Gesamtstrukturweite Aktualisierungen
Sehen Sie sich die folgenden Änderungen an, um die bei der Ausführung von adprep /forestprep unter Windows Server durchgeführten Schemaaktualisierungen zu verstehen und sich darauf vorzubereiten.
Ab Windows Server 2012 werden Adprep-Befehle während der AD DS-Installation automatisch nach Bedarf ausgeführt. Sie können vor der AD DS-Installation auch separat ausgeführt werden. Weitere Informationen finden Sie unter Ausführen von Adprep.exe.
Wichtig
Gesamtstrukturweite Schemaaktualisierungen werden von adprep kumulativ ausgeführt. Die Vorgänge 131–135 werden beispielsweise vor den Vorgängen 136–142 ausgeführt.
Weitere Informationen dazu, wie Sie ACE-Zeichenfolgen (Access Control Entry, Zugriffssteuerungseintrag) interpretieren, finden Sie unter ACE-Zeichenfolgen. Weitere Informationen dazu, wie Sie SID-Zeichenfolgen (Security ID, Sicherheits-ID) interpretieren, finden Sie unter SID-Zeichenfolgen.
Windows Server 2016: Gesamtstrukturweite Aktualisierungen
Nachdem die vom Switch /forestprep in Windows Server 2016 ausgeführten Vorgänge (die Vorgänge 136–142) abgeschlossen sind, wird das revision-Attribut für das Objekt „CN=ActiveDirectoryUpdate,CN=ForestUpdates,CN=Configuration,DC=ForestRootDomain“ auf 16 festgelegt.
| Vorgangsnummer und -GUID | Beschreibung | Attribute | Berechtigungen |
|---|---|---|---|
| Vorgang 136: {328092FB-16E7-4453-9AB8-7592DB56E9C4} | Weist gMSA-Konten CN=Send-As,CN=Extended-Rights zu. |
– | – |
| Vorgang 137: {3A1C887F-DF0A-489F-B3F2-2D0409095F6E} | Weist gMSA-Konten CN=Receive-As,CN=Extended-Rights zu. |
– | – |
| Vorgang 138: {232E831F-F988-4444-8E3E-8A352E2FD411} | Weist gMSA-Konten CN=Personal-Information,CN=Extended-Rights zu. |
– | – |
| Vorgang 139: {DDDDCF0C-BEC9-4A5A-AE86-3CFE6CC6E110} | Weist gMSA-Konten CN=Public-Information,CN=Extended-Rights zu. |
– | – |
| Vorgang 140: {A0A45AAC-5550-42DF-BB6A-3CC5C46B52F2} | Weist gMSA-Konten CN=Validated-SPN,CN=Extended-Rights zu. |
– | – |
| Vorgang 141: {3E7645F3-3EA5-4567-B35A-87630449C70C} | Weist gMSA-Konten CN=Allowed-To-Authenticate,CN=Extended-Rights zu. |
– | – |
| Vorgang 142: {E634067B-E2C4-4D79-B6E8-73C619324D5E} | Weist gMSA-Konten CN=MS-TS-GatewayAccess,CN=Extended-Rights zu. |
– | – |
Windows Server 2012 R2: Gesamtstrukturweite Aktualisierungen
Nachdem die vom Switch /forestprep in Windows Server 2012 R2 ausgeführten Vorgänge (die Vorgänge 131–135) abgeschlossen sind, wird das revision-Attribut für das Objekt „CN=ActiveDirectoryUpdate,CN=ForestUpdates,CN=Configuration,DC=ForestRootDomain“ auf 15 festgelegt.
| Vorgangsnummer und -GUID | Beschreibung | Attribute | Berechtigungen |
|---|---|---|---|
| Vorgang 131: {b83818c1-01a6-4f39-91b7-a3bb581c3ae3} | Erstellt ein neues Containerobjekt für die Konfiguration von Authentifizierungsrichtlinien (CN=AuthN Policy Configuration,CN=Services) in der Konfigurationspartition. |
- objectClass: container- displayName: Authentication Policy Configuration- description: Contains configuration for authentication policy.- showInAdvancedViewOnly: True |
(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| Vorgang 132: {bbbb9db0-4009-4368-8c40-6674e980d3c3} | Erstellt ein neues Authentifizierungsrichtlinienobjekt CN=AuthN Policies,CN=AuthN Policy Configuration,CN=Services in der Konfigurationspartition. |
- objectClass: msDS-AuthNPolicies- displayName: Authentication Policies- description: Contains authentication policy objects.- showInAdvancedViewOnly: True |
(A;;RPWPCRCCDCLCLOLORCWOWDSDDTDTSW;;;EA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU) |
| Vorgang 133: {f754861c-3692-4a7b-b2c2-d0fa28ed0b0b} | Erstellt ein neues Authentifizierungsrichtliniensilo-Objekt CN=AuthN Silos,CN=AuthN Policy Configuration,CN=Services in der Konfigurationspartition. |
- objectClass: msDS-AuthNPolicySilos- displayName: Authentication Policy Silos- description: Contains authentication policy silo objects.- showInAdvancedViewOnly: True |
(A;;RPWPCRCCDCLCLOLORCWOWDSDDTDTSW;;;EA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU) |
| Vorgang 134: {d32f499f-3026-4af0-a5bd-13fe5a331bd2} | Erstellt ein neues Authentifizierungssilo-Anspruchstypobjekt CN=ad://ext/AuthenticationSilo,CN=Claim Types,CN=Claims Configuration,CN=Services in der Konfigurationspartition. |
- objectClass: msDS-ClaimType- displayname: AuthenticationSilo- name: ad://ext/AuthenticationSilo- Enabled: True- msDS-ClaimIsValueSpaceRestricted: True- msDS-ClaimIsSingleValued: True- msDS-ClaimSourceType: Constructed- msDS-ClaimValueType: 3- msDS-ClaimTypeAppliesToClass: CN=User,CN=Schema,%ws- msDS-ClaimTypeAppliesToClass: CN=Computer,CN=Schema,%ws- msDS-ClaimTypeAppliesToClass: CN=ms-DS-Managed-Service-Account,CN=Schema,%ws- msDS-ClaimTypeAppliesToClass: CN=ms-DS-Group-Managed-Service-Account,CN=Schema,%ws |
(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;EA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU) |
| Vorgang 135: {38618886-98ee-4e42-8cf1-d9a2cd9edf8b} | Legt das Attribut msDS-ClaimIsValueSpaceRestricted für den neuen Authentifizierungssilo-Anspruchstyp auf „false“ fest. |
- msDS-ClaimIsValueSpaceRestricted: False |
– |
Windows Server 2012: Gesamtstrukturweite Aktualisierungen
Nachdem die vom Switch /forestprep in Windows Server 2012 ausgeführten Vorgänge (die Vorgänge 84–130) abgeschlossen sind, wird das revision-Attribut für das Objekt „CN=ActiveDirectoryUpdate,CN=ForestUpdates,CN=Configuration,DC=ForestRootDomain“ auf 11 festgelegt.
| Vorgangsnummer und -GUID | Beschreibung | Attribute | Berechtigungen |
|---|---|---|---|
| Vorgang 84: {4664e973-cb20-4def-b3d5-559d6fe123e0} | Erstellt einen neuen Container CN=Claims Configuration,CN=Services in der Konfigurationspartition. |
- objectClass: container |
(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| Vorgang 85: {2972d92d-a07a-44ac-9cb0-bf243356f345} | Erstellt ein neues Objekt CN=Claim Types,CN=Claims Configuration,CN=Services in der Konfigurationspartition. |
- objectClass: msDS-ClaimTypes- showInAdvancedViewOnly: True |
(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCDCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| Vorgang 86: {09a49cb3-6c54-4b83-ab20-8370838ba149} | Erstellt ein neues Objekt CN=Resource Properties,CN=Claims Configuration,CN=Services in der Konfigurationspartition. |
- objectClass: msDS-ResourceProperties- showInAdvancedViewOnly: True |
(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCDCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| Vorgang 87: {77283e65-ce02-4dc3-8c1e-bf99b22527c2} | Erstellt einen neuen Container CN=Resource Property Lists,CN=Claims Configuration,CN=Services in der Konfigurationspartition. |
- objectClass: container- showInAdvancedViewOnly: True |
(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCDCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| Vorgang 88: {0afb7f53-96bd-404b-a659-89e65c269420} | Erstellt ein neues Objekt CN=Sam-Domain in der Schemapartition. |
– | Erstellt den folgenden Zugriffssteuerungseintrag (Access Control Entry, ACE), um dem Prinzipal Schreibberechtigungen für das Objekt zu erteilen:
|
| Vorgang 89: {c7f717ef-fdbe-4b4b-8dfc-fa8b839fbcfa} | Erstellt ein neues Objekt CN=Domain-DNS in der Schemapartition. |
– | Erstellt den folgenden Zugriffssteuerungseintrag (Access Control Entry, ACE), um dem Prinzipal Schreibberechtigungen für das Objekt zu erteilen:
|
| Vorgang 90: {00232167-f3a4-43c6-b503-9acb7a81b01c} | Rückruffunktion zum Aktualisieren von Anzeigebezeichnern. | – | – |
| Vorgang 91: {73a9515b-511c-44d2-822b-444a33d3bd33} | Erstellt einen neuen Container CN=Microsoft SPP,CN=Services in der Konfigurationspartition. |
- objectClass: container- showInAdvancedViewOnly: True |
(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| Vorgang 92: {e0c60003-2ed7-4fd3-8659-7655a7e79397} | Erstellt einen neuen Container für Aktivierungsobjekte (CN=Activation Objects,CN=Microsoft SPP,CN=Services) in der Konfigurationspartition. |
- objectClass: msSPP-ActivationObjectsContainer- showInAdvancedViewOnly: True |
(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| Vorgang 93: {ed0c8cca-80ab-4b6b-ac5a-59b1d317e11f} | Erstellt einen neuen Container für zentrale Zugriffsrichtlinien (CN=Central Access Policies,CN=Claims Configuration,CN=Services) in der Konfigurationspartition. |
- objectClass: msAuthz-CentralAccessPolicies- showInAdvancedViewOnly: True |
(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCDCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| Vorgang 94: {b6a6c19a-afc9-476b-8994-61f5b14b3f05} | Erstellt einen neuen Container für zentrale Zugriffsrichtlinieneinträge (CN=Central Access Rules,CN=Claims Configuration,CN=Services) in der Konfigurationspartition. |
- objectClass: msAuthz-CentralAccessRules- showInAdvancedViewOnly: True |
(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCDCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| Vorgang 95: {defc28cd-6cb6-4479-8bcb-aabfb41e9713} | Erstellt einen neuen Gruppenschlüsselverteilungsdienst-Container CN=Group Key Distribution Service,CN=Services in der Konfigurationspartition. |
- objectClass: container- description: The container contains configuration and data for Group Key Distribution Service.- showInAdvancedViewOnly: True |
(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| Vorgang 96: {d6bd96d4-e66b-4a38-9c6b-e976ff58c56d} | Erstellt einen neuen Hauptstammschlüssel-Container CN=Master Root Keys,CN=Group Key Distribution Service,CN=Services in der Konfigurationspartition. |
- objectClass: container- description: The container contains master root keys for Group Key Distribution Service.- showInAdvancedViewOnly: True |
(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| Vorgang 97: {bb8efc40-3090-4fa2-8a3f-7cd1d380e695} | Erstellt einen neuen Serverkonfigurationscontainer CN=Server Configuration,CN=Group Key Distribution Service,CN=Services in der Konfigurationspartition. |
- objectClass: container- description: The container contains Group Key Distribution Service configurations.- showInAdvancedViewOnly: True |
(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| Vorgang 98: {2d6abe1b-4326-489e-920c-76d5337d2dc5} | Erstellt einen neuen Container für leere Serverkonfigurationsobjekte (CN=Group Key Distribution Service Server Configuration,CN=Server Configuration,CN=Group Key Distribution Service,CN=Services) in der Konfigurationspartition. |
- objectClass: msKds-ProvServerConfiguration- description: The configuration of cryptography algorithms used by Group Key Distribution Service.- msKds-Version: 1- showInAdvancedViewOnly: True |
(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| Vorgang 99: {6b13dfb5-cecc-4fb8-b28d-0505cea24175} | Erstellt einen neuen Konfigurationscontainer für Anspruchstransformationsrichtlinien (CN=Claims Transformation Policies,CN=Claims Configuration,CN=Services) in der Konfigurationspartition. |
- objectClass: msDS-ClaimsTransformationPolicies- showInAdvancedViewOnly: True |
(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCDCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| Vorgang 100: {92e73422-c68b-46c9-b0d5-b55f9c741410} | Erstellt einen neuen Werttyp-Konfigurationscontainer CN=Value Types,CN=Claims Configuration,CN=Services in der Konfigurationspartition. |
- objectClass: container- showInAdvancedViewOnly: True |
(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| Vorgang 101: {c0ad80b4-8e84-4cc4-9163-2f84649bcc42} | Erstellt ein neues SinglevaluedChoice-Werttyp-Konfigurationsobjekt CN=MS-DS-SinglevaluedChoice,CN=Value Types,CN=Claims Configuration,CN=Services in der Konfigurationspartition. |
- objectClass: msDS-ValueType- description: You can use this type to author a resource property. When assigning value to a resource property of this value type, a user can choose only one entry from a list of suggested values.- displayname: Single-valued Choice- msDS-ClaimValueType: 3- msDS-ClaimIsValueSpaceRestricted: True- msDS-ClaimIsSingleValued: True- msDS-IsPossibleValuesPresent: True- showInAdvancedViewOnly: True |
(D;;SDDT;;;WD)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| Vorgang 102: {992fe1d0-6591-4f24-a163-c820fcb7f308} | Erstellt ein neues YesNo-Werttyp-Konfigurationsobjekt CN=MS-DS-YesNo,CN=Value Types,CN=Claims Configuration,CN=Services in der Konfigurationspartition. |
- objectClass: msDS-ValueType- description: The valid values for this type are Yes or No.- displayname: Yes/No- msDS-ClaimValueType: 6- msDS-ClaimIsValueSpaceRestricted: False- msDS-ClaimIsSingleValued: True- msDS-IsPossibleValuesPresent: False- showInAdvancedViewOnly: True |
(D;;SDDT;;;WD)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| Vorgang 103: {ede85f96-7061-47bf-b11b-0c0d999595b5} | Erstellt ein neues Number-Werttyp-Konfigurationsobjekt CN=MS-DS-Number,CN=Value Types,CN=Claims Configuration,CN=Services in der Konfigurationspartition. |
- objectClass: msDS-ValueType- description: You can use this type to author resource properties that contain a single number.- displayname: Number- msDS-ClaimValueType: 1- msDS-ClaimIsValueSpaceRestricted: False- msDS-ClaimIsSingleValued: True- msDS-IsPossibleValuesPresent: False- showInAdvancedViewOnly: True |
(D;;SDDT;;;WD)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| Vorgang 104: {ee0f3271-eb51-414a-bdac-8f9ba6397a39} | Erstellt ein neues DateTime-Werttyp-Konfigurationsobjekt CN=MS-DS-DateTime,CN=Value Types,CN=Claims Configuration,CN=Services in der Konfigurationspartition. |
– objectClass: msDS-ValueType - description: You can use this type to author resource properties that are of the date and time format.- displayname: Date Time- msDS-ClaimValueType: 1- msDS-ClaimIsValueSpaceRestricted: False- msDS-ClaimIsSingleValued: True- msDS-IsPossibleValuesPresent: False- showInAdvancedViewOnly: True |
(D;;SDDT;;;WD)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| Vorgang 105: {587d52e0-507e-440e-9d67-e6129f33bb68} | Erstellt ein neues OrderedList-Werttyp-Konfigurationsobjekt CN=MS-DS-OrderedList,CN=Value Types,CN=Claims Configuration,CN=Services in der Konfigurationspartition. |
- objectClass: msDS-ValueType- description: You can use this type to author resource properties that contain a single choice entry that can be compared to other resource properties of the same type. A user typically chooses the entry from a list of ordered suggested values that are provided by ms-DS-Claim-Possible-Values on the resource properties.- displayname: Ordered List- msDS-ClaimValueType: 1- msDS-ClaimIsValueSpaceRestricted: True- msDS-ClaimIsSingleValued: True- msDS-IsPossibleValuesPresent: True- showInAdvancedViewOnly: True |
(D;;SDDT;;;WD)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| Vorgang 106: {ce24f0f6-237e-43d6-ac04-1e918ab04aac} | Erstellt ein neues Text-Werttyp-Konfigurationsobjekt CN=MS-DS-Text,CN=Value Types,CN=Claims Configuration,CN=Services in der Konfigurationspartition. |
- objectClass: msDS-ValueType- description: You can use this type to author resource properties that contain a single text entry.- displayname: Text- msDS-ClaimValueType: 3- msDS-ClaimIsValueSpaceRestricted: False- msDS-ClaimIsSingleValued: True- msDS-IsPossibleValuesPresent: False- showInAdvancedViewOnly: True |
(D;;SDDT;;;WD)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| Vorgang 107: {7f77d431-dd6a-434f-ae4d-ce82928e498f} | Erstellt ein neues MultivaluedText-Werttyp-Konfigurationsobjekt CN=MS-DS-MultivaluedText,CN=Value Types,CN=Claims Configuration,CN=Services in der Konfigurationspartition. |
- objectClass: msDS-ValueType- description: You can use this type to author resource properties that can have multiple text entries.- displayname: Multi-valued Text<br />- msDS-ClaimValueType: 3<br />- msDS-ClaimIsValueSpaceRestricted: False<br />- msDS-ClaimIsSingleValued: False<br />- msDS-IsPossibleValuesPresent: False<br />- showInAdvancedViewOnly: True |
(D;;SDDT;;;WD)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| Vorgang 108: {ba14e1f6-7cd1-4739-804f-57d0ea74edf4} | Erstellt ein neues MultivaluedChoice-Werttyp-Konfigurationsobjekt CN=MS-DS-MultivaluedChoice,CN=Value Types,CN=Claims Configuration,CN=Services in der Konfigurationspartition. |
- objectClass: msDS-ValueType- description: You can use this type to author resource properties that can have multiple entries that can't be compared. A user typically chooses each entry from a list of suggested values that are provided by ms-DS-Claim-Possible-Values on the resource properties.- displayname: Multi-valued Choice- msDS-ClaimValueType: 3- msDS-ClaimIsValueSpaceRestricted: True- msDS-ClaimIsSingleValued: False- msDS-IsPossibleValuesPresent: True- showInAdvancedViewOnly: True |
(D;;SDDT;;;WD)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| Vorgang 109: {156ffa2a-e07c-46fb-a5c4-fbd84a4e5cce} | Erstellt ein neues PII-Ressourceneigenschaftenobjekt CN=PII_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services in der Konfigurationspartition. |
- objectClass: msDS-ResourceProperty- description: The Personally Identifiable Information (PII) property specifies whether the resource contains PII and if it does, what the sensitivity level of that information is.- displayname: Personally Identifiable Information- Enabled: False- msDS-IsUsedAsResourceSecurityAttribute: True- msDS-ValueTypeReference: CN=MS-DS-OrderedList,CN=Value Types,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain> |
(D;;SDDT;;;WD)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| Vorgang 110: {7771d7dd-2231-4470-aa74-84a6f56fc3b6} | Erstellt ein neues „Protected Health Information“-Ressourceneigenschaftenobjekt CN=ProtectedHealthInformation_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services in der Konfigurationspartition. |
- objectClass: msDS-ResourceProperty- description: The Protected Health Information (PHI) property specifies whether the resource contains any data related to an individual's medical record or medical payment history.- displayname: Protected Health Information- Enabled: False- msDS-IsUsedAsResourceSecurityAttribute: True- msDS-ValueTypeReference: CN=MS-DS-YesNo,CN=Value Types,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain> |
(D;;SDDT;;;WD)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| Vorgang 111: {49b2ae86-839a-4ea0-81fe-9171c1b98e83} | Erstellt ein neues „Required Clearance“-Ressourceneigenschaftenobjekt CN=RequiredClearance_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services in der Konfigurationspartition. |
- objectClass: msDS-ResourceProperty- description: The Required Clearance property specifies the level of clearance a user should possess before attempting to access the resource.- displayname: Required Clearance- Enabled: False- msDS-IsUsedAsResourceSecurityAttribute: True- msDS-ValueTypeReference: CN=MS-DS-OrderedList,CN=Value Types,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain> |
(D;;SDDT;;;WD)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| Vorgang 112: {1b1de989-57ec-4e96-b933-8279a8119da4} | Erstellt ein neues „Confidentiality“-Ressourceneigenschaftenobjekt CN=Confidentiality_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services in der Konfigurationspartition. |
- objectClass: msDS-ResourceProperty- description: The Confidentiality property specifies the level of confidentiality of the resource, and the potential impact of inadvertent access or disclosure.- displayname: Confidentiality- Enabled: False- msDS-IsUsedAsResourceSecurityAttribute: True- msDS-ValueTypeReference: CN=MS-DS-OrderedList,CN=Value Types,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain> |
(D;;SDDT;;;WD)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| Vorgang 113: {281c63f0-2c9a-4cce-9256-a238c23c0db9} | Erstellt ein neues „Compliancy“-Ressourceneigenschaftenobjekt CN=Compliancy_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services in der Konfigurationspartition. |
- objectClass: msDS-ResourceProperty- description: The Compliancy property specifies the compliance frameworks that apply to the resource.- displayname: Compliancy- Enabled: False- msDS-IsUsedAsResourceSecurityAttribute: True- msDS-ValueTypeReference: CN=MS-DS-MultivaluedChoice,CN=Value Types,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain> |
(D;;SDDT;;;WD)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| Vorgang 114: {4c47881a-f15a-4f6c-9f49-2742f7a11f4b} | Erstellt ein neues „Discoverability“-Ressourceneigenschaftenobjekt CN=Discoverability_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services in der Konfigurationspartition. |
- objectClass: msDS-ResourceProperty- description: The Discoverability property specifies whether the resource contains potential evidence that might require disclosure to opposing legal counsel during the course of current or future litigation.- displayname: Discoverability- Enabled: False- msDS-IsUsedAsResourceSecurityAttribute: True- msDS-ValueTypeReference: CN=MS-DS-SinglevaluedChoice,CN=Value Types,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain> |
(D;;SDDT;;;WD)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| Vorgang 115: {2aea2dc6-d1d3-4f0c-9994-66c1da21de0f} | Erstellt ein neues „Immutable“-Ressourceneigenschaftenobjekt CN=Immutable_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services in der Konfigurationspartition. |
- objectClass: msDS-ResourceProperty- description: The Immutable property specifies whether a user should be allowed to delete a resource or change its contents.- displayname: Immutable- Enabled: False- msDS-IsUsedAsResourceSecurityAttribute: True- msDS-ValueTypeReference: CN=MS-DS-YesNo,CN=Value Types,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain> |
(D;;SDDT;;;WD)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| Vorgang 116: {ae78240c-43b9-499e-ae65-2b6e0f0e202a} | Erstellt ein neues „Intellectual Property“-Ressourceneigenschaftenobjekt CN=IntellectualProperty_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services in der Konfigurationspartition. |
- objectClass: msDS-ResourceProperty- description: The Intellectual Property (IP) property specifies whether the resource contains IP, and if so, what kind.- displayname: Intellectual Property- Enabled: False- msDS-IsUsedAsResourceSecurityAttribute: True- msDS-ValueTypeReference: CN=MS-DS-SinglevaluedChoice,CN=Value Types,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain> |
(D;;SDDT;;;WD)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| Vorgang 117: {261b5bba-3438-4d5c-a3e9-7b871e5f57f0} | Erstellt ein neues „Department“-Ressourceneigenschaftenobjekt CN=Department_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services in der Konfigurationspartition. |
- objectClass: msDS-ResourceProperty- description: The Department property specifies the name of the department to which the resource belongs.- displayname: Department- Enabled: False- msDS-IsUsedAsResourceSecurityAttribute: True- msDS-ValueTypeReference: CN=MS-DS-SinglevaluedChoice,CN=Value Types,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain> |
(D;;SDDT;;;WD)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| Vorgang 118: {3fb79c05-8ea1-438c-8c7a-81f213aa61c2} | Erstellt ein neues „Impact“-Ressourceneigenschaftenobjekt CN=Impact_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services in der Konfigurationspartition. |
- objectClass: msDS-ResourceProperty- description: The Impact property specifies the degree of organizational impact from inappropriate access or loss of the resource.- displayname: Impact- Enabled: False- msDS-IsUsedAsResourceSecurityAttribute: True- msDS-ValueTypeReference: CN=MS-DS-OrderedList,CN=Value Types,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain- msDS-ClaimPossibleValues: High - High business impact (HBI) - 3000, Moderate - Medium business impact (MBI) - 2000, Low - Low business impact (LBI) - 1000> |
(D;;SDDT;;;WD)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| Vorgang 119: {0b2be39a-d463-4c23-8290-32186759d3b1} | Erstellt ein neues „Personal Use“-Ressourceneigenschaftenobjekt CN=PersonalUse_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services in der Konfigurationspartition. |
- objectClass: msDS-ResourceProperty- description: The Personal Use property specifies whether the file is for personal use (not business related).- displayname: Personal Use- Enabled: False- msDS-IsUsedAsResourceSecurityAttribute: True- msDS-ValueTypeReference: CN=MS-DS-YesNo,CN=Value Types,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain> |
(D;;SDDT;;;WD)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| Vorgang 120: {f0842b44-bc03-46a1-a860-006e8527fccd} | Erstellt ein neues „Project“-Ressourceneigenschaftenobjekt CN=Project_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services in der Konfigurationspartition. |
- objectClass: msDS-ResourceProperty- description: The Project property specifies the names of one or more projects that are relevant to the resource.- displayname: Project- Enabled: False- msDS-IsUsedAsResourceSecurityAttribute: True- msDS-ValueTypeReference: CN=MS-DS-MultivaluedChoice,CN=Value Types,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain> |
(D;;SDDT;;;WD)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| Vorgang 121: {93efec15-4dd9-4850-bc86-a1f2c8e2ebb9} | Erstellt ein neues „Retention Period“-Ressourceneigenschaftenobjekt CN=RetentionPeriod_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services in der Konfigurationspartition. |
- objectClass: msDS-ResourceProperty- description: The Retention Period property specifies the maximum period for which the file should be retained.- displayname: Retention Period- Enabled: False- msDS-IsUsedAsResourceSecurityAttribute: True- msDS-ValueTypeReference: CN=MS-DS-SinglevaluedChoice,CN=Value Types,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain> |
(D;;SDDT;;;WD)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| Vorgang 122: {9e108d96-672f-40f0-b6bd-69ee1f0b7ac4} | Erstellt ein neues „Retention Start Date“-Ressourceneigenschaftenobjekt CN=RetentionStartDate_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services in der Konfigurationspartition. |
- objectClass: msDS-ResourceProperty- description: The Retention Start Date property defines the starting date for a Retention Period. The retention period would begin on the Retention Start Date.- displayname: Retention Start Date- Enabled: False- msDS-IsUsedAsResourceSecurityAttribute: False- msDS-ValueTypeReference: CN=MS-DS-DateTime,CN=Value Types,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain> |
(D;;SDDT;;;WD)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| Vorgang 123: {1e269508-f862-4c4a-b01f-420d26c4ff8c} | Erstellt ein neues „Company“-Ressourceneigenschaftenobjekt CN=Company_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services in der Konfigurationspartition. |
- objectClass: msDS-ResourceProperty- description: The Company property specifies which company the resource belongs to.- displayname: Company- Enabled: False- msDS-IsUsedAsResourceSecurityAttribute: True- msDS-ValueTypeReference: CN=MS-DS-SinglevaluedChoice,CN=Value Types,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain> |
(D;;SDDT;;;WD)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| Vorgang 125: {e1ab17ed-5efb-4691-ad2d-0424592c5755} Hinweis: Vorgang 124 wurde gelöscht. | Erstellt ein neues „Folder Usage“-Ressourceneigenschaftenobjekt CN=FolderUsage_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services in der Konfigurationspartition. |
- objectClass: msDS-ResourceProperty- description: The Folder Usage property specifies the purpose of the folder and the kind of files stored in it.- displayname: Folder Usage- Enabled: False- msDS-IsUsedAsResourceSecurityAttribute: False- msDS-AppliestoResourceTypes: MS-DS-Container- msDS-ValueTypeReference: CN=MS-DS-MultivaluedChoice,CN=Value Types,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain> |
(D;;SDDT;;;WD)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| Vorgang 126: {0e848bd4-7c70-48f2-b8fc-00fbaa82e360} | Erstellt ein neues Konfigurationsobjekt für die globale Ressourceneigenschaftenliste (CN=Global Resource Property List,CN=Resource Property Lists,CN=Claims Configuration,CN=Services) in der Konfigurationspartition. |
- objectClass: msDS-ResourcePropertyList- description: This is a global out of box resource property list that contains all resource properties that can be consumed by applications.- showInAdvancedViewOnly: True- msDS-MembersOfResourcePropertyList: CN=PII_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain>- msDS-MembersOfResourcePropertyList: CN=ProtectedHealthInformation_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain>- msDS-MembersOfResourcePropertyList: CN=RequiredClearance_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain>- msDS-MembersOfResourcePropertyList: CN=Confidentiality_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain>- msDS-MembersOfResourcePropertyList: CN=Compliancy_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain>- msDS-MembersOfResourcePropertyList: CN=Discoverability_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain>- msDS-MembersOfResourcePropertyList: CN=Immutable_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain>- msDS-MembersOfResourcePropertyList: CN=IntellectualProperty_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain>- msDS-MembersOfResourcePropertyList: CN=Department_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain>- msDS-MembersOfResourcePropertyList: CN=Impact_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain>- msDS-MembersOfResourcePropertyList: CN=PersonalUse_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain>- msDS-MembersOfResourcePropertyList: CN=Project_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain>- msDS-MembersOfResourcePropertyList: CN=RetentionPeriod_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain>- msDS-MembersOfResourcePropertyList: CN=RetentionStartDate_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain>- msDS-MembersOfResourcePropertyList: CN=Company_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain>- msDS-MembersOfResourcePropertyList: CN=FolderUsage_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain> |
(D;;SDDT;;;WD)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| Vorgang 127: {016f23f7-077d-41fa-a356-de7cfdb01797} | Rückruffunktion zum Aktualisieren von Anzeigebezeichnern. | – | – |
| Vorgang 128: {49c140db-2de3-44c2-a99a-bab2e6d2ba81} | Aktualisiert Zeichenfolgen für das „Folder Usage“-Ressourceneigenschaftenobjekt CN=FolderUsage_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services in der Konfigurationspartition. |
- description: The Folder Usage property specifies the purpose of the folder and the kind of files stored in it. |
– |
| Vorgang 129: {e0b11c80-62c5-47f7-ad0d-3734a71b8312} | Fügt einen Zugriffssteuerungseintrag hinzu, um dem Prinzipal Schreib- und Leseberechtigungen für das Objekt CN=Sam-Domain zu erteilen. |
– | (OA;CIOI;RPWP;3f78c3e5-f79a-46bd-a0b8-9d18116ddc79;;PS) |
| Vorgang 130: {2ada1a2d-b02f-4731-b4fe-59f955e24f71} | Fügt einen Zugriffssteuerungseintrag hinzu, um dem Prinzipal Schreib- und Leseberechtigungen für das Objekt CN=Domain-DNS zu erteilen. |
– | (OA;CIOI;RPWP;3f78c3e5-f79a-46bd-a0b8-9d18116ddc79;;PS) |