| 1 | # default privileges - more can be added via LSA or ldbedit
|
|---|
| 2 | dn: @ATTRIBUTES
|
|---|
| 3 | comment: CASE_INSENSITIVE
|
|---|
| 4 | privilege: CASE_INSENSITIVE
|
|---|
| 5 |
|
|---|
| 6 | dn: @INDEXLIST
|
|---|
| 7 | @IDXATTR: objectSid
|
|---|
| 8 | @IDXATTR: privilege
|
|---|
| 9 |
|
|---|
| 10 | dn: sid=S-1-5-32-544
|
|---|
| 11 | objectClass: privilege
|
|---|
| 12 | comment: Administrators
|
|---|
| 13 | objectSid: S-1-5-32-544
|
|---|
| 14 | privilege: SeSecurityPrivilege
|
|---|
| 15 | privilege: SeBackupPrivilege
|
|---|
| 16 | privilege: SeRestorePrivilege
|
|---|
| 17 | privilege: SeSystemtimePrivilege
|
|---|
| 18 | privilege: SeShutdownPrivilege
|
|---|
| 19 | privilege: SeRemoteShutdownPrivilege
|
|---|
| 20 | privilege: SeTakeOwnershipPrivilege
|
|---|
| 21 | privilege: SeDebugPrivilege
|
|---|
| 22 | privilege: SeSystemEnvironmentPrivilege
|
|---|
| 23 | privilege: SeSystemProfilePrivilege
|
|---|
| 24 | privilege: SeProfileSingleProcessPrivilege
|
|---|
| 25 | privilege: SeIncreaseBasePriorityPrivilege
|
|---|
| 26 | privilege: SeLoadDriverPrivilege
|
|---|
| 27 | privilege: SeCreatePagefilePrivilege
|
|---|
| 28 | privilege: SeIncreaseQuotaPrivilege
|
|---|
| 29 | privilege: SeChangeNotifyPrivilege
|
|---|
| 30 | privilege: SeUndockPrivilege
|
|---|
| 31 | privilege: SeManageVolumePrivilege
|
|---|
| 32 | privilege: SeImpersonatePrivilege
|
|---|
| 33 | privilege: SeCreateGlobalPrivilege
|
|---|
| 34 | privilege: SeEnableDelegationPrivilege
|
|---|
| 35 | privilege: SeInteractiveLogonRight
|
|---|
| 36 | privilege: SeNetworkLogonRight
|
|---|
| 37 | privilege: SeRemoteInteractiveLogonRight
|
|---|
| 38 |
|
|---|
| 39 | dn: sid=S-1-5-32-550
|
|---|
| 40 | objectClass: privilege
|
|---|
| 41 | comment: Print Operators
|
|---|
| 42 | objectSid: S-1-5-32-550
|
|---|
| 43 | privilege: SeLoadDriverPrivilege
|
|---|
| 44 | privilege: SeShutdownPrivilege
|
|---|
| 45 | privilege: SeInteractiveLogonRight
|
|---|
| 46 |
|
|---|
| 47 | dn: sid=S-1-5-32-551
|
|---|
| 48 | objectClass: privilege
|
|---|
| 49 | comment: Backup Operators
|
|---|
| 50 | objectSid: S-1-5-32-551
|
|---|
| 51 | privilege: SeBackupPrivilege
|
|---|
| 52 | privilege: SeRestorePrivilege
|
|---|
| 53 | privilege: SeShutdownPrivilege
|
|---|
| 54 | privilege: SeInteractiveLogonRight
|
|---|
| 55 |
|
|---|
| 56 | dn: sid=S-1-5-32-549
|
|---|
| 57 | objectClass: privilege
|
|---|
| 58 | comment: Server Operators
|
|---|
| 59 | objectSid: S-1-5-32-549
|
|---|
| 60 | privilege: SeBackupPrivilege
|
|---|
| 61 | privilege: SeSystemtimePrivilege
|
|---|
| 62 | privilege: SeRemoteShutdownPrivilege
|
|---|
| 63 | privilege: SeRestorePrivilege
|
|---|
| 64 | privilege: SeShutdownPrivilege
|
|---|
| 65 | privilege: SeInteractiveLogonRight
|
|---|
| 66 |
|
|---|
| 67 | dn: sid=S-1-5-32-548
|
|---|
| 68 | objectClass: privilege
|
|---|
| 69 | comment: Account Operators
|
|---|
| 70 | objectSid: S-1-5-32-548
|
|---|
| 71 | privilege: SeInteractiveLogonRight
|
|---|
| 72 |
|
|---|
| 73 | dn: sid=S-1-5-32-554
|
|---|
| 74 | objectClass: privilege
|
|---|
| 75 | comment: Pre-Windows 2000 Compatible Access
|
|---|
| 76 | objectSid: S-1-5-32-554
|
|---|
| 77 | privilege: SeRemoteInteractiveLogonRight
|
|---|
| 78 | privilege: SeChangeNotifyPrivilege
|
|---|
