| 1 | ###############################
|
|---|
| 2 | # Domain Naming Context
|
|---|
| 3 | ###############################
|
|---|
| 4 | dn: ${DOMAINDN}
|
|---|
| 5 | changetype: modify
|
|---|
| 6 | -
|
|---|
| 7 | # This should be 0x0001, but the 0 byte is not allowed - therefore encoded
|
|---|
| 8 | replace: auditingPolicy
|
|---|
| 9 | auditingPolicy:: AAE=
|
|---|
| 10 | -
|
|---|
| 11 | replace: creationTime
|
|---|
| 12 | creationTime: ${CREATTIME}
|
|---|
| 13 | -
|
|---|
| 14 | replace: forceLogoff
|
|---|
| 15 | forceLogoff: -9223372036854775808
|
|---|
| 16 | -
|
|---|
| 17 | # "fSMORoleOwner" filled in later
|
|---|
| 18 | replace: gPLink
|
|---|
| 19 | gPLink: [LDAP://CN={${POLICYGUID}},CN=Policies,CN=System,${DOMAINDN};0]
|
|---|
| 20 | -
|
|---|
| 21 | replace: isCriticalSystemObject
|
|---|
| 22 | isCriticalSystemObject: TRUE
|
|---|
| 23 | -
|
|---|
| 24 | replace: lockoutDuration
|
|---|
| 25 | lockoutDuration: -18000000000
|
|---|
| 26 | -
|
|---|
| 27 | replace: lockOutObservationWindow
|
|---|
| 28 | lockOutObservationWindow: -18000000000
|
|---|
| 29 | -
|
|---|
| 30 | replace: lockoutThreshold
|
|---|
| 31 | lockoutThreshold: 0
|
|---|
| 32 | -
|
|---|
| 33 | # "masteredBy" filled in later
|
|---|
| 34 | replace: maxPwdAge
|
|---|
| 35 | maxPwdAge: -37108517437440
|
|---|
| 36 | -
|
|---|
| 37 | # FIXME: This should be "-864000000000" when we fully comply with passwords pol.
|
|---|
| 38 | replace: minPwdAge
|
|---|
| 39 | minPwdAge: 0
|
|---|
| 40 | -
|
|---|
| 41 | replace: minPwdLength
|
|---|
| 42 | minPwdLength: 7
|
|---|
| 43 | -
|
|---|
| 44 | replace: modifiedCount
|
|---|
| 45 | modifiedCount: 1
|
|---|
| 46 | -
|
|---|
| 47 | replace: modifiedCountAtLastProm
|
|---|
| 48 | modifiedCountAtLastProm: 0
|
|---|
| 49 | -
|
|---|
| 50 | replace: msDS-AllUsersTrustQuota
|
|---|
| 51 | msDS-AllUsersTrustQuota: 1000
|
|---|
| 52 | -
|
|---|
| 53 | replace: msDS-Behavior-Version
|
|---|
| 54 | msDS-Behavior-Version: ${DOMAIN_FUNCTIONALITY}
|
|---|
| 55 | -
|
|---|
| 56 | replace: ms-DS-MachineAccountQuota
|
|---|
| 57 | ms-DS-MachineAccountQuota: 10
|
|---|
| 58 | -
|
|---|
| 59 | # "msDs-masteredBy" filled in later
|
|---|
| 60 | replace: msDS-PerUserTrustQuota
|
|---|
| 61 | msDS-PerUserTrustQuota: 1
|
|---|
| 62 | -
|
|---|
| 63 | replace: msDS-PerUserTrustTombstonesQuota
|
|---|
| 64 | msDS-PerUserTrustTombstonesQuota: 10
|
|---|
| 65 | -
|
|---|
| 66 | replace: nextRid
|
|---|
| 67 | nextRid: 1000
|
|---|
| 68 | -
|
|---|
| 69 | replace: nTMixedDomain
|
|---|
| 70 | nTMixedDomain: 0
|
|---|
| 71 | -
|
|---|
| 72 | replace: objectSid
|
|---|
| 73 | objectSid: ${DOMAINSID}
|
|---|
| 74 | -
|
|---|
| 75 | # This exists only in SAMBA
|
|---|
| 76 | replace: oEMInformation
|
|---|
| 77 | oEMInformation: Provisioned by SAMBA ${SAMBA_VERSION_STRING}
|
|---|
| 78 | -
|
|---|
| 79 | replace: pwdProperties
|
|---|
| 80 | pwdProperties: 1
|
|---|
| 81 | -
|
|---|
| 82 | replace: pwdHistoryLength
|
|---|
| 83 | pwdHistoryLength: 24
|
|---|
| 84 | -
|
|---|
| 85 | replace: rIDManagerReference
|
|---|
| 86 | rIDManagerReference: CN=RID Manager$,CN=System,${DOMAINDN}
|
|---|
| 87 | -
|
|---|
| 88 | replace: serverState
|
|---|
| 89 | serverState: 1
|
|---|
| 90 | -
|
|---|
| 91 | replace: subRefs
|
|---|
| 92 | subRefs: ${CONFIGDN}
|
|---|
| 93 | -
|
|---|
| 94 | replace: systemFlags
|
|---|
| 95 | systemFlags: -1946157056
|
|---|
| 96 | -
|
|---|
| 97 | replace: uASCompat
|
|---|
| 98 | uASCompat: 1
|
|---|
| 99 | -
|
|---|
| 100 | replace: wellKnownObjects
|
|---|
| 101 | wellKnownObjects: B:32:6227f0af1fc2410d8e3bb10615bb5b0f:CN=NTDS Quotas,${DOMAINDN}
|
|---|
| 102 | wellKnownObjects: B:32:f4be92a4c777485e878e9421d53087db:CN=Microsoft,CN=Program Data,${DOMAINDN}
|
|---|
| 103 | wellKnownObjects: B:32:09460c08ae1e4a4ea0f64aee7daa1e5a:CN=Program Data,${DOMAINDN}
|
|---|
| 104 | wellKnownObjects: B:32:22b70c67d56e4efb91e9300fca3dc1aa:CN=ForeignSecurityPrincipals,${DOMAINDN}
|
|---|
| 105 | wellKnownObjects: B:32:18e2ea80684f11d2b9aa00c04f79f805:CN=Deleted Objects,${DOMAINDN}
|
|---|
| 106 | wellKnownObjects: B:32:2fbac1870ade11d297c400c04fd8d5cd:CN=Infrastructure,${DOMAINDN}
|
|---|
| 107 | wellKnownObjects: B:32:ab8153b7768811d1aded00c04fd8d5cd:CN=LostAndFound,${DOMAINDN}
|
|---|
| 108 | wellKnownObjects: B:32:ab1d30f3768811d1aded00c04fd8d5cd:CN=System,${DOMAINDN}
|
|---|
| 109 | wellKnownObjects: B:32:a361b2ffffd211d1aa4b00c04fd7d83a:OU=Domain Controllers,${DOMAINDN}
|
|---|
| 110 | wellKnownObjects: B:32:aa312825768811d1aded00c04fd8d5cd:CN=Computers,${DOMAINDN}
|
|---|
| 111 | wellKnownObjects: B:32:a9d1ca15768811d1aded00c04fd8d5cd:CN=Users,${DOMAINDN}
|
|---|
| 112 | -
|
|---|
| 113 | ${DOMAINGUID_MOD}
|
|---|
