3.1.1.11 Server Access Control List
The server MUST maintain an access control list for authorizing clients to make calls to the server. Authorization is based on whether or not a client is granted STANDARD_RIGHTS_READ. The default configuration of this access control list depends on whether or not the server is a domain controller, per the following table:
Role |
Default Server access control list |
---|---|
Non-DC |
STANDARD_RIGHTS_READ is granted to BuiltIn\Administrators. |
DC |
STANDARD_RIGHTS_READ is granted to all clients. |