Share via

2.2.15 Domain RID Values

  • Article

Constants for defining domain relative identifiers (RIDs).

Symbolic name

Value

DOMAIN_USER_RID_ADMIN

0x000001F4

DOMAIN_USER_RID_KRBTGT

0x000001F6

DOMAIN_GROUP_RID_ADMINS

0x00000200

DOMAIN_GROUP_RID_CONTROLLERS

0x00000204

DOMAIN_GROUP_RID_SCHEMA_ADMINS

0x00000206

DOMAIN_GROUP_RID_ENTERPRISE_ADMINS

0x00000207

DOMAIN_GROUP_RID_READONLY_CONTROLLERS

0x00000209

DOMAIN_ALIAS_RID_ADMINS

0x00000220

DOMAIN_ALIAS_RID_ACCOUNT_OPS

0x00000224

DOMAIN_ALIAS_RID_SYSTEM_OPS

0x00000225

DOMAIN_ALIAS_RID_PRINT_OPS

0x00000226

DOMAIN_ALIAS_RID_BACKUP_OPS

0x00000227

DOMAIN_ALIAS_RID_REPLICATOR

0x00000228

DOMAIN_USER_RID_ADMIN: The administrative user account in a domain.

DOMAIN_USER_RID_KRBTGT: The Kerberos ticket-granting ticket (TGT) account in a domain.

DOMAIN_GROUP_RID_ADMINS: The domain administrators' group.

DOMAIN_GROUP_RID_CONTROLLERS: The DCs' group. All DCs in the domain are members of the group.

DOMAIN_GROUP_RID_SCHEMA_ADMINS: The schema administrators' group. Members of this group can modify the Active Directory schema.

DOMAIN_GROUP_RID_ENTERPRISE_ADMINS: The enterprise administrators' group. Members of this group have full access to all domains in the Active Directory forest. Enterprise administrators are responsible for forest-level operations, such as adding or removing new domains.

DOMAIN_GROUP_RID_READONLY_CONTROLLERS: The read-only domain controllers' group. All read-only DCs in the domain are members of this group.

DOMAIN_ALIAS_RID_ADMINS: The administrators' group in the built-in domain.

DOMAIN_ALIAS_RID_ACCOUNT_OPS: A group that permits control over nonadministrator accounts.

DOMAIN_ALIAS_RID_SYSTEM_OPS: A group that performs system administrative functions, not including security functions. It establishes network shares, controls printers, unlocks workstations, and performs other operations.

DOMAIN_ALIAS_RID_PRINT_OPS: A group that controls printers and print queues.

DOMAIN_ALIAS_RID_BACKUP_OPS: A group that is used for controlling assignment of file backup and restoring user rights.

DOMAIN_ALIAS_RID_REPLICATOR: A group responsible for copying security databases to the Windows NT operating system backup controllers.