Extended Rights

The following extended rights are defined by Active Directory.

Abandon-Replication
Add-GUID
Allocate-Rids
Allowed-To-Authenticate
Apply-Group-Policy
Certificate-Enrollment
Change-Domain-Master
Change-Infrastructure-Master
Change-PDC
Change-Rid-Master
Change-Schema-Master
Create-Inbound-Forest-Trust
Do-Garbage-Collection
Domain-Administer-Server
DS-Check-Stale-Phantoms
DS-Clone-Domain-Controller
DS-Execute-Intentions-Script
DS-Install-Replica
DS-Query-Self-Quota
DS-Replication-Get-Changes
DS-Replication-Get-Changes-All
DS-Replication-Get-Changes-In-Filtered-Set
DS-Replication-Manage-Topology
DS-Replication-Monitor-Topology
DS-Replication-Synchronize
Enable-Per-User-Reversibly-Encrypted-Password
Generate-RSoP-Logging
Generate-RSoP-Planning
Manage-Optional-Features
Migrate-SID-History
msmq-Open-Connector
msmq-Peek
msmq-Peek-computer-Journal
msmq-Peek-Dead-Letter
msmq-Receive
msmq-Receive-computer-Journal
msmq-Receive-Dead-Letter
msmq-Receive-journal
msmq-Send
Open-Address-Book
Read-Only-Replication-Secret-Synchronization
Reanimate-Tombstones
Recalculate-Hierarchy
Recalculate-Security-Inheritance
Receive-As
Refresh-Group-Cache
Reload-SSL-Certificate
Run-Protect-Admin-Groups-Task
SAM-Enumerate-Entire-Domain
Send-As
Send-To
Unexpire-Password
Update-Password-Not-Required-Bit
Update-Schema-Cache
User-Change-Password
User-Force-Change-Password