: 4ecc03fe-ffc0-4947-b630-eb672a8a9dbc
+appliesTo: da83fc4f-076f-4aea-b4dc-8f4dab9b5993
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 71
+validAccesses: 256
+
+dn: CN=Domain-Administer-Server,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: Domain-Administer-Server
+instanceType: 4
+displayName: Domain Administer Server
+showInAdvancedViewOnly: TRUE
+rightsGuid: ab721a52-1e2f-11d0-9819-00aa0040529b
+appliesTo: bf967aad-0de6-11d0-a285-00aa003049e2
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 1
+validAccesses: 256
+
+dn: CN=User-Change-Password,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: User-Change-Password
+instanceType: 4
+displayName: Change Password
+showInAdvancedViewOnly: TRUE
+rightsGuid: ab721a53-1e2f-11d0-9819-00aa0040529b
+appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
+appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
+appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 2
+validAccesses: 256
+
+dn: CN=User-Force-Change-Password,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: User-Force-Change-Password
+instanceType: 4
+displayName: Reset Password
+showInAdvancedViewOnly: TRUE
+rightsGuid: 00299570-246d-11d0-a768-00aa006e0529
+appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
+appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
+appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 3
+validAccesses: 256
+
+dn: CN=Send-As,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: Send-As
+instanceType: 4
+displayName: Send As
+showInAdvancedViewOnly: TRUE
+rightsGuid: ab721a54-1e2f-11d0-9819-00aa0040529b
+appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
+appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
+appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 4
+validAccesses: 256
+
+dn: CN=Receive-As,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: Receive-As
+instanceType: 4
+displayName: Receive As
+showInAdvancedViewOnly: TRUE
+rightsGuid: ab721a56-1e2f-11d0-9819-00aa0040529b
+appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
+appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
+appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 5
+validAccesses: 256
+
+dn: CN=Send-To,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: Send-To
+instanceType: 4
+displayName: Send To
+showInAdvancedViewOnly: TRUE
+rightsGuid: ab721a55-1e2f-11d0-9819-00aa0040529b
+appliesTo: bf967a9c-0de6-11d0-a285-00aa003049e2
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 6
+validAccesses: 256
+
+dn: CN=Domain-Password,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: Domain-Password
+instanceType: 4
+displayName: Domain Password & Lockout Policies
+showInAdvancedViewOnly: TRUE
+rightsGuid: c7407360-20bf-11d0-a768-00aa006e0529
+appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
+appliesTo: 19195a5a-6da0-11d0-afd3-00c04fd930c9
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 7
+validAccesses: 48
+
+dn: CN=General-Information,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: General-Information
+instanceType: 4
+displayName: General Information
+showInAdvancedViewOnly: TRUE
+rightsGuid: 59ba2f42-79a2-11d0-9020-00c04fc2d3cf
+appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
+appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 8
+validAccesses: 48
+
+dn: CN=User-Account-Restrictions,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: User-Account-Restrictions
+instanceType: 4
+displayName: Account Restrictions
+showInAdvancedViewOnly: TRUE
+rightsGuid: 4c164200-20c0-11d0-a768-00aa006e0529
+appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
+appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
+appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 9
+validAccesses: 48
+
+dn: CN=User-Logon,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: User-Logon
+instanceType: 4
+displayName: Logon Information
+showInAdvancedViewOnly: TRUE
+rightsGuid: 5f202010-79a5-11d0-9020-00c04fc2d4cf
+appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
+appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 10
+validAccesses: 48
+
+dn: CN=Membership,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: Membership
+instanceType: 4
+displayName: Group Membership
+showInAdvancedViewOnly: TRUE
+rightsGuid: bc0ac240-79a9-11d0-9020-00c04fc2d4cf
+appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
+appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 11
+validAccesses: 48
+
+dn: CN=Open-Address-Book,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: Open-Address-Book
+instanceType: 4
+displayName: Open Address List
+showInAdvancedViewOnly: TRUE
+rightsGuid: a1990816-4298-11d1-ade2-00c04fd8d5cd
+appliesTo: 3e74f60f-3e73-11d1-a9c0-0000f80367c1
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 21
+validAccesses: 256
+
+dn: CN=Personal-Information,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: Personal-Information
+instanceType: 4
+displayName: Personal Information
+showInAdvancedViewOnly: TRUE
+rightsGuid: 77B5B886-944A-11d1-AEBD-0000F80367C1
+appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
+appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
+appliesTo: 5cb41ed0-0e4c-11d0-a286-00aa003049e2
+appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 23
+validAccesses: 48
+
+dn: CN=Email-Information,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: Email-Information
+instanceType: 4
+displayName: Phone and Mail Options
+showInAdvancedViewOnly: TRUE
+rightsGuid: E45795B2-9455-11d1-AEBD-0000F80367C1
+appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
+appliesTo: bf967a9c-0de6-11d0-a285-00aa003049e2
+appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 22
+validAccesses: 48
+
+dn: CN=Web-Information,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: Web-Information
+instanceType: 4
+displayName: Web Information
+showInAdvancedViewOnly: TRUE
+rightsGuid: E45795B3-9455-11d1-AEBD-0000F80367C1
+appliesTo: 4828CC14-1437-45bc-9B07-AD6F015E5F28
+appliesTo: 5cb41ed0-0e4c-11d0-a286-00aa003049e2
+appliesTo: bf967aba-0de6-11d0-a285-00aa003049e2
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 24
+validAccesses: 48
+
+dn: CN=DS-Replication-Get-Changes,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: DS-Replication-Get-Changes
+instanceType: 4
+displayName: Replicating Directory Changes
+showInAdvancedViewOnly: TRUE
+rightsGuid: 1131f6aa-9c07-11d1-f79f-00c04fc2dcd2
+appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
+appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
+appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 25
+validAccesses: 256
+
+dn: CN=DS-Replication-Synchronize,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: DS-Replication-Synchronize
+instanceType: 4
+displayName: Replication Synchronization
+showInAdvancedViewOnly: TRUE
+rightsGuid: 1131f6ab-9c07-11d1-f79f-00c04fc2dcd2
+appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
+appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
+appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 26
+validAccesses: 256
+
+dn: CN=DS-Replication-Manage-Topology,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: DS-Replication-Manage-Topology
+instanceType: 4
+displayName: Manage Replication Topology
+showInAdvancedViewOnly: TRUE
+rightsGuid: 1131f6ac-9c07-11d1-f79f-00c04fc2dcd2
+appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
+appliesTo: bf967a87-0de6-11d0-a285-00aa003049e2
+appliesTo: 19195a5b-6da0-11d0-afd3-00c04fd930c9
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 27
+validAccesses: 256
+
+dn: CN=Change-Schema-Master,CN=Extended-Rights,${CONFIGDN}
+objectClass: top
+objectClass: controlAccessRight
+cn: Change-Schema-Master
+instanceType: 4
+displayName: Change Schema Master
+showInAdvancedViewOnly: TRUE
+rightsGuid: e12b56b6-0a95-11d1-adbb-00c04fd8d5cd
+appliesTo: bf967a8f-0de6-11d0-a285-00aa003049e2
+objectCategory: CN=Control-Access-Right,CN=Schema,${CONFIGDN}
+localizationDisplayId: 28
+validAccesses: 256