Changes Made by Domain Preparation
Topic Last Modified: 2010-10-18
The following table lists the access control entries (ACEs) that domain preparation creates on the domain root. All ACEs are inherited unless otherwise noted.
ACEs Added to Domain Root
| ACE | RTCUniversal-UserReadOnly-Group | RTCUniversal-ServerReadOnly-Group | RTCUniversal-UserAdmins | RTCHSUniversal-Services | Authenticated-Users |
|---|---|---|---|---|---|
Read Container (not inherited) |
Yes |
Yes |
No |
No |
No |
Read User PropertySet User-Account-Restrictions |
Yes |
No |
No |
No |
No |
Read User PropertySet Personal-Information |
Yes |
No |
No |
No |
No |
Read User PropertySet General-Information |
Yes |
No |
No |
No |
No |
Read User PropertySet Public-Information |
Yes |
No |
No |
No |
No |
Read User PropertySet RTCUserSearchProperty-Set |
Yes |
No |
No |
No |
Yes |
Read User PropertySet RTCPropertySet |
Yes |
No |
No |
No |
No |
Write User Property Proxy-Addresses |
No |
No |
Yes |
No |
No |
Write User PropertySet RTCUserSearchProperty-Set |
No |
No |
Yes |
No |
No |
Write User PropertySet RTCPropertySet |
No |
No |
Yes |
No |
No |
Read PropertySet DS-Replication-Get-Changes of all Active Directory objects |
No |
No |
No |
Yes |
No |
The following table lists the ACEs that domain preparation creates in the three built-in containers: Users, Computers, and Domain Controllers. All ACEs are inherited unless otherwise noted.
ACEs Added to Built-in Containers
| ACE | RTCUniversal-UserReadOnly-Group | RTCUniversal-ServerReadOnly-Group |
|---|---|---|
Read Container (not inherited) |
Yes |
Yes |