Difference between revisions of "Samba4 Development"

From SME Server
Jump to navigationJump to search
 
(82 intermediate revisions by 3 users not shown)
Line 6: Line 6:
 
This wiki page will be used to track the integration effort of Samba 4 into SME 9+
 
This wiki page will be used to track the integration effort of Samba 4 into SME 9+
  
{{Note_box|msg=At this point, I'm just going to randomly ramble on this wiki page as I work on Samba 4.  Once I get some workable pieces, I'll go back and format this page so that it makes more sense. - [[User:Gzartman|Gzartman]]}}
+
Lead developer: [[User:Gzartman|Gzartman]]
  
=Samba 4 Packages=
+
=Overview and Objectives=
  
Upstream Centos 6 & 7 do not provide support for the full version of Samba 4.  Packages available in the upstream repos are a crippled version of Samba 4, with many of the features associates with Active Directory disabledThe reason for this is detailed [https://blog.cryptomilk.org/2014/07/09/samba-ad-dc-in-fedora-and-rhel/ here]. A solution to provide Samba 4 active directory does not look to be forthcoming by viewing Samba status in the Fedora project.
+
The primary objective of this effort is to create Active Directory support on SME 9+ with a focus on simplicity and easy integration, as is done on many of the other sub-systems on SME Server.  Other distributions with Samba 4 support take the approach of providing a fairly complex front end to Samba 4 with many configuration parameters and options.  Our approach for Samba 4 is to stream line implementation to provide a straight forward and simple set of UI parameters for the administrator to deploy Active Directory in a configuration that will work in most deploymentsSupport for the full array of Samba 4 options is provided under the hood in SME Server, but will be available primary from the console.   The SME Server community may decide to create an Advanced Samba server-manager panel to control and configure some of the more advanced features available in Samba 4, but the Core SME Server deployment of Active Directory will remain focused on simplicity.  
  
To further development of support for Samba 4 on the Koozali SME Server, Samba 4 packages from Sernet were selected.  These packages will not immediately install cleaning on SME 9 due to the customization of Centos associated with SME 9, so the Sernet packages where re-built for SME 9. Details of this rebuild along with a link to the rebuilt packages are located in [[bugzilla:8075]]
+
Deployment of Samba 4 on SME Server means that many of the authentication mechanisms on SME Server need to change to integrate with Active Directory, therefore this development effort is quite far reaching.
  
After rebuilding, these packages do install cleanly but the services will not start using the init.d scripts provided with the packaged due to changes made during the re-build of the packages for SME 9.  A Daemontools run script will need to be developed to start the Samba 4 service.
+
Samba 4 on SME Server is targeted for Koozali SME Server 10
  
=General Development Notes=
+
=Current Status=
==Template Fragments==
 
  
===/etc/smb.conf===
+
'''Current Release:'''  Alpha 7
Complete rewrite of all template fragments
 
  
====smb.conf Considerations====
+
Samba 4 on SME Server will be provided by way of the package smeserver-samba, which will upgrade and obsolete e-smith-samba. The current release of Samba 4 on SME Server is available here:  [http://www.leiengineering.com/repository/smeserver/Packages/Samba4_Alpha7/ SME Server Samba 4 Packages]
  
The smb.conf configuration file can be simplified significantly for Samba 4. Of specific interest are the following new parameters:
+
These packages are currently not provided by the Koozali buildsys because there is still a fair bit of work to do to integrate this code with existing SME services. Since Samba 4 on SME Server includes many other sub-systems, inclusion of the Samba 4 code is not being including in current development streams until the code is closer to release so as not to hold up other development activities.   However, this code is available in CVS.
 +
<br>
  
 +
=Samba 4 Packages=
  
'''Server Services:''' This parameter is not very well documented, but from what I could find thefollow services can be provided by the Samba daemon: s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, ntp_signd, kcc, dnsupdate, dns, smb, nmb, winbindThe default for this parameter is: server services = s3fs rpc nbt wrepl ldap cldap kdc drepl winbind ntp_signd kcc dnsupdate dns. Services can be added/remove from the default by a +/- and the service to add/remove. Example
+
Upstream Centos 6 and 7 do not provide Samba 4 packages with full Active Directory support.  This is because Samba 4 Kerberos is based upon Heimdal Kerberos whereas the upstream vendor uses MIT Kerberos.  Heimdal Kerberos and MIT Kerberos are not compatible with one another and so the upstream vendor has decided to disable Kerberos support in Samba until such time as Samba supports MIT KerberosDetails can be found here  https://wiki.samba.org/index.php/MIT_Build
server services = -s3fs (remove) +smb (add).  Note that the smb, nmb, and windbind services are services equivalent to the older, Samba 3, type services (stand alone daemons). Of specific interest to SME 9 may be the use of the nmb service for WINS support. As we begin testing we may need to enable this service and possibly smb for simple share access.
+
and here https://blog.cryptomilk.org/2014/07/09/samba-ad-dc-in-fedora-and-rhel/
  
'''Server Role:''' Samba 4 currently only supports the active directory domain controller server roleFor now, we'll force Samba config into DC server role, but provide a fragment for expansion later.  There is a long explanation behind this, but for now, restriction doesn't hurt us.  SME as a DC will provide auth for both domain membership and simple shares by either joining the domain or logging into the server every time.
+
To provide Active Directory support, the Koozali devteam has decided to fork the upstream Samba 4 package and re-compile with Heimdal Kerberos support on Koozali SME Server 10. Details of this rebuild are located in [[bugzilla:9751]].  Support for Active Directory on SME 9 can be provided by Sernet Samba 4.2 packages, which are the last set of open source Sernet packagesHowever, the devteam is currently focusing development effort on SME 10.
  
===/etc/raddb/radius.conf===
+
=Installation=
Need to check and/or modify the following existing fragments:
 
  
etc/raddb/radiusd.conf/25modules30smbpasswd:    #  An example configuration for using /etc/samba/smbpasswd.
+
RPMs for this release can be found here[https://www.leiengineering.com/repository/smeserver/Packages/Samba4_Alpha7/ SME Server Samba 4 Packages]
etc/raddb/radiusd.conf/25modules30smbpasswd:}  passwd smbpasswd \{
 
  etc/raddb/radiusd.conf/25modules30smbpasswd:           filename = /etc/samba/smbpasswd
 
etc/raddb/radiusd.conf/25modules25mschap:              #  reading from /etc/smbpasswd.
 
etc/raddb/radiusd.conf/25modules25mschap:              #  If you are using /etc/smbpasswd, see the 'passwd'
 
etc/raddb/radiusd.conf/25modules25mschap:              #  module for an example of how to use /etc/smbpasswd
 
etc/raddb/radiusd.conf/65authorization40default:        #  If you are using /etc/smbpasswd, and are also doing
 
etc/raddb/radiusd.conf/65authorization40default:        #  configure the 'smbpasswd' module, above.
 
etc/raddb/radiusd.conf/65authorization40default:        ( $ldap{Authentication} || 'disabled' ) eq 'enabled' ? 'ldap' : 'smbpasswd';
 
  
===/etc/krb5.conf===
+
Install Instructions:
Create based new template fragments for this configuration file
 
  
==Configuration Database Parameters==
+
# Download all rpms to a fresh SME 9.1 install. 
Default key and property values:
+
# yum localinstall *.rpm
 +
# signal-event post-upgrade; signal-event reboot
 +
# Once the server comes back up, provision the domain with:   signal-event provision-domain-controller admin_password
  
{| class="wikitable"
+
Note: The password utilities in the server-manager are not yet working. We will be working to include SSSD in the next alpha and then all password utilities and functions will work as expected.
|-
 
! Database name !! Unique key !! Property name !! Default value || Possible values || Description
 
|-
 
| configuration ||style="text-align:center;"| SMBD || ||style="text-align:center;"|'''DELETE'''|| || Delete this key. Replaced by other keys
 
|-
 
| ||style="text-align:center;"| NMBD || ||style="text-align:center;"|'''DELETE'''|| || Delete this key. Replaced by other keys
 
|-
 
| ||style="text-align:center;"| SMB || ||style="text-align:center;"|'''service'''|| || Existing SMB key properties changes
 
|-
 
| ||style="text-align:center;"| || UnixCharSet ||style="text-align:center;"|'''DELETE'''|| || Delete this property
 
|-
 
| ||style="text-align:center;"| ||workgroup || style="text-align:center;"|'''sme-server''' || User defined||
 
|-
 
| ||style="text-align:center;"| ||ServerString || style="text-align:center;"|'''SME server''' || User defined||
 
|-
 
| ||style="text-align:center;"| ||ServerRole || style="text-align:center;"|'''DC''' || SA / BD / DC|| Stand Alone, Backup Domain or Domain Controller
 
  
|-
+
=Change Log / Release Notes=
| ||style="text-align:center;"| ||OpLocks || style="text-align:center;"|'''enabled''' || enabled / disabled||
+
==Alpha 7==
|-
+
* Implementation of Samba 4 on SME 10.
| ||style="text-align:center;"| ||KernelOplocks || style="text-align:center;"|'''enabled''' || enabled / disabled||
+
* Drop bootstrap-console patch for e-smith-base for provisioning samba 4 from the console.  We'll add this back in later
  
|-
+
==Alpha 6==
| ||style="text-align:center;"| ||Level2Oplocks || style="text-align:center;"|'''enabled''' || enabled / disabled||
+
* Final alpha on SME 9.  Going forward, this code will be moved to the SME 10 alpha release for ongoing development and testing
 +
* Change the way we are naming alpha package versions because it is becoming difficult to apply alpha level changes with patch files.  Each alpha release will have its own source archive.  Source archive (.tar.xz) file version numbers will track with the alpha release number.
 +
* Rewrite server-manager user accounts panel for AD integration, except for the Reset Password link.  We won't be able to update this function until we deploy SSSD, which will come in the next release
 +
* Move smb.conf and AD schema extension fragments to /etc/samba
 +
* Extend AD schema to include the attributes: lockable, removable, and emailForward
 +
* Change the koozliUser objectClass to smeExtended for extended schema attributes
 +
* Get rid of the user-create-AD action because we don't have enough control over the user create process in a server-manager panel using an action.  Instead, we added the esmith::util::createADUser() function that sets up a basic Active Directory user.  This function is somewhat analogous to the useradd utility
 +
* Drop "Legacy Mode," which was part of the user-create-AD action
 +
* Replace user-create event with user-initialize
 +
* Add user-create-profiledir and user-create-home actions as part of the user-intialize event, since the useradd utility used to do this
 +
* Update user-modify, user-delete, user-lock events for AD integration
 +
* Create user-AD-enable and user-AD-disable actions
 +
* Extensive clean-up of smb.conf fragments now that we have a working Samba 4 deployment, including default configuration dbase parameters.  This clean-up and enhancement results in a very clean smb.conf file
 +
* Update qmail and .qmail template fragments and configuration to pull user data from the Active Directory.  Spam and filtering fragments have been excluded because we have not yet decided how to handle these configuration in the Active Directory
 +
* Further enhancement and refinement to esmith::AD
  
|-
+
==Alpha 5==
 +
* Extend Active Directory schema to include quota and smeCustom attributes via the koozaliUser objectClass
 +
* Remove adjust-samba event and use services2adjust
 +
* Add Group-create-AD action
 +
* Design changes to provision-domain-controller and bootstrap-provision-dc events to provision samba entirely cold using ldif
 +
* Add pseudonym support to esmith::AD
 +
* Further enhancement to esmith::AD to provide user & group management functionality similar to that provided by AccountsDB
 +
* Re-write createlinks to flow a more logical sequence
 +
* Fix dnsforwarder in smb.conf
 +
* Fix several esmith::AD::User and esmith::AD::Group methods broken in 0.1-0-3 when we added runtime binding
  
| ||style="text-align:center;"| ||AllowDNSUpdates || style="text-align:center;"|'''nonsecure''' ||||
+
==Alpha 4==
 +
* Add dnscache and tinydns config per bug [SME: 9711]
 +
* Add iptables preroute rule for DNS per bug [SME: 9711]
 +
* Fix issues with domain admins assignment during provisioning
 +
* Nearly full re-write of user-create-AD action to utilize esmith::AD class
 +
* Add Legacy Mode to user-create-AD action to allow this action to work with AccountsDB
 +
* Add user-create-AD to user-create event
 +
* Add user-AD-disable action to disable AD user
 +
* Continued development and enhancement to esmith::AD including POD documentation
 +
* Continued development and enhancement to esmith::AD::User including POD documentation
 +
* Add esmith::AD::OU to manage Organizational Units in the Active Directory
 +
* Fix realm definition in provision action
  
|-
+
==Alpha 3==
| ||style="text-align:center;"| ||DNSForwarder || style="text-align:center;"|'''TBA''' ||||
+
* Reconfigure provision event to account for default Samba complex password policy
|}
+
* Abstract core LDAP queries in esmith::AD using runtime binding
  
 +
==Alpha 2==
 +
* Set requires to e-smith-base-5.6.0-30+ [SME:8668]
 +
* Set requires for e-smith-LPRng-2.5.0+ [SME:8632]
  
The ''DNSForwarder'' property is a new property that could be defined to forward DNS requests from the Samba DNS to another DNS.
+
==Alpha 1==
 +
* Roll new smeserver alpha package for Samba4 [SME:8075]
 +
<br>
  
 +
=Bugzilla references=
  
*'''''Others (optional)''''': These parameters are meant to take smb.conf inputs as defined the man pages. Defaults for these parameters are the same as the corresponding defaults in the smb.conf man page.  Template fragments feed these parameters into the smb.conf file with minimal syntax checking, as it is assumed those who manually input them know what they are doing.
+
'''[[bugzilla:4667]]''' <br>
 +
'''[[bugzilla:8075]]''' Adding Samba 4<br>
 +
'''[[bugzilla:8632]]''' Remove smb.conf template fragments from e-smith-LPRng-2.4.0-1<br>
 +
'''[[bugzilla:8638]]''' Modify e-smith-dnscache for Samba 4 support<br>
 +
'''[[bugzilla:8660]]''' User account authentication with Active Directory and AccountsDB<br>
 +
'''[[bugzilla:8663]]''' Proftpd and active directory authentication (Samba 4)<br>
 +
'''[[bugzilla:8665]]''' esmith::AD perl module for interacting with Active Directory<br>
 +
'''[[bugzilla:8668]]''' Get rid of PPTP when we upgrade to Samba 4<br>
 +
'''[[bugzilla:8670]]''' Qmail updates for Samba 4<br>
 +
'''[[bugzilla:8674]]''' Remove smbpasswd and WINS pieces for Samba 4<br>
 +
'''[[bugzilla:8675]]''' e-smith-LDAP + Samba 4<br>
 +
'''[[bugzilla:8687]]''' Add SSSD daemon for Samba 4 local authentication<br>
 +
'''[[bugzilla:8703]]''' Samba 4: Home directory<br>
 +
'''[[bugzilla:9651]]''' Remove Samba Parts from esmith::Util for Samba 4 <br>
 +
'''[[bugzilla:9653]]''' Pseudonyms handling with Active Directory<br>
 +
'''[[bugzilla:9662]]''' System Initialization and Re-Configuration with Active Directory<br>
 +
'''[[bugzilla:9700]]''' Consider removing /sbin/e-smith/samba_check_password <br>
 +
'''[[bugzilla:9708]]''' Evaluate registry fragments in server-resources for Samba 4<br>
 +
'''[[bugzilla:9711]]''' Include dnscache and tinydns config in smeserver-samba for Samba 4 DNS queries<br>
 +
'''[[bugzilla:9712]]''' Reconfigure shadowcopy for Samba 4<br>
 +
'''[[bugzilla:9713]]''' Reconfigure recycle bin for Samba 4<br>
 +
'''[[bugzilla:9715]]''' Modify e-smith-dnscache to allow connections from entire loopback network<br>
 +
'''[[bugzilla:9755]]''' Re-Write Users Panel for AD integration<br>
 +
'''[[bugzilla:9799]]''' Update esmith::util::chown for Samba users<br>
 +
'''[[bugzilla:9800]]''' Update e-smith-quota to process quotas for active directory users<br>
 +
'''[[bugzilla:9802]]''' Modify user events/actions and server-manager panel<br>
 +
'''[[bugzilla:9804]]''' Update password functions in esmith::util for Samba 4<br>
 +
'''[[bugzilla:9806]]''' e-smith-openssh modifications for Samba 4<br>
 +
'''[[bugzilla:9807]]''' smeserver-qpsmtpd changes for Samba 4<br>
 +
<br>
  
 +
=Active Directory Schema=
 +
Following is a direct dump of the active directory from a freshly provisioned SME Server domain.  The DNS/Kerberos domain is domain.com, the hostname is virgin, and the windows domain is sme-server.  The ipaddress for this test machine is 192.168.0.67.  These data is quite long, but I found it very useful; as it is extremely difficult to find these attributes in any documentation about Samba 4 and ADDC:
  
{| class="wikitable"
+
[http://wiki.contribs.org/SAMBA_4_Active_Directory_Schema Samba 4 Active Directory Schema]
|-
 
! Database name !! Unique key !! Property name !! Default value || Possible values || Description
 
|-
 
| configuration ||style="text-align:center;"| SMB ||||style="text-align:center;"| || ||
 
|-
 
| ||style="text-align:center;"| ||NameResolver||style="text-align:center;"|'''TBA'''|| || The order in which name resolution will take place by the Samba daemon
 
|-
 
| ||style="text-align:center;"| ||ServerServices||style="text-align:center;"|'''TBA'''|| || See the server services discussion detailed under smb.conf section
 
|-
 
| ||style="text-align:center;"| ||SMBPorts||style="text-align:center;"|'''TBA'''|| ||
 
|-
 
| ||style="text-align:center;"| ||SocketOptions||style="text-align:center;"|'''TBA'''|| ||
 
|-
 
| ||style="text-align:center;"| ||WideLinks||style="text-align:center;"|'''TBA'''|| ||
 
|-
 
| ||style="text-align:center;"| ||GuestAccount||style="text-align:center;"|'''TBA'''|| ||
 
|-
 
| ||style="text-align:center;"| ||GuestOK||style="text-align:center;"|'''no'''||yes / no ||
 
|-
 
| ||style="text-align:center;"| ||LogonDrive||style="text-align:center;"|'''TBA'''|| ||Drive letter to be used to the login drive when users login to a domain
 
|-
 
| ||style="text-align:center;"| ||RoamingProfiles||style="text-align:center;"|'''no'''||yes / no ||
 
|-
 
| ||style="text-align:center;"| ||LogonPath||style="text-align:center;"|'''TBA'''|| ||
 
|-
 
| ||style="text-align:center;"| ||BindInterfacesOnly||style="textalign:center;"|'''no'''||yes / no ||
 
|-
 
| ||style="text-align:center;"| ||CaseSensitive||style="text-align:center;"|'''yes'''||yes / no ||
 
|-
 
| ||style="text-align:center;"| ||MaxLogSize||style="text-align:center;"|'''50'''||User defined ||Samba log size in kilobytes. Default set to 50
 
|}
 
 
 
 
 
'''KRB5''' : Create new configuration dbase entry for Kerberos service in Samba
 
 
 
{| class="wikitable"
 
|-
 
! Database name !! Unique key !! Property name !! Default value || Possible values || Description
 
|-
 
| configuration ||style="text-align:center;"| Kerberos ||||style="text-align:center;"| || ||
 
|-
 
| ||style="text-align:center;"| ||DefaultRealm||style="text-align:center;"|'''uninitialized'''|| || This parameter is built into a template fragment, but we will not define it at default. The template fragment will build the default realm by concatenating the SystemName and DomainName reordered elsewhere in the configuration dbase
 
|-
 
| ||style="text-align:center;"| ||DNSLookup||style="text-align:center;"|'''false'''|| true / false||
 
  
|-
+
=[http://wiki.contribs.org/SAMBA_4_-_Misc_Development_Topics Misc Development Topics]=
| ||style="text-align:center;"| ||DNSLookupRealm||style="text-align:center;"|'''false'''|| true / false||
 
  
|-
 
| ||style="text-align:center;"| ||DNSLookupKDC||style="text-align:center;"|'''false'''|| true / false||
 
 
|-
 
|}
 
 
==Services to Modify==
 
 
{| class="wikitable"
 
|-
 
! Service name !! Type !! Action !! File !! Description
 
|-
 
| smbd || Existing
 
|-
 
| || || Remove ||/var/service/smbd ||
 
|-
 
| || || Remove ||/services/smbd ||
 
|-
 
| || || Remove ||/etc/rc.d/init.d/supervise/smb ||
 
 
|-
 
| || || Remove ||/etc/rc.d/rc7.d/S91smb ||
 
|-
 
| || || Remove ||/etc/rc.d/init.d/smbd ||
 
 
|-
 
| nmbd || Existing
 
|-
 
| || || Remove ||/var/service/smbd ||
 
 
|-
 
| || || Remove ||/services/smbd ||
 
 
|-
 
| || || Remove ||/etc/rc.d/init.d/smbd ||
 
|-
 
| smb || New || || ||I would have liked to have called this "Samba," but that would have meant changing alot of existing code that looks for "smb"
 
|-
 
| || || Create ||/var/service/smb || using smbd as a template.  Samba 4 should be started with /usr/sbin/samba -D
 
|-
 
| || || Create symlink ||/service/smb -> /var/service/smb ||
 
 
|-
 
| || || Create symlink ||/etc/rc.d/init.d/smb -> /etc/rc.d/init.d/daemontools ||
 
|-
 
| || || Create symlink ||/etc/rc.d/rc7.d/S91smb -> /etc/rc.d/init.d/e-smith-service || 
 
|}
 
 
==DNS==
 
 
Samba 4 includes an builtin DNS server that is required for proper operation of active directory. This internal DNS server is for AD functions only and does not provide caching DNS functions. 
 
 
SME Server 9.0 includes a caching DNS (djb dnscache) that listens for DNS requests on the LAN IP address and the localhost.  This caching DNS then routes DNS requests for domains defined in the server-manager to tinyDNS and other requests to a resolving dns cache (djb dnscache.forwarder). 
 
 
One approach for DNS architecture with Samba 4 would have samba 4 primary dns requests to LAN clients, forwarding to the dnscache.forwarder service.  The primary dnscache instance and tinydns would then be obsoleted.
 
 
==LDAP==
 
 
Need to look at the LDAP authentication backend and mechanism on SME.  On the surface, it looks like all of the Samba related LDAP code will be dropped and much of the standard authentication code will need to be converted to Active Directory auth.  This task should include looking at openldap-proxy.
 
 
==Local and Samba Authenticaion==
 
#'''Local Authentication''':  Samba 4 provides support for local authentication through PAM.  This will need to be looked and and sorted out, especially as it relates to the previous LDAP authentication work.
 
#'''Updates to esmith::util perl module''':  This perl module contains function for setting and modifying user passwords.  We will need to redesign these functions to integrate with AD.  Specific changes:
 
#*''setSambaPassword function'':  This function needs to be completely re-written to set the Active directory password instead of the old samba password in smbpasswd
 
#*''cancelSambaPassword function'':  Needs to be re-written for active directory instead of old smbpasswd file
 
#*''local password functions'':  We need to look at these once we decide how we are going to handle local authentication on SME with Active directory.
 
#*''ldapPassword function'':  Need to look at this and likely deprecate it, as we will likely set active directory passwords differently.
 
 
==Other Development Tasks to Research and Complete==
 
#'''Domain Server-Manager Panel''': A new Domain server-manager panel should be developed and the workgroup panel removed.  Further discussion will need to take place to determine what needs to go into this new panel.  This panel will likely be fairly simple, as much of the configuration parameters associated Samba Active directory will be incorporated into template fragments and database entries.
 
#'''User/Group Server-Manager Panels''':  These panels will need to be looked at as they relate to template fragments, adjusting services, and updating database entries associated with Samba.
 
#'''Ibay Server-Manager Panel''':  This panel will need to be looked at as it relates to template fragments, adjusting services, and updating database entries associated with Samba.
 
#'''Events/Actions'''':  Existing events and actions related to samba will need to be reviewed and updated accordingly.  A new event/action may need to be developed to provision a new Active Directory Domain using the Samba-Tool utility.
 
#'''e-smith-samba''':  This package needs to be updated with development pieces detailed in this wiki page, for wider testing and development assistance.
 
 
=Status=
 
 
{| class="wikitable"
 
|-
 
|#
 
! Task !! Status
 
|-
 
|1.
 
| Sernet Samba 4 package rebuild || style="text-align:center;" | <span style="color:green">'''DONE'''</span>
 
|-
 
|2.
 
| Create daemontools service for Samba 4 || style="text-align:center;" |<span style="color:green">'''DONE'''</span>
 
|-
 
|3.
 
| Re-Write smb.conf template fragments || style="text-align:center;" |<span style="color:green">'''DONE'''</span>
 
|-
 
|4.
 
| Create Kerberos template fragments || style="text-align:center;" |<span style="color:green">'''DONE'''</span>
 
|-
 
|5.
 
| Add/Modify SMB database entries || style="text-align:center;" |<span style="color:green">'''DONE'''</span>
 
|-
 
|6.
 
| Create krb5 configuration dbase key || style="text-align:center;" |<span style="color:green">'''DONE'''</span>
 
|-
 
|7.
 
| Re-configure init.d start-up/shutdown scripts || style="text-align:center;" |<span style="color:green">'''DONE'''</span>
 
|-
 
|8.
 
| Configure Samba DNS Service || style="text-align:center;" |<span style="color:green">'''DONE'''</span>
 
|-
 
|9.
 
| Configure DNS Cache Resolver || style="text-align:center;" |<span style="color:green">'''DONE'''</span>
 
|-
 
|10.
 
| Create Active Directory Provision/Re-Provision SME Event || style="text-align:center;" |<span style="color:green">'''DONE'''</span>
 
|-
 
|11.
 
| Add Active Directory Provisioning to Bootstrap-Console || style="text-align:center;" |<span style="color:green">'''DONE'''</span>
 
|-
 
|12.
 
| Reconfigure SME User Authentication for Active Directory|| style="text-align:center;" |<span style="color:orange">'''UNDERWAY'''</span>
 
|}
 
  
 
=References=
 
=References=
Line 266: Line 150:
 
# https://wiki.samba.org/index.php/Samba_AD_DC_HOWTO
 
# https://wiki.samba.org/index.php/Samba_AD_DC_HOWTO
 
# http://www.alexwyn.com/computer-tips/centos-samba4-active-directory-domain-controller
 
# http://www.alexwyn.com/computer-tips/centos-samba4-active-directory-domain-controller
 
=Active Directory Schema=
 
Following is a direct dump of the active directory schema from a freshly provisioned SME Server domain.  The DNS/Kerberos domain is domain.com, the hostname is virgin, and the windows domain is sme-server.  The ipaddress for this test machine is 192.168.0.67.  These data is quite long, but I found it very useful; as it is extremely difficult to find these attributes in any documentation about Samba 4 and ADDC:
 
 
<nowiki>
 
* record 1
 
dn: CN=IIS_IUSRS,CN=Builtin,DC=domain,DC=com
 
objectClass: top
 
objectClass: group
 
cn: IIS_IUSRS
 
description: Built-in group used by Internet Information Services.
 
member: CN=S-1-5-17,CN=ForeignSecurityPrincipals,DC=domain,DC=com
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3579
 
uSNChanged: 3579
 
name: IIS_IUSRS
 
objectGUID: 66f33452-b99a-4c7a-969b-950334e59226
 
objectSid: S-1-5-32-568
 
sAMAccountName: IIS_IUSRS
 
sAMAccountType: 536870912
 
systemFlags: -1946157056
 
groupType: -2147483643
 
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=IIS_IUSRS,CN=Builtin,DC=domain,DC=com
 
 
* record 2
 
dn: CN=ipsecNegotiationPolicy{59319BF0-5EE3-11D2-ACE8-0060B0ECCA17},CN=IP Security,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: ipsecBase
 
objectClass: ipsecNegotiationPolicy
 
cn: ipsecNegotiationPolicy{59319BF0-5EE3-11D2-ACE8-0060B0ECCA17}
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3497
 
uSNChanged: 3497
 
showInAdvancedViewOnly: TRUE
 
name: ipsecNegotiationPolicy{59319BF0-5EE3-11D2-ACE8-0060B0ECCA17}
 
objectGUID: 8a93c562-c4ec-47c5-be1f-c70b97949632
 
ipsecID: {59319BF0-5EE3-11D2-ACE8-0060B0ECCA17}
 
ipsecDataType: 598
 
ipsecData:: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==
 
ipsecOwnersReference: CN=ipsecNFA{59319BF3-5EE3-11D2-ACE8-0060B0ECCA17},CN=IP
 
Security,CN=System,DC=domain,DC=com
 
objectCategory: CN=Ipsec-Negotiation-Policy,CN=Schema,CN=Configuration,DC=doma
 
in,DC=com
 
isCriticalSystemObject: TRUE
 
iPSECNegotiationPolicyType: {62F49E13-6C37-11D1-864C-14A300000000}
 
iPSECNegotiationPolicyAction: {8A171DD3-77E3-11D1-8659-A04F00000000}
 
distinguishedName: CN=ipsecNegotiationPolicy{59319BF0-5EE3-11D2-ACE8-0060B0ECC
 
A17},CN=IP Security,CN=System,DC=domain,DC=com
 
 
* record 3
 
dn: CN=ipsecPolicy{72385230-70FA-11D1-864C-14A300000000},CN=IP Security,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: ipsecBase
 
objectClass: ipsecPolicy
 
cn: ipsecPolicy{72385230-70FA-11D1-864C-14A300000000}
 
description: For all IP traffic, always request security using Kerberos trust.
 
  Allow unsecured communication with clients that do not respond to request.
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
uSNCreated: 3477
 
showInAdvancedViewOnly: TRUE
 
name: ipsecPolicy{72385230-70FA-11D1-864C-14A300000000}
 
objectGUID: 9614d040-5d0b-473f-8ffe-5b412095f028
 
ipsecName: Server (Request Security)
 
ipsecID: {72385230-70FA-11D1-864C-14A300000000}
 
ipsecDataType: 598
 
ipsecData:: YyEgIkxP0RGGOwCgJI0wIQQAAAAwKgAAAA==
 
ipsecNFAReference: CN=ipsecNFA{594272E2-071D-11D3-AD22-0060B0ECCA17},CN=IP Sec
 
urity,CN=System,DC=domain,DC=com
 
ipsecNFAReference: CN=ipsecNFA{59319BE2-5EE3-11D2-ACE8-0060B0ECCA17},CN=IP Sec
 
urity,CN=System,DC=domain,DC=com
 
ipsecNFAReference: CN=ipsecNFA{72385232-70FA-11D1-864C-14A300000000},CN=IP Sec
 
urity,CN=System,DC=domain,DC=com
 
objectCategory: CN=Ipsec-Policy,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
ipsecISAKMPReference: CN=ipsecISAKMPPolicy{72385231-70FA-11D1-864C-14A30000000
 
0},CN=IP Security,CN=System,DC=domain,DC=com
 
whenChanged: 20141111041353.0Z
 
uSNChanged: 3692
 
distinguishedName: CN=ipsecPolicy{72385230-70FA-11D1-864C-14A300000000},CN=IP
 
Security,CN=System,DC=domain,DC=com
 
 
* record 4
 
dn: CN=10b3ad2a-6883-4fa7-90fc-6377cbdc1b26,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 10b3ad2a-6883-4fa7-90fc-6377cbdc1b26
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3409
 
uSNChanged: 3409
 
showInAdvancedViewOnly: TRUE
 
name: 10b3ad2a-6883-4fa7-90fc-6377cbdc1b26
 
objectGUID: 00a7ca89-60e4-4b78-8af5-89b2db2a7260
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=10b3ad2a-6883-4fa7-90fc-6377cbdc1b26,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 5
 
dn: CN=byaddr,CN=ethers,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: msSFU30NISMapConfig
 
cn: byaddr
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3737
 
uSNChanged: 3737
 
showInAdvancedViewOnly: TRUE
 
name: byaddr
 
objectGUID: 7d5995e7-8e2d-418e-8478-e50a9f4c14d9
 
objectCategory: CN=msSFU-30-NIS-Map-Config,CN=Schema,CN=Configuration,DC=domai
 
n,DC=com
 
msSFU30KeyAttributes: macAddress
 
msSFU30FieldSeparator: "        "
 
msSFU30SearchAttributes: msSFU30Name
 
msSFU30SearchAttributes: macAddress
 
msSFU30ResultAttributes: msSFU30Name
 
msSFU30ResultAttributes: macAddress
 
msSFU30MapFilter: (&(objectCategory=Device)(macAddress=*))
 
distinguishedName: CN=byaddr,CN=ethers,CN=ypServ30,CN=RpcServices,CN=System,DC
 
=domain,DC=com
 
 
* record 6
 
dn: CN=bynumber,CN=rpc,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: msSFU30NISMapConfig
 
cn: bynumber
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3749
 
uSNChanged: 3749
 
showInAdvancedViewOnly: TRUE
 
name: bynumber
 
objectGUID: f5064007-9669-4ea1-9c47-d4c7bd8188e0
 
objectCategory: CN=msSFU-30-NIS-Map-Config,CN=Schema,CN=Configuration,DC=domai
 
n,DC=com
 
msSFU30KeyAttributes: oncRpcNumber
 
msSFU30FieldSeparator: "        "
 
msSFU30SearchAttributes: msSFU30Aliases
 
msSFU30SearchAttributes: oncRpcNumber
 
msSFU30SearchAttributes: msSFU30Name
 
msSFU30ResultAttributes: msSFU30Aliases
 
msSFU30ResultAttributes: oncRpcNumber
 
msSFU30ResultAttributes: msSFU30Name
 
msSFU30MapFilter: (objectCategory=oncRpc)
 
distinguishedName: CN=bynumber,CN=rpc,CN=ypServ30,CN=RpcServices,CN=System,DC=
 
domain,DC=com
 
 
* record 7
 
dn: CN=a3dac986-80e7-4e59-a059-54cb1ab43cb9,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: a3dac986-80e7-4e59-a059-54cb1ab43cb9
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3463
 
uSNChanged: 3463
 
showInAdvancedViewOnly: TRUE
 
name: a3dac986-80e7-4e59-a059-54cb1ab43cb9
 
objectGUID: 8d1214e3-d6df-41a1-84ca-a49fede5030d
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=a3dac986-80e7-4e59-a059-54cb1ab43cb9,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 8
 
dn: CN=f58300d1-b71a-4DB6-88a1-a8b9538beaca,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: f58300d1-b71a-4DB6-88a1-a8b9538beaca
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3470
 
uSNChanged: 3470
 
showInAdvancedViewOnly: TRUE
 
name: f58300d1-b71a-4DB6-88a1-a8b9538beaca
 
objectGUID: c1b5e402-f205-4da6-bd93-a7a7a61c59fb
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=f58300d1-b71a-4DB6-88a1-a8b9538beaca,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 9
 
dn: CN=ipsecNFA{6A1F5C6F-72B7-11D2-ACF0-0060B0ECCA17},CN=IP Security,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: ipsecBase
 
objectClass: ipsecNFA
 
cn: ipsecNFA{6A1F5C6F-72B7-11D2-ACF0-0060B0ECCA17}
 
description: Version Information Object
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3498
 
uSNChanged: 3498
 
showInAdvancedViewOnly: TRUE
 
name: ipsecNFA{6A1F5C6F-72B7-11D2-ACF0-0060B0ECCA17}
 
objectGUID: 85c3cd9f-ba50-440c-8d01-663ecd316a3d
 
ipsecName: Version Information Object
 
ipsecID: {6A1F5C6F-72B7-11D2-ACF0-0060B0ECCA17}
 
ipsecDataType: 598
 
ipsecData:: b1wfardy0hGs8ABgsOzKF1AAAAAAAAEApmamNhoAAABXAGkAbgBkAG8AdwBzACAAMg
 
AwADAAMAAAABwAAABBAGQAbQBpAG4AaQBzAHQAcgBhAHQAbwByAAAABgAAAA0ACgAAAACsuxGNSdE
 
RhjkAoCSNMCEqAAAAAQAAAAUAAAACAAAAAAD9////AgAAAAAAAAAAAAAAAAABAAAAAgAAAAAAAA==
 
objectCategory: CN=Ipsec-NFA,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=ipsecNFA{6A1F5C6F-72B7-11D2-ACF0-0060B0ECCA17},CN=IP Sec
 
urity,CN=System,DC=domain,DC=com
 
 
* record 10
 
dn: CN=mail,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: mail
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3714
 
uSNChanged: 3714
 
showInAdvancedViewOnly: TRUE
 
name: mail
 
objectGUID: b6979f9c-a565-4373-8cce-a45204679b1e
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=mail,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=c
 
om
 
 
* record 11
 
dn: CN=d85c0bfd-094f-4cad-a2b5-82ac9268475d,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: d85c0bfd-094f-4cad-a2b5-82ac9268475d
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3407
 
uSNChanged: 3407
 
showInAdvancedViewOnly: TRUE
 
name: d85c0bfd-094f-4cad-a2b5-82ac9268475d
 
objectGUID: e062420a-71c1-477e-98da-dc70c6d6cac7
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=d85c0bfd-094f-4cad-a2b5-82ac9268475d,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 12
 
dn: CN=ObjectMoveTable,CN=FileLinks,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: fileLinkTracking
 
objectClass: linkTrackObjectMoveTable
 
cn: ObjectMoveTable
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3474
 
uSNChanged: 3474
 
showInAdvancedViewOnly: TRUE
 
name: ObjectMoveTable
 
objectGUID: b504fe59-c0cc-4d59-8a39-612c8f671580
 
systemFlags: -1946157056
 
objectCategory: CN=Link-Track-Object-Move-Table,CN=Schema,CN=Configuration,DC=
 
domain,DC=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=ObjectMoveTable,CN=FileLinks,CN=System,DC=domain,DC=com
 
 
* record 13
 
dn: CN=2416c60a-fe15-4d7a-a61e-dffd5df864d3,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 2416c60a-fe15-4d7a-a61e-dffd5df864d3
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3402
 
uSNChanged: 3402
 
showInAdvancedViewOnly: TRUE
 
name: 2416c60a-fe15-4d7a-a61e-dffd5df864d3
 
objectGUID: 4aa0dfa5-cc79-4524-a7d7-e85dcf4ddac9
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=2416c60a-fe15-4d7a-a61e-dffd5df864d3,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 14
 
dn: CN=6ada9ff7-c9df-45c1-908e-9fef2fab008a,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 6ada9ff7-c9df-45c1-908e-9fef2fab008a
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3408
 
uSNChanged: 3408
 
showInAdvancedViewOnly: TRUE
 
name: 6ada9ff7-c9df-45c1-908e-9fef2fab008a
 
objectGUID: 8c0b4b94-f6bb-4605-bc6e-3f8382e80e29
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=6ada9ff7-c9df-45c1-908e-9fef2fab008a,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 15
 
dn: CN=ipsecNFA{7238523E-70FA-11D1-864C-14A300000000},CN=IP Security,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: ipsecBase
 
objectClass: ipsecNFA
 
cn: ipsecNFA{7238523E-70FA-11D1-864C-14A300000000}
 
description: Accepts unsecured communication, but always requires clients to e
 
stablish trust and security methods.  Will NOT communicate with untrusted cli
 
ents.
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
uSNCreated: 3493
 
showInAdvancedViewOnly: TRUE
 
name: ipsecNFA{7238523E-70FA-11D1-864C-14A300000000}
 
objectGUID: 2cae72e1-f974-42af-9dda-8c2c4a95c5cc
 
ipsecName: Require Security
 
ipsecID: {7238523E-70FA-11D1-864C-14A300000000}
 
ipsecDataType: 598
 
ipsecData:: AKy7EY1J0RGGOQCgJI0wISoAAAABAAAABQAAAAIAAAAAAP3///8CAAAAAAAAAAAAAA
 
AAAAEAAAACAAAAAAAA
 
ipsecOwnersReference: CN=ipsecPolicy{7238523C-70FA-11D1-864C-14A300000000},CN=
 
IP Security,CN=System,DC=domain,DC=com
 
ipsecFilterReference: CN=ipsecFilter{7238523A-70FA-11D1-864C-14A300000000},CN=
 
IP Security,CN=System,DC=domain,DC=com
 
objectCategory: CN=Ipsec-NFA,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
ipsecNegotiationPolicyReference: CN=ipsecNegotiationPolicy{7238523F-70FA-11D1-
 
864C-14A300000000},CN=IP Security,CN=System,DC=domain,DC=com
 
whenChanged: 20141111041354.0Z
 
uSNChanged: 3711
 
distinguishedName: CN=ipsecNFA{7238523E-70FA-11D1-864C-14A300000000},CN=IP Sec
 
urity,CN=System,DC=domain,DC=com
 
 
* record 16
 
dn: CN=byuser,CN=netgroup,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: msSFU30NISMapConfig
 
cn: byuser
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3726
 
uSNChanged: 3726
 
showInAdvancedViewOnly: TRUE
 
name: byuser
 
objectGUID: 3e1053aa-af83-4c0a-9efb-6b54f91e19f6
 
objectCategory: CN=msSFU-30-NIS-Map-Config,CN=Schema,CN=Configuration,DC=domai
 
n,DC=com
 
msSFU30KeyAttributes: msSFU30NetgroupUserAtDomain
 
msSFU30FieldSeparator: "        "
 
msSFU30IntraFieldSeparator: ,
 
msSFU30SearchAttributes: msSFU30Name
 
msSFU30SearchAttributes: MemberNisNetgroup
 
msSFU30SearchAttributes: msSFU30NetgroupUserAtDomain
 
msSFU30ResultAttributes: MemberNisNetgroup
 
msSFU30ResultAttributes: msSFU30Name
 
msSFU30MapFilter: (objectCategory=NisNetgroup)
 
distinguishedName: CN=byuser,CN=netgroup,CN=ypServ30,CN=RpcServices,CN=System,
 
DC=domain,DC=com
 
 
* record 17
 
dn: CN=byname,CN=networks,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: msSFU30NISMapConfig
 
cn: byname
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3742
 
uSNChanged: 3742
 
showInAdvancedViewOnly: TRUE
 
name: byname
 
objectGUID: 29c5e02e-be07-4bbe-ad44-103ca048b5d1
 
objectCategory: CN=msSFU-30-NIS-Map-Config,CN=Schema,CN=Configuration,DC=domai
 
n,DC=com
 
msSFU30KeyAttributes: msSFU30Aliases
 
msSFU30KeyAttributes: msSFU30Name
 
msSFU30FieldSeparator: "        "
 
msSFU30IntraFieldSeparator: "        "
 
msSFU30SearchAttributes: msSFU30Aliases
 
msSFU30SearchAttributes: ipNetworkNumber
 
msSFU30SearchAttributes: msSFU30Name
 
msSFU30ResultAttributes: msSFU30Aliases
 
msSFU30ResultAttributes: ipNetworkNumber
 
msSFU30ResultAttributes: msSFU30Name
 
msSFU30MapFilter: (objectCategory=ipNetwork)
 
distinguishedName: CN=byname,CN=networks,CN=ypServ30,CN=RpcServices,CN=System,
 
DC=domain,DC=com
 
 
* record 18
 
dn: CN=Domain Controllers,CN=Users,DC=domain,DC=com
 
objectClass: top
 
objectClass: group
 
cn: Domain Controllers
 
description: All domain controllers in the domain
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3544
 
uSNChanged: 3544
 
name: Domain Controllers
 
objectGUID: e7ca88c6-0496-46ba-8633-5a5120b5f4c7
 
objectSid: S-1-5-21-2111727124-4264577813-266878271-516
 
adminCount: 1
 
sAMAccountName: Domain Controllers
 
sAMAccountType: 268435456
 
groupType: -2147483646
 
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
memberOf: CN=Denied RODC Password Replication Group,CN=Users,DC=domain,DC=com
 
distinguishedName: CN=Domain Controllers,CN=Users,DC=domain,DC=com
 
 
* record 19
 
dn: CN=bygid,CN=group,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: msSFU30NISMapConfig
 
cn: bygid
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3762
 
uSNChanged: 3762
 
showInAdvancedViewOnly: TRUE
 
name: bygid
 
objectGUID: 9f68fa4f-ee77-4356-b565-cb6c02316c56
 
objectCategory: CN=msSFU-30-NIS-Map-Config,CN=Schema,CN=Configuration,DC=domai
 
n,DC=com
 
msSFU30KeyAttributes: gidNumber
 
msSFU30FieldSeparator:: Og==
 
msSFU30IntraFieldSeparator: ,
 
msSFU30SearchAttributes: memberUid
 
msSFU30SearchAttributes: gidNumber
 
msSFU30SearchAttributes: unixUserPassword
 
msSFU30SearchAttributes: msSFU30Name
 
msSFU30ResultAttributes: memberUid
 
msSFU30ResultAttributes: gidNumber
 
msSFU30ResultAttributes: unixUserPassword
 
msSFU30ResultAttributes: msSFU30Name
 
msSFU30MapFilter: (&(objectCategory=group)(gidNumber=*))
 
distinguishedName: CN=bygid,CN=group,CN=ypServ30,CN=RpcServices,CN=System,DC=d
 
omain,DC=com
 
 
* record 20
 
dn: CN=Meetings,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: Meetings
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3499
 
uSNChanged: 3499
 
showInAdvancedViewOnly: TRUE
 
name: Meetings
 
objectGUID: 68d4b6be-fa2a-4e60-8993-dec61553256f
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=Meetings,CN=System,DC=domain,DC=com
 
 
* record 21
 
dn: CN=Policies,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: Policies
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3501
 
uSNChanged: 3501
 
showInAdvancedViewOnly: TRUE
 
name: Policies
 
objectGUID: 11db0d3a-036f-459c-b3d6-35d404231faa
 
systemFlags: -1946157056
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=Policies,CN=System,DC=domain,DC=com
 
 
* record 22
 
dn: CN=f607fd87-80cf-45e2-890b-6cf97ec0e284,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: f607fd87-80cf-45e2-890b-6cf97ec0e284
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3411
 
uSNChanged: 3411
 
showInAdvancedViewOnly: TRUE
 
name: f607fd87-80cf-45e2-890b-6cf97ec0e284
 
objectGUID: 9ea66afe-6420-4706-ac1a-1401877bd70e
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=f607fd87-80cf-45e2-890b-6cf97ec0e284,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 23
 
dn: CN=FileLinks,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: fileLinkTracking
 
cn: FileLinks
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3473
 
uSNChanged: 3473
 
showInAdvancedViewOnly: TRUE
 
name: FileLinks
 
objectGUID: 28b420c7-5450-4ed1-b98c-6e4b620a7006
 
systemFlags: -1946157056
 
objectCategory: CN=File-Link-Tracking,CN=Schema,CN=Configuration,DC=domain,DC=
 
com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=FileLinks,CN=System,DC=domain,DC=com
 
 
* record 24
 
dn: CN=Schema Admins,CN=Users,DC=domain,DC=com
 
objectClass: top
 
objectClass: group
 
cn: Schema Admins
 
description: Designated administrators of the schema
 
member: CN=Administrator,CN=Users,DC=domain,DC=com
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3551
 
uSNChanged: 3551
 
name: Schema Admins
 
objectGUID: 1b374958-3610-49ae-8ff0-53b80a348449
 
objectSid: S-1-5-21-2111727124-4264577813-266878271-518
 
adminCount: 1
 
sAMAccountName: Schema Admins
 
sAMAccountType: 268435456
 
groupType: -2147483640
 
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
memberOf: CN=Denied RODC Password Replication Group,CN=Users,DC=domain,DC=com
 
distinguishedName: CN=Schema Admins,CN=Users,DC=domain,DC=com
 
 
* record 25
 
dn: CN=Cert Publishers,CN=Users,DC=domain,DC=com
 
objectClass: top
 
objectClass: group
 
cn: Cert Publishers
 
description: Members of this group are permitted to publish certificates to th
 
e directory
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3550
 
uSNChanged: 3550
 
name: Cert Publishers
 
objectGUID: 2298ab02-d9fa-4bd2-ae5c-ef975dd8679c
 
objectSid: S-1-5-21-2111727124-4264577813-266878271-517
 
sAMAccountName: Cert Publishers
 
sAMAccountType: 536870912
 
groupType: -2147483644
 
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
memberOf: CN=Denied RODC Password Replication Group,CN=Users,DC=domain,DC=com
 
distinguishedName: CN=Cert Publishers,CN=Users,DC=domain,DC=com
 
 
* record 26
 
dn: CN=byuid,CN=passwd,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: msSFU30NISMapConfig
 
cn: byuid
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3755
 
uSNChanged: 3755
 
showInAdvancedViewOnly: TRUE
 
name: byuid
 
objectGUID: 4dac98dd-591f-4f27-ad3b-801be926ca14
 
objectCategory: CN=msSFU-30-NIS-Map-Config,CN=Schema,CN=Configuration,DC=domai
 
n,DC=com
 
msSFU30KeyAttributes: uidNumber
 
msSFU30FieldSeparator:: Og==
 
msSFU30SearchAttributes: loginShell
 
msSFU30SearchAttributes: unixHomeDirectory
 
msSFU30SearchAttributes: gecos
 
msSFU30SearchAttributes: gidNumber
 
msSFU30SearchAttributes: uidNumber
 
msSFU30SearchAttributes: unixUserPassword
 
msSFU30SearchAttributes: msSFU30Name
 
msSFU30ResultAttributes: loginShell
 
msSFU30ResultAttributes: unixHomeDirectory
 
msSFU30ResultAttributes: gecos
 
msSFU30ResultAttributes: gidNumber
 
msSFU30ResultAttributes: uidNumber
 
msSFU30ResultAttributes: unixUserPassword
 
msSFU30ResultAttributes: msSFU30Name
 
msSFU30MapFilter: (uidNumber=*)
 
distinguishedName: CN=byuid,CN=passwd,CN=ypServ30,CN=RpcServices,CN=System,DC=
 
domain,DC=com
 
 
* record 27
 
dn: CN=Account Operators,CN=Builtin,DC=domain,DC=com
 
objectClass: top
 
objectClass: group
 
cn: Account Operators
 
description: Members can administer domain user and group accounts
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3565
 
uSNChanged: 3565
 
name: Account Operators
 
objectGUID: 81264a1a-282b-46c1-89c8-f13b48c16d47
 
objectSid: S-1-5-32-548
 
adminCount: 1
 
sAMAccountName: Account Operators
 
sAMAccountType: 536870912
 
systemFlags: -1946157056
 
groupType: -2147483643
 
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=Account Operators,CN=Builtin,DC=domain,DC=com
 
 
* record 28
 
dn: CN=Cryptographic Operators,CN=Builtin,DC=domain,DC=com
 
objectClass: top
 
objectClass: group
 
cn: Cryptographic Operators
 
description: Members are authorized to perform cryptographic operations.
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3580
 
uSNChanged: 3580
 
name: Cryptographic Operators
 
objectGUID: f3087f24-0a35-4bed-aac0-b9e45a7813de
 
objectSid: S-1-5-32-569
 
sAMAccountName: Cryptographic Operators
 
sAMAccountType: 536870912
 
systemFlags: -1946157056
 
groupType: -2147483643
 
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=Cryptographic Operators,CN=Builtin,DC=domain,DC=com
 
 
* record 29
 
dn: CN=Print Operators,CN=Builtin,DC=domain,DC=com
 
objectClass: top
 
objectClass: group
 
cn: Print Operators
 
description: Members can administer domain printers
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3567
 
uSNChanged: 3567
 
name: Print Operators
 
objectGUID: b9c6be07-f681-414e-bf95-8963746ec607
 
objectSid: S-1-5-32-550
 
adminCount: 1
 
sAMAccountName: Print Operators
 
sAMAccountType: 536870912
 
systemFlags: -1946157056
 
groupType: -2147483643
 
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=Print Operators,CN=Builtin,DC=domain,DC=com
 
 
* record 30
 
dn: CN=Replicator,CN=Builtin,DC=domain,DC=com
 
objectClass: top
 
objectClass: group
 
cn: Replicator
 
description: Supports file replication in a domain
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3569
 
uSNChanged: 3569
 
name: Replicator
 
objectGUID: e0ca8b50-400d-491e-ac76-a12272ec5ee1
 
objectSid: S-1-5-32-552
 
adminCount: 1
 
sAMAccountName: Replicator
 
sAMAccountType: 536870912
 
systemFlags: -1946157056
 
groupType: -2147483643
 
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=Replicator,CN=Builtin,DC=domain,DC=com
 
 
* record 31
 
dn: CN=6E157EDF-4E72-4052-A82A-EC3F91021A22,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 6E157EDF-4E72-4052-A82A-EC3F91021A22
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3452
 
uSNChanged: 3452
 
showInAdvancedViewOnly: TRUE
 
name: 6E157EDF-4E72-4052-A82A-EC3F91021A22
 
objectGUID: 409b6005-e303-419e-a4de-0efdcd74cdba
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=6E157EDF-4E72-4052-A82A-EC3F91021A22,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 32
 
dn: CN=passwd,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: passwd
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3754
 
uSNChanged: 3754
 
showInAdvancedViewOnly: TRUE
 
name: passwd
 
objectGUID: 9c0dd4d8-07ef-4b3b-b7e0-8e2fa835cff3
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=passwd,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC
 
=com
 
 
* record 33
 
dn: CN=Terminal Server License Servers,CN=Builtin,DC=domain,DC=com
 
objectClass: top
 
objectClass: group
 
cn: Terminal Server License Servers
 
description: Members of this group can update user accounts in Active Director
 
y with information about license issuance, for the purpose of tracking and re
 
porting TS Per User CAL usage
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3577
 
uSNChanged: 3577
 
name: Terminal Server License Servers
 
objectGUID: d5c04e35-4917-4ba3-8e39-4ad5d87f5344
 
objectSid: S-1-5-32-561
 
sAMAccountName: Terminal Server License Servers
 
sAMAccountType: 536870912
 
systemFlags: -1946157056
 
groupType: -2147483643
 
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=Terminal Server License Servers,CN=Builtin,DC=domain,DC=
 
com
 
 
* record 34
 
dn: CN={6AC1786C-016F-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
objectClass: groupPolicyContainer
 
cn: {6AC1786C-016F-11D2-945F-00C04FB984F9}
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
displayName: Default Domain Controllers Policy
 
uSNCreated: 3588
 
uSNChanged: 3588
 
showInAdvancedViewOnly: TRUE
 
name: {6AC1786C-016F-11D2-945F-00C04FB984F9}
 
objectGUID: c07e096b-f661-4f70-9f28-f22b8f96232b
 
flags: 0
 
versionNumber: 0
 
systemFlags: -1946157056
 
objectCategory: CN=Group-Policy-Container,CN=Schema,CN=Configuration,DC=domain
 
,DC=com
 
isCriticalSystemObject: TRUE
 
gPCFunctionalityVersion: 2
 
gPCFileSysPath: \\domain.com\sysvol\domain.com\Policies\{6AC1786C-016F-11D2-94
 
5F-00C04FB984F9}
 
gPCMachineExtensionNames: [{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4F
 
B-11D0-A0D0-00A0C90F574B}]
 
distinguishedName: CN={6AC1786C-016F-11D2-945F-00C04FB984F9},CN=Policies,CN=Sy
 
stem,DC=domain,DC=com
 
 
* record 35
 
dn: CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: DomainUpdates
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3396
 
uSNChanged: 3396
 
showInAdvancedViewOnly: TRUE
 
name: DomainUpdates
 
objectGUID: b97228cb-dbc3-407b-bc17-090788ddd5db
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=DomainUpdates,CN=System,DC=domain,DC=com
 
 
* record 36
 
dn: CN=Performance Monitor Users,CN=Builtin,DC=domain,DC=com
 
objectClass: top
 
objectClass: group
 
cn: Performance Monitor Users
 
description: Members of this group can access performance counter data locally
 
  and remotely
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3574
 
uSNChanged: 3574
 
name: Performance Monitor Users
 
objectGUID: f583e073-0123-4559-82e2-5d4f60be1164
 
objectSid: S-1-5-32-558
 
sAMAccountName: Performance Monitor Users
 
sAMAccountType: 536870912
 
systemFlags: -1946157056
 
groupType: -2147483643
 
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=Performance Monitor Users,CN=Builtin,DC=domain,DC=com
 
 
* record 37
 
dn: CN=AppCategories,CN=Default Domain Policy,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: classStore
 
cn: AppCategories
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3390
 
uSNChanged: 3390
 
showInAdvancedViewOnly: TRUE
 
name: AppCategories
 
objectGUID: 0730eb32-e5c2-485f-a25c-ade21cc86fca
 
objectCategory: CN=Class-Store,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=AppCategories,CN=Default Domain Policy,CN=System,DC=doma
 
in,DC=com
 
 
* record 38
 
dn: CN=ipsecPolicy{72385236-70FA-11D1-864C-14A300000000},CN=IP Security,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: ipsecBase
 
objectClass: ipsecPolicy
 
cn: ipsecPolicy{72385236-70FA-11D1-864C-14A300000000}
 
description: Communicate normally (unsecured). Use the default response rule t
 
o negotiate with servers that request security. Only the requested protocol a
 
nd port traffic with that server is secured.
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
uSNCreated: 3487
 
showInAdvancedViewOnly: TRUE
 
name: ipsecPolicy{72385236-70FA-11D1-864C-14A300000000}
 
objectGUID: 15836a67-1096-48c9-ab1d-f06b1d323c9c
 
ipsecName: Client (Respond Only)
 
ipsecID: {72385236-70FA-11D1-864C-14A300000000}
 
ipsecDataType: 598
 
ipsecData:: YyEgIkxP0RGGOwCgJI0wIQQAAAAwKgAAAA==
 
objectCategory: CN=Ipsec-Policy,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
ipsecISAKMPReference: CN=ipsecISAKMPPolicy{72385237-70FA-11D1-864C-14A30000000
 
0},CN=IP Security,CN=System,DC=domain,DC=com
 
whenChanged: 20141111041354.0Z
 
ipsecNFAReference: CN=ipsecNFA{59319C04-5EE3-11D2-ACE8-0060B0ECCA17},CN=IP Sec
 
urity,CN=System,DC=domain,DC=com
 
uSNChanged: 3705
 
distinguishedName: CN=ipsecPolicy{72385236-70FA-11D1-864C-14A300000000},CN=IP
 
Security,CN=System,DC=domain,DC=com
 
 
* record 39
 
dn: CN=ComPartitions,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: ComPartitions
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3387
 
uSNChanged: 3387
 
showInAdvancedViewOnly: TRUE
 
name: ComPartitions
 
objectGUID: 5314f926-eb8f-4489-9bcf-6e0781b47919
 
systemFlags: -1946157056
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=ComPartitions,CN=System,DC=domain,DC=com
 
 
* record 40
 
dn: CN=bootparams,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: bootparams
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3721
 
uSNChanged: 3721
 
showInAdvancedViewOnly: TRUE
 
name: bootparams
 
objectGUID: 5c87e6be-fa06-4734-8667-d3c703eee5ad
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=bootparams,CN=ypServ30,CN=RpcServices,CN=System,DC=domai
 
n,DC=com
 
 
* record 41
 
dn: CN=Denied RODC Password Replication Group,CN=Users,DC=domain,DC=com
 
objectClass: top
 
objectClass: group
 
cn: Denied RODC Password Replication Group
 
description: Members in this group cannot have their passwords replicated to a
 
ny read-only domain controllers in the domain
 
member: CN=Read-only Domain Controllers,CN=Users,DC=domain,DC=com
 
member: CN=Group Policy Creator Owners,CN=Users,DC=domain,DC=com
 
member: CN=Domain Admins,CN=Users,DC=domain,DC=com
 
member: CN=Cert Publishers,CN=Users,DC=domain,DC=com
 
member: CN=Enterprise Admins,CN=Users,DC=domain,DC=com
 
member: CN=Schema Admins,CN=Users,DC=domain,DC=com
 
member: CN=Domain Controllers,CN=Users,DC=domain,DC=com
 
member: CN=krbtgt,CN=Users,DC=domain,DC=com
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3557
 
uSNChanged: 3557
 
name: Denied RODC Password Replication Group
 
objectGUID: 85e80559-bb4b-42d8-877e-6e859fab539b
 
objectSid: S-1-5-21-2111727124-4264577813-266878271-572
 
sAMAccountName: Denied RODC Password Replication Group
 
sAMAccountType: 536870912
 
groupType: -2147483644
 
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=Denied RODC Password Replication Group,CN=Users,DC=domai
 
n,DC=com
 
 
* record 42
 
dn: CN=group,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: group
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3761
 
uSNChanged: 3761
 
showInAdvancedViewOnly: TRUE
 
name: group
 
objectGUID: 5a824733-5f0e-40b1-b255-41db8f5f4a38
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=group,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=
 
com
 
 
* record 43
 
dn: CN=hosts,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: hosts
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3732
 
uSNChanged: 3732
 
showInAdvancedViewOnly: TRUE
 
name: hosts
 
objectGUID: 1096f136-1c7b-4c92-a32b-958e07f32d53
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=hosts,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=
 
com
 
 
* record 44
 
dn: CN=2951353e-d102-4ea5-906c-54247eeec741,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 2951353e-d102-4ea5-906c-54247eeec741
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3455
 
uSNChanged: 3455
 
showInAdvancedViewOnly: TRUE
 
name: 2951353e-d102-4ea5-906c-54247eeec741
 
objectGUID: 4b5d3498-46ab-45e9-99e9-f1ab1cb96a89
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=2951353e-d102-4ea5-906c-54247eeec741,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 45
 
dn: CN=6bcd5689-8314-11d6-977b-00c04f613221,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 6bcd5689-8314-11d6-977b-00c04f613221
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3442
 
uSNChanged: 3442
 
showInAdvancedViewOnly: TRUE
 
name: 6bcd5689-8314-11d6-977b-00c04f613221
 
objectGUID: 23eb1817-1566-4975-a790-f4f69564d8a8
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=6bcd5689-8314-11d6-977b-00c04f613221,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 46
 
dn: CN=a86fe12a-0f62-4e2a-b271-d27f601f8182,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: a86fe12a-0f62-4e2a-b271-d27f601f8182
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3406
 
uSNChanged: 3406
 
showInAdvancedViewOnly: TRUE
 
name: a86fe12a-0f62-4e2a-b271-d27f601f8182
 
objectGUID: 4610132d-d624-4ec2-9403-75be3db5eaec
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=a86fe12a-0f62-4e2a-b271-d27f601f8182,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 47
 
dn: CN=0b7fb422-3609-4587-8c2e-94b10f67d1bf,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 0b7fb422-3609-4587-8c2e-94b10f67d1bf
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3453
 
uSNChanged: 3453
 
showInAdvancedViewOnly: TRUE
 
name: 0b7fb422-3609-4587-8c2e-94b10f67d1bf
 
objectGUID: 4fbf7718-9b10-4556-a8a0-447b7c3a7ed5
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=0b7fb422-3609-4587-8c2e-94b10f67d1bf,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 48
 
dn: CN=5c82b233-75fc-41b3-ac71-c69592e6bf15,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 5c82b233-75fc-41b3-ac71-c69592e6bf15
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3417
 
uSNChanged: 3417
 
showInAdvancedViewOnly: TRUE
 
name: 5c82b233-75fc-41b3-ac71-c69592e6bf15
 
objectGUID: 302369c0-6e7f-4cbf-b0ea-236082598d4a
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=5c82b233-75fc-41b3-ac71-c69592e6bf15,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 49
 
dn: CN=Read-only Domain Controllers,CN=Users,DC=domain,DC=com
 
objectClass: top
 
objectClass: group
 
cn: Read-only Domain Controllers
 
description: Members of this group are Read-Only Domain Controllers in the dom
 
ain
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3554
 
uSNChanged: 3554
 
name: Read-only Domain Controllers
 
objectGUID: 2e4b44be-01f9-40f6-9dac-0113b404bd7d
 
objectSid: S-1-5-21-2111727124-4264577813-266878271-521
 
adminCount: 1
 
sAMAccountName: Read-Only Domain Controllers
 
sAMAccountType: 268435456
 
groupType: -2147483646
 
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
memberOf: CN=Denied RODC Password Replication Group,CN=Users,DC=domain,DC=com
 
distinguishedName: CN=Read-only Domain Controllers,CN=Users,DC=domain,DC=com
 
 
* record 50
 
dn: CN=ipsecNegotiationPolicy{72385233-70FA-11D1-864C-14A300000000},CN=IP Security,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: ipsecBase
 
objectClass: ipsecNegotiationPolicy
 
cn: ipsecNegotiationPolicy{72385233-70FA-11D1-864C-14A300000000}
 
description: Accepts unsecured communication, but requests clients to establis
 
h trust and security methods.  Will communicate insecurely to untrusted clien
 
ts if they do not respond to request.
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3482
 
uSNChanged: 3482
 
showInAdvancedViewOnly: TRUE
 
name: ipsecNegotiationPolicy{72385233-70FA-11D1-864C-14A300000000}
 
objectGUID: 6a1a3ac3-73b5-4732-9e91-6b334e7b4143
 
ipsecName: Request Security (Optional)
 
ipsecID: {72385233-70FA-11D1-864C-14A300000000}
 
ipsecDataType: 598
 
ipsecData:: uSDcgMgu0RGongCgJI0wIZQBAAAFAAAAhAMAAKCGAQAAAAAAAAAAAAEAAAADAAAAAg
 
AAAAIAAABAAAAACAAAAFwAUwBlAHIAdgBpAGMAZQBzAFwAUABvAGwAaQBjAHkAQQBnAGUAbgCEAwA
 
AoIYBAAAAAAAAAAAAAQAAAAEAAAACAAAAAgAAAEAAAAAIAAAAAAAAAFX0sjdcAEwAbwBjABUADwAB
 
AAgAIAJlACACZQBYxHYF+M54BSwBAACghgEAAAAAAAAAAAABAAAAAgAAAAAAAAABAAAAQAAAAAgAA
 
AAtADkAQQBDADEALQA0AEQANgBEAC0AQQAxAEIAMAAtADEANQA4ADcALAEAAKCGAQAAAAAAAAAAAA
 
EAAAABAAAAAAAAAAEAAABAAAAACAAAAGUAdABcAFMAZQByAHYAaQBjAGUAcwBcAFAAbwBsAGkAYwB
 
5AEEAZwAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAABAAAAAgAAAEAAAAAIAAAANgBDAC0AMwBCADkA
 
NwAtADQANQA1ADIALQA4AEUANAA1AC0AOQA5AAA=
 
ipsecOwnersReference: CN=ipsecNFA{72385232-70FA-11D1-864C-14A300000000},CN=IP
 
Security,CN=System,DC=domain,DC=com
 
objectCategory: CN=Ipsec-Negotiation-Policy,CN=Schema,CN=Configuration,DC=doma
 
in,DC=com
 
isCriticalSystemObject: TRUE
 
iPSECNegotiationPolicyType: {62F49E10-6C37-11D1-864C-14A300000000}
 
iPSECNegotiationPolicyAction: {3F91A81A-7647-11D1-864D-D46A00000000}
 
distinguishedName: CN=ipsecNegotiationPolicy{72385233-70FA-11D1-864C-14A300000
 
000},CN=IP Security,CN=System,DC=domain,DC=com
 
 
* record 51
 
dn: CN=ipsecNegotiationPolicy{59319BDF-5EE3-11D2-ACE8-0060B0ECCA17},CN=IP Security,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: ipsecBase
 
objectClass: ipsecNegotiationPolicy
 
cn: ipsecNegotiationPolicy{59319BDF-5EE3-11D2-ACE8-0060B0ECCA17}
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3484
 
uSNChanged: 3484
 
showInAdvancedViewOnly: TRUE
 
name: ipsecNegotiationPolicy{59319BDF-5EE3-11D2-ACE8-0060B0ECCA17}
 
objectGUID: 25fdc8b3-2616-4322-82a5-d45c350e91b6
 
ipsecID: {59319BDF-5EE3-11D2-ACE8-0060B0ECCA17}
 
ipsecDataType: 598
 
ipsecData:: uSDcgMgu0RGongCgJI0wIeQBAAAGAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAADAAAAAg
 
AAAAIAAABAAAAACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
 
AAAAAAAAAAAAAAAAAAQAAAAMAAAABAAAAAgAAAEAAAAAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
 
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAQAAAAIAAAACAAAAQAAAAAgAA
 
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
 
EAAAABAAAAAQAAAAIAAABAAAAACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
 
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAIAAAAAAAAAAQAAAEAAAAAIAAAAAAAAAAAAAAAAAAAA
 
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAQAAAAAAAAABA
 
AAAQAAAAAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==
 
ipsecOwnersReference: CN=ipsecNFA{59319BE2-5EE3-11D2-ACE8-0060B0ECCA17},CN=IP
 
Security,CN=System,DC=domain,DC=com
 
objectCategory: CN=Ipsec-Negotiation-Policy,CN=Schema,CN=Configuration,DC=doma
 
in,DC=com
 
isCriticalSystemObject: TRUE
 
iPSECNegotiationPolicyType: {62F49E13-6C37-11D1-864C-14A300000000}
 
iPSECNegotiationPolicyAction: {8A171DD3-77E3-11D1-8659-A04F00000000}
 
distinguishedName: CN=ipsecNegotiationPolicy{59319BDF-5EE3-11D2-ACE8-0060B0ECC
 
A17},CN=IP Security,CN=System,DC=domain,DC=com
 
 
* record 52
 
dn: CN=ipsecPolicy{7238523C-70FA-11D1-864C-14A300000000},CN=IP Security,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: ipsecBase
 
objectClass: ipsecPolicy
 
cn: ipsecPolicy{7238523C-70FA-11D1-864C-14A300000000}
 
description: For all IP traffic, always require security using Kerberos trust.
 
  Do NOT allow unsecured communication with untrusted clients.
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
uSNCreated: 3491
 
showInAdvancedViewOnly: TRUE
 
name: ipsecPolicy{7238523C-70FA-11D1-864C-14A300000000}
 
objectGUID: 7fcf6903-343f-4194-a0ab-3ff2034a3d8f
 
ipsecName: Secure Server (Require Security)
 
ipsecID: {7238523C-70FA-11D1-864C-14A300000000}
 
ipsecDataType: 598
 
ipsecData:: YyEgIkxP0RGGOwCgJI0wIQQAAAAwKgAAAA==
 
ipsecNFAReference: CN=ipsecNFA{594272FD-071D-11D3-AD22-0060B0ECCA17},CN=IP Sec
 
urity,CN=System,DC=domain,DC=com
 
ipsecNFAReference: CN=ipsecNFA{59319BF3-5EE3-11D2-ACE8-0060B0ECCA17},CN=IP Sec
 
urity,CN=System,DC=domain,DC=com
 
ipsecNFAReference: CN=ipsecNFA{7238523E-70FA-11D1-864C-14A300000000},CN=IP Sec
 
urity,CN=System,DC=domain,DC=com
 
objectCategory: CN=Ipsec-Policy,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
ipsecISAKMPReference: CN=ipsecISAKMPPolicy{7238523D-70FA-11D1-864C-14A30000000
 
0},CN=IP Security,CN=System,DC=domain,DC=com
 
whenChanged: 20141111041354.0Z
 
uSNChanged: 3710
 
distinguishedName: CN=ipsecPolicy{7238523C-70FA-11D1-864C-14A300000000},CN=IP
 
Security,CN=System,DC=domain,DC=com
 
 
* record 53
 
dn: CN=6bcd5680-8314-11d6-977b-00c04f613221,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 6bcd5680-8314-11d6-977b-00c04f613221
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3433
 
uSNChanged: 3433
 
showInAdvancedViewOnly: TRUE
 
name: 6bcd5680-8314-11d6-977b-00c04f613221
 
objectGUID: 84390c99-09be-4d42-bac1-39ce8d9c14a4
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=6bcd5680-8314-11d6-977b-00c04f613221,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 54
 
dn: CN=byname,CN=ethers,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: msSFU30NISMapConfig
 
cn: byname
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3738
 
uSNChanged: 3738
 
showInAdvancedViewOnly: TRUE
 
name: byname
 
objectGUID: 705e8f8e-7546-4b32-beef-7d06bf474ca8
 
objectCategory: CN=msSFU-30-NIS-Map-Config,CN=Schema,CN=Configuration,DC=domai
 
n,DC=com
 
msSFU30KeyAttributes: msSFU30Name
 
msSFU30FieldSeparator: "        "
 
msSFU30SearchAttributes: msSFU30Name
 
msSFU30SearchAttributes: macAddress
 
msSFU30ResultAttributes: msSFU30Name
 
msSFU30ResultAttributes: macAddress
 
msSFU30MapFilter: (&(objectCategory=Device)(macAddress=*))
 
distinguishedName: CN=byname,CN=ethers,CN=ypServ30,CN=RpcServices,CN=System,DC
 
=domain,DC=com
 
 
* record 55
 
dn: CN=IP Security,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: IP Security
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3476
 
uSNChanged: 3476
 
showInAdvancedViewOnly: TRUE
 
name: IP Security
 
objectGUID: 09654ce1-62f4-491e-9c58-ffed83b67e47
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=IP Security,CN=System,DC=domain,DC=com
 
 
* record 56
 
dn: CN=6bcd568c-8314-11d6-977b-00c04f613221,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 6bcd568c-8314-11d6-977b-00c04f613221
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3445
 
uSNChanged: 3445
 
showInAdvancedViewOnly: TRUE
 
name: 6bcd568c-8314-11d6-977b-00c04f613221
 
objectGUID: 597b85a4-9e97-4dcd-ad3d-abfa452b0ad8
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=6bcd568c-8314-11d6-977b-00c04f613221,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 57
 
dn: CN=6bcd5685-8314-11d6-977b-00c04f613221,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 6bcd5685-8314-11d6-977b-00c04f613221
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3438
 
uSNChanged: 3438
 
showInAdvancedViewOnly: TRUE
 
name: 6bcd5685-8314-11d6-977b-00c04f613221
 
objectGUID: 341f98b7-9ba0-4023-84d2-10fb2a536650
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=6bcd5685-8314-11d6-977b-00c04f613221,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 58
 
dn: CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
objectClass: groupPolicyContainer
 
cn: {31B2F340-016D-11D2-945F-00C04FB984F9}
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
displayName: Default Domain Policy
 
uSNCreated: 3585
 
uSNChanged: 3585
 
showInAdvancedViewOnly: TRUE
 
name: {31B2F340-016D-11D2-945F-00C04FB984F9}
 
objectGUID: a59367b4-4512-42ab-9e8e-71a761f6e893
 
flags: 0
 
versionNumber: 0
 
systemFlags: -1946157056
 
objectCategory: CN=Group-Policy-Container,CN=Schema,CN=Configuration,DC=domain
 
,DC=com
 
isCriticalSystemObject: TRUE
 
gPCFunctionalityVersion: 2
 
gPCFileSysPath: \\domain.com\sysvol\domain.com\Policies\{31B2F340-016D-11D2-94
 
5F-00C04FB984F9}
 
gPCMachineExtensionNames: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{53D6AB1B-248
 
8-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4
 
FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}{53D6AB1B-2
 
488-11D1-A28C-00C04FB94F17}]
 
gPCUserExtensionNames: [{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-1
 
1D2-842D-00C04FA372D4}][{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957E-509E-
 
11D1-A7CC-0000F87571E3}]
 
distinguishedName: CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=Sy
 
stem,DC=domain,DC=com
 
 
* record 59
 
dn: CN=WMIPolicy,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: WMIPolicy
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3507
 
uSNChanged: 3507
 
showInAdvancedViewOnly: TRUE
 
name: WMIPolicy
 
objectGUID: e3b25130-3d9b-4e24-8448-c4eba3e1cdb8
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=WMIPolicy,CN=System,DC=domain,DC=com
 
 
* record 60
 
dn: CN=ipsecNegotiationPolicy{7238523F-70FA-11D1-864C-14A300000000},CN=IP Security,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: ipsecBase
 
objectClass: ipsecNegotiationPolicy
 
cn: ipsecNegotiationPolicy{7238523F-70FA-11D1-864C-14A300000000}
 
description: Accepts unsecured communication, but always requires clients to e
 
stablish trust and security methods.  Will NOT communicate with untrusted cli
 
ents.
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3496
 
uSNChanged: 3496
 
showInAdvancedViewOnly: TRUE
 
name: ipsecNegotiationPolicy{7238523F-70FA-11D1-864C-14A300000000}
 
objectGUID: 7ba39c30-1bef-4d96-bf57-dc46bc71011d
 
ipsecName: Require Security
 
ipsecID: {7238523F-70FA-11D1-864C-14A300000000}
 
ipsecDataType: 598
 
ipsecData:: uSDcgMgu0RGongCgJI0wIUQBAAAEAAAAhAMAAKCGAQAAAAAAAAAAAAEAAAADAAAAAg
 
AAAAIAAABAAAAACAAAAHUAcgByAGUAbgB0AEMAbwBuAHQAcgBvAGwAUwBlAHQAXABTAGUAcgCEAwA
 
AoIYBAAAAAAAAAAAAAQAAAAMAAAABAAAAAgAAAEAAAAAIAAAAcABzAGUAYwBOAEYAQQB7ADcAMgAz
 
ADgANQAyADMARQAtADcAMABGAIQDAACghgEAAAAAAAAAAAABAAAAAQAAAAIAAAACAAAAQAAAAAgAA
 
ABsAGkAYwB5AFwATABvAGMAYQBsAFwAaQBwAHMAZQBjAE4ARgBBAHsAhAMAAKCGAQAAAAAAAAAAAA
 
EAAAABAAAAAQAAAAIAAABAAAAACAAAAGUAYwBOAEYAQQB7AEIARgBDADcAQwAzADUAQQAtAEIANQA
 
5ADIALQAA
 
ipsecOwnersReference: CN=ipsecNFA{7238523E-70FA-11D1-864C-14A300000000},CN=IP
 
Security,CN=System,DC=domain,DC=com
 
objectCategory: CN=Ipsec-Negotiation-Policy,CN=Schema,CN=Configuration,DC=doma
 
in,DC=com
 
isCriticalSystemObject: TRUE
 
iPSECNegotiationPolicyType: {62F49E10-6C37-11D1-864C-14A300000000}
 
iPSECNegotiationPolicyAction: {3F91A81A-7647-11D1-864D-D46A00000000}
 
distinguishedName: CN=ipsecNegotiationPolicy{7238523F-70FA-11D1-864C-14A300000
 
000},CN=IP Security,CN=System,DC=domain,DC=com
 
 
* record 61
 
dn: CN=RID Manager$,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: rIDManager
 
cn: RID Manager$
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3503
 
showInAdvancedViewOnly: TRUE
 
name: RID Manager$
 
objectGUID: 303cae2f-46ad-4cb5-99ea-08d9b8f5b589
 
rIDAvailablePool: 1600-1073741823
 
systemFlags: -1946157056
 
objectCategory: CN=RID-Manager,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
fSMORoleOwner: CN=NTDS Settings,CN=VIRGIN,CN=Servers,CN=Default-First-Site-Nam
 
e,CN=Sites,CN=Configuration,DC=domain,DC=com
 
uSNChanged: 3598
 
distinguishedName: CN=RID Manager$,CN=System,DC=domain,DC=com
 
 
* record 62
 
dn: CN=ipsecFilter{7238523A-70FA-11D1-864C-14A300000000},CN=IP Security,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: ipsecBase
 
objectClass: ipsecFilter
 
cn: ipsecFilter{7238523A-70FA-11D1-864C-14A300000000}
 
description: Matches all IP packets from this computer to any other computer,
 
except broadcast, multicast, Kerberos, RSVP and ISAKMP (IKE).
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
uSNCreated: 3483
 
showInAdvancedViewOnly: TRUE
 
name: ipsecFilter{7238523A-70FA-11D1-864C-14A300000000}
 
objectGUID: 0c327563-9ebc-48ff-ad4b-74244751f442
 
ipsecName: All IP Traffic
 
ipsecID: {7238523A-70FA-11D1-864C-14A300000000}
 
ipsecDataType: 598
 
ipsecData:: tSDcgMgu0RGongCgJI0wIUoAAAABAAAAAgAAAAAAAgAAAAAAAgAAAAAA3ZsxWeNe0h
 
Gs6ABgsOzKFwEAAAAAAAAA/////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=
 
ipsecOwnersReference: CN=ipsecNFA{72385232-70FA-11D1-864C-14A300000000},CN=IP
 
Security,CN=System,DC=domain,DC=com
 
ipsecOwnersReference: CN=ipsecNFA{7238523E-70FA-11D1-864C-14A300000000},CN=IP
 
Security,CN=System,DC=domain,DC=com
 
objectCategory: CN=Ipsec-Filter,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
whenChanged: 20141111041353.0Z
 
uSNChanged: 3699
 
distinguishedName: CN=ipsecFilter{7238523A-70FA-11D1-864C-14A300000000},CN=IP
 
Security,CN=System,DC=domain,DC=com
 
 
* record 63
 
dn: CN=Password Settings Container,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: msDS-PasswordSettingsContainer
 
cn: Password Settings Container
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3500
 
uSNChanged: 3500
 
showInAdvancedViewOnly: TRUE
 
name: Password Settings Container
 
objectGUID: 2736b0f9-1a25-41bf-86eb-304d0442d07d
 
systemFlags: -1946157056
 
objectCategory: CN=ms-DS-Password-Settings-Container,CN=Schema,CN=Configuratio
 
n,DC=domain,DC=com
 
distinguishedName: CN=Password Settings Container,CN=System,DC=domain,DC=com
 
 
* record 64
 
dn: CN=Default Domain Policy,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: leaf
 
objectClass: domainPolicy
 
cn: Default Domain Policy
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3389
 
uSNChanged: 3389
 
showInAdvancedViewOnly: TRUE
 
name: Default Domain Policy
 
objectGUID: d24d9512-f15f-4f07-963b-fabfc80f6c06
 
objectCategory: CN=Domain-Policy,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=Default Domain Policy,CN=System,DC=domain,DC=com
 
 
* record 65
 
dn: CN=S-1-5-11,CN=ForeignSecurityPrincipals,DC=domain,DC=com
 
objectClass: top
 
objectClass: foreignSecurityPrincipal
 
cn: S-1-5-11
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3560
 
uSNChanged: 3560
 
showInAdvancedViewOnly: TRUE
 
name: S-1-5-11
 
objectGUID: 0346eccf-ee74-4ce7-af73-ba251b7c64b3
 
objectSid: S-1-5-11
 
objectCategory: CN=Foreign-Security-Principal,CN=Schema,CN=Configuration,DC=do
 
main,DC=com
 
memberOf: CN=Pre-Windows 2000 Compatible Access,CN=Builtin,DC=domain,DC=com
 
memberOf: CN=Users,CN=Builtin,DC=domain,DC=com
 
distinguishedName: CN=S-1-5-11,CN=ForeignSecurityPrincipals,DC=domain,DC=com
 
 
* record 66
 
dn: CN=byaddr,CN=netmasks,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: msSFU30NISMapConfig
 
cn: byaddr
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3730
 
uSNChanged: 3730
 
showInAdvancedViewOnly: TRUE
 
name: byaddr
 
objectGUID: 6763635a-3ff2-4fda-b49a-3bb92124d354
 
objectCategory: CN=msSFU-30-NIS-Map-Config,CN=Schema,CN=Configuration,DC=domai
 
n,DC=com
 
msSFU30KeyAttributes: ipNetworkNumber
 
msSFU30FieldSeparator: "        "
 
msSFU30IntraFieldSeparator: "        "
 
msSFU30SearchAttributes: ipNetmaskNumber
 
msSFU30SearchAttributes: ipNetworkNumber
 
msSFU30SearchAttributes: msSFU30Name
 
msSFU30ResultAttributes: ipNetmaskNumber
 
msSFU30ResultAttributes: ipNetworkNumber
 
msSFU30MapFilter: (&(objectCategory=ipNetwork)(ipNetmaskNumber=*))
 
distinguishedName: CN=byaddr,CN=netmasks,CN=ypServ30,CN=RpcServices,CN=System,
 
DC=domain,DC=com
 
 
* record 67
 
dn: CN=6bcd568d-8314-11d6-977b-00c04f613221,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 6bcd568d-8314-11d6-977b-00c04f613221
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3446
 
uSNChanged: 3446
 
showInAdvancedViewOnly: TRUE
 
name: 6bcd568d-8314-11d6-977b-00c04f613221
 
objectGUID: 623cb953-b303-44c8-ad7d-ec635fbecdce
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=6bcd568d-8314-11d6-977b-00c04f613221,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 68
 
dn: CN=6bcd567d-8314-11d6-977b-00c04f613221,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 6bcd567d-8314-11d6-977b-00c04f613221
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3430
 
uSNChanged: 3430
 
showInAdvancedViewOnly: TRUE
 
name: 6bcd567d-8314-11d6-977b-00c04f613221
 
objectGUID: a40b03a8-69c9-444c-891f-f25ee9375a95
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=6bcd567d-8314-11d6-977b-00c04f613221,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 69
 
dn: CN=NTDS Quotas,DC=domain,DC=com
 
objectClass: top
 
objectClass: msDS-QuotaContainer
 
cn: NTDS Quotas
 
description: Quota specifications container
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3382
 
uSNChanged: 3382
 
showInAdvancedViewOnly: TRUE
 
name: NTDS Quotas
 
objectGUID: 5ee38f0f-2be8-44e2-93c5-6f5110d85ec0
 
systemFlags: -2147483648
 
objectCategory: CN=ms-DS-Quota-Container,CN=Schema,CN=Configuration,DC=domain,
 
DC=com
 
isCriticalSystemObject: TRUE
 
msDS-TombstoneQuotaFactor: 100
 
distinguishedName: CN=NTDS Quotas,DC=domain,DC=com
 
 
* record 70
 
dn: CN=ipsecISAKMPPolicy{72385231-70FA-11D1-864C-14A300000000},CN=IP Security,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: ipsecBase
 
objectClass: ipsecISAKMPPolicy
 
cn: ipsecISAKMPPolicy{72385231-70FA-11D1-864C-14A300000000}
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3478
 
uSNChanged: 3478
 
showInAdvancedViewOnly: TRUE
 
name: ipsecISAKMPPolicy{72385231-70FA-11D1-864C-14A300000000}
 
objectGUID: a05f825d-dae6-4e62-891b-9c019c1478e8
 
ipsecID: {72385231-70FA-11D1-864C-14A300000000}
 
ipsecDataType: 598
 
ipsecData:: uCDcgMgu0RGongCgJI0wIUABAABo0hlRHQfTEa0iAGCw7MoXAAAAAAAAAAAAAAAAAA
 
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAAAADNzQMAAABAAAAACAAAAAIAAABAAAA
 
AAAAAAAAAAAAAAAAAAAAAAADNzc0CAAAAAAAAAAAAAACAcAAAzc3NzQAAzc0DAAAAQAAAAAgAAAAB
 
AAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAzc3NAgAAAAAAAAAAAAAAgHAAAM3Nzc0AAM3NAQAAAEAAA
 
AAIAAAAAgAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAM3NzQEAAAAAAAAAAAAAAIBwAADNzc3NAADNzQ
 
EAAABAAAAACAAAAAEAAABAAAAAAAAAAAAAAAAAAAAAAAAAAADNzc0BAAAAAAAAAAAAAACAcAAAzc3
 
NzQA=
 
ipsecOwnersReference: CN=ipsecPolicy{72385230-70FA-11D1-864C-14A300000000},CN=
 
IP Security,CN=System,DC=domain,DC=com
 
objectCategory: CN=Ipsec-ISAKMP-Policy,CN=Schema,CN=Configuration,DC=domain,DC
 
=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=ipsecISAKMPPolicy{72385231-70FA-11D1-864C-14A300000000},
 
CN=IP Security,CN=System,DC=domain,DC=com
 
 
* record 71
 
dn: CN=ipsecISAKMPPolicy{7238523D-70FA-11D1-864C-14A300000000},CN=IP Security,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: ipsecBase
 
objectClass: ipsecISAKMPPolicy
 
cn: ipsecISAKMPPolicy{7238523D-70FA-11D1-864C-14A300000000}
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3492
 
uSNChanged: 3492
 
showInAdvancedViewOnly: TRUE
 
name: ipsecISAKMPPolicy{7238523D-70FA-11D1-864C-14A300000000}
 
objectGUID: 1c844c9b-83e3-43ae-b5ce-43881cde75c8
 
ipsecID: {7238523D-70FA-11D1-864C-14A300000000}
 
ipsecDataType: 598
 
ipsecData:: uCDcgMgu0RGongCgJI0wIUABAAD5ckJZHQfTEa0iAGCw7MoXAAAAAAAAAAAAAAAAAA
 
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAAAADNzQMAAABAAAAACAAAAAIAAABAAAA
 
AAAAAAAAAAAAAAAAAAAAAAADNzc0CAAAAAAAAAAAAAACAcAAAzc3NzQAAzc0DAAAAQAAAAAgAAAAB
 
AAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAzc3NAgAAAAAAAAAAAAAAgHAAAM3Nzc0AAM3NAQAAAEAAA
 
AAIAAAAAgAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAM3NzQEAAAAAAAAAAAAAAIBwAADNzc3NAADNzQ
 
EAAABAAAAACAAAAAEAAABAAAAAAAAAAAAAAAAAAAAAAAAAAADNzc0BAAAAAAAAAAAAAACAcAAAzc3
 
NzQA=
 
ipsecOwnersReference: CN=ipsecPolicy{7238523C-70FA-11D1-864C-14A300000000},CN=
 
IP Security,CN=System,DC=domain,DC=com
 
objectCategory: CN=Ipsec-ISAKMP-Policy,CN=Schema,CN=Configuration,DC=domain,DC
 
=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=ipsecISAKMPPolicy{7238523D-70FA-11D1-864C-14A300000000},
 
CN=IP Security,CN=System,DC=domain,DC=com
 
 
* record 72
 
dn: CN=Distributed COM Users,CN=Builtin,DC=domain,DC=com
 
objectClass: top
 
objectClass: group
 
cn: Distributed COM Users
 
description: Members are allowed to launch, activate and use Distributed COM o
 
bjects on this machine.
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3578
 
uSNChanged: 3578
 
name: Distributed COM Users
 
objectGUID: 737e1d94-fc78-4a07-a5e0-cd80d2ab587c
 
objectSid: S-1-5-32-562
 
sAMAccountName: Distributed COM Users
 
sAMAccountType: 536870912
 
systemFlags: -1946157056
 
groupType: -2147483643
 
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=Distributed COM Users,CN=Builtin,DC=domain,DC=com
 
 
* record 73
 
dn: CN=293f0798-ea5c-4455-9f5d-45f33a30703b,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 293f0798-ea5c-4455-9f5d-45f33a30703b
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3416
 
uSNChanged: 3416
 
showInAdvancedViewOnly: TRUE
 
name: 293f0798-ea5c-4455-9f5d-45f33a30703b
 
objectGUID: 8adcbe93-6571-4069-a8de-3251f68e2101
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=293f0798-ea5c-4455-9f5d-45f33a30703b,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 74
 
dn: CN=Domain Guests,CN=Users,DC=domain,DC=com
 
objectClass: top
 
objectClass: group
 
cn: Domain Guests
 
description: All domain guests
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3542
 
uSNChanged: 3542
 
name: Domain Guests
 
objectGUID: caa51459-528e-4c42-a609-7ad80dd7d8d8
 
objectSid: S-1-5-21-2111727124-4264577813-266878271-514
 
sAMAccountName: Domain Guests
 
sAMAccountType: 268435456
 
groupType: -2147483646
 
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
memberOf: CN=Guests,CN=Builtin,DC=domain,DC=com
 
distinguishedName: CN=Domain Guests,CN=Users,DC=domain,DC=com
 
 
* record 75
 
dn: CN=6bcd567e-8314-11d6-977b-00c04f613221,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 6bcd567e-8314-11d6-977b-00c04f613221
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3431
 
uSNChanged: 3431
 
showInAdvancedViewOnly: TRUE
 
name: 6bcd567e-8314-11d6-977b-00c04f613221
 
objectGUID: 905790ab-9e6d-407c-bc0c-cfb4954b4756
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=6bcd567e-8314-11d6-977b-00c04f613221,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 76
 
dn: CN=RAS and IAS Servers Access Check,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: RAS and IAS Servers Access Check
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3502
 
uSNChanged: 3502
 
showInAdvancedViewOnly: TRUE
 
name: RAS and IAS Servers Access Check
 
objectGUID: 45769983-a789-4582-aef4-44a7e65e2386
 
systemFlags: -1946157056
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=RAS and IAS Servers Access Check,CN=System,DC=domain,DC=
 
com
 
 
* record 77
 
dn: CN=Dfs-Configuration,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: dfsConfiguration
 
cn: Dfs-Configuration
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3391
 
uSNChanged: 3391
 
showInAdvancedViewOnly: FALSE
 
name: Dfs-Configuration
 
objectGUID: 65d25cb1-80fc-4b9f-89c6-b43638f6b7db
 
objectCategory: CN=Dfs-Configuration,CN=Schema,CN=Configuration,DC=domain,DC=c
 
om
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=Dfs-Configuration,CN=System,DC=domain,DC=com
 
 
* record 78
 
dn: CN=RID Set,CN=VIRGIN,OU=Domain Controllers,DC=domain,DC=com
 
objectClass: top
 
objectClass: rIDSet
 
cn: RID Set
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3584
 
uSNChanged: 3584
 
showInAdvancedViewOnly: TRUE
 
name: RID Set
 
objectGUID: 0bddba5b-578f-412b-a84d-a66b60430714
 
rIDAllocationPool: 1100-1599
 
rIDPreviousAllocationPool: 1100-1599
 
rIDUsedPool: 0
 
objectCategory: CN=RID-Set,CN=Schema,CN=Configuration,DC=domain,DC=com
 
rIDNextRID: 1104
 
distinguishedName: CN=RID Set,CN=VIRGIN,OU=Domain Controllers,DC=domain,DC=com
 
 
* record 79
 
dn: CN=Certificate Service DCOM Access,CN=Builtin,DC=domain,DC=com
 
objectClass: top
 
objectClass: group
 
cn: Certificate Service DCOM Access
 
description: Members of this group are allowed to connect to Certification Aut
 
horities in the enterprise
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3582
 
uSNChanged: 3582
 
name: Certificate Service DCOM Access
 
objectGUID: 46138b8e-cc24-4419-8e3a-e2696f61681f
 
objectSid: S-1-5-32-574
 
sAMAccountName: Certificate Service DCOM Access
 
sAMAccountType: 536870912
 
systemFlags: -1946157056
 
groupType: -2147483643
 
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=Certificate Service DCOM Access,CN=Builtin,DC=domain,DC=
 
com
 
 
* record 80
 
dn: CN=Builtin,DC=domain,DC=com
 
objectClass: top
 
objectClass: builtinDomain
 
cn: Builtin
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3376
 
uSNChanged: 3376
 
showInAdvancedViewOnly: FALSE
 
name: Builtin
 
objectGUID: 5666794b-0231-4c47-989e-54e7b1d1d923
 
creationTime: 130601528220000000
 
forceLogoff: -9223372036854775808
 
lockoutDuration: -18000000000
 
lockOutObservationWindow: -18000000000
 
lockoutThreshold: 0
 
maxPwdAge: -37108517437440
 
minPwdAge: 0
 
minPwdLength: 0
 
modifiedCountAtLastProm: 0
 
nextRid: 1000
 
pwdProperties: 0
 
pwdHistoryLength: 0
 
objectSid: S-1-5-32
 
serverState: 1
 
uASCompat: 1
 
modifiedCount: 1
 
systemFlags: -1946157056
 
objectCategory: CN=Builtin-Domain,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=Builtin,DC=domain,DC=com
 
 
* record 81
 
dn: CN=byhost,CN=netgroup,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: msSFU30NISMapConfig
 
cn: byhost
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3727
 
uSNChanged: 3727
 
showInAdvancedViewOnly: TRUE
 
name: byhost
 
objectGUID: c11aee9d-84e8-4779-b3ee-40317d107138
 
objectCategory: CN=msSFU-30-NIS-Map-Config,CN=Schema,CN=Configuration,DC=domai
 
n,DC=com
 
msSFU30KeyAttributes: msSFU30NetgroupHostAtDomain
 
msSFU30FieldSeparator: "        "
 
msSFU30IntraFieldSeparator: ,
 
msSFU30SearchAttributes: msSFU30Name
 
msSFU30SearchAttributes: MemberNisNetgroup
 
msSFU30SearchAttributes: msSFU30NetgroupHostAtDomain
 
msSFU30ResultAttributes: MemberNisNetgroup
 
msSFU30ResultAttributes: msSFU30Name
 
msSFU30MapFilter: (objectCategory=NisNetgroup)
 
distinguishedName: CN=byhost,CN=netgroup,CN=ypServ30,CN=RpcServices,CN=System,
 
DC=domain,DC=com
 
 
* record 82
 
dn: CN=Microsoft,CN=Program Data,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: Microsoft
 
description: Default location for storage of Microsoft application data.
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3384
 
uSNChanged: 3384
 
showInAdvancedViewOnly: TRUE
 
name: Microsoft
 
objectGUID: 992e6e27-3777-408a-bf1c-3c5f85d9b036
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=Microsoft,CN=Program Data,DC=domain,DC=com
 
 
* record 83
 
dn: CN=bynumber,CN=protocols,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: msSFU30NISMapConfig
 
cn: bynumber
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3745
 
uSNChanged: 3745
 
showInAdvancedViewOnly: TRUE
 
name: bynumber
 
objectGUID: 68973b0c-dc07-4147-9001-b187cdc4a837
 
objectCategory: CN=msSFU-30-NIS-Map-Config,CN=Schema,CN=Configuration,DC=domai
 
n,DC=com
 
msSFU30KeyAttributes: ipProtocolNumber
 
msSFU30FieldSeparator: "        "
 
msSFU30IntraFieldSeparator: "        "
 
msSFU30SearchAttributes: msSFU30Aliases
 
msSFU30SearchAttributes: ipProtocolNumber
 
msSFU30SearchAttributes: msSFU30Name
 
msSFU30ResultAttributes: msSFU30Aliases
 
msSFU30ResultAttributes: ipProtocolNumber
 
msSFU30ResultAttributes: msSFU30Name
 
msSFU30MapFilter: (objectCategory=ipProtocol)
 
distinguishedName: CN=bynumber,CN=protocols,CN=ypServ30,CN=RpcServices,CN=Syst
 
em,DC=domain,DC=com
 
 
* record 84
 
dn: CN=MicrosoftDNS,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: MicrosoftDNS
 
instanceType: 4
 
whenCreated: 20141111041349.0Z
 
whenChanged: 20141111041349.0Z
 
uSNCreated: 3604
 
uSNChanged: 3604
 
showInAdvancedViewOnly: TRUE
 
name: MicrosoftDNS
 
objectGUID: c9963511-3257-4aa3-94a5-b79d81561541
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=MicrosoftDNS,CN=System,DC=domain,DC=com
 
 
* record 85
 
dn: CN=Enterprise Read-only Domain Controllers,CN=Users,DC=domain,DC=com
 
objectClass: top
 
objectClass: group
 
cn: Enterprise Read-only Domain Controllers
 
description: Members of this group are Read-Only Domain Controllers in the ent
 
erprise
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3548
 
uSNChanged: 3548
 
name: Enterprise Read-only Domain Controllers
 
objectGUID: 5eb04f73-6c32-4eb3-a1d0-bbf20adf838e
 
objectSid: S-1-5-21-2111727124-4264577813-266878271-498
 
sAMAccountName: Enterprise Read-Only Domain Controllers
 
sAMAccountType: 268435456
 
groupType: -2147483640
 
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=Enterprise Read-only Domain Controllers,CN=Users,DC=doma
 
in,DC=com
 
 
* record 86
 
dn: CN=S-1-5-9,CN=ForeignSecurityPrincipals,DC=domain,DC=com
 
objectClass: top
 
objectClass: foreignSecurityPrincipal
 
cn: S-1-5-9
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3559
 
uSNChanged: 3559
 
showInAdvancedViewOnly: TRUE
 
name: S-1-5-9
 
objectGUID: feb49c0b-6520-41d3-b981-b5a23421d3cd
 
objectSid: S-1-5-9
 
objectCategory: CN=Foreign-Security-Principal,CN=Schema,CN=Configuration,DC=do
 
main,DC=com
 
memberOf: CN=Windows Authorization Access Group,CN=Builtin,DC=domain,DC=com
 
distinguishedName: CN=S-1-5-9,CN=ForeignSecurityPrincipals,DC=domain,DC=com
 
 
* record 87
 
dn: CN=dda1d01d-4bd7-4c49-a184-46f9241b560e,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: dda1d01d-4bd7-4c49-a184-46f9241b560e
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3467
 
uSNChanged: 3467
 
showInAdvancedViewOnly: TRUE
 
name: dda1d01d-4bd7-4c49-a184-46f9241b560e
 
objectGUID: 07168c61-ce09-4e56-87e1-e70091f9214b
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=dda1d01d-4bd7-4c49-a184-46f9241b560e,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 88
 
dn: CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: System
 
description: Builtin system settings
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3385
 
uSNChanged: 3385
 
showInAdvancedViewOnly: TRUE
 
name: System
 
objectGUID: cb31c079-5523-46f5-acc9-b7f3e0b9d212
 
systemFlags: -1946157056
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=System,DC=domain,DC=com
 
 
* record 89
 
dn: CN=sme-server,CN=networks,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: msSFU30DomainInfo
 
cn: sme-server
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3743
 
uSNChanged: 3743
 
showInAdvancedViewOnly: TRUE
 
name: sme-server
 
objectGUID: ce68bb4f-70d3-4d14-974c-9d567bd5565d
 
objectCategory: CN=msSFU-30-Domain-Info,CN=Schema,CN=Configuration,DC=domain,D
 
C=com
 
msSFU30MasterServerName: VIRGIN
 
msSFU30OrderNumber: 10000
 
msSFU30Domains: sme-server
 
distinguishedName: CN=sme-server,CN=networks,CN=ypServ30,CN=RpcServices,CN=Sys
 
tem,DC=domain,DC=com
 
 
* record 90
 
dn: CN=71482d49-8870-4cb3-a438-b6fc9ec35d70,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 71482d49-8870-4cb3-a438-b6fc9ec35d70
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3460
 
uSNChanged: 3460
 
showInAdvancedViewOnly: TRUE
 
name: 71482d49-8870-4cb3-a438-b6fc9ec35d70
 
objectGUID: 2db0df9b-9b2c-4932-913e-2a0de3891bb6
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=71482d49-8870-4cb3-a438-b6fc9ec35d70,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 91
 
dn: CN=Backup Operators,CN=Builtin,DC=domain,DC=com
 
objectClass: top
 
objectClass: group
 
cn: Backup Operators
 
description: Backup Operators can override security restrictions for the sole
 
purpose of backing up or restoring files
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3568
 
uSNChanged: 3568
 
name: Backup Operators
 
objectGUID: ec08f3b3-287e-47e3-bec9-6bae59022378
 
objectSid: S-1-5-32-551
 
adminCount: 1
 
sAMAccountName: Backup Operators
 
sAMAccountType: 536870912
 
systemFlags: -1946157056
 
groupType: -2147483643
 
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=Backup Operators,CN=Builtin,DC=domain,DC=com
 
 
* record 92
 
dn: CN=8ca38317-13a4-4bd4-806f-ebed6acb5d0c,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 8ca38317-13a4-4bd4-806f-ebed6acb5d0c
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3423
 
uSNChanged: 3423
 
showInAdvancedViewOnly: TRUE
 
name: 8ca38317-13a4-4bd4-806f-ebed6acb5d0c
 
objectGUID: 9014b7df-7189-4bef-9780-eecf01d9ae06
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=8ca38317-13a4-4bd4-806f-ebed6acb5d0c,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 93
 
dn: CN=shadow,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: shadow
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3758
 
uSNChanged: 3758
 
showInAdvancedViewOnly: TRUE
 
name: shadow
 
objectGUID: de3b9106-a722-4c0d-b791-7492e3b62d33
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=shadow,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC
 
=com
 
 
* record 94
 
dn: CN=krbtgt,CN=Users,DC=domain,DC=com
 
objectClass: top
 
objectClass: person
 
objectClass: organizationalPerson
 
objectClass: user
 
cn: krbtgt
 
description: Key Distribution Center Service Account
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3547
 
uSNChanged: 3547
 
showInAdvancedViewOnly: TRUE
 
name: krbtgt
 
objectGUID: eb1476d8-f5f9-44f0-9f3e-acc91e0af1cc
 
userAccountControl: 514
 
badPwdCount: 0
 
codePage: 0
 
countryCode: 0
 
badPasswordTime: 0
 
lastLogoff: 0
 
lastLogon: 0
 
pwdLastSet: 130601528230000000
 
primaryGroupID: 513
 
objectSid: S-1-5-21-2111727124-4264577813-266878271-502
 
adminCount: 1
 
accountExpires: 9223372036854775807
 
logonCount: 0
 
sAMAccountName: krbtgt
 
sAMAccountType: 805306368
 
servicePrincipalName: kadmin/changepw
 
objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
memberOf: CN=Denied RODC Password Replication Group,CN=Users,DC=domain,DC=com
 
distinguishedName: CN=krbtgt,CN=Users,DC=domain,DC=com
 
 
* record 95
 
dn: CN=Domain Computers,CN=Users,DC=domain,DC=com
 
objectClass: top
 
objectClass: group
 
cn: Domain Computers
 
description: All workstations and servers joined to the domain
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3543
 
uSNChanged: 3543
 
name: Domain Computers
 
objectGUID: 41925cf9-3b60-4c8d-a6b7-0c223d895b0b
 
objectSid: S-1-5-21-2111727124-4264577813-266878271-515
 
sAMAccountName: Domain Computers
 
sAMAccountType: 268435456
 
groupType: -2147483646
 
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=Domain Computers,CN=Users,DC=domain,DC=com
 
 
* record 96
 
dn: CN=Server,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: securityObject
 
objectClass: samServer
 
cn: Server
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3505
 
uSNChanged: 3505
 
showInAdvancedViewOnly: TRUE
 
name: Server
 
objectGUID: cfb19de6-f8bd-461f-8959-4dd53f81d4c5
 
revision: 65543
 
systemFlags: -1946157056
 
objectCategory: CN=Sam-Server,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=Server,CN=System,DC=domain,DC=com
 
 
* record 97
 
dn: CN=ipsecNFA{59319C04-5EE3-11D2-ACE8-0060B0ECCA17},CN=IP Security,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: ipsecBase
 
objectClass: ipsecNFA
 
cn: ipsecNFA{59319C04-5EE3-11D2-ACE8-0060B0ECCA17}
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
uSNCreated: 3489
 
showInAdvancedViewOnly: TRUE
 
name: ipsecNFA{59319C04-5EE3-11D2-ACE8-0060B0ECCA17}
 
objectGUID: ad93641e-9a18-4920-92ea-b2c99884f5af
 
ipsecID: {59319C04-5EE3-11D2-ACE8-0060B0ECCA17}
 
ipsecDataType: 598
 
ipsecData:: AKy7EY1J0RGGOQCgJI0wISoAAAABAAAABQAAAAIAAAAAAP3///8CAAAAAAAAAAAAAA
 
AAAAEAAAACAAAAAAAA
 
ipsecOwnersReference: CN=ipsecPolicy{72385236-70FA-11D1-864C-14A300000000},CN=
 
IP Security,CN=System,DC=domain,DC=com
 
objectCategory: CN=Ipsec-NFA,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
ipsecNegotiationPolicyReference: CN=ipsecNegotiationPolicy{59319C01-5EE3-11D2-
 
ACE8-0060B0ECCA17},CN=IP Security,CN=System,DC=domain,DC=com
 
whenChanged: 20141111041354.0Z
 
uSNChanged: 3706
 
distinguishedName: CN=ipsecNFA{59319C04-5EE3-11D2-ACE8-0060B0ECCA17},CN=IP Sec
 
urity,CN=System,DC=domain,DC=com
 
 
* record 98
 
dn: CN=Program Data,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: Program Data
 
description: Default location for storage of application data.
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3383
 
uSNChanged: 3383
 
showInAdvancedViewOnly: TRUE
 
name: Program Data
 
objectGUID: b0f19b3e-689b-42a1-9e8a-f9fc684932db
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=Program Data,DC=domain,DC=com
 
 
* record 99
 
dn: CN=DFSR-GlobalSettings,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: msDFSR-GlobalSettings
 
cn: DFSR-GlobalSettings
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3392
 
uSNChanged: 3392
 
showInAdvancedViewOnly: TRUE
 
name: DFSR-GlobalSettings
 
objectGUID: 71cabdb3-db14-4534-865b-398414e8ef49
 
objectCategory: CN=ms-DFSR-GlobalSettings,CN=Schema,CN=Configuration,DC=domain
 
,DC=com
 
msDFSR-Flags: 48
 
distinguishedName: CN=DFSR-GlobalSettings,CN=System,DC=domain,DC=com
 
 
* record 100
 
dn: CN=ab402345-d3c3-455d-9ff7-40268a1099b6,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: ab402345-d3c3-455d-9ff7-40268a1099b6
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3399
 
uSNChanged: 3399
 
showInAdvancedViewOnly: TRUE
 
name: ab402345-d3c3-455d-9ff7-40268a1099b6
 
objectGUID: 9ebda9a2-31f5-481b-a478-df296ed5d0c0
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=ab402345-d3c3-455d-9ff7-40268a1099b6,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 101
 
dn: CN=ipsecNegotiationPolicy{59319C01-5EE3-11D2-ACE8-0060B0ECCA17},CN=IP Security,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: ipsecBase
 
objectClass: ipsecNegotiationPolicy
 
cn: ipsecNegotiationPolicy{59319C01-5EE3-11D2-ACE8-0060B0ECCA17}
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3490
 
uSNChanged: 3490
 
showInAdvancedViewOnly: TRUE
 
name: ipsecNegotiationPolicy{59319C01-5EE3-11D2-ACE8-0060B0ECCA17}
 
objectGUID: 3d99b088-92da-4ffd-b9b0-94c8f9d0c56b
 
ipsecID: {59319C01-5EE3-11D2-ACE8-0060B0ECCA17}
 
ipsecDataType: 598
 
ipsecData:: uSDcgMgu0RGongCgJI0wIeQBAAAGAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAADAAAAAg
 
AAAAIAAABAAAAACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
 
AAAAAAAAAAAAAAAAAAQAAAAMAAAABAAAAAgAAAEAAAAAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
 
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAQAAAAIAAAACAAAAQAAAAAgAA
 
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
 
EAAAABAAAAAQAAAAIAAABAAAAACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
 
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAIAAAAAAAAAAQAAAEAAAAAIAAAAAAAAAAAAAAAAAAAA
 
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAQAAAAAAAAABA
 
AAAQAAAAAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==
 
ipsecOwnersReference: CN=ipsecNFA{59319C04-5EE3-11D2-ACE8-0060B0ECCA17},CN=IP
 
Security,CN=System,DC=domain,DC=com
 
objectCategory: CN=Ipsec-Negotiation-Policy,CN=Schema,CN=Configuration,DC=doma
 
in,DC=com
 
isCriticalSystemObject: TRUE
 
iPSECNegotiationPolicyType: {62F49E13-6C37-11D1-864C-14A300000000}
 
iPSECNegotiationPolicyAction: {8A171DD3-77E3-11D1-8659-A04F00000000}
 
distinguishedName: CN=ipsecNegotiationPolicy{59319C01-5EE3-11D2-ACE8-0060B0ECC
 
A17},CN=IP Security,CN=System,DC=domain,DC=com
 
 
* record 102
 
dn: CN=aliases,CN=mail,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: msSFU30NISMapConfig
 
cn: aliases
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3716
 
uSNChanged: 3716
 
showInAdvancedViewOnly: TRUE
 
name: aliases
 
objectGUID: 73224a18-fad3-4d1e-b7b9-68dcaceb4376
 
objectCategory: CN=msSFU-30-NIS-Map-Config,CN=Schema,CN=Configuration,DC=domai
 
n,DC=com
 
msSFU30KeyAttributes: msSFU30Name
 
msSFU30FieldSeparator:: Og==
 
msSFU30IntraFieldSeparator: ,
 
msSFU30SearchAttributes: msSFU30Aliases
 
msSFU30SearchAttributes: msSFU30Name
 
msSFU30ResultAttributes: msSFU30Aliases
 
msSFU30MapFilter: (objectCategory=msSFU30MailAliases)
 
distinguishedName: CN=aliases,CN=mail,CN=ypServ30,CN=RpcServices,CN=System,DC=
 
domain,DC=com
 
 
* record 103
 
dn: OU=Domain Controllers,DC=domain,DC=com
 
objectClass: top
 
objectClass: organizationalUnit
 
ou: Domain Controllers
 
description: Default container for domain controllers
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3378
 
uSNChanged: 3378
 
showInAdvancedViewOnly: FALSE
 
name: Domain Controllers
 
objectGUID: 8e331b0e-09da-4a78-b645-974729510267
 
systemFlags: -1946157056
 
objectCategory: CN=Organizational-Unit,CN=Schema,CN=Configuration,DC=domain,DC
 
=com
 
isCriticalSystemObject: TRUE
 
gPLink: [LDAP://CN={6AC1786C-016F-11D2-945F-00C04FB984F9},CN=Policies,CN=Syste
 
m,DC=domain,DC=com;0]
 
distinguishedName: OU=Domain Controllers,DC=domain,DC=com
 
 
* record 104
 
dn: CN=User,CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: User
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3586
 
uSNChanged: 3586
 
showInAdvancedViewOnly: TRUE
 
name: User
 
objectGUID: 352d8a38-4048-4822-b71a-c940d6b3e34f
 
systemFlags: -1946157056
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=User,CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Polici
 
es,CN=System,DC=domain,DC=com
 
 
* record 105
 
dn: CN=ipsecFilter{72385235-70FA-11D1-864C-14A300000000},CN=IP Security,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: ipsecBase
 
objectClass: ipsecFilter
 
cn: ipsecFilter{72385235-70FA-11D1-864C-14A300000000}
 
description: Matches all ICMP packets between this computer and any other comp
 
uter.
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
uSNCreated: 3486
 
showInAdvancedViewOnly: TRUE
 
name: ipsecFilter{72385235-70FA-11D1-864C-14A300000000}
 
objectGUID: 653508a9-803d-40de-89d4-ea842ed8af0e
 
ipsecName: All ICMP Traffic
 
ipsecID: {72385235-70FA-11D1-864C-14A300000000}
 
ipsecDataType: 598
 
ipsecData:: tSDcgMgu0RGongCgJI0wIVIAAAABAAAAAgAAAAAAAgAAAAAACgAAAEkAQwBNAFAAAA
 
Bj0hlRHQfTEa0iAGCw7MoXAQAAAAAAAAD/////AAAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAA==
 
ipsecOwnersReference: CN=ipsecNFA{594272E2-071D-11D3-AD22-0060B0ECCA17},CN=IP
 
Security,CN=System,DC=domain,DC=com
 
ipsecOwnersReference: CN=ipsecNFA{594272FD-071D-11D3-AD22-0060B0ECCA17},CN=IP
 
Security,CN=System,DC=domain,DC=com
 
objectCategory: CN=Ipsec-Filter,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
whenChanged: 20141111041354.0Z
 
uSNChanged: 3703
 
distinguishedName: CN=ipsecFilter{72385235-70FA-11D1-864C-14A300000000},CN=IP
 
Security,CN=System,DC=domain,DC=com
 
 
* record 106
 
dn: CN=ypservers,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: ypservers
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3765
 
uSNChanged: 3765
 
showInAdvancedViewOnly: TRUE
 
name: ypservers
 
objectGUID: 48ca23fa-593c-4029-b77a-040f3195112a
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=ypservers,CN=ypServ30,CN=RpcServices,CN=System,DC=domain
 
,DC=com
 
 
* record 107
 
dn: CN=Guests,CN=Builtin,DC=domain,DC=com
 
objectClass: top
 
objectClass: group
 
cn: Guests
 
description: Guests have the same access as members of the Users group by defa
 
ult, except for the Guest account which is further restricted
 
member: CN=Domain Guests,CN=Users,DC=domain,DC=com
 
member: CN=Guest,CN=Users,DC=domain,DC=com
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3564
 
uSNChanged: 3564
 
name: Guests
 
objectGUID: 6bd6f137-f6a3-4677-a77e-f46c9ece844a
 
objectSid: S-1-5-32-546
 
sAMAccountName: Guests
 
sAMAccountType: 536870912
 
systemFlags: -1946157056
 
groupType: -2147483643
 
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=Guests,CN=Builtin,DC=domain,DC=com
 
 
* record 108
 
dn: CN=ethers,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: ethers
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3736
 
uSNChanged: 3736
 
showInAdvancedViewOnly: TRUE
 
name: ethers
 
objectGUID: 26609948-61d4-44b4-820f-2133cce7702d
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=ethers,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC
 
=com
 
 
* record 109
 
dn: CN=ipsecNFA{594272E2-071D-11D3-AD22-0060B0ECCA17},CN=IP Security,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: ipsecBase
 
objectClass: ipsecNFA
 
cn: ipsecNFA{594272E2-071D-11D3-AD22-0060B0ECCA17}
 
description: Permit unsecure ICMP packets to pass through.
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
uSNCreated: 3481
 
showInAdvancedViewOnly: TRUE
 
name: ipsecNFA{594272E2-071D-11D3-AD22-0060B0ECCA17}
 
objectGUID: 482addf7-5e3f-4d1c-a5a0-c9e7ee4dfbdb
 
ipsecName: Permit unsecure ICMP packets to pass through.
 
ipsecID: {594272E2-071D-11D3-AD22-0060B0ECCA17}
 
ipsecDataType: 598
 
ipsecData:: AKy7EY1J0RGGOQCgJI0wISoAAAABAAAABQAAAAIAAAAAAP3///8CAAAAAAAAAAAAAA
 
AAAAEAAAACAAAAAAAA
 
ipsecOwnersReference: CN=ipsecPolicy{72385230-70FA-11D1-864C-14A300000000},CN=
 
IP Security,CN=System,DC=domain,DC=com
 
objectCategory: CN=Ipsec-NFA,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
ipsecNegotiationPolicyReference: CN=ipsecNegotiationPolicy{7238523B-70FA-11D1-
 
864C-14A300000000},CN=IP Security,CN=System,DC=domain,DC=com
 
whenChanged: 20141111041353.0Z
 
ipsecFilterReference: CN=ipsecFilter{72385235-70FA-11D1-864C-14A300000000},CN=
 
IP Security,CN=System,DC=domain,DC=com
 
uSNChanged: 3697
 
distinguishedName: CN=ipsecNFA{594272E2-071D-11D3-AD22-0060B0ECCA17},CN=IP Sec
 
urity,CN=System,DC=domain,DC=com
 
 
* record 110
 
dn: CN=ipsecNFA{72385232-70FA-11D1-864C-14A300000000},CN=IP Security,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: ipsecBase
 
objectClass: ipsecNFA
 
cn: ipsecNFA{72385232-70FA-11D1-864C-14A300000000}
 
description: For all IP traffic, always request security using Kerberos trust.
 
  Allow unsecured communication with clients that do not respond to request.
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
uSNCreated: 3479
 
showInAdvancedViewOnly: TRUE
 
name: ipsecNFA{72385232-70FA-11D1-864C-14A300000000}
 
objectGUID: 43cf6c2d-a67f-4267-9c69-4c33eb148a7b
 
ipsecName: Request Security (Optional) Rule
 
ipsecID: {72385232-70FA-11D1-864C-14A300000000}
 
ipsecDataType: 598
 
ipsecData:: AKy7EY1J0RGGOQCgJI0wISoAAAABAAAABQAAAAIAAAAAAP3///8CAAAAAAAAAAAAAA
 
AAAAEAAAACAAAAAAAA
 
ipsecOwnersReference: CN=ipsecPolicy{72385230-70FA-11D1-864C-14A300000000},CN=
 
IP Security,CN=System,DC=domain,DC=com
 
objectCategory: CN=Ipsec-NFA,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
ipsecNegotiationPolicyReference: CN=ipsecNegotiationPolicy{72385233-70FA-11D1-
 
864C-14A300000000},CN=IP Security,CN=System,DC=domain,DC=com
 
whenChanged: 20141111041353.0Z
 
ipsecFilterReference: CN=ipsecFilter{7238523A-70FA-11D1-864C-14A300000000},CN=
 
IP Security,CN=System,DC=domain,DC=com
 
uSNChanged: 3694
 
distinguishedName: CN=ipsecNFA{72385232-70FA-11D1-864C-14A300000000},CN=IP Sec
 
urity,CN=System,DC=domain,DC=com
 
 
* record 111
 
dn: CN=PolicyTemplate,CN=WMIPolicy,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: PolicyTemplate
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3508
 
uSNChanged: 3508
 
showInAdvancedViewOnly: TRUE
 
name: PolicyTemplate
 
objectGUID: f9825609-d389-47e2-8cb4-b88d66a64d2a
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=PolicyTemplate,CN=WMIPolicy,CN=System,DC=domain,DC=com
 
 
* record 112
 
dn: CN=61b34cb0-55ee-4be9-b595-97810b92b017,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 61b34cb0-55ee-4be9-b595-97810b92b017
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3459
 
uSNChanged: 3459
 
showInAdvancedViewOnly: TRUE
 
name: 61b34cb0-55ee-4be9-b595-97810b92b017
 
objectGUID: b9c1e93c-46e0-4444-832f-bf247ad7ef99
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=61b34cb0-55ee-4be9-b595-97810b92b017,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 113
 
dn: CN=c88227bc-fcca-4b58-8d8a-cd3d64528a02,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: c88227bc-fcca-4b58-8d8a-cd3d64528a02
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3466
 
uSNChanged: 3466
 
showInAdvancedViewOnly: TRUE
 
name: c88227bc-fcca-4b58-8d8a-cd3d64528a02
 
objectGUID: e545621d-5604-415b-ae12-dd9d559e3a1f
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=c88227bc-fcca-4b58-8d8a-cd3d64528a02,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 114
 
dn: CN=bab5f54d-06c8-48de-9b87-d78b796564e4,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: bab5f54d-06c8-48de-9b87-d78b796564e4
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3400
 
uSNChanged: 3400
 
showInAdvancedViewOnly: TRUE
 
name: bab5f54d-06c8-48de-9b87-d78b796564e4
 
objectGUID: 8ee20f51-61ec-4cf9-b976-1b3ee3406012
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=bab5f54d-06c8-48de-9b87-d78b796564e4,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 115
 
dn: CN=9738c400-7795-4d6e-b19d-c16cd6486166,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 9738c400-7795-4d6e-b19d-c16cd6486166
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3461
 
uSNChanged: 3461
 
showInAdvancedViewOnly: TRUE
 
name: 9738c400-7795-4d6e-b19d-c16cd6486166
 
objectGUID: eb04d8a0-2b74-4cf2-9190-5d9f37dbd2e8
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=9738c400-7795-4d6e-b19d-c16cd6486166,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 116
 
dn: CN=byname,CN=protocols,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: msSFU30NISMapConfig
 
cn: byname
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3746
 
uSNChanged: 3746
 
showInAdvancedViewOnly: TRUE
 
name: byname
 
objectGUID: 74c8c87d-64ee-4fcb-8afb-783bff85d297
 
objectCategory: CN=msSFU-30-NIS-Map-Config,CN=Schema,CN=Configuration,DC=domai
 
n,DC=com
 
msSFU30KeyAttributes: msSFU30Name
 
msSFU30FieldSeparator: "        "
 
msSFU30IntraFieldSeparator: "        "
 
msSFU30SearchAttributes: msSFU30Aliases
 
msSFU30SearchAttributes: ipProtocolNumber
 
msSFU30SearchAttributes: msSFU30Name
 
msSFU30ResultAttributes: msSFU30Aliases
 
msSFU30ResultAttributes: ipProtocolNumber
 
msSFU30ResultAttributes: msSFU30Name
 
msSFU30MapFilter: (objectCategory=ipProtocol)
 
distinguishedName: CN=byname,CN=protocols,CN=ypServ30,CN=RpcServices,CN=System
 
,DC=domain,DC=com
 
 
* record 117
 
dn: CN=admin,CN=Users,DC=domain,DC=com
 
objectClass: top
 
objectClass: person
 
objectClass: organizationalPerson
 
objectClass: user
 
cn: admin
 
instanceType: 4
 
whenCreated: 20141111041356.0Z
 
whenChanged: 20141111041356.0Z
 
uSNCreated: 3768
 
name: admin
 
objectGUID: 2a2990e1-4e04-4e4c-81fa-ce7f244e19f8
 
badPwdCount: 0
 
codePage: 0
 
countryCode: 0
 
badPasswordTime: 0
 
lastLogoff: 0
 
lastLogon: 0
 
primaryGroupID: 513
 
objectSid: S-1-5-21-2111727124-4264577813-266878271-1103
 
accountExpires: 9223372036854775807
 
logonCount: 0
 
sAMAccountName: admin
 
sAMAccountType: 805306368
 
userPrincipalName: admin@domain.com
 
objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=domain,DC=com
 
pwdLastSet: 130601528360000000
 
userAccountControl: 512
 
uSNChanged: 3770
 
memberOf: CN=Domain Admins,CN=Users,DC=domain,DC=com
 
distinguishedName: CN=admin,CN=Users,DC=domain,DC=com
 
 
* record 118
 
dn: CN=b96ed344-545a-4172-aa0c-68118202f125,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: b96ed344-545a-4172-aa0c-68118202f125
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3465
 
uSNChanged: 3465
 
showInAdvancedViewOnly: TRUE
 
name: b96ed344-545a-4172-aa0c-68118202f125
 
objectGUID: 5cb759a3-9ef4-4ba1-9acb-cf7689d4cc06
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=b96ed344-545a-4172-aa0c-68118202f125,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 119
 
dn: CN=byname,CN=hosts,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: msSFU30NISMapConfig
 
cn: byname
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3734
 
uSNChanged: 3734
 
showInAdvancedViewOnly: TRUE
 
name: byname
 
objectGUID: d5dcfd4b-f298-4377-9eba-5683695d5439
 
objectCategory: CN=msSFU-30-NIS-Map-Config,CN=Schema,CN=Configuration,DC=domai
 
n,DC=com
 
msSFU30KeyAttributes: msSFU30Aliases
 
msSFU30KeyAttributes: msSFU30Name
 
msSFU30FieldSeparator: "        "
 
msSFU30IntraFieldSeparator: "        "
 
msSFU30SearchAttributes: msSFU30Aliases
 
msSFU30SearchAttributes: msSFU30Name
 
msSFU30SearchAttributes: ipHostNumber
 
msSFU30ResultAttributes: msSFU30Aliases
 
msSFU30ResultAttributes: msSFU30Name
 
msSFU30ResultAttributes: ipHostNumber
 
msSFU30MapFilter: (objectCategory=Computer)
 
distinguishedName: CN=byname,CN=hosts,CN=ypServ30,CN=RpcServices,CN=System,DC=
 
domain,DC=com
 
 
* record 120
 
dn: CN=0e660ea3-8a5e-4495-9ad7-ca1bd4638f9e,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 0e660ea3-8a5e-4495-9ad7-ca1bd4638f9e
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3405
 
uSNChanged: 3405
 
showInAdvancedViewOnly: TRUE
 
name: 0e660ea3-8a5e-4495-9ad7-ca1bd4638f9e
 
objectGUID: 6abb8398-d12a-4b15-a19e-d641666240ce
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=0e660ea3-8a5e-4495-9ad7-ca1bd4638f9e,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 121
 
dn: CN=bydefaults,CN=bootparams,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: msSFU30NISMapConfig
 
cn: bydefaults
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3722
 
uSNChanged: 3722
 
showInAdvancedViewOnly: TRUE
 
name: bydefaults
 
objectGUID: e65b599d-f647-44d5-bbf5-ba50d19c2ff7
 
objectCategory: CN=msSFU-30-NIS-Map-Config,CN=Schema,CN=Configuration,DC=domai
 
n,DC=com
 
msSFU30KeyAttributes: msSFU30Name
 
msSFU30FieldSeparator: "        "
 
msSFU30IntraFieldSeparator: "        "
 
msSFU30SearchAttributes: bootParameter
 
msSFU30SearchAttributes: msSFU30Name
 
msSFU30ResultAttributes: bootParameter
 
msSFU30ResultAttributes: msSFU30Name
 
msSFU30MapFilter: (&(objectCategory=Device)(bootParameter=*))
 
distinguishedName: CN=bydefaults,CN=bootparams,CN=ypServ30,CN=RpcServices,CN=S
 
ystem,DC=domain,DC=com
 
 
* record 122
 
dn: CN=ComPartitionSets,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: ComPartitionSets
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3388
 
uSNChanged: 3388
 
showInAdvancedViewOnly: TRUE
 
name: ComPartitionSets
 
objectGUID: 0bf8ce85-8bfd-4073-9b28-37e0f2a46787
 
systemFlags: -1946157056
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=ComPartitionSets,CN=System,DC=domain,DC=com
 
 
* record 123
 
dn: CN=File Replication Service,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: applicationSettings
 
objectClass: nTFRSSettings
 
cn: File Replication Service
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3472
 
uSNChanged: 3472
 
showInAdvancedViewOnly: TRUE
 
name: File Replication Service
 
objectGUID: 1215da16-5993-44e1-a418-530bc28b824f
 
systemFlags: -1946157056
 
objectCategory: CN=NTFRS-Settings,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=File Replication Service,CN=System,DC=domain,DC=com
 
 
* record 124
 
dn: CN=sme-server,CN=rpc,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: msSFU30DomainInfo
 
cn: sme-server
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3750
 
uSNChanged: 3750
 
showInAdvancedViewOnly: TRUE
 
name: sme-server
 
objectGUID: d88aa4f3-57be-4f89-9584-a07a7af15893
 
objectCategory: CN=msSFU-30-Domain-Info,CN=Schema,CN=Configuration,DC=domain,D
 
C=com
 
msSFU30MasterServerName: VIRGIN
 
msSFU30OrderNumber: 10000
 
msSFU30Domains: sme-server
 
distinguishedName: CN=sme-server,CN=rpc,CN=ypServ30,CN=RpcServices,CN=System,D
 
C=domain,DC=com
 
 
* record 125
 
dn: CN=51cba88b-99cf-4e16-bef2-c427b38d0767,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 51cba88b-99cf-4e16-bef2-c427b38d0767
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3415
 
uSNChanged: 3415
 
showInAdvancedViewOnly: TRUE
 
name: 51cba88b-99cf-4e16-bef2-c427b38d0767
 
objectGUID: a774f392-a832-414d-842f-cfcb84679dc8
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=51cba88b-99cf-4e16-bef2-c427b38d0767,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 126
 
dn: CN=Topology,CN=Domain System Volume,CN=DFSR-GlobalSettings,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: msDFSR-Topology
 
cn: Topology
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3395
 
uSNChanged: 3395
 
showInAdvancedViewOnly: TRUE
 
name: Topology
 
objectGUID: 955b3f46-86ec-48e6-b89c-b8556751dfca
 
objectCategory: CN=ms-DFSR-Topology,CN=Schema,CN=Configuration,DC=domain,DC=co
 
m
 
distinguishedName: CN=Topology,CN=Domain System Volume,CN=DFSR-GlobalSettings,
 
CN=System,DC=domain,DC=com
 
 
* record 127
 
dn: CN=4aaabc3a-c416-4b9c-a6bb-4b453ab1c1f0,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 4aaabc3a-c416-4b9c-a6bb-4b453ab1c1f0
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3456
 
uSNChanged: 3456
 
showInAdvancedViewOnly: TRUE
 
name: 4aaabc3a-c416-4b9c-a6bb-4b453ab1c1f0
 
objectGUID: e43b1f17-b4e3-479b-962b-6e47554183d4
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=4aaabc3a-c416-4b9c-a6bb-4b453ab1c1f0,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 128
 
dn: CN=57428d75-bef7-43e1-938b-2e749f5a8d56,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 57428d75-bef7-43e1-938b-2e749f5a8d56
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3458
 
uSNChanged: 3458
 
showInAdvancedViewOnly: TRUE
 
name: 57428d75-bef7-43e1-938b-2e749f5a8d56
 
objectGUID: 0ac0a8a2-06b9-4b65-bd42-9a919bc6c8ba
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=57428d75-bef7-43e1-938b-2e749f5a8d56,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 129
 
dn: CN=4dfbb973-8a62-4310-a90c-776e00f83222,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 4dfbb973-8a62-4310-a90c-776e00f83222
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3419
 
uSNChanged: 3419
 
showInAdvancedViewOnly: TRUE
 
name: 4dfbb973-8a62-4310-a90c-776e00f83222
 
objectGUID: a1223680-86ba-40f5-a663-8d170bad9e75
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=4dfbb973-8a62-4310-a90c-776e00f83222,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 130
 
dn: CN=446f24ea-cfd5-4c52-8346-96e170bcb912,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 446f24ea-cfd5-4c52-8346-96e170bcb912
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3414
 
uSNChanged: 3414
 
showInAdvancedViewOnly: TRUE
 
name: 446f24ea-cfd5-4c52-8346-96e170bcb912
 
objectGUID: b49a8e54-bb01-4d7d-8f73-f08d6f443731
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=446f24ea-cfd5-4c52-8346-96e170bcb912,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 131
 
dn: CN=root,CN=Users,DC=domain,DC=com
 
objectClass: top
 
objectClass: person
 
objectClass: organizationalPerson
 
objectClass: user
 
cn: root
 
instanceType: 4
 
whenCreated: 20141111041357.0Z
 
whenChanged: 20141111041357.0Z
 
uSNCreated: 3771
 
name: root
 
objectGUID: f1b1ad10-ec03-4cbd-a991-1ca352dd503f
 
badPwdCount: 0
 
codePage: 0
 
countryCode: 0
 
badPasswordTime: 0
 
lastLogoff: 0
 
lastLogon: 0
 
primaryGroupID: 513
 
objectSid: S-1-5-21-2111727124-4264577813-266878271-1104
 
accountExpires: 9223372036854775807
 
logonCount: 0
 
sAMAccountName: root
 
sAMAccountType: 805306368
 
userPrincipalName: root@domain.com
 
objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=domain,DC=com
 
pwdLastSet: 130601528370000000
 
userAccountControl: 512
 
uSNChanged: 3773
 
memberOf: CN=Domain Admins,CN=Users,DC=domain,DC=com
 
distinguishedName: CN=root,CN=Users,DC=domain,DC=com
 
 
* record 132
 
dn: CN=Pre-Windows 2000 Compatible Access,CN=Builtin,DC=domain,DC=com
 
objectClass: top
 
objectClass: group
 
cn: Pre-Windows 2000 Compatible Access
 
description: A backward compatibility group which allows read access on all us
 
ers and groups in the domain
 
member: CN=S-1-5-11,CN=ForeignSecurityPrincipals,DC=domain,DC=com
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3570
 
uSNChanged: 3570
 
name: Pre-Windows 2000 Compatible Access
 
objectGUID: bc1f547d-2cee-407e-b67d-f76450758645
 
objectSid: S-1-5-32-554
 
sAMAccountName: Pre-Windows 2000 Compatible Access
 
sAMAccountType: 536870912
 
systemFlags: -1946157056
 
groupType: -2147483643
 
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=Pre-Windows 2000 Compatible Access,CN=Builtin,DC=domain,
 
DC=com
 
 
* record 133
 
dn: CN=de10d491-909f-4fb0-9abb-4b7865c0fe80,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: de10d491-909f-4fb0-9abb-4b7865c0fe80
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3468
 
uSNChanged: 3468
 
showInAdvancedViewOnly: TRUE
 
name: de10d491-909f-4fb0-9abb-4b7865c0fe80
 
objectGUID: 67e14eb8-7989-4fcf-b8ec-90a1ad6fcd34
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=de10d491-909f-4fb0-9abb-4b7865c0fe80,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 134
 
dn: CN=4c93ad42-178a-4275-8600-16811d28f3aa,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 4c93ad42-178a-4275-8600-16811d28f3aa
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3457
 
uSNChanged: 3457
 
showInAdvancedViewOnly: TRUE
 
name: 4c93ad42-178a-4275-8600-16811d28f3aa
 
objectGUID: 13629dea-16d8-47b4-aaf9-464ebc064b94
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=4c93ad42-178a-4275-8600-16811d28f3aa,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 135
 
dn: CN=byname,CN=passwd,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: msSFU30NISMapConfig
 
cn: byname
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3756
 
uSNChanged: 3756
 
showInAdvancedViewOnly: TRUE
 
name: byname
 
objectGUID: 0b8b07b6-0ccf-4efe-a2a3-b71cafe86918
 
objectCategory: CN=msSFU-30-NIS-Map-Config,CN=Schema,CN=Configuration,DC=domai
 
n,DC=com
 
msSFU30KeyAttributes: msSFU30Name
 
msSFU30FieldSeparator:: Og==
 
msSFU30SearchAttributes: loginShell
 
msSFU30SearchAttributes: unixHomeDirectory
 
msSFU30SearchAttributes: gecos
 
msSFU30SearchAttributes: gidNumber
 
msSFU30SearchAttributes: uidNumber
 
msSFU30SearchAttributes: unixUserPassword
 
msSFU30SearchAttributes: msSFU30Name
 
msSFU30ResultAttributes: loginShell
 
msSFU30ResultAttributes: unixHomeDirectory
 
msSFU30ResultAttributes: gecos
 
msSFU30ResultAttributes: gidNumber
 
msSFU30ResultAttributes: uidNumber
 
msSFU30ResultAttributes: unixUserPassword
 
msSFU30ResultAttributes: msSFU30Name
 
msSFU30MapFilter: (uidNumber=*)
 
distinguishedName: CN=byname,CN=passwd,CN=ypServ30,CN=RpcServices,CN=System,DC
 
=domain,DC=com
 
 
* record 136
 
dn: CN=ipsecISAKMPPolicy{72385237-70FA-11D1-864C-14A300000000},CN=IP Security,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: ipsecBase
 
objectClass: ipsecISAKMPPolicy
 
cn: ipsecISAKMPPolicy{72385237-70FA-11D1-864C-14A300000000}
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3488
 
uSNChanged: 3488
 
showInAdvancedViewOnly: TRUE
 
name: ipsecISAKMPPolicy{72385237-70FA-11D1-864C-14A300000000}
 
objectGUID: 72044586-e446-4dc1-b2f3-8905e38c884e
 
ipsecID: {72385237-70FA-11D1-864C-14A300000000}
 
ipsecDataType: 598
 
ipsecData:: uCDcgMgu0RGongCgJI0wIUABAABz7EFfHQfTEa0iAGCw7MoXAAAAAAAAAAAAAAAAAA
 
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAAAADNzQMAAABAAAAACAAAAAIAAABAAAA
 
AAAAAAAAAAAAAAAAAAAAAAADNzc0CAAAAAAAAAAAAAACAcAAAzc3NzQAAzc0DAAAAQAAAAAgAAAAB
 
AAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAzc3NAgAAAAAAAAAAAAAAgHAAAM3Nzc0AAM3NAQAAAEAAA
 
AAIAAAAAgAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAM3NzQEAAAAAAAAAAAAAAIBwAADNzc3NAADNzQ
 
EAAABAAAAACAAAAAEAAABAAAAAAAAAAAAAAAAAAAAAAAAAAADNzc0BAAAAAAAAAAAAAACAcAAAzc3
 
NzQA=
 
ipsecOwnersReference: CN=ipsecPolicy{72385236-70FA-11D1-864C-14A300000000},CN=
 
IP Security,CN=System,DC=domain,DC=com
 
objectCategory: CN=Ipsec-ISAKMP-Policy,CN=Schema,CN=Configuration,DC=domain,DC
 
=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=ipsecISAKMPPolicy{72385237-70FA-11D1-864C-14A300000000},
 
CN=IP Security,CN=System,DC=domain,DC=com
 
 
* record 137
 
dn: CN=Infrastructure,DC=domain,DC=com
 
objectClass: top
 
objectClass: infrastructureUpdate
 
cn: Infrastructure
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
uSNCreated: 3380
 
showInAdvancedViewOnly: TRUE
 
name: Infrastructure
 
objectGUID: be39af9c-6e64-46bf-959b-556f5b4a114f
 
systemFlags: -1946157056
 
objectCategory: CN=Infrastructure-Update,CN=Schema,CN=Configuration,DC=domain,
 
DC=com
 
isCriticalSystemObject: TRUE
 
fSMORoleOwner: CN=NTDS Settings,CN=VIRGIN,CN=Servers,CN=Default-First-Site-Nam
 
e,CN=Sites,CN=Configuration,DC=domain,DC=com
 
whenChanged: 20141111041343.0Z
 
uSNChanged: 3597
 
distinguishedName: CN=Infrastructure,DC=domain,DC=com
 
 
* record 138
 
dn: CN=Domain System Volume,CN=DFSR-GlobalSettings,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: msDFSR-ReplicationGroup
 
cn: Domain System Volume
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3393
 
uSNChanged: 3393
 
showInAdvancedViewOnly: TRUE
 
name: Domain System Volume
 
objectGUID: 4c74de4a-7e83-4a8b-b834-14e24ab9f650
 
objectCategory: CN=ms-DFSR-ReplicationGroup,CN=Schema,CN=Configuration,DC=doma
 
in,DC=com
 
msDFSR-ReplicationGroupType: 1
 
distinguishedName: CN=Domain System Volume,CN=DFSR-GlobalSettings,CN=System,DC
 
=domain,DC=com
 
 
* record 139
 
dn: CN=6bcd5681-8314-11d6-977b-00c04f613221,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 6bcd5681-8314-11d6-977b-00c04f613221
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3434
 
uSNChanged: 3434
 
showInAdvancedViewOnly: TRUE
 
name: 6bcd5681-8314-11d6-977b-00c04f613221
 
objectGUID: ce3063a0-951e-4a67-add6-d8244a78e981
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=6bcd5681-8314-11d6-977b-00c04f613221,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 140
 
dn: CN=ForeignSecurityPrincipals,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: ForeignSecurityPrincipals
 
description: Default container for security identifiers (SIDs) associated with
 
  objects from external, trusted domains
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3379
 
uSNChanged: 3379
 
showInAdvancedViewOnly: FALSE
 
name: ForeignSecurityPrincipals
 
objectGUID: 2633ed10-863e-426c-94c1-66eceb345564
 
systemFlags: -1946157056
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=ForeignSecurityPrincipals,DC=domain,DC=com
 
 
* record 141
 
dn: CN=6bcd5686-8314-11d6-977b-00c04f613221,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 6bcd5686-8314-11d6-977b-00c04f613221
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3439
 
uSNChanged: 3439
 
showInAdvancedViewOnly: TRUE
 
name: 6bcd5686-8314-11d6-977b-00c04f613221
 
objectGUID: b52ef797-3869-4f9b-b222-7408c1687e4e
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=6bcd5686-8314-11d6-977b-00c04f613221,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 142
 
dn: CN=aed72870-bf16-4788-8ac7-22299c8207f1,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: aed72870-bf16-4788-8ac7-22299c8207f1
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3464
 
uSNChanged: 3464
 
showInAdvancedViewOnly: TRUE
 
name: aed72870-bf16-4788-8ac7-22299c8207f1
 
objectGUID: e4095cb0-2cd8-47ad-9407-00c8fec34fb5
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=aed72870-bf16-4788-8ac7-22299c8207f1,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 143
 
dn: CN=Users,CN=Builtin,DC=domain,DC=com
 
objectClass: top
 
objectClass: group
 
cn: Users
 
description: Users are prevented from making accidental or intentional system-
 
wide changes and can run most applications
 
member: CN=Domain Users,CN=Users,DC=domain,DC=com
 
member: CN=S-1-5-4,CN=ForeignSecurityPrincipals,DC=domain,DC=com
 
member: CN=S-1-5-11,CN=ForeignSecurityPrincipals,DC=domain,DC=com
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3563
 
uSNChanged: 3563
 
name: Users
 
objectGUID: b07f19e5-c4c9-40b5-b4a3-8a8694817ae6
 
objectSid: S-1-5-32-545
 
sAMAccountName: Users
 
sAMAccountType: 536870912
 
systemFlags: -1946157056
 
groupType: -2147483643
 
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=Users,CN=Builtin,DC=domain,DC=com
 
 
* record 144
 
dn: CN=netid,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: netid
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3751
 
uSNChanged: 3751
 
showInAdvancedViewOnly: TRUE
 
name: netid
 
objectGUID: 28d10bac-545a-4b4b-8b03-ea5eeba689d4
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=netid,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=
 
com
 
 
* record 145
 
dn: CN=Remote Desktop Users,CN=Builtin,DC=domain,DC=com
 
objectClass: top
 
objectClass: group
 
cn: Remote Desktop Users
 
description: Members in this group are granted the right to logon remotely
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3571
 
uSNChanged: 3571
 
name: Remote Desktop Users
 
objectGUID: 698bba49-2a1d-4f74-a728-32694e6b94da
 
objectSid: S-1-5-32-555
 
sAMAccountName: Remote Desktop Users
 
sAMAccountType: 536870912
 
systemFlags: -1946157056
 
groupType: -2147483643
 
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=Remote Desktop Users,CN=Builtin,DC=domain,DC=com
 
 
* record 146
 
dn: CN=Event Log Readers,CN=Builtin,DC=domain,DC=com
 
objectClass: top
 
objectClass: group
 
cn: Event Log Readers
 
description: Members of this group can read event logs from local machine
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3581
 
uSNChanged: 3581
 
name: Event Log Readers
 
objectGUID: cc7d9e3f-8952-4a1a-9f76-08cc9a36a1f8
 
objectSid: S-1-5-32-573
 
sAMAccountName: Event Log Readers
 
sAMAccountType: 536870912
 
systemFlags: -1946157056
 
groupType: -2147483643
 
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=Event Log Readers,CN=Builtin,DC=domain,DC=com
 
 
* record 147
 
dn: CN=byname,CN=services,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: msSFU30NISMapConfig
 
cn: byname
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3719
 
uSNChanged: 3719
 
showInAdvancedViewOnly: TRUE
 
name: byname
 
objectGUID: 8874c832-ee13-4c66-90ab-0b2fe1c97f0a
 
objectCategory: CN=msSFU-30-NIS-Map-Config,CN=Schema,CN=Configuration,DC=domai
 
n,DC=com
 
msSFU30KeyAttributes: CN
 
msSFU30FieldSeparator: "        "
 
msSFU30SearchAttributes: msSFU30Aliases
 
msSFU30SearchAttributes: CN
 
msSFU30SearchAttributes: msSFU30Name
 
msSFU30ResultAttributes: msSFU30Aliases
 
msSFU30ResultAttributes: CN
 
msSFU30ResultAttributes: msSFU30Name
 
msSFU30MapFilter: (objectCategory=ipService)
 
distinguishedName: CN=byname,CN=services,CN=ypServ30,CN=RpcServices,CN=System,
 
DC=domain,DC=com
 
 
* record 148
 
dn: CN=Enterprise Admins,CN=Users,DC=domain,DC=com
 
objectClass: top
 
objectClass: group
 
cn: Enterprise Admins
 
description: Designated administrators of the enterprise
 
member: CN=Administrator,CN=Users,DC=domain,DC=com
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3552
 
uSNChanged: 3552
 
name: Enterprise Admins
 
objectGUID: 42628428-c005-4a95-9e52-552200b0d570
 
objectSid: S-1-5-21-2111727124-4264577813-266878271-519
 
adminCount: 1
 
sAMAccountName: Enterprise Admins
 
sAMAccountType: 268435456
 
groupType: -2147483640
 
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
memberOf: CN=Administrators,CN=Builtin,DC=domain,DC=com
 
memberOf: CN=Denied RODC Password Replication Group,CN=Users,DC=domain,DC=com
 
distinguishedName: CN=Enterprise Admins,CN=Users,DC=domain,DC=com
 
 
* record 149
 
dn: CN=ipsecNFA{59319BE2-5EE3-11D2-ACE8-0060B0ECCA17},CN=IP Security,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: ipsecBase
 
objectClass: ipsecNFA
 
cn: ipsecNFA{59319BE2-5EE3-11D2-ACE8-0060B0ECCA17}
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
uSNCreated: 3480
 
showInAdvancedViewOnly: TRUE
 
name: ipsecNFA{59319BE2-5EE3-11D2-ACE8-0060B0ECCA17}
 
objectGUID: effd2daa-f64f-451c-a181-14fe551cfcd4
 
ipsecID: {59319BE2-5EE3-11D2-ACE8-0060B0ECCA17}
 
ipsecDataType: 598
 
ipsecData:: AKy7EY1J0RGGOQCgJI0wISoAAAABAAAABQAAAAIAAAAAAP3///8CAAAAAAAAAAAAAA
 
AAAAEAAAACAAAAAAAA
 
ipsecOwnersReference: CN=ipsecPolicy{72385230-70FA-11D1-864C-14A300000000},CN=
 
IP Security,CN=System,DC=domain,DC=com
 
objectCategory: CN=Ipsec-NFA,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
ipsecNegotiationPolicyReference: CN=ipsecNegotiationPolicy{59319BDF-5EE3-11D2-
 
ACE8-0060B0ECCA17},CN=IP Security,CN=System,DC=domain,DC=com
 
whenChanged: 20141111041353.0Z
 
uSNChanged: 3695
 
distinguishedName: CN=ipsecNFA{59319BE2-5EE3-11D2-ACE8-0060B0ECCA17},CN=IP Sec
 
urity,CN=System,DC=domain,DC=com
 
 
* record 150
 
dn: CN=6bcd5682-8314-11d6-977b-00c04f613221,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 6bcd5682-8314-11d6-977b-00c04f613221
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3435
 
uSNChanged: 3435
 
showInAdvancedViewOnly: TRUE
 
name: 6bcd5682-8314-11d6-977b-00c04f613221
 
objectGUID: 93e54bf1-fb4e-4ddf-9b90-7d5d26059af2
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=6bcd5682-8314-11d6-977b-00c04f613221,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 151
 
dn: CN=ActiveDirectoryUpdate,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: ActiveDirectoryUpdate
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3397
 
uSNChanged: 3397
 
showInAdvancedViewOnly: TRUE
 
name: ActiveDirectoryUpdate
 
objectGUID: 2bb76a27-68d7-444c-a420-d73a8efd2ee5
 
revision: 5
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=ActiveDirectoryUpdate,CN=DomainUpdates,CN=System,DC=doma
 
in,DC=com
 
 
* record 152
 
dn: CN=6bcd5687-8314-11d6-977b-00c04f613221,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 6bcd5687-8314-11d6-977b-00c04f613221
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3440
 
uSNChanged: 3440
 
showInAdvancedViewOnly: TRUE
 
name: 6bcd5687-8314-11d6-977b-00c04f613221
 
objectGUID: f05c3daa-7029-4246-a3b1-99fdb4be5b6b
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=6bcd5687-8314-11d6-977b-00c04f613221,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 153
 
dn: CN=S-1-5-17,CN=ForeignSecurityPrincipals,DC=domain,DC=com
 
objectClass: top
 
objectClass: foreignSecurityPrincipal
 
cn: S-1-5-17
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3561
 
uSNChanged: 3561
 
showInAdvancedViewOnly: TRUE
 
name: S-1-5-17
 
objectGUID: b38d93e5-90df-4128-ac71-43a2522d27d6
 
objectSid: S-1-5-17
 
objectCategory: CN=Foreign-Security-Principal,CN=Schema,CN=Configuration,DC=do
 
main,DC=com
 
memberOf: CN=IIS_IUSRS,CN=Builtin,DC=domain,DC=com
 
distinguishedName: CN=S-1-5-17,CN=ForeignSecurityPrincipals,DC=domain,DC=com
 
 
* record 154
 
dn: CN=sme-server,CN=protocols,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: msSFU30DomainInfo
 
cn: sme-server
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3747
 
uSNChanged: 3747
 
showInAdvancedViewOnly: TRUE
 
name: sme-server
 
objectGUID: 83d65953-dd0e-442e-b5b9-34cd172bb193
 
objectCategory: CN=msSFU-30-Domain-Info,CN=Schema,CN=Configuration,DC=domain,D
 
C=com
 
msSFU30MasterServerName: VIRGIN
 
msSFU30OrderNumber: 10000
 
msSFU30Domains: sme-server
 
distinguishedName: CN=sme-server,CN=protocols,CN=ypServ30,CN=RpcServices,CN=Sy
 
stem,DC=domain,DC=com
 
 
* record 155
 
dn: CN=sme-server,CN=ethers,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: msSFU30DomainInfo
 
cn: sme-server
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3739
 
uSNChanged: 3739
 
showInAdvancedViewOnly: TRUE
 
name: sme-server
 
objectGUID: a9d7ca24-c992-4067-9633-4211e08c8966
 
objectCategory: CN=msSFU-30-Domain-Info,CN=Schema,CN=Configuration,DC=domain,D
 
C=com
 
msSFU30MasterServerName: VIRGIN
 
msSFU30OrderNumber: 10000
 
msSFU30Domains: sme-server
 
distinguishedName: CN=sme-server,CN=ethers,CN=ypServ30,CN=RpcServices,CN=Syste
 
m,DC=domain,DC=com
 
 
* record 156
 
dn: CN=services,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: services
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3718
 
uSNChanged: 3718
 
showInAdvancedViewOnly: TRUE
 
name: services
 
objectGUID: 5982946c-c34d-4b60-a72e-b89110561da2
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=services,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,
 
DC=com
 
 
* record 157
 
dn: CN=9cac1f66-2167-47ad-a472-2a13251310e4,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 9cac1f66-2167-47ad-a472-2a13251310e4
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3412
 
uSNChanged: 3412
 
showInAdvancedViewOnly: TRUE
 
name: 9cac1f66-2167-47ad-a472-2a13251310e4
 
objectGUID: 433db288-f333-46b1-9c5d-2fe1a3929ca3
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=9cac1f66-2167-47ad-a472-2a13251310e4,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 158
 
dn: CN=sme-server,CN=mail,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: msSFU30DomainInfo
 
cn: sme-server
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3717
 
uSNChanged: 3717
 
showInAdvancedViewOnly: TRUE
 
name: sme-server
 
objectGUID: b54aafb2-b298-40e1-acef-2c8e221953dd
 
objectCategory: CN=msSFU-30-Domain-Info,CN=Schema,CN=Configuration,DC=domain,D
 
C=com
 
msSFU30MasterServerName: VIRGIN
 
msSFU30OrderNumber: 10000
 
msSFU30Domains: sme-server
 
distinguishedName: CN=sme-server,CN=mail,CN=ypServ30,CN=RpcServices,CN=System,
 
DC=domain,DC=com
 
 
* record 159
 
dn: CN=byname,CN=netid,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: msSFU30NISMapConfig
 
cn: byname
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3752
 
uSNChanged: 3752
 
showInAdvancedViewOnly: TRUE
 
name: byname
 
objectGUID: a451c61b-5cef-4815-91dd-6b52a7c89233
 
objectCategory: CN=msSFU-30-NIS-Map-Config,CN=Schema,CN=Configuration,DC=domai
 
n,DC=com
 
msSFU30KeyAttributes: msSFU30Name
 
msSFU30FieldSeparator: "        "
 
msSFU30SearchAttributes: msSFU30KeyValues
 
msSFU30SearchAttributes: msSFU30Name
 
msSFU30ResultAttributes: msSFU30KeyValues
 
msSFU30MapFilter: (objectCategory=msSFU30NetId)
 
distinguishedName: CN=byname,CN=netid,CN=ypServ30,CN=RpcServices,CN=System,DC=
 
domain,DC=com
 
 
* record 160
 
dn: DC=c.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: dnsNode
 
instanceType: 4
 
whenCreated: 20141111041349.0Z
 
whenChanged: 20141111041349.0Z
 
uSNCreated: 3618
 
uSNChanged: 3618
 
showInAdvancedViewOnly: TRUE
 
name: c.root-servers.net
 
objectGUID: be91dc09-26e5-493f-9f88-a0cb2a6ee67f
 
dnsRecord:: BAABAAUIAAAAAAAAAAAAAAAAAAAAAAAAwCEEDA==
 
objectCategory: CN=Dns-Node,CN=Schema,CN=Configuration,DC=domain,DC=com
 
dc: c.root-servers.net
 
distinguishedName: DC=c.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=
 
System,DC=domain,DC=com
 
 
* record 161
 
dn: CN=6bcd568a-8314-11d6-977b-00c04f613221,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 6bcd568a-8314-11d6-977b-00c04f613221
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3443
 
uSNChanged: 3443
 
showInAdvancedViewOnly: TRUE
 
name: 6bcd568a-8314-11d6-977b-00c04f613221
 
objectGUID: 91701075-5046-4c03-bb8f-4259ec507a6a
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=6bcd568a-8314-11d6-977b-00c04f613221,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 162
 
dn: CN=6bcd567a-8314-11d6-977b-00c04f613221,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 6bcd567a-8314-11d6-977b-00c04f613221
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3427
 
uSNChanged: 3427
 
showInAdvancedViewOnly: TRUE
 
name: 6bcd567a-8314-11d6-977b-00c04f613221
 
objectGUID: 553b80b3-2fe9-40f1-96d5-d192b62929cd
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=6bcd567a-8314-11d6-977b-00c04f613221,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 163
 
dn: CN=bydefaults,CN=ypservers,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: msSFU30NISMapConfig
 
cn: bydefaults
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3766
 
uSNChanged: 3766
 
showInAdvancedViewOnly: TRUE
 
name: bydefaults
 
objectGUID: 4b612772-2954-42c1-97a8-35ba82a3e07c
 
objectCategory: CN=msSFU-30-NIS-Map-Config,CN=Schema,CN=Configuration,DC=domai
 
n,DC=com
 
msSFU30KeyAttributes: msSFU30Name
 
msSFU30FieldSeparator:: IA==
 
msSFU30IntraFieldSeparator:: IA==
 
msSFU30SearchAttributes: msSFU30Name
 
msSFU30ResultAttributes: msSFU30Name
 
msSFU30MapFilter: (objectCategory=msSFU30YpServers)
 
distinguishedName: CN=bydefaults,CN=ypservers,CN=ypServ30,CN=RpcServices,CN=Sy
 
stem,DC=domain,DC=com
 
 
* record 164
 
dn: DC=l.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: dnsNode
 
instanceType: 4
 
whenCreated: 20141111041349.0Z
 
whenChanged: 20141111041349.0Z
 
uSNCreated: 3611
 
uSNChanged: 3611
 
showInAdvancedViewOnly: TRUE
 
name: l.root-servers.net
 
objectGUID: a1574546-79c1-4171-a365-d33eaebffe38
 
dnsRecord:: BAABAAUIAAAAAAAAAAAAAAAAAAAAAAAAxwdTKg==
 
objectCategory: CN=Dns-Node,CN=Schema,CN=Configuration,DC=domain,DC=com
 
dc: l.root-servers.net
 
distinguishedName: DC=l.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=
 
System,DC=domain,DC=com
 
 
* record 165
 
dn: CN=Allowed RODC Password Replication Group,CN=Users,DC=domain,DC=com
 
objectClass: top
 
objectClass: group
 
cn: Allowed RODC Password Replication Group
 
description: Members in this group can have their passwords replicated to all
 
read-only domain controllers in the domain
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3556
 
uSNChanged: 3556
 
name: Allowed RODC Password Replication Group
 
objectGUID: cf0d1941-c71e-4644-816c-f3f8b9617f82
 
objectSid: S-1-5-21-2111727124-4264577813-266878271-571
 
sAMAccountName: Allowed RODC Password Replication Group
 
sAMAccountType: 536870912
 
groupType: -2147483644
 
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=Allowed RODC Password Replication Group,CN=Users,DC=doma
 
in,DC=com
 
 
* record 166
 
dn: CN=6bcd567f-8314-11d6-977b-00c04f613221,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 6bcd567f-8314-11d6-977b-00c04f613221
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3432
 
uSNChanged: 3432
 
showInAdvancedViewOnly: TRUE
 
name: 6bcd567f-8314-11d6-977b-00c04f613221
 
objectGUID: 974372c8-615a-4627-a18f-31356a0ac78e
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=6bcd567f-8314-11d6-977b-00c04f613221,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 167
 
dn: CN=6ff880d6-11e7-4ed1-a20f-aac45da48650,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 6ff880d6-11e7-4ed1-a20f-aac45da48650
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3413
 
uSNChanged: 3413
 
showInAdvancedViewOnly: TRUE
 
name: 6ff880d6-11e7-4ed1-a20f-aac45da48650
 
objectGUID: 22a019f1-c6ba-4ccd-91ab-df9431cfdb62
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=6ff880d6-11e7-4ed1-a20f-aac45da48650,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 168
 
dn: CN=sme-server,CN=group,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: msSFU30DomainInfo
 
cn: sme-server
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3764
 
uSNChanged: 3764
 
showInAdvancedViewOnly: TRUE
 
name: sme-server
 
objectGUID: 5cb34a9b-d391-4f81-b790-e2ccce693156
 
objectCategory: CN=msSFU-30-Domain-Info,CN=Schema,CN=Configuration,DC=domain,D
 
C=com
 
msSFU30MasterServerName: VIRGIN
 
msSFU30OrderNumber: 10000
 
msSFU30Domains: sme-server
 
distinguishedName: CN=sme-server,CN=group,CN=ypServ30,CN=RpcServices,CN=System
 
,DC=domain,DC=com
 
 
* record 169
 
dn: CN=sme-server,CN=hosts,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: msSFU30DomainInfo
 
cn: sme-server
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3735
 
uSNChanged: 3735
 
showInAdvancedViewOnly: TRUE
 
name: sme-server
 
objectGUID: 1827e32c-ede1-45e8-a5af-7734819cca0b
 
objectCategory: CN=msSFU-30-Domain-Info,CN=Schema,CN=Configuration,DC=domain,D
 
C=com
 
msSFU30MasterServerName: VIRGIN
 
msSFU30OrderNumber: 10000
 
msSFU30Domains: sme-server
 
distinguishedName: CN=sme-server,CN=hosts,CN=ypServ30,CN=RpcServices,CN=System
 
,DC=domain,DC=com
 
 
* record 170
 
dn: CN=6bcd5678-8314-11d6-977b-00c04f613221,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 6bcd5678-8314-11d6-977b-00c04f613221
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3425
 
uSNChanged: 3425
 
showInAdvancedViewOnly: TRUE
 
name: 6bcd5678-8314-11d6-977b-00c04f613221
 
objectGUID: 21b5679f-463a-49dd-a9da-e86ded497f28
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=6bcd5678-8314-11d6-977b-00c04f613221,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 171
 
dn: CN=sme-server,CN=passwd,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: msSFU30DomainInfo
 
cn: sme-server
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3757
 
uSNChanged: 3757
 
showInAdvancedViewOnly: TRUE
 
name: sme-server
 
objectGUID: ea4a77ba-8136-4403-ab9b-e51faaf09b30
 
objectCategory: CN=msSFU-30-Domain-Info,CN=Schema,CN=Configuration,DC=domain,D
 
C=com
 
msSFU30MasterServerName: VIRGIN
 
msSFU30OrderNumber: 10000
 
msSFU30Domains: sme-server
 
distinguishedName: CN=sme-server,CN=passwd,CN=ypServ30,CN=RpcServices,CN=Syste
 
m,DC=domain,DC=com
 
 
* record 172
 
dn: CN=Machine,CN={6AC1786C-016F-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: Machine
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3590
 
uSNChanged: 3590
 
showInAdvancedViewOnly: TRUE
 
name: Machine
 
objectGUID: 7311cbfc-b073-4578-97b6-c9df43811492
 
systemFlags: -1946157056
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=Machine,CN={6AC1786C-016F-11D2-945F-00C04FB984F9},CN=Pol
 
icies,CN=System,DC=domain,DC=com
 
 
* record 173
 
dn: CN=bydefaults,CN=shadow,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: msSFU30NISMapConfig
 
cn: bydefaults
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3759
 
uSNChanged: 3759
 
showInAdvancedViewOnly: TRUE
 
name: bydefaults
 
objectGUID: 1ff33caa-8054-452f-8394-de11b4e29a09
 
objectCategory: CN=msSFU-30-NIS-Map-Config,CN=Schema,CN=Configuration,DC=domai
 
n,DC=com
 
msSFU30KeyAttributes: msSFU30Name
 
msSFU30FieldSeparator:: Og==
 
msSFU30IntraFieldSeparator:: Og==
 
msSFU30SearchAttributes: shadowFlag
 
msSFU30SearchAttributes: shadowExpire
 
msSFU30SearchAttributes: shadowInactive
 
msSFU30SearchAttributes: shadowWarning
 
msSFU30SearchAttributes: shadowMax
 
msSFU30SearchAttributes: shadowMin
 
msSFU30SearchAttributes: shadowLastChange
 
msSFU30SearchAttributes: unixUserPassword
 
msSFU30SearchAttributes: msSFU30Name
 
msSFU30ResultAttributes: shadowFlag
 
msSFU30ResultAttributes: shadowExpire
 
msSFU30ResultAttributes: shadowInactive
 
msSFU30ResultAttributes: shadowWarning
 
msSFU30ResultAttributes: shadowMax
 
msSFU30ResultAttributes: shadowMin
 
msSFU30ResultAttributes: shadowLastChange
 
msSFU30ResultAttributes: unixUserPassword
 
msSFU30ResultAttributes: msSFU30Name
 
msSFU30MapFilter: (uidNumber=*)
 
distinguishedName: CN=bydefaults,CN=shadow,CN=ypServ30,CN=RpcServices,CN=Syste
 
m,DC=domain,DC=com
 
 
* record 174
 
dn: CN=netgroup,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: netgroup
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3724
 
uSNChanged: 3724
 
showInAdvancedViewOnly: TRUE
 
name: netgroup
 
objectGUID: da170dd0-f298-4390-8e28-d4b1e3371b99
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=netgroup,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,
 
DC=com
 
 
* record 175
 
dn: DC=e.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: dnsNode
 
instanceType: 4
 
whenCreated: 20141111041349.0Z
 
whenChanged: 20141111041349.0Z
 
uSNCreated: 3613
 
uSNChanged: 3613
 
showInAdvancedViewOnly: TRUE
 
name: e.root-servers.net
 
objectGUID: c6fe9cff-e03f-4b14-ad21-7baabfad9786
 
dnsRecord:: BAABAAUIAAAAAAAAAAAAAAAAAAAAAAAAwMvmCg==
 
objectCategory: CN=Dns-Node,CN=Schema,CN=Configuration,DC=domain,DC=com
 
dc: e.root-servers.net
 
distinguishedName: DC=e.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=
 
System,DC=domain,DC=com
 
 
* record 176
 
dn: CN=231fb90b-c92a-40c9-9379-bacfc313a3e3,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 231fb90b-c92a-40c9-9379-bacfc313a3e3
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3454
 
uSNChanged: 3454
 
showInAdvancedViewOnly: TRUE
 
name: 231fb90b-c92a-40c9-9379-bacfc313a3e3
 
objectGUID: 4c1edaf9-0fca-4e90-b9ef-e0e2e1a8b967
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=231fb90b-c92a-40c9-9379-bacfc313a3e3,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 177
 
dn: CN=PolicyType,CN=WMIPolicy,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: PolicyType
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3509
 
uSNChanged: 3509
 
showInAdvancedViewOnly: TRUE
 
name: PolicyType
 
objectGUID: 57c71e6e-4dc4-47a7-9670-320e5959ad5a
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=PolicyType,CN=WMIPolicy,CN=System,DC=domain,DC=com
 
 
* record 178
 
dn: CN=sme-server,CN=services,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: msSFU30DomainInfo
 
cn: sme-server
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3720
 
uSNChanged: 3720
 
showInAdvancedViewOnly: TRUE
 
name: sme-server
 
objectGUID: a24d2a2d-eea6-4cab-95c1-b4eb2d9ba8fc
 
objectCategory: CN=msSFU-30-Domain-Info,CN=Schema,CN=Configuration,DC=domain,D
 
C=com
 
msSFU30MasterServerName: VIRGIN
 
msSFU30OrderNumber: 10000
 
msSFU30Domains: sme-server
 
distinguishedName: CN=sme-server,CN=services,CN=ypServ30,CN=RpcServices,CN=Sys
 
tem,DC=domain,DC=com
 
 
* record 179
 
dn: CN=7868d4c8-ac41-4e05-b401-776280e8e9f1,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 7868d4c8-ac41-4e05-b401-776280e8e9f1
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3403
 
uSNChanged: 3403
 
showInAdvancedViewOnly: TRUE
 
name: 7868d4c8-ac41-4e05-b401-776280e8e9f1
 
objectGUID: 7411c310-dc11-4bda-ae93-c7098465634e
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=7868d4c8-ac41-4e05-b401-776280e8e9f1,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 180
 
dn: DC=g.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: dnsNode
 
instanceType: 4
 
whenCreated: 20141111041349.0Z
 
whenChanged: 20141111041349.0Z
 
uSNCreated: 3617
 
uSNChanged: 3617
 
showInAdvancedViewOnly: TRUE
 
name: g.root-servers.net
 
objectGUID: 47b344ce-30b9-4003-99de-fd8fbb4cdcf4
 
dnsRecord:: BAABAAUIAAAAAAAAAAAAAAAAAAAAAAAAwHAkBA==
 
objectCategory: CN=Dns-Node,CN=Schema,CN=Configuration,DC=domain,DC=com
 
dc: g.root-servers.net
 
distinguishedName: DC=g.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=
 
System,DC=domain,DC=com
 
 
* record 181
 
dn: CN=3051c66f-b332-4a73-9a20-2d6a7d6e6a1c,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 3051c66f-b332-4a73-9a20-2d6a7d6e6a1c
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3447
 
uSNChanged: 3447
 
showInAdvancedViewOnly: TRUE
 
name: 3051c66f-b332-4a73-9a20-2d6a7d6e6a1c
 
objectGUID: 5e9fa8de-0815-48b1-a0de-0ead10302806
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=3051c66f-b332-4a73-9a20-2d6a7d6e6a1c,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 182
 
dn: CN=Incoming Forest Trust Builders,CN=Builtin,DC=domain,DC=com
 
objectClass: top
 
objectClass: group
 
cn: Incoming Forest Trust Builders
 
description: Members of this group can create incoming, one-way trusts to this
 
  forest
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3573
 
uSNChanged: 3573
 
name: Incoming Forest Trust Builders
 
objectGUID: 105b1fe6-ede0-435a-95f6-31516c8a6417
 
objectSid: S-1-5-32-557
 
sAMAccountName: Incoming Forest Trust Builders
 
sAMAccountType: 536870912
 
systemFlags: -1946157056
 
groupType: -2147483643
 
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=Incoming Forest Trust Builders,CN=Builtin,DC=domain,DC=c
 
om
 
 
* record 183
 
dn: CN=ipsecNFA{594272FD-071D-11D3-AD22-0060B0ECCA17},CN=IP Security,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: ipsecBase
 
objectClass: ipsecNFA
 
cn: ipsecNFA{594272FD-071D-11D3-AD22-0060B0ECCA17}
 
description: Permit unsecure ICMP packets to pass through.
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3495
 
uSNChanged: 3495
 
showInAdvancedViewOnly: TRUE
 
name: ipsecNFA{594272FD-071D-11D3-AD22-0060B0ECCA17}
 
objectGUID: 92d52875-0692-4800-90b4-990276ccd353
 
ipsecName: Permit unsecure ICMP packets to pass through.
 
ipsecID: {594272FD-071D-11D3-AD22-0060B0ECCA17}
 
ipsecDataType: 598
 
ipsecData:: AKy7EY1J0RGGOQCgJI0wISoAAAABAAAABQAAAAIAAAAAAP3///8CAAAAAAAAAAAAAA
 
AAAAEAAAACAAAAAAAA
 
ipsecOwnersReference: CN=ipsecPolicy{7238523C-70FA-11D1-864C-14A300000000},CN=
 
IP Security,CN=System,DC=domain,DC=com
 
ipsecNegotiationPolicyReference: CN=ipsecNegotiationPolicy{7238523B-70FA-11D1-
 
864C-14A300000000},CN=IP Security,CN=System,DC=domain,DC=com
 
ipsecFilterReference: CN=ipsecFilter{72385235-70FA-11D1-864C-14A300000000},CN=
 
IP Security,CN=System,DC=domain,DC=com
 
objectCategory: CN=Ipsec-NFA,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=ipsecNFA{594272FD-071D-11D3-AD22-0060B0ECCA17},CN=IP Sec
 
urity,CN=System,DC=domain,DC=com
 
 
* record 184
 
dn: CN=netmasks,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: netmasks
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3729
 
uSNChanged: 3729
 
showInAdvancedViewOnly: TRUE
 
name: netmasks
 
objectGUID: 85dfe6eb-0a9e-4f62-81ca-83fd19835840
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=netmasks,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,
 
DC=com
 
 
* record 185
 
dn: CN=Users,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: Users
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3372
 
name: Users
 
objectGUID: 2366cc2f-a3eb-4235-ad41-ff5c95dc3655
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
description: Default container for upgraded user accounts
 
systemFlags: -1946157056
 
isCriticalSystemObject: TRUE
 
showInAdvancedViewOnly: FALSE
 
uSNChanged: 3373
 
distinguishedName: CN=Users,DC=domain,DC=com
 
 
* record 186
 
dn: CN=byaddr,CN=mail,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: msSFU30NISMapConfig
 
cn: byaddr
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3715
 
uSNChanged: 3715
 
showInAdvancedViewOnly: TRUE
 
name: byaddr
 
objectGUID: 5bda9a37-df13-4825-a47e-5397b341c710
 
objectCategory: CN=msSFU-30-NIS-Map-Config,CN=Schema,CN=Configuration,DC=domai
 
n,DC=com
 
msSFU30KeyAttributes: msSFU30Aliases
 
msSFU30FieldSeparator:: Og==
 
msSFU30IntraFieldSeparator: ,
 
msSFU30SearchAttributes: msSFU30Aliases
 
msSFU30SearchAttributes: msSFU30Name
 
msSFU30ResultAttributes: msSFU30Aliases
 
msSFU30MapFilter: (objectCategory=msSFU30MailAliases)
 
distinguishedName: CN=byaddr,CN=mail,CN=ypServ30,CN=RpcServices,CN=System,DC=d
 
omain,DC=com
 
 
* record 187
 
dn: CN=WinsockServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: WinsockServices
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3506
 
uSNChanged: 3506
 
showInAdvancedViewOnly: TRUE
 
name: WinsockServices
 
objectGUID: 99ae6032-e367-4ee4-bbab-4858e8333e7b
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=WinsockServices,CN=System,DC=domain,DC=com
 
 
* record 188
 
dn: DC=i.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: dnsNode
 
instanceType: 4
 
whenCreated: 20141111041349.0Z
 
whenChanged: 20141111041349.0Z
 
uSNCreated: 3612
 
uSNChanged: 3612
 
showInAdvancedViewOnly: TRUE
 
name: i.root-servers.net
 
objectGUID: 679d5a7d-8d79-4314-b874-6f670b0a73ea
 
dnsRecord:: BAABAAUIAAAAAAAAAAAAAAAAAAAAAAAAwCSUEQ==
 
objectCategory: CN=Dns-Node,CN=Schema,CN=Configuration,DC=domain,DC=com
 
dc: i.root-servers.net
 
distinguishedName: DC=i.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=
 
System,DC=domain,DC=com
 
 
* record 189
 
dn: CN=860c36ed-5241-4c62-a18b-cf6ff9994173,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 860c36ed-5241-4c62-a18b-cf6ff9994173
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3404
 
uSNChanged: 3404
 
showInAdvancedViewOnly: TRUE
 
name: 860c36ed-5241-4c62-a18b-cf6ff9994173
 
objectGUID: 12f8b86d-4d02-4028-b967-cdf5b3637b04
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=860c36ed-5241-4c62-a18b-cf6ff9994173,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 190
 
dn: CN=Guest,CN=Users,DC=domain,DC=com
 
objectClass: top
 
objectClass: person
 
objectClass: organizationalPerson
 
objectClass: user
 
cn: Guest
 
description: Built-in account for guest access to the computer/domain
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3546
 
uSNChanged: 3546
 
name: Guest
 
objectGUID: 35d1f1c3-b49d-470c-8dad-1187400f333e
 
userAccountControl: 66082
 
badPwdCount: 0
 
codePage: 0
 
countryCode: 0
 
badPasswordTime: 0
 
lastLogoff: 0
 
lastLogon: 0
 
pwdLastSet: 0
 
primaryGroupID: 514
 
objectSid: S-1-5-21-2111727124-4264577813-266878271-501
 
accountExpires: 9223372036854775807
 
logonCount: 0
 
sAMAccountName: Guest
 
sAMAccountType: 805306368
 
objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
memberOf: CN=Guests,CN=Builtin,DC=domain,DC=com
 
distinguishedName: CN=Guest,CN=Users,DC=domain,DC=com
 
 
* record 191
 
dn: CN=DnsUpdateProxy,CN=Users,DC=domain,DC=com
 
objectClass: top
 
objectClass: group
 
cn: DnsUpdateProxy
 
description: DNS clients who are permitted to perform dynamic updates on behal
 
f of some other clients (such as DHCP servers).
 
instanceType: 4
 
whenCreated: 20141111041349.0Z
 
whenChanged: 20141111041349.0Z
 
uSNCreated: 3603
 
uSNChanged: 3603
 
name: DnsUpdateProxy
 
objectGUID: d8ca8ce9-3a17-47a2-84d4-3ae8c93e0239
 
objectSid: S-1-5-21-2111727124-4264577813-266878271-1102
 
sAMAccountName: DnsUpdateProxy
 
sAMAccountType: 268435456
 
groupType: -2147483646
 
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=DnsUpdateProxy,CN=Users,DC=domain,DC=com
 
 
* record 192
 
dn: CN=sme-server,CN=bootparams,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: msSFU30DomainInfo
 
cn: sme-server
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3723
 
uSNChanged: 3723
 
showInAdvancedViewOnly: TRUE
 
name: sme-server
 
objectGUID: c2c2815c-5693-4acb-a846-edc1c8a6a292
 
objectCategory: CN=msSFU-30-Domain-Info,CN=Schema,CN=Configuration,DC=domain,D
 
C=com
 
msSFU30MasterServerName: VIRGIN
 
msSFU30OrderNumber: 10000
 
msSFU30Domains: sme-server
 
distinguishedName: CN=sme-server,CN=bootparams,CN=ypServ30,CN=RpcServices,CN=S
 
ystem,DC=domain,DC=com
 
 
* record 193
 
dn: DC=b.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: dnsNode
 
instanceType: 4
 
whenCreated: 20141111041349.0Z
 
whenChanged: 20141111041349.0Z
 
uSNCreated: 3609
 
uSNChanged: 3609
 
showInAdvancedViewOnly: TRUE
 
name: b.root-servers.net
 
objectGUID: f94a4e3f-b819-446c-bff9-7201e2443dfb
 
dnsRecord:: BAABAAUIAAAAAAAAAAAAAAAAAAAAAAAAwORPyQ==
 
objectCategory: CN=Dns-Node,CN=Schema,CN=Configuration,DC=domain,DC=com
 
dc: b.root-servers.net
 
distinguishedName: DC=b.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=
 
System,DC=domain,DC=com
 
 
* record 194
 
dn: CN=8437C3D8-7689-4200-BF38-79E4AC33DFA0,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 8437C3D8-7689-4200-BF38-79E4AC33DFA0
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3420
 
uSNChanged: 3420
 
showInAdvancedViewOnly: TRUE
 
name: 8437C3D8-7689-4200-BF38-79E4AC33DFA0
 
objectGUID: d9cb0059-111c-465f-a6d8-f8bd5bc624c0
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=8437C3D8-7689-4200-BF38-79E4AC33DFA0,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 195
 
dn: CN=WMIGPO,CN=WMIPolicy,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: WMIGPO
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3511
 
uSNChanged: 3511
 
showInAdvancedViewOnly: TRUE
 
name: WMIGPO
 
objectGUID: cec53bda-5ff9-47d6-bd29-30ed325f5556
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=WMIGPO,CN=WMIPolicy,CN=System,DC=domain,DC=com
 
 
* record 196
 
dn: CN=AdminSDHolder,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: AdminSDHolder
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3386
 
uSNChanged: 3386
 
showInAdvancedViewOnly: TRUE
 
name: AdminSDHolder
 
objectGUID: d7248433-f59e-4f6b-9756-4073983a9ee8
 
systemFlags: -1946157056
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=AdminSDHolder,CN=System,DC=domain,DC=com
 
 
* record 197
 
dn: CN=bydefaults,CN=netgroup,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: msSFU30NISMapConfig
 
cn: bydefaults
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3725
 
uSNChanged: 3725
 
showInAdvancedViewOnly: TRUE
 
name: bydefaults
 
objectGUID: c7d1798f-06fb-49a0-89f8-3556c7d335f6
 
objectCategory: CN=msSFU-30-NIS-Map-Config,CN=Schema,CN=Configuration,DC=domai
 
n,DC=com
 
msSFU30KeyAttributes: msSFU30Name
 
msSFU30FieldSeparator: "        "
 
msSFU30IntraFieldSeparator: ,
 
msSFU30SearchAttributes: NisNetgroupTriple
 
msSFU30SearchAttributes: msSFU30Name
 
msSFU30ResultAttributes: NisNetgroupTriple
 
msSFU30MapFilter: (objectCategory=NisNetgroup)
 
distinguishedName: CN=bydefaults,CN=netgroup,CN=ypServ30,CN=RpcServices,CN=Sys
 
tem,DC=domain,DC=com
 
 
* record 198
 
dn: DC=k.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: dnsNode
 
instanceType: 4
 
whenCreated: 20141111041349.0Z
 
whenChanged: 20141111041349.0Z
 
uSNCreated: 3615
 
uSNChanged: 3615
 
showInAdvancedViewOnly: TRUE
 
name: k.root-servers.net
 
objectGUID: 1760e0b5-f891-42c0-943b-f115605d7727
 
dnsRecord:: BAABAAUIAAAAAAAAAAAAAAAAAAAAAAAAwQAOgQ==
 
objectCategory: CN=Dns-Node,CN=Schema,CN=Configuration,DC=domain,DC=com
 
dc: k.root-servers.net
 
distinguishedName: DC=k.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=
 
System,DC=domain,DC=com
 
 
* record 199
 
dn: CN=ipsecNegotiationPolicy{7238523B-70FA-11D1-864C-14A300000000},CN=IP Security,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: ipsecBase
 
objectClass: ipsecNegotiationPolicy
 
cn: ipsecNegotiationPolicy{7238523B-70FA-11D1-864C-14A300000000}
 
description: Permit unsecured IP packets to pass through.
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
uSNCreated: 3485
 
showInAdvancedViewOnly: TRUE
 
name: ipsecNegotiationPolicy{7238523B-70FA-11D1-864C-14A300000000}
 
objectGUID: c9ac9820-ddf7-4073-a611-9b6df4d80827
 
ipsecName: Permit
 
ipsecID: {7238523B-70FA-11D1-864C-14A300000000}
 
ipsecDataType: 598
 
ipsecData:: uSDcgMgu0RGongCgJI0wIQQAAAAAAAAAAA==
 
ipsecOwnersReference: CN=ipsecNFA{594272E2-071D-11D3-AD22-0060B0ECCA17},CN=IP
 
Security,CN=System,DC=domain,DC=com
 
ipsecOwnersReference: CN=ipsecNFA{594272FD-071D-11D3-AD22-0060B0ECCA17},CN=IP
 
Security,CN=System,DC=domain,DC=com
 
objectCategory: CN=Ipsec-Negotiation-Policy,CN=Schema,CN=Configuration,DC=doma
 
in,DC=com
 
isCriticalSystemObject: TRUE
 
iPSECNegotiationPolicyType: {62F49E10-6C37-11D1-864C-14A300000000}
 
iPSECNegotiationPolicyAction: {8A171DD2-77E3-11D1-8659-A04F00000000}
 
whenChanged: 20141111041354.0Z
 
uSNChanged: 3701
 
distinguishedName: CN=ipsecNegotiationPolicy{7238523B-70FA-11D1-864C-14A300000
 
000},CN=IP Security,CN=System,DC=domain,DC=com
 
 
* record 200
 
dn: CN=RAS and IAS Servers,CN=Users,DC=domain,DC=com
 
objectClass: top
 
objectClass: group
 
cn: RAS and IAS Servers
 
description: Servers in this group can access remote access properties of user
 
s
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3555
 
uSNChanged: 3555
 
name: RAS and IAS Servers
 
objectGUID: 46646305-a578-447c-87cb-c9fae470618e
 
objectSid: S-1-5-21-2111727124-4264577813-266878271-553
 
sAMAccountName: RAS and IAS Servers
 
sAMAccountType: 536870912
 
groupType: -2147483644
 
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=RAS and IAS Servers,CN=Users,DC=domain,DC=com
 
 
* record 201
 
dn: CN=Computers,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: Computers
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3374
 
name: Computers
 
objectGUID: 00633ffe-ef87-4d10-9f56-43d181320455
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
description: Default container for upgraded computer accounts
 
systemFlags: -1946157056
 
isCriticalSystemObject: TRUE
 
showInAdvancedViewOnly: FALSE
 
uSNChanged: 3375
 
distinguishedName: CN=Computers,DC=domain,DC=com
 
 
* record 202
 
dn: DC=@,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: dnsNode
 
instanceType: 4
 
whenCreated: 20141111041349.0Z
 
whenChanged: 20141111041349.0Z
 
uSNCreated: 3606
 
uSNChanged: 3606
 
showInAdvancedViewOnly: TRUE
 
name: @
 
objectGUID: 43aa180f-cd17-4700-9333-6e206f820c6f
 
dnsRecord:: FgACAAUIAAAAAAAAAAAAAAAAAAAAAAAAFAMBaAxyb290LXNlcnZlcnMDbmV0AA==
 
dnsRecord:: FgACAAUIAAAAAAAAAAAAAAAAAAAAAAAAFAMBZgxyb290LXNlcnZlcnMDbmV0AA==
 
dnsRecord:: FgACAAUIAAAAAAAAAAAAAAAAAAAAAAAAFAMBYgxyb290LXNlcnZlcnMDbmV0AA==
 
dnsRecord:: FgACAAUIAAAAAAAAAAAAAAAAAAAAAAAAFAMBbQxyb290LXNlcnZlcnMDbmV0AA==
 
dnsRecord:: FgACAAUIAAAAAAAAAAAAAAAAAAAAAAAAFAMBbAxyb290LXNlcnZlcnMDbmV0AA==
 
dnsRecord:: FgACAAUIAAAAAAAAAAAAAAAAAAAAAAAAFAMBaQxyb290LXNlcnZlcnMDbmV0AA==
 
dnsRecord:: FgACAAUIAAAAAAAAAAAAAAAAAAAAAAAAFAMBZQxyb290LXNlcnZlcnMDbmV0AA==
 
dnsRecord:: FgACAAUIAAAAAAAAAAAAAAAAAAAAAAAAFAMBZAxyb290LXNlcnZlcnMDbmV0AA==
 
dnsRecord:: FgACAAUIAAAAAAAAAAAAAAAAAAAAAAAAFAMBawxyb290LXNlcnZlcnMDbmV0AA==
 
dnsRecord:: FgACAAUIAAAAAAAAAAAAAAAAAAAAAAAAFAMBYQxyb290LXNlcnZlcnMDbmV0AA==
 
dnsRecord:: FgACAAUIAAAAAAAAAAAAAAAAAAAAAAAAFAMBZwxyb290LXNlcnZlcnMDbmV0AA==
 
dnsRecord:: FgACAAUIAAAAAAAAAAAAAAAAAAAAAAAAFAMBYwxyb290LXNlcnZlcnMDbmV0AA==
 
dnsRecord:: FgACAAUIAAAAAAAAAAAAAAAAAAAAAAAAFAMBagxyb290LXNlcnZlcnMDbmV0AA==
 
objectCategory: CN=Dns-Node,CN=Schema,CN=Configuration,DC=domain,DC=com
 
dc: @
 
distinguishedName: DC=@,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=domain,
 
DC=com
 
 
* record 203
 
dn: CN=VIRGIN,OU=Domain Controllers,DC=domain,DC=com
 
objectClass: top
 
objectClass: person
 
objectClass: organizationalPerson
 
objectClass: user
 
objectClass: computer
 
cn: VIRGIN
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
uSNCreated: 3583
 
name: VIRGIN
 
objectGUID: 0f9547a9-e067-4a91-84e5-a3289127ca93
 
userAccountControl: 532480
 
badPwdCount: 0
 
codePage: 0
 
countryCode: 0
 
badPasswordTime: 0
 
lastLogoff: 0
 
lastLogon: 0
 
localPolicyFlags: 0
 
pwdLastSet: 130601528230000000
 
primaryGroupID: 516
 
objectSid: S-1-5-21-2111727124-4264577813-266878271-1000
 
accountExpires: 9223372036854775807
 
logonCount: 0
 
sAMAccountName: VIRGIN$
 
sAMAccountType: 805306369
 
operatingSystem: Samba
 
operatingSystemVersion: 4.1.12-SerNet-RedHat-9sme.el6
 
dNSHostName: virgin.domain.com
 
objectCategory: CN=Computer,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
rIDSetReferences: CN=RID Set,CN=VIRGIN,OU=Domain Controllers,DC=domain,DC=com
 
serverReferenceBL: CN=VIRGIN,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN
 
=Configuration,DC=domain,DC=com
 
msDS-SupportedEncryptionTypes: 31
 
servicePrincipalName: HOST/virgin.domain.com
 
servicePrincipalName: HOST/virgin.domain.com/SME-SERVER
 
servicePrincipalName: ldap/virgin.domain.com/SME-SERVER
 
servicePrincipalName: GC/virgin.domain.com/domain.com
 
servicePrincipalName: ldap/virgin.domain.com
 
servicePrincipalName: HOST/virgin.domain.com/domain.com
 
servicePrincipalName: ldap/virgin.domain.com/domain.com
 
servicePrincipalName: HOST/VIRGIN
 
servicePrincipalName: E3514235-4B06-11D1-AB04-00C04FC2DCD2/ab46f628-e7a7-4b41-
 
9314-e1d2fb4b3c1f/domain.com
 
servicePrincipalName: ldap/ab46f628-e7a7-4b41-9314-e1d2fb4b3c1f._msdcs.domain.
 
com
 
servicePrincipalName: ldap/VIRGIN
 
servicePrincipalName: RestrictedKrbHost/VIRGIN
 
servicePrincipalName: RestrictedKrbHost/virgin.domain.com
 
servicePrincipalName: ldap/virgin.domain.com/DomainDnsZones.domain.com
 
servicePrincipalName: ldap/virgin.domain.com/ForestDnsZones.domain.com
 
whenChanged: 20141111041402.0Z
 
uSNChanged: 3775
 
distinguishedName: CN=VIRGIN,OU=Domain Controllers,DC=domain,DC=com
 
 
* record 204
 
dn: DC=d.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: dnsNode
 
instanceType: 4
 
whenCreated: 20141111041349.0Z
 
whenChanged: 20141111041349.0Z
 
uSNCreated: 3614
 
uSNChanged: 3614
 
showInAdvancedViewOnly: TRUE
 
name: d.root-servers.net
 
objectGUID: eae2c664-6dac-4ea7-89c0-ec9024917b41
 
dnsRecord:: BAABAAUIAAAAAAAAAAAAAAAAAAAAAAAAgAgKWg==
 
objectCategory: CN=Dns-Node,CN=Schema,CN=Configuration,DC=domain,DC=com
 
dc: d.root-servers.net
 
distinguishedName: DC=d.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=
 
System,DC=domain,DC=com
 
 
* record 205
 
dn: CN=rpc,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: rpc
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3748
 
uSNChanged: 3748
 
showInAdvancedViewOnly: TRUE
 
name: rpc
 
objectGUID: fef6523c-f01e-450e-86bf-6c3df2c8301d
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=rpc,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=co
 
m
 
 
* record 206
 
dn: CN=DnsAdmins,CN=Users,DC=domain,DC=com
 
objectClass: top
 
objectClass: group
 
cn: DnsAdmins
 
description: DNS Administrators Group
 
instanceType: 4
 
whenCreated: 20141111041349.0Z
 
whenChanged: 20141111041349.0Z
 
uSNCreated: 3602
 
uSNChanged: 3602
 
name: DnsAdmins
 
objectGUID: 4dcda065-0a41-4d97-a5df-f0ad4a9401c2
 
objectSid: S-1-5-21-2111727124-4264577813-266878271-1101
 
sAMAccountName: DnsAdmins
 
sAMAccountType: 536870912
 
groupType: -2147483644
 
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=DnsAdmins,CN=Users,DC=domain,DC=com
 
 
* record 207
 
dn: CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: Operations
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3398
 
uSNChanged: 3398
 
showInAdvancedViewOnly: TRUE
 
name: Operations
 
objectGUID: e17c65e6-85ad-4dbe-bb04-050a34c463b5
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
 
* record 208
 
dn: CN=Administrator,CN=Users,DC=domain,DC=com
 
objectClass: top
 
objectClass: person
 
objectClass: organizationalPerson
 
objectClass: user
 
cn: Administrator
 
description: Built-in account for administering the computer/domain
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3545
 
uSNChanged: 3545
 
name: Administrator
 
objectGUID: b719e948-1b72-4065-9ab1-8767f658774e
 
userAccountControl: 512
 
badPwdCount: 0
 
codePage: 0
 
countryCode: 0
 
badPasswordTime: 0
 
lastLogoff: 0
 
lastLogon: 0
 
pwdLastSet: 130601528230000000
 
primaryGroupID: 513
 
objectSid: S-1-5-21-2111727124-4264577813-266878271-500
 
adminCount: 1
 
accountExpires: 9223372036854775807
 
logonCount: 0
 
sAMAccountName: Administrator
 
sAMAccountType: 805306368
 
objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
memberOf: CN=Administrators,CN=Builtin,DC=domain,DC=com
 
memberOf: CN=Group Policy Creator Owners,CN=Users,DC=domain,DC=com
 
memberOf: CN=Enterprise Admins,CN=Users,DC=domain,DC=com
 
memberOf: CN=Schema Admins,CN=Users,DC=domain,DC=com
 
memberOf: CN=Domain Admins,CN=Users,DC=domain,DC=com
 
distinguishedName: CN=Administrator,CN=Users,DC=domain,DC=com
 
 
* record 209
 
dn: DC=m.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: dnsNode
 
instanceType: 4
 
whenCreated: 20141111041349.0Z
 
whenChanged: 20141111041349.0Z
 
uSNCreated: 3610
 
uSNChanged: 3610
 
showInAdvancedViewOnly: TRUE
 
name: m.root-servers.net
 
objectGUID: 9eb39e26-d51f-4385-a997-87c37ec8faf6
 
dnsRecord:: BAABAAUIAAAAAAAAAAAAAAAAAAAAAAAAygwbIQ==
 
objectCategory: CN=Dns-Node,CN=Schema,CN=Configuration,DC=domain,DC=com
 
dc: m.root-servers.net
 
distinguishedName: DC=m.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=
 
System,DC=domain,DC=com
 
 
* record 210
 
dn: CN=SOM,CN=WMIPolicy,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: SOM
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3510
 
uSNChanged: 3510
 
showInAdvancedViewOnly: TRUE
 
name: SOM
 
objectGUID: aa497270-7bf1-43cf-a90d-a26e43be22e8
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=SOM,CN=WMIPolicy,CN=System,DC=domain,DC=com
 
 
* record 211
 
dn: CN=Network Configuration Operators,CN=Builtin,DC=domain,DC=com
 
objectClass: top
 
objectClass: group
 
cn: Network Configuration Operators
 
description: Members in this group can have some administrative privileges to
 
manage configuration of networking features
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3572
 
uSNChanged: 3572
 
name: Network Configuration Operators
 
objectGUID: 1ac91a1e-0f8a-469f-a732-1442320d1751
 
objectSid: S-1-5-32-556
 
sAMAccountName: Network Configuration Operators
 
sAMAccountType: 536870912
 
systemFlags: -1946157056
 
groupType: -2147483643
 
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=Network Configuration Operators,CN=Builtin,DC=domain,DC=
 
com
 
 
* record 212
 
dn: DC=f.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: dnsNode
 
instanceType: 4
 
whenCreated: 20141111041349.0Z
 
whenChanged: 20141111041349.0Z
 
uSNCreated: 3608
 
uSNChanged: 3608
 
showInAdvancedViewOnly: TRUE
 
name: f.root-servers.net
 
objectGUID: 8bb53910-f60c-42a6-a6e6-ae0297505df4
 
dnsRecord:: BAABAAUIAAAAAAAAAAAAAAAAAAAAAAAAwAUF8Q==
 
objectCategory: CN=Dns-Node,CN=Schema,CN=Configuration,DC=domain,DC=com
 
dc: f.root-servers.net
 
distinguishedName: DC=f.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=
 
System,DC=domain,DC=com
 
 
* record 213
 
dn: CN=sme-server,CN=netmasks,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: msSFU30DomainInfo
 
cn: sme-server
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3731
 
uSNChanged: 3731
 
showInAdvancedViewOnly: TRUE
 
name: sme-server
 
objectGUID: 888c7f7f-6a38-4e97-8deb-ae62c51b911c
 
objectCategory: CN=msSFU-30-Domain-Info,CN=Schema,CN=Configuration,DC=domain,D
 
C=com
 
msSFU30MasterServerName: VIRGIN
 
msSFU30OrderNumber: 10000
 
msSFU30Domains: sme-server
 
distinguishedName: CN=sme-server,CN=netmasks,CN=ypServ30,CN=RpcServices,CN=Sys
 
tem,DC=domain,DC=com
 
 
* record 214
 
dn: CN=a1789bfb-e0a2-4739-8cc0-e77d892d080a,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: a1789bfb-e0a2-4739-8cc0-e77d892d080a
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3462
 
uSNChanged: 3462
 
showInAdvancedViewOnly: TRUE
 
name: a1789bfb-e0a2-4739-8cc0-e77d892d080a
 
objectGUID: 3ed3223a-cc05-4a13-9697-bd8d9ca89c6a
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=a1789bfb-e0a2-4739-8cc0-e77d892d080a,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 215
 
dn: CN=Content,CN=Domain System Volume,CN=DFSR-GlobalSettings,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: msDFSR-Content
 
cn: Content
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3394
 
uSNChanged: 3394
 
showInAdvancedViewOnly: TRUE
 
name: Content
 
objectGUID: 26d56ff0-87d3-4e29-8dff-961ea58c152d
 
objectCategory: CN=ms-DFSR-Content,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=Content,CN=Domain System Volume,CN=DFSR-GlobalSettings,C
 
N=System,DC=domain,DC=com
 
 
* record 216
 
dn: DC=h.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: dnsNode
 
instanceType: 4
 
whenCreated: 20141111041349.0Z
 
whenChanged: 20141111041349.0Z
 
uSNCreated: 3607
 
uSNChanged: 3607
 
showInAdvancedViewOnly: TRUE
 
name: h.root-servers.net
 
objectGUID: 5da60029-0ba4-49ed-a245-6ef0e792c1c8
 
dnsRecord:: BAABAAUIAAAAAAAAAAAAAAAAAAAAAAAAgD8CNQ==
 
objectCategory: CN=Dns-Node,CN=Schema,CN=Configuration,DC=domain,DC=com
 
dc: h.root-servers.net
 
distinguishedName: DC=h.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=
 
System,DC=domain,DC=com
 
 
* record 217
 
dn: CN=8ddf6913-1c7b-4c59-a5af-b9ca3b3d2c4c,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 8ddf6913-1c7b-4c59-a5af-b9ca3b3d2c4c
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3451
 
uSNChanged: 3451
 
showInAdvancedViewOnly: TRUE
 
name: 8ddf6913-1c7b-4c59-a5af-b9ca3b3d2c4c
 
objectGUID: f6e87cb2-ab9a-41a8-a18a-f29f7186cac8
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=8ddf6913-1c7b-4c59-a5af-b9ca3b3d2c4c,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 218
 
dn: CN=7ffef925-405b-440a-8d58-35e8cd6e98c3,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 7ffef925-405b-440a-8d58-35e8cd6e98c3
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3418
 
uSNChanged: 3418
 
showInAdvancedViewOnly: TRUE
 
name: 7ffef925-405b-440a-8d58-35e8cd6e98c3
 
objectGUID: 1b2d4cb5-335e-4de9-9a76-ed0902e1e2dd
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=7ffef925-405b-440a-8d58-35e8cd6e98c3,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 219
 
dn: CN=LostAndFound,DC=domain,DC=com
 
objectClass: top
 
objectClass: lostAndFound
 
cn: LostAndFound
 
description: Default container for orphaned objects
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3381
 
uSNChanged: 3381
 
showInAdvancedViewOnly: TRUE
 
name: LostAndFound
 
objectGUID: 6b4a1298-56ef-4667-a5e5-79b06f31d4ee
 
systemFlags: -1946157056
 
objectCategory: CN=Lost-And-Found,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=LostAndFound,DC=domain,DC=com
 
 
* record 220
 
dn: CN=Server Operators,CN=Builtin,DC=domain,DC=com
 
objectClass: top
 
objectClass: group
 
cn: Server Operators
 
description: Members can administer domain servers
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3566
 
uSNChanged: 3566
 
name: Server Operators
 
objectGUID: b9e0da5f-528c-4b1b-8c53-c5e1b3446a09
 
objectSid: S-1-5-32-549
 
adminCount: 1
 
sAMAccountName: Server Operators
 
sAMAccountType: 536870912
 
systemFlags: -1946157056
 
groupType: -2147483643
 
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=Server Operators,CN=Builtin,DC=domain,DC=com
 
 
* record 221
 
dn: CN=f7ed4553-d82b-49ef-a839-2f38a36bb069,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: f7ed4553-d82b-49ef-a839-2f38a36bb069
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3422
 
uSNChanged: 3422
 
showInAdvancedViewOnly: TRUE
 
name: f7ed4553-d82b-49ef-a839-2f38a36bb069
 
objectGUID: fd4e9c22-19ab-4577-a41e-a2cbf851ce28
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=f7ed4553-d82b-49ef-a839-2f38a36bb069,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 222
 
dn: DC=a.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: dnsNode
 
instanceType: 4
 
whenCreated: 20141111041349.0Z
 
whenChanged: 20141111041349.0Z
 
uSNCreated: 3616
 
uSNChanged: 3616
 
showInAdvancedViewOnly: TRUE
 
name: a.root-servers.net
 
objectGUID: 442160d5-5317-4012-8c95-97ee5592d29c
 
dnsRecord:: BAABAAUIAAAAAAAAAAAAAAAAAAAAAAAAxikABA==
 
objectCategory: CN=Dns-Node,CN=Schema,CN=Configuration,DC=domain,DC=com
 
dc: a.root-servers.net
 
distinguishedName: DC=a.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=
 
System,DC=domain,DC=com
 
 
* record 223
 
dn: CN=7cfb016c-4f87-4406-8166-bd9df943947f,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 7cfb016c-4f87-4406-8166-bd9df943947f
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3421
 
uSNChanged: 3421
 
showInAdvancedViewOnly: TRUE
 
name: 7cfb016c-4f87-4406-8166-bd9df943947f
 
objectGUID: 4016daf3-ec84-48b6-b54d-23d0c5d12a0a
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=7cfb016c-4f87-4406-8166-bd9df943947f,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 224
 
dn: CN=f3dd09dd-25e8-4f9c-85df-12d6d2f2f2f5,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: f3dd09dd-25e8-4f9c-85df-12d6d2f2f2f5
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3401
 
uSNChanged: 3401
 
showInAdvancedViewOnly: TRUE
 
name: f3dd09dd-25e8-4f9c-85df-12d6d2f2f2f5
 
objectGUID: 30553ef8-c973-49bc-83c6-9d6cce2c3440
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=f3dd09dd-25e8-4f9c-85df-12d6d2f2f2f5,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 225
 
dn: CN=S-1-5-4,CN=ForeignSecurityPrincipals,DC=domain,DC=com
 
objectClass: top
 
objectClass: foreignSecurityPrincipal
 
cn: S-1-5-4
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3558
 
uSNChanged: 3558
 
showInAdvancedViewOnly: TRUE
 
name: S-1-5-4
 
objectGUID: 9e79f328-56e1-4f7d-9587-ebd58ec3e4ab
 
objectSid: S-1-5-4
 
objectCategory: CN=Foreign-Security-Principal,CN=Schema,CN=Configuration,DC=do
 
main,DC=com
 
memberOf: CN=Users,CN=Builtin,DC=domain,DC=com
 
distinguishedName: CN=S-1-5-4,CN=ForeignSecurityPrincipals,DC=domain,DC=com
 
 
* record 226
 
dn: CN=byaddr,CN=networks,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: msSFU30NISMapConfig
 
cn: byaddr
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3741
 
uSNChanged: 3741
 
showInAdvancedViewOnly: TRUE
 
name: byaddr
 
objectGUID: b2fa63a5-e083-426b-a671-90535f673a96
 
objectCategory: CN=msSFU-30-NIS-Map-Config,CN=Schema,CN=Configuration,DC=domai
 
n,DC=com
 
msSFU30KeyAttributes: ipNetworkNumber
 
msSFU30FieldSeparator: "        "
 
msSFU30IntraFieldSeparator: "        "
 
msSFU30SearchAttributes: msSFU30Aliases
 
msSFU30SearchAttributes: ipNetworkNumber
 
msSFU30SearchAttributes: msSFU30Name
 
msSFU30ResultAttributes: msSFU30Aliases
 
msSFU30ResultAttributes: ipNetworkNumber
 
msSFU30ResultAttributes: msSFU30Name
 
msSFU30MapFilter: (objectCategory=ipNetwork)
 
distinguishedName: CN=byaddr,CN=networks,CN=ypServ30,CN=RpcServices,CN=System,
 
DC=domain,DC=com
 
 
* record 227
 
dn: DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: dnsZone
 
cn: Zone
 
instanceType: 4
 
whenCreated: 20141111041349.0Z
 
whenChanged: 20141111041349.0Z
 
uSNCreated: 3605
 
uSNChanged: 3605
 
showInAdvancedViewOnly: TRUE
 
name: RootDNSServers
 
objectGUID: 3bef6589-bff0-42e7-9a5f-de3224bebd74
 
objectCategory: CN=Dns-Zone,CN=Schema,CN=Configuration,DC=domain,DC=com
 
dNSProperty:: BAAAAAAAAAAAAAAAAQAAAAEAAAAAAAAAAAAAAA==
 
dNSProperty:: AQAAAAAAAAAAAAAAAQAAAAIAAAAAAAAAAA==
 
dNSProperty:: CAAAAAAAAAAAAAAAAQAAAAgAAAAAAAAAAAAAAAAAAAA=
 
dNSProperty:: BAAAAAAAAAAAAAAAAQAAABAAAAAAAAAAAAAAAA==
 
dNSProperty:: BAAAAAAAAAAAAAAAAQAAACAAAAAAAAAAAAAAAA==
 
dNSProperty:: BAAAAAAAAAAAAAAAAQAAAEAAAAAAAAAAAAAAAA==
 
dNSProperty:: BAAAAAAAAAAAAAAAAQAAABIAAAAAAAAAAAAAAA==
 
dc: RootDNSServers
 
distinguishedName: DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=domain,DC=co
 
m
 
 
* record 228
 
dn: CN=sme-server,CN=ypservers,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: msSFU30DomainInfo
 
cn: sme-server
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3767
 
uSNChanged: 3767
 
showInAdvancedViewOnly: TRUE
 
name: sme-server
 
objectGUID: 7f0d660b-7d3a-4675-ba7d-b96708381388
 
objectCategory: CN=msSFU-30-Domain-Info,CN=Schema,CN=Configuration,DC=domain,D
 
C=com
 
msSFU30MasterServerName: VIRGIN
 
msSFU30OrderNumber: 10000
 
msSFU30Domains: sme-server
 
distinguishedName: CN=sme-server,CN=ypservers,CN=ypServ30,CN=RpcServices,CN=Sy
 
stem,DC=domain,DC=com
 
 
* record 229
 
dn: DC=j.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: dnsNode
 
instanceType: 4
 
whenCreated: 20141111041349.0Z
 
whenChanged: 20141111041349.0Z
 
uSNCreated: 3619
 
uSNChanged: 3619
 
showInAdvancedViewOnly: TRUE
 
name: j.root-servers.net
 
objectGUID: 59620f31-cdca-47af-a800-ce2704cb1aba
 
dnsRecord:: BAABAAUIAAAAAAAAAAAAAAAAAAAAAAAAwDqAHg==
 
objectCategory: CN=Dns-Node,CN=Schema,CN=Configuration,DC=domain,DC=com
 
dc: j.root-servers.net
 
distinguishedName: DC=j.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=
 
System,DC=domain,DC=com
 
 
* record 230
 
dn: CN=sme-server,CN=shadow,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: msSFU30DomainInfo
 
cn: sme-server
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3760
 
uSNChanged: 3760
 
showInAdvancedViewOnly: TRUE
 
name: sme-server
 
objectGUID: 2f6088aa-da56-4f98-981c-59871bde3cd6
 
objectCategory: CN=msSFU-30-Domain-Info,CN=Schema,CN=Configuration,DC=domain,D
 
C=com
 
msSFU30MasterServerName: VIRGIN
 
msSFU30OrderNumber: 10000
 
msSFU30Domains: sme-server
 
distinguishedName: CN=sme-server,CN=shadow,CN=ypServ30,CN=RpcServices,CN=Syste
 
m,DC=domain,DC=com
 
 
* record 231
 
dn: CN=6bcd5683-8314-11d6-977b-00c04f613221,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 6bcd5683-8314-11d6-977b-00c04f613221
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3436
 
uSNChanged: 3436
 
showInAdvancedViewOnly: TRUE
 
name: 6bcd5683-8314-11d6-977b-00c04f613221
 
objectGUID: ef420438-040f-4acd-a1cc-f77fa74bb75b
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=6bcd5683-8314-11d6-977b-00c04f613221,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 232
 
dn: CN=Windows2003Update,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: Windows2003Update
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3471
 
uSNChanged: 3471
 
showInAdvancedViewOnly: TRUE
 
name: Windows2003Update
 
objectGUID: 75df03c2-d9fc-4a44-81fa-8bc2697113f2
 
revision: 9
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=Windows2003Update,CN=DomainUpdates,CN=System,DC=domain,D
 
C=com
 
 
* record 233
 
dn: CN=6bcd5688-8314-11d6-977b-00c04f613221,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 6bcd5688-8314-11d6-977b-00c04f613221
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3441
 
uSNChanged: 3441
 
showInAdvancedViewOnly: TRUE
 
name: 6bcd5688-8314-11d6-977b-00c04f613221
 
objectGUID: 9c21c8ba-ec53-4edf-b558-f40817db1ff2
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=6bcd5688-8314-11d6-977b-00c04f613221,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 234
 
dn: CN=Domain Users,CN=Users,DC=domain,DC=com
 
objectClass: top
 
objectClass: group
 
cn: Domain Users
 
description: All domain users
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3541
 
uSNChanged: 3541
 
name: Domain Users
 
objectGUID: 4fb90fb6-3138-4565-a99b-b8942d32fdeb
 
objectSid: S-1-5-21-2111727124-4264577813-266878271-513
 
sAMAccountName: Domain Users
 
sAMAccountType: 268435456
 
groupType: -2147483646
 
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
memberOf: CN=Users,CN=Builtin,DC=domain,DC=com
 
distinguishedName: CN=Domain Users,CN=Users,DC=domain,DC=com
 
 
* record 235
 
dn: DC=domain,DC=com
 
objectClass: top
 
objectClass: domain
 
objectClass: domainDNS
 
instanceType: 5
 
whenCreated: 20141111041331.0Z
 
uSNCreated: 8
 
name: domain
 
objectGUID: a521ceab-a10c-4c0d-9ae3-e0b4ea5e3f65
 
objectSid: S-1-5-21-2111727124-4264577813-266878271
 
objectCategory: CN=Domain-DNS,CN=Schema,CN=Configuration,DC=domain,DC=com
 
dc: domain
 
auditingPolicy:: AAE=
 
creationTime: 130601528110000000
 
forceLogoff: -9223372036854775808
 
gPLink: [LDAP://CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=Syste
 
m,DC=domain,DC=com;0]
 
isCriticalSystemObject: TRUE
 
lockoutDuration: -18000000000
 
lockOutObservationWindow: -18000000000
 
lockoutThreshold: 0
 
maxPwdAge: -36288000000000
 
minPwdAge: -864000000000
 
minPwdLength: 7
 
modifiedCount: 1
 
modifiedCountAtLastProm: 0
 
msDS-AllUsersTrustQuota: 1000
 
msDS-Behavior-Version: 2
 
ms-DS-MachineAccountQuota: 10
 
msDS-NcType: 0
 
msDS-PerUserTrustQuota: 1
 
msDS-PerUserTrustTombstonesQuota: 10
 
nextRid: 1000
 
nTMixedDomain: 0
 
oEMInformation: Provisioned by SAMBA 4.1.12-SerNet-RedHat-9sme.el6
 
pwdProperties: 1
 
pwdHistoryLength: 24
 
serverState: 1
 
systemFlags: -1946157056
 
uASCompat: 1
 
rIDManagerReference: CN=RID Manager$,CN=System,DC=domain,DC=com
 
wellKnownObjects: B:32:6227F0AF1FC2410D8E3BB10615BB5B0F:CN=NTDS Quotas,DC=doma
 
in,DC=com
 
wellKnownObjects: B:32:F4BE92A4C777485E878E9421D53087DB:CN=Microsoft,CN=Progra
 
m Data,DC=domain,DC=com
 
wellKnownObjects: B:32:09460C08AE1E4A4EA0F64AEE7DAA1E5A:CN=Program Data,DC=dom
 
ain,DC=com
 
wellKnownObjects: B:32:22B70C67D56E4EFB91E9300FCA3DC1AA:CN=ForeignSecurityPrin
 
cipals,DC=domain,DC=com
 
wellKnownObjects: B:32:18E2EA80684F11D2B9AA00C04F79F805:CN=Deleted Objects,DC=
 
domain,DC=com
 
wellKnownObjects: B:32:2FBAC1870ADE11D297C400C04FD8D5CD:CN=Infrastructure,DC=d
 
omain,DC=com
 
wellKnownObjects: B:32:AB8153B7768811D1ADED00C04FD8D5CD:CN=LostAndFound,DC=dom
 
ain,DC=com
 
wellKnownObjects: B:32:AB1D30F3768811D1ADED00C04FD8D5CD:CN=System,DC=domain,DC
 
=com
 
wellKnownObjects: B:32:A361B2FFFFD211D1AA4B00C04FD7D83A:OU=Domain Controllers,
 
DC=domain,DC=com
 
wellKnownObjects: B:32:AA312825768811D1ADED00C04FD8D5CD:CN=Computers,DC=domain
 
,DC=com
 
wellKnownObjects: B:32:A9D1CA15768811D1ADED00C04FD8D5CD:CN=Users,DC=domain,DC=
 
com
 
whenChanged: 20141111041343.0Z
 
fSMORoleOwner: CN=NTDS Settings,CN=VIRGIN,CN=Servers,CN=Default-First-Site-Nam
 
e,CN=Sites,CN=Configuration,DC=domain,DC=com
 
uSNChanged: 3596
 
msDs-masteredBy: CN=NTDS Settings,CN=VIRGIN,CN=Servers,CN=Default-First-Site-N
 
ame,CN=Sites,CN=Configuration,DC=domain,DC=com
 
msDS-IsDomainFor: CN=NTDS Settings,CN=VIRGIN,CN=Servers,CN=Default-First-Site-
 
Name,CN=Sites,CN=Configuration,DC=domain,DC=com
 
masteredBy: CN=NTDS Settings,CN=VIRGIN,CN=Servers,CN=Default-First-Site-Name,C
 
N=Sites,CN=Configuration,DC=domain,DC=com
 
distinguishedName: DC=domain,DC=com
 
 
* record 236
 
dn: CN=98de1d3e-6611-443b-8b4e-f4337f1ded0b,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 98de1d3e-6611-443b-8b4e-f4337f1ded0b
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3410
 
uSNChanged: 3410
 
showInAdvancedViewOnly: TRUE
 
name: 98de1d3e-6611-443b-8b4e-f4337f1ded0b
 
objectGUID: 499e5569-e1e0-42dd-a0e1-b61dc0f01c02
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=98de1d3e-6611-443b-8b4e-f4337f1ded0b,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 237
 
dn: CN=protocols,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: protocols
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3744
 
uSNChanged: 3744
 
showInAdvancedViewOnly: TRUE
 
name: protocols
 
objectGUID: 3ccf8c9a-1eb7-48ad-a71a-a55906f31f84
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=protocols,CN=ypServ30,CN=RpcServices,CN=System,DC=domain
 
,DC=com
 
 
* record 238
 
dn: CN=3c784009-1f57-4e2a-9b04-6915c9e71961,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 3c784009-1f57-4e2a-9b04-6915c9e71961
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3424
 
uSNChanged: 3424
 
showInAdvancedViewOnly: TRUE
 
name: 3c784009-1f57-4e2a-9b04-6915c9e71961
 
objectGUID: 81d4cd22-151c-4867-b046-bb1f1cb43877
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=3c784009-1f57-4e2a-9b04-6915c9e71961,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 239
 
dn: CN=User,CN={6AC1786C-016F-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: User
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3589
 
uSNChanged: 3589
 
showInAdvancedViewOnly: TRUE
 
name: User
 
objectGUID: f14c26a7-d05c-4ee5-b643-52f89564d65b
 
systemFlags: -1946157056
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=User,CN={6AC1786C-016F-11D2-945F-00C04FB984F9},CN=Polici
 
es,CN=System,DC=domain,DC=com
 
 
* record 240
 
dn: CN=Administrators,CN=Builtin,DC=domain,DC=com
 
objectClass: top
 
objectClass: group
 
cn: Administrators
 
description: Administrators have complete and unrestricted access to the compu
 
ter/domain
 
member: CN=Domain Admins,CN=Users,DC=domain,DC=com
 
member: CN=Enterprise Admins,CN=Users,DC=domain,DC=com
 
member: CN=Administrator,CN=Users,DC=domain,DC=com
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3562
 
uSNChanged: 3562
 
name: Administrators
 
objectGUID: cf484bde-d4ae-4210-a2ae-764986751c7b
 
objectSid: S-1-5-32-544
 
adminCount: 1
 
sAMAccountName: Administrators
 
sAMAccountType: 536870912
 
systemFlags: -1946157056
 
groupType: -2147483643
 
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=Administrators,CN=Builtin,DC=domain,DC=com
 
 
* record 241
 
dn: CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
objectClass: rpcContainer
 
cn: RpcServices
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3504
 
uSNChanged: 3504
 
showInAdvancedViewOnly: TRUE
 
name: RpcServices
 
objectGUID: a742efe7-0c27-4c2c-8050-fc17c6cfd263
 
systemFlags: -1946157056
 
objectCategory: CN=Rpc-Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=RpcServices,CN=System,DC=domain,DC=com
 
 
* record 242
 
dn: CN=byname,CN=group,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: msSFU30NISMapConfig
 
cn: byname
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3763
 
uSNChanged: 3763
 
showInAdvancedViewOnly: TRUE
 
name: byname
 
objectGUID: 3938c56e-eac5-4ce2-888d-2471a97ec79a
 
objectCategory: CN=msSFU-30-NIS-Map-Config,CN=Schema,CN=Configuration,DC=domai
 
n,DC=com
 
msSFU30KeyAttributes: msSFU30Name
 
msSFU30FieldSeparator:: Og==
 
msSFU30IntraFieldSeparator: ,
 
msSFU30SearchAttributes: memberUid
 
msSFU30SearchAttributes: gidNumber
 
msSFU30SearchAttributes: unixUserPassword
 
msSFU30SearchAttributes: msSFU30Name
 
msSFU30ResultAttributes: memberUid
 
msSFU30ResultAttributes: gidNumber
 
msSFU30ResultAttributes: unixUserPassword
 
msSFU30ResultAttributes: msSFU30Name
 
msSFU30MapFilter: (&(objectCategory=group)(gidNumber=*))
 
distinguishedName: CN=byname,CN=group,CN=ypServ30,CN=RpcServices,CN=System,DC=
 
domain,DC=com
 
 
* record 243
 
dn: CN=6bcd568b-8314-11d6-977b-00c04f613221,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 6bcd568b-8314-11d6-977b-00c04f613221
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3444
 
uSNChanged: 3444
 
showInAdvancedViewOnly: TRUE
 
name: 6bcd568b-8314-11d6-977b-00c04f613221
 
objectGUID: 344da920-561a-4b09-a0ce-20540854e3c1
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=6bcd568b-8314-11d6-977b-00c04f613221,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 244
 
dn: CN=6bcd5684-8314-11d6-977b-00c04f613221,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 6bcd5684-8314-11d6-977b-00c04f613221
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3437
 
uSNChanged: 3437
 
showInAdvancedViewOnly: TRUE
 
name: 6bcd5684-8314-11d6-977b-00c04f613221
 
objectGUID: aae554d5-2085-41ca-b154-ac9e20d86312
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=6bcd5684-8314-11d6-977b-00c04f613221,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 245
 
dn: CN=6bcd567b-8314-11d6-977b-00c04f613221,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 6bcd567b-8314-11d6-977b-00c04f613221
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3428
 
uSNChanged: 3428
 
showInAdvancedViewOnly: TRUE
 
name: 6bcd567b-8314-11d6-977b-00c04f613221
 
objectGUID: 5764f942-8339-4328-a143-520cb45be850
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=6bcd567b-8314-11d6-977b-00c04f613221,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 246
 
dn: CN=Domain Admins,CN=Users,DC=domain,DC=com
 
objectClass: top
 
objectClass: group
 
cn: Domain Admins
 
description: Designated administrators of the domain
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
uSNCreated: 3549
 
name: Domain Admins
 
objectGUID: 1e581840-9443-4f55-81bc-412c3884b28e
 
objectSid: S-1-5-21-2111727124-4264577813-266878271-512
 
adminCount: 1
 
sAMAccountName: Domain Admins
 
sAMAccountType: 268435456
 
groupType: -2147483646
 
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
memberOf: CN=Administrators,CN=Builtin,DC=domain,DC=com
 
memberOf: CN=Denied RODC Password Replication Group,CN=Users,DC=domain,DC=com
 
member: CN=Administrator,CN=Users,DC=domain,DC=com
 
member: CN=root,CN=Users,DC=domain,DC=com
 
member: CN=admin,CN=Users,DC=domain,DC=com
 
whenChanged: 20141111041358.0Z
 
uSNChanged: 3774
 
distinguishedName: CN=Domain Admins,CN=Users,DC=domain,DC=com
 
 
* record 247
 
dn: CN=VolumeTable,CN=FileLinks,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: fileLinkTracking
 
objectClass: linkTrackVolumeTable
 
cn: VolumeTable
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3475
 
uSNChanged: 3475
 
showInAdvancedViewOnly: TRUE
 
name: VolumeTable
 
objectGUID: 632f8f98-903e-4b18-9869-95235a96e91b
 
systemFlags: -1946157056
 
objectCategory: CN=Link-Track-Volume-Table,CN=Schema,CN=Configuration,DC=domai
 
n,DC=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=VolumeTable,CN=FileLinks,CN=System,DC=domain,DC=com
 
 
* record 248
 
dn: CN=6bcd5679-8314-11d6-977b-00c04f613221,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 6bcd5679-8314-11d6-977b-00c04f613221
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3426
 
uSNChanged: 3426
 
showInAdvancedViewOnly: TRUE
 
name: 6bcd5679-8314-11d6-977b-00c04f613221
 
objectGUID: da0fba13-e9e0-4fd4-b3e4-1004b2f38bfc
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=6bcd5679-8314-11d6-977b-00c04f613221,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 249
 
dn: CN=Group Policy Creator Owners,CN=Users,DC=domain,DC=com
 
objectClass: top
 
objectClass: group
 
cn: Group Policy Creator Owners
 
description: Members in this group can modify group policy for the domain
 
member: CN=Administrator,CN=Users,DC=domain,DC=com
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3553
 
uSNChanged: 3553
 
name: Group Policy Creator Owners
 
objectGUID: e5226744-ca1d-420b-87f2-7a6156b424dd
 
objectSid: S-1-5-21-2111727124-4264577813-266878271-520
 
sAMAccountName: Group Policy Creator Owners
 
sAMAccountType: 268435456
 
groupType: -2147483646
 
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
memberOf: CN=Denied RODC Password Replication Group,CN=Users,DC=domain,DC=com
 
distinguishedName: CN=Group Policy Creator Owners,CN=Users,DC=domain,DC=com
 
 
* record 250
 
dn: CN=ebad865a-d649-416f-9922-456b53bbb5b8,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: ebad865a-d649-416f-9922-456b53bbb5b8
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3469
 
uSNChanged: 3469
 
showInAdvancedViewOnly: TRUE
 
name: ebad865a-d649-416f-9922-456b53bbb5b8
 
objectGUID: 028e0bb3-1204-4bf8-8324-fa0760bb7c10
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=ebad865a-d649-416f-9922-456b53bbb5b8,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 251
 
dn: CN=ipsecNFA{59319BF3-5EE3-11D2-ACE8-0060B0ECCA17},CN=IP Security,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: ipsecBase
 
objectClass: ipsecNFA
 
cn: ipsecNFA{59319BF3-5EE3-11D2-ACE8-0060B0ECCA17}
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
uSNCreated: 3494
 
showInAdvancedViewOnly: TRUE
 
name: ipsecNFA{59319BF3-5EE3-11D2-ACE8-0060B0ECCA17}
 
objectGUID: c522583d-fdc6-47ff-bafb-22bf7a776ec3
 
ipsecID: {59319BF3-5EE3-11D2-ACE8-0060B0ECCA17}
 
ipsecDataType: 598
 
ipsecData:: AKy7EY1J0RGGOQCgJI0wISoAAAABAAAABQAAAAIAAAAAAP3///8CAAAAAAAAAAAAAA
 
AAAAEAAAACAAAAAAAA
 
ipsecOwnersReference: CN=ipsecPolicy{7238523C-70FA-11D1-864C-14A300000000},CN=
 
IP Security,CN=System,DC=domain,DC=com
 
objectCategory: CN=Ipsec-NFA,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
ipsecNegotiationPolicyReference: CN=ipsecNegotiationPolicy{59319BF0-5EE3-11D2-
 
ACE8-0060B0ECCA17},CN=IP Security,CN=System,DC=domain,DC=com
 
whenChanged: 20141111041354.0Z
 
uSNChanged: 3712
 
distinguishedName: CN=ipsecNFA{59319BF3-5EE3-11D2-ACE8-0060B0ECCA17},CN=IP Sec
 
urity,CN=System,DC=domain,DC=com
 
 
* record 252
 
dn: CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: ypServ30
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3713
 
uSNChanged: 3713
 
showInAdvancedViewOnly: TRUE
 
schemaVersion: 40
 
name: ypServ30
 
objectGUID: db4e1c6a-efe3-4dca-95d7-4e34a0e67900
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
 
* record 253
 
dn: CN=Performance Log Users,CN=Builtin,DC=domain,DC=com
 
objectClass: top
 
objectClass: group
 
cn: Performance Log Users
 
description: Members of this group may schedule logging of performance counter
 
s, enable trace providers, and collect event traces both locally and via remo
 
te access to this computer
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3575
 
uSNChanged: 3575
 
name: Performance Log Users
 
objectGUID: 997d5df1-8706-469d-8ada-534121641165
 
objectSid: S-1-5-32-559
 
sAMAccountName: Performance Log Users
 
sAMAccountType: 536870912
 
systemFlags: -1946157056
 
groupType: -2147483643
 
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=Performance Log Users,CN=Builtin,DC=domain,DC=com
 
 
* record 254
 
dn: CN=Machine,CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: Machine
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3587
 
uSNChanged: 3587
 
showInAdvancedViewOnly: TRUE
 
name: Machine
 
objectGUID: 5bc70401-a6b3-4066-b901-c3d0e1c60c9a
 
systemFlags: -1946157056
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=Machine,CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Pol
 
icies,CN=System,DC=domain,DC=com
 
 
* record 255
 
dn: CN=Windows Authorization Access Group,CN=Builtin,DC=domain,DC=com
 
objectClass: top
 
objectClass: group
 
cn: Windows Authorization Access Group
 
description: Members of this group have access to the computed tokenGroupsGlob
 
alAndUniversal attribute on User objects
 
member: CN=S-1-5-9,CN=ForeignSecurityPrincipals,DC=domain,DC=com
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3576
 
uSNChanged: 3576
 
name: Windows Authorization Access Group
 
objectGUID: 6ece8602-059f-428d-8a70-aa7290a4a4c4
 
objectSid: S-1-5-32-560
 
sAMAccountName: Windows Authorization Access Group
 
sAMAccountType: 536870912
 
systemFlags: -1946157056
 
groupType: -2147483643
 
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=domain,DC=com
 
isCriticalSystemObject: TRUE
 
distinguishedName: CN=Windows Authorization Access Group,CN=Builtin,DC=domain,
 
DC=com
 
 
* record 256
 
dn: CN=3e4f4182-ac5d-4378-b760-0eab2de593e2,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 3e4f4182-ac5d-4378-b760-0eab2de593e2
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3448
 
uSNChanged: 3448
 
showInAdvancedViewOnly: TRUE
 
name: 3e4f4182-ac5d-4378-b760-0eab2de593e2
 
objectGUID: 3c6a61a6-1ec3-4187-b148-f521359089e8
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=3e4f4182-ac5d-4378-b760-0eab2de593e2,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 257
 
dn: CN=6bcd567c-8314-11d6-977b-00c04f613221,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 6bcd567c-8314-11d6-977b-00c04f613221
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3429
 
uSNChanged: 3429
 
showInAdvancedViewOnly: TRUE
 
name: 6bcd567c-8314-11d6-977b-00c04f613221
 
objectGUID: 02f0e62a-6b3c-4342-a8d1-4f7b602ab25e
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=6bcd567c-8314-11d6-977b-00c04f613221,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 258
 
dn: CN=byaddr,CN=hosts,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: msSFU30NISMapConfig
 
cn: byaddr
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3733
 
uSNChanged: 3733
 
showInAdvancedViewOnly: TRUE
 
name: byaddr
 
objectGUID: 8d3ea135-12a9-4af4-a6d8-33b88cd232ca
 
objectCategory: CN=msSFU-30-NIS-Map-Config,CN=Schema,CN=Configuration,DC=domai
 
n,DC=com
 
msSFU30KeyAttributes: ipHostNumber
 
msSFU30FieldSeparator: "        "
 
msSFU30IntraFieldSeparator: "        "
 
msSFU30SearchAttributes: msSFU30Aliases
 
msSFU30SearchAttributes: msSFU30Name
 
msSFU30SearchAttributes: ipHostNumber
 
msSFU30ResultAttributes: msSFU30Aliases
 
msSFU30ResultAttributes: msSFU30Name
 
msSFU30ResultAttributes: ipHostNumber
 
msSFU30MapFilter: (objectCategory=Computer)
 
distinguishedName: CN=byaddr,CN=hosts,CN=ypServ30,CN=RpcServices,CN=System,DC=
 
domain,DC=com
 
 
* record 259
 
dn: CN=sme-server,CN=netid,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: msSFU30DomainInfo
 
cn: sme-server
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3753
 
uSNChanged: 3753
 
showInAdvancedViewOnly: TRUE
 
name: sme-server
 
objectGUID: c072d6c3-8391-4071-a374-b244056c2021
 
objectCategory: CN=msSFU-30-Domain-Info,CN=Schema,CN=Configuration,DC=domain,D
 
C=com
 
msSFU30MasterServerName: VIRGIN
 
msSFU30OrderNumber: 10000
 
msSFU30Domains: sme-server
 
distinguishedName: CN=sme-server,CN=netid,CN=ypServ30,CN=RpcServices,CN=System
 
,DC=domain,DC=com
 
 
* record 260
 
dn: CN=networks,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: networks
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3740
 
uSNChanged: 3740
 
showInAdvancedViewOnly: TRUE
 
name: networks
 
objectGUID: 4b2502e0-abe9-41b2-ab53-8f9226b3264b
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=networks,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,
 
DC=com
 
 
* record 261
 
dn: CN=13d15cf0-e6c8-11d6-9793-00c04f613221,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: 13d15cf0-e6c8-11d6-9793-00c04f613221
 
instanceType: 4
 
whenCreated: 20141111041343.0Z
 
whenChanged: 20141111041343.0Z
 
uSNCreated: 3450
 
uSNChanged: 3450
 
showInAdvancedViewOnly: TRUE
 
name: 13d15cf0-e6c8-11d6-9793-00c04f613221
 
objectGUID: 427b9640-3e50-441f-b427-16a5d5a4d22e
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=13d15cf0-e6c8-11d6-9793-00c04f613221,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 262
 
dn: CN=c4f17608-e611-11d6-9793-00c04f613221,CN=Operations,CN=DomainUpdates,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: container
 
cn: c4f17608-e611-11d6-9793-00c04f613221
 
instanceType: 4
 
whenCreated: 20141111041342.0Z
 
whenChanged: 20141111041342.0Z
 
uSNCreated: 3449
 
uSNChanged: 3449
 
showInAdvancedViewOnly: TRUE
 
name: c4f17608-e611-11d6-9793-00c04f613221
 
objectGUID: 574cf213-a2a7-44c1-a268-5f935e0c26a3
 
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=domain,DC=com
 
distinguishedName: CN=c4f17608-e611-11d6-9793-00c04f613221,CN=Operations,CN=Do
 
mainUpdates,CN=System,DC=domain,DC=com
 
 
* record 263
 
dn: CN=sme-server,CN=netgroup,CN=ypServ30,CN=RpcServices,CN=System,DC=domain,DC=com
 
objectClass: top
 
objectClass: msSFU30DomainInfo
 
cn: sme-server
 
instanceType: 4
 
whenCreated: 20141111041354.0Z
 
whenChanged: 20141111041354.0Z
 
uSNCreated: 3728
 
uSNChanged: 3728
 
showInAdvancedViewOnly: TRUE
 
name: sme-server
 
objectGUID: ca524d19-395c-48d7-a3df-4096f93d83f6
 
objectCategory: CN=msSFU-30-Domain-Info,CN=Schema,CN=Configuration,DC=domain,D
 
C=com
 
msSFU30MasterServerName: VIRGIN
 
msSFU30OrderNumber: 10000
 
msSFU30Domains: sme-server
 
distinguishedName: CN=sme-server,CN=netgroup,CN=ypServ30,CN=RpcServices,CN=Sys
 
tem,DC=domain,DC=com
 
 
* Referral
 
ref: ldap://domain.com/CN=Configuration,DC=domain,DC=com
 
 
* Referral
 
ref: ldap://domain.com/DC=DomainDnsZones,DC=domain,DC=com
 
 
* Referral
 
ref: ldap://domain.com/DC=ForestDnsZones,DC=domain,DC=com
 
 
* returned 266 records
 
* 263 entries
 
* 3 referrals
 
</nowiki>
 
 
 
  
  
 
[[Category:Core Development]]
 
[[Category:Core Development]]

Latest revision as of 21:08, 3 October 2016

Sambalogo.png

Introduction

This wiki page will be used to track the integration effort of Samba 4 into SME 9+

Lead developer: Gzartman

Overview and Objectives

The primary objective of this effort is to create Active Directory support on SME 9+ with a focus on simplicity and easy integration, as is done on many of the other sub-systems on SME Server. Other distributions with Samba 4 support take the approach of providing a fairly complex front end to Samba 4 with many configuration parameters and options. Our approach for Samba 4 is to stream line implementation to provide a straight forward and simple set of UI parameters for the administrator to deploy Active Directory in a configuration that will work in most deployments. Support for the full array of Samba 4 options is provided under the hood in SME Server, but will be available primary from the console. The SME Server community may decide to create an Advanced Samba server-manager panel to control and configure some of the more advanced features available in Samba 4, but the Core SME Server deployment of Active Directory will remain focused on simplicity.

Deployment of Samba 4 on SME Server means that many of the authentication mechanisms on SME Server need to change to integrate with Active Directory, therefore this development effort is quite far reaching.

Samba 4 on SME Server is targeted for Koozali SME Server 10

Current Status

Current Release: Alpha 7

Samba 4 on SME Server will be provided by way of the package smeserver-samba, which will upgrade and obsolete e-smith-samba. The current release of Samba 4 on SME Server is available here: SME Server Samba 4 Packages

These packages are currently not provided by the Koozali buildsys because there is still a fair bit of work to do to integrate this code with existing SME services. Since Samba 4 on SME Server includes many other sub-systems, inclusion of the Samba 4 code is not being including in current development streams until the code is closer to release so as not to hold up other development activities. However, this code is available in CVS.

Samba 4 Packages

Upstream Centos 6 and 7 do not provide Samba 4 packages with full Active Directory support. This is because Samba 4 Kerberos is based upon Heimdal Kerberos whereas the upstream vendor uses MIT Kerberos. Heimdal Kerberos and MIT Kerberos are not compatible with one another and so the upstream vendor has decided to disable Kerberos support in Samba until such time as Samba supports MIT Kerberos. Details can be found here https://wiki.samba.org/index.php/MIT_Build and here https://blog.cryptomilk.org/2014/07/09/samba-ad-dc-in-fedora-and-rhel/

To provide Active Directory support, the Koozali devteam has decided to fork the upstream Samba 4 package and re-compile with Heimdal Kerberos support on Koozali SME Server 10. Details of this rebuild are located in bugzilla:9751. Support for Active Directory on SME 9 can be provided by Sernet Samba 4.2 packages, which are the last set of open source Sernet packages. However, the devteam is currently focusing development effort on SME 10.

Installation

RPMs for this release can be found here: SME Server Samba 4 Packages

Install Instructions:

  1. Download all rpms to a fresh SME 9.1 install.
  2. yum localinstall *.rpm
  3. signal-event post-upgrade; signal-event reboot
  4. Once the server comes back up, provision the domain with: signal-event provision-domain-controller admin_password

Note: The password utilities in the server-manager are not yet working. We will be working to include SSSD in the next alpha and then all password utilities and functions will work as expected.

Change Log / Release Notes

Alpha 7

  • Implementation of Samba 4 on SME 10.
  • Drop bootstrap-console patch for e-smith-base for provisioning samba 4 from the console. We'll add this back in later

Alpha 6

  • Final alpha on SME 9. Going forward, this code will be moved to the SME 10 alpha release for ongoing development and testing
  • Change the way we are naming alpha package versions because it is becoming difficult to apply alpha level changes with patch files. Each alpha release will have its own source archive. Source archive (.tar.xz) file version numbers will track with the alpha release number.
  • Rewrite server-manager user accounts panel for AD integration, except for the Reset Password link. We won't be able to update this function until we deploy SSSD, which will come in the next release
  • Move smb.conf and AD schema extension fragments to /etc/samba
  • Extend AD schema to include the attributes: lockable, removable, and emailForward
  • Change the koozliUser objectClass to smeExtended for extended schema attributes
  • Get rid of the user-create-AD action because we don't have enough control over the user create process in a server-manager panel using an action. Instead, we added the esmith::util::createADUser() function that sets up a basic Active Directory user. This function is somewhat analogous to the useradd utility
  • Drop "Legacy Mode," which was part of the user-create-AD action
  • Replace user-create event with user-initialize
  • Add user-create-profiledir and user-create-home actions as part of the user-intialize event, since the useradd utility used to do this
  • Update user-modify, user-delete, user-lock events for AD integration
  • Create user-AD-enable and user-AD-disable actions
  • Extensive clean-up of smb.conf fragments now that we have a working Samba 4 deployment, including default configuration dbase parameters. This clean-up and enhancement results in a very clean smb.conf file
  • Update qmail and .qmail template fragments and configuration to pull user data from the Active Directory. Spam and filtering fragments have been excluded because we have not yet decided how to handle these configuration in the Active Directory
  • Further enhancement and refinement to esmith::AD

Alpha 5

  • Extend Active Directory schema to include quota and smeCustom attributes via the koozaliUser objectClass
  • Remove adjust-samba event and use services2adjust
  • Add Group-create-AD action
  • Design changes to provision-domain-controller and bootstrap-provision-dc events to provision samba entirely cold using ldif
  • Add pseudonym support to esmith::AD
  • Further enhancement to esmith::AD to provide user & group management functionality similar to that provided by AccountsDB
  • Re-write createlinks to flow a more logical sequence
  • Fix dnsforwarder in smb.conf
  • Fix several esmith::AD::User and esmith::AD::Group methods broken in 0.1-0-3 when we added runtime binding

Alpha 4

  • Add dnscache and tinydns config per bug [SME: 9711]
  • Add iptables preroute rule for DNS per bug [SME: 9711]
  • Fix issues with domain admins assignment during provisioning
  • Nearly full re-write of user-create-AD action to utilize esmith::AD class
  • Add Legacy Mode to user-create-AD action to allow this action to work with AccountsDB
  • Add user-create-AD to user-create event
  • Add user-AD-disable action to disable AD user
  • Continued development and enhancement to esmith::AD including POD documentation
  • Continued development and enhancement to esmith::AD::User including POD documentation
  • Add esmith::AD::OU to manage Organizational Units in the Active Directory
  • Fix realm definition in provision action

Alpha 3

  • Reconfigure provision event to account for default Samba complex password policy
  • Abstract core LDAP queries in esmith::AD using runtime binding

Alpha 2

  • Set requires to e-smith-base-5.6.0-30+ [SME:8668]
  • Set requires for e-smith-LPRng-2.5.0+ [SME:8632]

Alpha 1

  • Roll new smeserver alpha package for Samba4 [SME:8075]


Bugzilla references

bugzilla:4667
bugzilla:8075 Adding Samba 4
bugzilla:8632 Remove smb.conf template fragments from e-smith-LPRng-2.4.0-1
bugzilla:8638 Modify e-smith-dnscache for Samba 4 support
bugzilla:8660 User account authentication with Active Directory and AccountsDB
bugzilla:8663 Proftpd and active directory authentication (Samba 4)
bugzilla:8665 esmith::AD perl module for interacting with Active Directory
bugzilla:8668 Get rid of PPTP when we upgrade to Samba 4
bugzilla:8670 Qmail updates for Samba 4
bugzilla:8674 Remove smbpasswd and WINS pieces for Samba 4
bugzilla:8675 e-smith-LDAP + Samba 4
bugzilla:8687 Add SSSD daemon for Samba 4 local authentication
bugzilla:8703 Samba 4: Home directory
bugzilla:9651 Remove Samba Parts from esmith::Util for Samba 4
bugzilla:9653 Pseudonyms handling with Active Directory
bugzilla:9662 System Initialization and Re-Configuration with Active Directory
bugzilla:9700 Consider removing /sbin/e-smith/samba_check_password
bugzilla:9708 Evaluate registry fragments in server-resources for Samba 4
bugzilla:9711 Include dnscache and tinydns config in smeserver-samba for Samba 4 DNS queries
bugzilla:9712 Reconfigure shadowcopy for Samba 4
bugzilla:9713 Reconfigure recycle bin for Samba 4
bugzilla:9715 Modify e-smith-dnscache to allow connections from entire loopback network
bugzilla:9755 Re-Write Users Panel for AD integration
bugzilla:9799 Update esmith::util::chown for Samba users
bugzilla:9800 Update e-smith-quota to process quotas for active directory users
bugzilla:9802 Modify user events/actions and server-manager panel
bugzilla:9804 Update password functions in esmith::util for Samba 4
bugzilla:9806 e-smith-openssh modifications for Samba 4
bugzilla:9807 smeserver-qpsmtpd changes for Samba 4

Active Directory Schema

Following is a direct dump of the active directory from a freshly provisioned SME Server domain. The DNS/Kerberos domain is domain.com, the hostname is virgin, and the windows domain is sme-server. The ipaddress for this test machine is 192.168.0.67. These data is quite long, but I found it very useful; as it is extremely difficult to find these attributes in any documentation about Samba 4 and ADDC:

Samba 4 Active Directory Schema

Misc Development Topics

References

  1. http://dev.nethserver.org/projects/nethserver/wiki/Samba4 (Thanks Filippo!)
  2. https://lists.samba.org/archive/samba/2014-April/180336.html
  3. https://wiki.samba.org/index.php/Samba_AD_DC_HOWTO
  4. http://www.alexwyn.com/computer-tips/centos-samba4-active-directory-domain-controller