Object

Name:	Domain Users
Path:	CN=Domain Users,CN=Users,DC=adscribe,DC=com
Created:	10/10/2006
Modified:	07/10/2007
Original USN:	12344
Current USN:	87388
SID:	S-1-5-21-2034109091-298619056-3282043246-513
GUID:	{0347C861-8993-4C0A-AB5B-972E8053B804}

General

Name (pre-Windows 2000):	Domain Users
Builtin:
E-mail:
Scope:	Global Group
Type:	Security
Managed by:
Notes:

Member of

Member Of:

Users

Members

	Name	Type	Description
	Administrator	user	Built-in account for administering the computer/domain

Total: 1 member(s)

Security

Owner:	ADSCRIBE\Domain Admins
Group:	ADSCRIBE\Domain Admins
Allow inheritable permissions from parent:

Security permissions

	Trustee	Allow	Access	Inhereted	Children
	ADSCRIBE\Domain Admins		Full control Modify owner Write permissions Read permissions Delete an object Extended access rights List a tree of objects Delete a tree of objects Write the properties Read the properties Validate property Enumerate an object Delete child object Create child object
	NT AUTHORITY\SYSTEM		Full control Modify owner Write permissions Read permissions Delete an object Extended access rights List a tree of objects Delete a tree of objects Write the properties Read the properties Validate property Enumerate an object Delete child object Create child object
	NT AUTHORITY\Authenticated Users		Read permissions List a tree of objects Read the properties Enumerate an object
	BUILTIN\Account Operators		Full control Modify owner Write permissions Read permissions Delete an object Extended access rights List a tree of objects Delete a tree of objects Write the properties Read the properties Validate property Enumerate an object Delete child object Create child object
	NT AUTHORITY\SELF		Read permissions List a tree of objects Read the properties Enumerate an object
	NT AUTHORITY\Authenticated Users		Extended access rights		Send To
	BUILTIN\Windows Authorization Access Group		Read the properties		TokenGroupsGlobalAndUniversal
	BUILTIN\Administrators		Modify owner Write permissions Read permissions Delete an object Extended access rights List a tree of objects Write the properties Read the properties Validate property Enumerate an object Create child object
	ADSCRIBE\Enterprise Admins		Full control Modify owner Write permissions Read permissions Delete an object Extended access rights List a tree of objects Delete a tree of objects Write the properties Read the properties Validate property Enumerate an object Delete child object Create child object
	BUILTIN\Pre-Windows 2000 Compatible Access		Enumerate an object
	BUILTIN\Pre-Windows 2000 Compatible Access		Read the properties		Remote Access Information
	BUILTIN\Pre-Windows 2000 Compatible Access		Read the properties		General Information
	BUILTIN\Pre-Windows 2000 Compatible Access		Read the properties		Group Membership
	BUILTIN\Pre-Windows 2000 Compatible Access		Read the properties		Account Restrictions
	BUILTIN\Pre-Windows 2000 Compatible Access		Read the properties		Logon Information
	BUILTIN\Pre-Windows 2000 Compatible Access		Read permissions List a tree of objects Read the properties Enumerate an object
	BUILTIN\Pre-Windows 2000 Compatible Access		Read permissions List a tree of objects Read the properties Enumerate an object
	BUILTIN\Pre-Windows 2000 Compatible Access		Read the properties		Remote Access Information
	BUILTIN\Pre-Windows 2000 Compatible Access		Read the properties		General Information
	BUILTIN\Pre-Windows 2000 Compatible Access		Read the properties		Group Membership
	BUILTIN\Pre-Windows 2000 Compatible Access		Read the properties		Account Restrictions
	BUILTIN\Pre-Windows 2000 Compatible Access		Read the properties		Logon Information
	BUILTIN\Pre-Windows 2000 Compatible Access		Read permissions List a tree of objects Read the properties Enumerate an object
	NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS		Read the properties		TokenGroups
	NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS		Read the properties		TokenGroups
	NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS		Read the properties		TokenGroups

Total: 26 security permission(s)

Audit permissions

	Trustee	Access	Inhereted	Children	Attribute
	Everyone	Write the properties		OrganizationalUnit	GPLink
	Everyone	Write the properties		OrganizationalUnit	GPOptions

Total: 2 audit permission(s)

See Also

List of groups