Operations that are performed by the Adprep.exe utility when you add a Windows Server 2003 domain controller to a Windows 2000 domain or forest

Domain Upgrade

• A new container CN=Windows2003Update,CN=DomainUpdates,CN=System,DC=DomainName is created on the infrastructure master.
• A new container CN=Operations,CN=DomainUpdates,CN=System,DC=DomainName is created on the infrastructure master.
• For each operation that is performed by the adprep /domainprep command, a unique alpha-numeric string (or GUID) is written under the CN=Operations,CN=DomainUpdates,CN=System,DC=DomainName container. Each operational GUID identifies the operation.
• If all the operations in the following list succeed, the CN=Windows2003Update object overall task will be stamped as completed successfully by setting the revision attribute (CN=Revision in the schema, syntax Integer) to 8.

1. {AB402345-D3C3-455d-9FF7-40268A1099B6}
   • Operation: Create one specific object with a particular distinguished name.
   • Create the CN=WMIPolicy,CN=System,CN=X container.
     
     Object = CN=WMIPolicy,CN=System,CN=X
     
   • SD =
     O:DAD:P(A;;CCLCSWRPWPLORC;;;BA)
     (A;;CCLCSWRPWPLORC;;;PA)
     (A;CI;LCRPLORC;;;AU)(A;CI;LCRPLORC;;;SY)
     (A;CI;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;EA)
     (A;CI;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;DA)
     (A;CIIO;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;CO)
2. {BAB5F54D-06C8-48de-9B87-D78B796564E4}
   • Operation: Create one specific object with a particular distinguished name.
   • Create the CN=ComPartitions,CN=System,DC=X container.
   • SD =
     O:DAG:DAD:(A;;RPLCLORC;;;AU)
     (A;;RPWPCRLCLOCCDCRCWDWOSW;;;DA)
     (A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY)
3. {F3DD09DD-25E8-4f9c-85DF-12D6D2F2F2F5}
   • Operation: Create one specific object with a particular distinguished name.
   • Create the CN=ComPartitionSets,CN=System,DC=X container.
     
     Class = container
   • SD =
     O:DAG:DAD:(A;;RPLCLORC;;;AU)
     (A;;RPWPCRLCLOCCDCRCWDWOSW;;;DA)
     (A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY)
4. {2416C60A-FE15-4d7a-A61E-DFFD5DF864D3}
   • Operation: Add the members to a group.
   • Add the Anonymous Logon members to the Pre-Windows 2000 Compatible Group.
   • Group = (Pre-Windows 2000 Compatible Group)
     Members = ((Anonymous Logon SID))
5. {7868D4C8-AC41-4e05-B401-776280E8E9F1}
   • Operation: Add to or remove a set of ACEs from a specific object by using the object's distinguished name.
   • Add the ACEs to the domain object.
     
     
   • ACEs =((OA;;RP;c7407360-20bf-11d0-a768-00aa006e0529;;RU), Add,
     ((OA;;RP;b8119fd0-04f6-4762-ab7a-4986c76b3f9a;;RU), Add,
     ((OA;;RP;b8119fd0-04f6-4762-ab7a-4986c76b3f9a;;AU), Add))
6. {Removed}
7. {860C36ED-5241-4c62-A18B-CF6FF9994173}
   • Operation: Add to or remove a set of ACEs from a specific object by using the object's distinguished name.
   • Add the ACEs to the CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=X container.
   • ACEs =
     ((A;;LCRPLORC;;;ED), Add)
8. {0E660EA3-8A5E-4495-9AD7-CA1BD4638F9E}
   • Operation: Add to or remove a set of ACEs from a specific object by using the object's distinguished name.
   • Add the ACEs to the CN={6AC1786C-016F-11D2-945F-00C04fB984F9},CN=Policies,CN=System,CN=X container.
   • ACEs =
     ((A;;LCRPLORC;;;ED), Add)
9. {A86FE12A-0F62-4e2a-B271-D27F601F8182}
   • Operation: Add to or remove a set of ACEs from a specific object by using the object's distinguished name.
   • Add the ACEs to the Group Policy container.
   • ACEs =
     ((OA;CI;LCRPLORC;;f30e3bc2-9ff0-11d1-b603-0000f80367c1;ED), Add)
10. {D85C0BFD-094F-4cad-A2B5-82AC9268475D}
    • Operation: Add to or remove a set of ACEs from a specific object by using the object's distinguished name.
    • Add the ACEs to the AdminSDHolder container.
    • ACEs =
      ((OA;;CR;ab721a53-1e2f-11d0-9819-00aa0040529b;;PS), Add)
      ((OA;;RPWP;bf967a7f-0de6-11d0-a285-00aa003049e2;;CA), Add)
      
11. {6ADA9FF7-C9DF-45c1-908E-9FEF2FAB008A}
    • Operation: Add to or remove a set of ACEs from a specific object by using the object's distinguished name.
    • Add the ACEs to the Group Policy container.
    • ACEs=
      ((A;;LCRPLORC;;;ED), Add))
12. {10B3AD2A-6883-4fa7-90FC-6377CBDC1B26}
    • Operation: Add to or remove a set of ACEs from a specific object by using the object's distinguished name.
    • Add the ACEs to the CN=User,CN={ 6AC1786C-016F-11D2-945F-00C04fB984F9},CN=Policies,CN=System container.
    • ACEs=
      ((A;;LCRPLORC;;;ED), Add)
13. {98DE1D3E-6611-443b-8B4E-F4337F1DED0B}
    • Operation: Add to or remove a set of ACEs from a specific object by using the object's distinguished name.
    • Add the ACEs to the CN=Machine,CN={ 6AC1786C-016F-11D2-945F-00C04fB984F9},CN=Policies,CN=System container.
    • ACEs=
      ((A;;LCRPLORC;;;ED), Add)
14. {F607FD87-80CF-45e2-890B-6CF97EC0E284}
    • Operation: Add to or remove a set of ACEs from a specific object by using the object's distinguished name.
    • Add the ACE to the CN=Machine,CN={ 31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System container.
    • ACEs=
      ((A;;LCRPLORC;;;ED), Add)
15. {9CAC1F66-2167-47ad-A472-2A13251310E4}
    • Operation: Modify a set of attributes on a specific object by using the object's distinguished name.
    • Set the default values for attributes on the Easy Trust Creation object in the domain.
    • Attribute:Value:
      ((msDS-PerUserTrustQuota:1),
      (msDS-AllUsersTrustQuota: 1000),
      (msDS-PerUserTrustTombstonesQuota: 10))
16. {Removed}
17. {6FF880D6-11E7-4ed1-A20F-AAC45DA48650}
    • Operation: Add to or remove a set of ACEs from a specific object by using the object's distinguished name.
    • Add the ACEs to the domain container.
    • ((OA;;CR;1131f6ad-9c07-11d1-f79f-00c04fc2dcd2;;DD), Add,
      (OA;;CR;1131f6ad-9c07-11d1-f79f-00c04fc2dcd2;;BA), Add)
18. {446f24ea-cfd5-4c52-834696e170bcb912}
    • Operation: Call a function.
    • Use the Resultant Set of Policy (RSOP) tool to set the ACEs in the %systemroot%\Sysvol\Sysvol\Domain NamePolicies folder. The Sysvol path can be found in the following registry key:
      HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters\SysVol (RegSZ)
      For each folder under the %systemroot%\Sysvol\Polices folder, add the following ACE:
    • ACEs=
      (A;;LCRPLORC;;;ED)
19. {293F0798-EA5C-4455-9F5D-45F33A30703B}
    • Operation: Add to or remove a set of ACEs from a specific object by using the object's distinguished name.
    • Add the ACEs to the SAM-Server object on the CN=Server,CN=System,DC=DomainName container.
    • ACEs=
      ((OA;;CR;91d67418-0135-4acc-8d79-c08e857cfbec;;AU), Add,
      (OA;;CR;91d67418-0135-4acc-8d79-c08e857cfbec;;RU), Add)
20. {Removed}
    • Removed January 24, 2002.
21. {Removed}
    • Removed January 24, 2002.
22. {5c82b233-75fc-41b3-ac71-c69592e6bf15}
    • Operation: Create one specific object with a particular distinguished name.
    • Create the CN=ForeignSecurityPrincipals,DC=X container.
    • SD =
      O:DAG:DAD:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)
      (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)
      (A;;RPLCLORC;;;AU)
23. {Removed}
    • Removed April 23, 2002.
24. {4dfbb973-8a62-4310-a90c-776e00f83222}
    • Operation: Create one specific object with a particular distinguished name.
    • Create the CN=Microsoft,CN=Program Data,DC=X container.
    • SD=
      O:DAG:DAD:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA
      )(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)
      (A;;RPLCLORC;;;AU)
25. {8437C3D8-7689-4200-BF38-79E4AC33DFA0}
    • Operation: Create one specific object with a particular distinguished name.
    • Create the CN=Microsoft,CN=Program Data,DC=X container.
    • SD=O:DAG:DAD:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)
      (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)
      (A;;RPLCLORC;;;AU)
26. {7cfb016c-4f87-4406-8166-bd9df943947f}
    • Operation: Add to or remove a set of ACEs from a specific object by using the object's distinguished name.
    • Replace the ACE in the security descriptor of the DC=X container.
    • ACEs=
      ((OA;;CR;e2a36dc9-ae17-47c3-b58b-be34c55ba633;;BU), Remove,
      (OA;;CR;e2a36dc9-ae17-47c3-b58b-be34c55ba633;;S-1-5-32-557), Add))
27. {f7ed4553-d82b-49ef-a839-2f38a36bb069}
    • Operation: Add to or remove a set of ACEs from a specific object by using the object's distinguished name.
    • Grant three controlAccessRights to Authenticated Users on the domain object with the distinguished name DC=X.
    • ACEs=
      ((OA;;CR;280f369c-67c7-438e-ae98-1d46f3c6f541;;AU), Add,
      (OA;;CR;ccc2dc7d-a6ad-4a7a-8846-c04e3cc53501;;AU), Add,
      (OA;;CR;05c74c5e-4deb-43b4-bd9f-86664c2a7fd5;;AU), Add)
28. {8ca38317-13a4-4bd4-806f-ebed6acb5d0c}
    • Operation: Create one specific object with a particular distinguished name.
    • Create the CN=SOM,CN=WMIPolicyobject.
    • ACEs=
      O:DAD:P(A;CI;LCRPLORC;;;AU)
      (A;CI;LCRPLORC;;;SY)
      (A;CI;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;DA)
      (A;CI;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;EA)
      (A;;CCLCSWRPWPLORC;;;BA)(A;;CCLCSWRPWPLORC;;;PA)
      (A;CIIO;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;CO)
29. {3c784009-1f57-4e2a-9b04-6915c9e71961}
    • Operation: Add to or remove a set of ACEs from a specific object by using the object's distinguished name.
    • Modify the security descriptor on the CN=IP Security,CN=System object.
    • ACEs=
      ((A;;RPLCLORC;;;AU), Remove)
      (A;;RPWPCRLCLOCCDCRCWDWOSW;;;DA),Remove,
      (A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY),Remove)
      ((A;CI;RPLCLORC;;;DC), Add)
      (A;CI;RPLCLORC;;;PA),Add,
      (A;CI;RPWPCRLCLOCCDCRCWDWOSW;;;DA),Add,
      (A;CI;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY),Add)
30. {6bcd5678-8314-11d6-977b-00c04f613221}
    • Operation: Add to or remove a set of ACEs from a specific object by using the object's distinguished name.
    • Modify the security descriptor on the CN=ipsecPolicy{72385230-70FA-11D1-864C-14A300000000},CN=IP Security,CN=System object.
    • ACEs=
      ((A;;RPLCLORC;;;AU), Remove,
      (A;;RPWPCRLCLOCCDCRCWDWOSW;;;DA), Remove,
      (A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY), Remove)
31. {6bcd5679-8314-11d6-977b-00c04f613221}
    • Operation: Add to or remove a set of ACEs from a specific object by using the object's distinguished name.
    • Modify the security descriptor on the CN=ipsecISAKMPPolicy{72385231-70FA-11D1-864C-14A300000000},CN=IP Security,CN=System object.
    • ACEs=
      ((A;;RPLCLORC;;;AU), Remove,
      (A;;RPWPCRLCLOCCDCRCWDWOSW;;;DA), Remove,
      (A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY), Remove)
32. {6bcd567a-8314-11d6-977b-00c04f613221}
    • Operation: Add to or remove a set of ACEs from a specific object by using the object's distinguished name.
    • Modify the security descriptor on the CN=ipsecNFA{72385232-70FA-11D1-864C-14A300000000},CN=IP Security,CN=System object.
    • ACEs=
      ((A;;RPLCLORC;;;AU), Remove,
      (A;;RPWPCRLCLOCCDCRCWDWOSW;;;DA), Remove,
      (A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY), Remove)
33. {6bcd567b-8314-11d6-977b-00c04f613221}
    • Operation: Add to or remove a set of ACEs from a specific object by using the object's distinguished name.
    • Modify the security descriptor on the CN=ipsecNFA{59319BE2-5EE3-11D2-ACE8-0060B0ECCA17},CN=IP Security,CN=System object.
    • ACEs=
      ((A;;RPLCLORC;;;AU), Remove,
      (A;;RPWPCRLCLOCCDCRCWDWOSW;;;DA), Remove,
      (A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY), Remove)
34. {6bcd567c-8314-11d6-977b-00c04f613221}
    • Operation: Add to or remove a set of ACEs from a specific object by using the object's distinguished name.
    • Modify the security descriptor on the CN=ipsecNFA{594272E2-071D-11D3-AD22-0060B0ECCA17},CN=IP Security,CN=System object.
    • ACEs=
      ((A;;RPLCLORC;;;AU), Remove,
      (A;;RPWPCRLCLOCCDCRCWDWOSW;;;DA), Remove,
      (A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY), Remove)
35. {6bcd567d-8314-11d6-977b-00c04f613221}
    • Operation: Add to or remove a set of ACEs from a specific object by using the object's distinguished name.
    • Modify the security descriptor on the CN=ipsecNFA{6A1F5C6F-72B7-11D2-ACF0-0060B0ECCA17},CN=IP Security,CN=System object.
    • ACEs=
      ((A;;RPLCLORC;;;AU), Remove,
      (A;;RPWPCRLCLOCCDCRCWDWOSW;;;DA), Remove,
      (A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY), Remove)
36. {6bcd567e-8314-11d6-977b-00c04f613221}
    • Operation: Add to or remove a set of ACEs from a specific object by using the object's distinguished name.
    • Modify the security descriptor on the CN=ipsecPolicy{72385236-70FA-11D1-864C-14A300000000},CN=IP Security,CN=System object.
    • ACEs=
      ((A;;RPLCLORC;;;AU), Remove,
      (A;;RPWPCRLCLOCCDCRCWDWOSW;;;DA), Remove,
      (A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY), Remove)
37. {6bcd567f-8314-11d6-977b-00c04f613221}
    • Operation: Add to or remove a set of ACEs from a specific object by using the object's distinguished name.
    • Modify the security descriptor on the CN=ipsecISAKMPPolicy{72385237-70FA-11D1-864C-14A300000000},CN=IP Security,CN=System object.
    • ACEs=
      ((A;;RPLCLORC;;;AU), Remove,
      (A;;RPWPCRLCLOCCDCRCWDWOSW;;;DA), Remove,
      (A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY), Remove)
38. {6bcd5680-8314-11d6-977b-00c04f613221}
    • Operation: Add to or remove a set of ACEs from a specific object by using the distinguished name of the object.
    • Modify the security descriptor on the CN=ipsecNFA{59319C04-5EE3-11D2-ACE8-0060B0ECCA17},CN=IP Security,CN=System object.
    • ACEs= ((A;;RPLCLORC;;;AU), Remove,
      (A;;RPWPCRLCLOCCDCRCWDWOSW;;;DA), Remove,
      (A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY), Remove)
39. {6bcd5681-8314-11d6-977b-00c04f613221}
    • Operation: Add to or remove a set of ACEs from a specific object by using the object's distinguished name.
    • Modify the security descriptor on the CN=ipsecPolicy{7238523C-70FA-11D1-864C-14A300000000},CN=IP Security,CN=System object.
    • ACEs=
      ((A;;RPLCLORC;;;AU), Remove,
      (A;;RPWPCRLCLOCCDCRCWDWOSW;;;DA), Remove,
      (A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY), Remove)
40. {6bcd5682-8314-11d6-977b-00c04f613221}
    • Operation: Add to or remove a set of ACEs from a specific object by using the object's distinguished name.
    • Modify the security descriptor on the CN=ipsecISAKMPPolicy{7238523D-70FA-11D1-864C-14A300000000},CN=IP Security,CN=System object.
    • ACEs=
      ((A;;RPLCLORC;;;AU), Remove,
      (A;;RPWPCRLCLOCCDCRCWDWOSW;;;DA), Remove,
      (A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY), Remove)
41. {6bcd5683-8314-11d6-977b-00c04f613221}
    • Operation: Add to or remove a set of ACEs from a specific object by using the object's distinguished name.
    • Modify the security descriptor on the CN=ipsecNFA{7238523E-70FA-11D1-864C-14A300000000},CN=IP Security,CN=System object.
    • ACEs=
      ((A;;RPLCLORC;;;AU), Remove,
      (A;;RPWPCRLCLOCCDCRCWDWOSW;;;DA), Remove,
      (A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY), Remove)
42. {6bcd5684-8314-11d6-977b-00c04f613221}
    • Operation: Add to or remove a set of ACEs from a specific object by using the object's distinguished name.
    • Modify the security descriptor on the CN=ipsecNFA{59319BF3-5EE3-11D2-ACE8-0060B0ECCA17},CN=IP Security,CN=System object.
    • ACEs=
      ((A;;RPLCLORC;;;AU), Remove,
      (A;;RPWPCRLCLOCCDCRCWDWOSW;;;DA), Remove,
      (A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY), Remove)
43. {6bcd5685-8314-11d6-977b-00c04f613221}
    • Operation: Add to or remove a set of ACEs from a specific object by using the object's distinguished name.
    • Modify the security descriptor on the CN=ipsecNFA{594272FD-071D-11D3-AD22-0060B0ECCA17},CN=IP Security,CN=System object.
    • ACEs=
      ((A;;RPLCLORC;;;AU), Remove,
      (A;;RPWPCRLCLOCCDCRCWDWOSW;;;DA), Remove,
      (A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY), Remove)
44. {6bcd5686-8314-11d6-977b-00c04f613221}
    • Operation: Add to or remove a set of ACEs from a specific object by using the object's distinguished name.
    • Modify the security descriptor on the CN=ipsecNegotiationPolicy{59319BDF-5EE3-11D2-ACE8-0060B0ECCA17},CN=IP Security,CN=System object.
    • ACEs=
      ((A;;RPLCLORC;;;AU), Remove,
      (A;;RPWPCRLCLOCCDCRCWDWOSW;;;DA), Remove,
      (A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY), Remove)
45. {6bcd5687-8314-11d6-977b-00c04f613221}
    • Add to or remove a set of ACEs from a specific object by using the object's distinguished name.
    • Modify the security descriptor on the CN=ipsecNegotiationPolicy{59319BF0-5EE3-11D2-ACE8-0060B0ECCA17},CN=IP Security,CN=System object.
    • ACEs=
      ((A;;RPLCLORC;;;AU), Remove,
      (A;;RPWPCRLCLOCCDCRCWDWOSW;;;DA), Remove,
      (A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY), Remove)
46. {6bcd5688-8314-11d6-977b-00c04f613221}
    • Operation: Add to or remove a set of ACEs from a specific object by using the object's distinguished name.
    • Modify the security descriptor on the CN=ipsecNegotiationPolicy{59319C01-5EE3-11D2-ACE8-0060B0ECCA17},CN=IP Security,CN=System object.
    • ACEs=
      ((A;;RPLCLORC;;;AU), Remove,
      (A;;RPWPCRLCLOCCDCRCWDWOSW;;;DA), Remove,
      (A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY), Remove)
47. {6bcd5689-8314-11d6-977b-00c04f613221}
    • Operation: Add to or remove a set of ACEs from a specific object by using the object's distinguished name.
    • Modify the security descriptor on the CN=ipsecNegotiationPolicy{72385233-70FA-11D1-864C-14A300000000},CN=IP Security,CN=System object.
    • ACEs=
      ((A;;RPLCLORC;;;AU), Remove,
      (A;;RPWPCRLCLOCCDCRCWDWOSW;;;DA), Remove,
      (A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY), Remove)
48. {6bcd568a-8314-11d6-977b-00c04f613221}
    • Operation: Add to or remove a set of ACEs from a specific object by using the object's distinguished name.
    • Modify the security descriptor on the CN=ipsecNegotiationPolicy{7238523F-70FA-11D1-864C-14A300000000},CN=IP Security,CN=System object.
    • ACEs=
      ((A;;RPLCLORC;;;AU), Remove,
      (A;;RPWPCRLCLOCCDCRCWDWOSW;;;DA), Remove,
      (A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY), Remove)
49. {6bcd568b-8314-11d6-977b-00c04f613221}
    • Operation: Add to or remove a set of ACEs from a specific object by using the object's distinguished name.
    • Modify the security descriptor on the CN=ipsecNegotiationPolicy{7238523B-70FA-11D1-864C-14A300000000},CN=IP Security,CN=System object.
    • ACEs=
      ((A;;RPLCLORC;;;AU), Remove,
      (A;;RPWPCRLCLOCCDCRCWDWOSW;;;DA), Remove,
      (A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY), Remove)
50. {6bcd568c-8314-11d6-977b-00c04f613221}
    • Operation: Add to or remove a set of ACEs from a specific object by using the object's distinguished name.
    • Modify the security descriptor on the CN=ipsecFilter{7238523A-70FA-11D1-864C-14A300000000},CN=IP Security,CN=System object.
    • ACEs=
      ((A;;RPLCLORC;;;AU), Remove,
      (A;;RPWPCRLCLOCCDCRCWDWOSW;;;DA), Remove,
      (A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY), Remove)
51. {6bcd568d-8314-11d6-977b-00c04f613221}
    • Operation: Add to or remove a set of ACEs from a specific object by using the object's distinguished name.
    • Modify the security descriptor on the CN=ipsecFilter{72385235-70FA-11D1-864C-14A300000000},CN=IP Security,CN=System object.
    • ACEs=
      ((A;;RPLCLORC;;;AU), Remove,
      (A;;RPWPCRLCLOCCDCRCWDWOSW;;;DA), Remove,
      (A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY), Remove)
52. {3051c66f-b332-4a73-9a20-2d6a7d6e6a1c}
    • Operation: Add to or remove a set of ACEs from a specific object by using the object's distinguished name.
    • Modify the security descriptor on the DC=X object.
    • ACEs=
      ((A;;RC;;;RU),Remove,
      (A;;RPRC;;;RU), Add))
53. {3e4f4182-ac5d-4378-b760-0eab2de593e2}
    • Operation: Add to and remove a set of ACEs from a specific object by using the object's distinguished name.
    • Modify the security descriptor on the DC=X object.
    • ACEs=
      ((A;;RC;;;RU),Remove, (A;;RPRC;;;RU), Add))
      (A;;RPRC;;;RU), Add))
54. {c4f17608-e611-11d6-9793-00c04f613221}
    • Operation: Add a set of ACEs to a specific object by using the object's distinguished name.
    • Add an ACE to the CN=AdminSDHolder,CN=System,DC=DomainName object.
    • ACEs=
      ((OA;;RP;46a9b11d-60ae-405a-b7e8-ff8a58d456d2;;S-1-5-32-560), Add)
      
55. {13d15cf0-e6c8-11d6-9793-00c04f613221}
    • Operation: Add a set of ACEs to a specific object by using the object's distinguished name.
    • Add an ACE to the CN=AdminSDHolder,CN=System,DC=DomainName object.
    • ACEs=
      ((OA;;WPRP;6db69a1c-9422-11d1-aebd-0000f80367c1;;S-1-5-32-561), Add)