internal/data/domainDefaults/accessRules/cn_Keys.json
|
[
{ "Path": "CN=Keys,%DomainDN%", "ActiveDirectoryRights": "GenericAll", "InheritanceType": "All", "ObjectType": "<All>", "InheritedObjectType": "<All>", "AccessControlType": "Allow", "Identity": "NT AUTHORITY\\ENTERPRISE DOMAIN CONTROLLERS", "Optional": true }, { "Path": "CN=Keys,%DomainDN%", "ActiveDirectoryRights": "GenericAll", "InheritanceType": "All", "ObjectType": "<All>", "InheritedObjectType": "<All>", "AccessControlType": "Allow", "Identity": "NT AUTHORITY\\SYSTEM", "Optional": true }, { "Path": "CN=Keys,%DomainDN%", "ActiveDirectoryRights": "GenericAll", "InheritanceType": "none", "ObjectType": "<All>", "InheritedObjectType": "<All>", "AccessControlType": "Allow", "Identity": "NT AUTHORITY\\SYSTEM", "Optional": true, "Present": "false" }, { "Path": "CN=Keys,%DomainDN%", "ActiveDirectoryRights": "GenericAll", "InheritanceType": "All", "ObjectType": "<All>", "InheritedObjectType": "<All>", "AccessControlType": "Allow", "Identity": "%DomainSID%-512", "Optional": true }, { "Path": "CN=Keys,%DomainDN%", "ActiveDirectoryRights": "GenericAll", "InheritanceType": "None", "ObjectType": "<All>", "InheritedObjectType": "<All>", "AccessControlType": "Allow", "Identity": "%DomainSID%-512", "Optional": true, "Present": "false" }, { "Path": "CN=Keys,%DomainDN%", "ActiveDirectoryRights": "GenericAll", "InheritanceType": "All", "ObjectType": "<All>", "InheritedObjectType": "<All>", "AccessControlType": "Allow", "Identity": "%DomainName%\\Domain Controllers", "Optional": true }, { "Path": "CN=Keys,%DomainDN%", "ActiveDirectoryRights": "GenericAll", "InheritanceType": "All", "ObjectType": "<All>", "InheritedObjectType": "<All>", "AccessControlType": "Allow", "Identity": "%RootDomainName%\\Enterprise Admins", "Optional": true }, { "Path": "CN=Keys,%DomainDN%", "ActiveDirectoryRights": "GenericAll", "InheritanceType": "All", "ObjectType": "<All>", "InheritedObjectType": "<All>", "AccessControlType": "Allow", "Identity": "%DomainName%\\Key Admins", "Optional": true }, { "Path": "CN=Keys,%DomainDN%", "ActiveDirectoryRights": "GenericAll", "InheritanceType": "All", "ObjectType": "<All>", "InheritedObjectType": "<All>", "AccessControlType": "Allow", "Identity": "%RootDomainName%\\Enterprise Key Admins", "Optional": true }, { "Path": "CN=Keys,%DomainDN%", "ActiveDirectoryRights": "GenericRead", "InheritanceType": "None", "ObjectType": "<All>", "InheritedObjectType": "<All>", "AccessControlType": "Allow", "Identity": "S-1-5-11", "Optional": true, "Present": "false" } ] |