Object

Name:	Account Operators
Path:	CN=Account Operators,CN=Builtin,DC=adscribe,DC=com
Created:	10/10/2006
Modified:	07/10/2007
Original USN:	12359
Current USN:	86811
SID:	S-1-5-32-548
GUID:	{162BA1B7-B4D5-4522-B644-99FBDC64F1F7}

General

Name (pre-Windows 2000):	Account Operators
Builtin:
E-mail:
Scope:	Domain Local Group
Type:	Security
Managed by:
Notes:

Member of

Member Of:

Members

	Name	Type	Description
	AAA	user	Decription
	Schema Admins	group	Designated administrators of the schema

Total: 2 member(s)

Security

Owner:	ADSCRIBE\Domain Admins
Group:	ADSCRIBE\Domain Admins
Allow inheritable permissions from parent:

Security permissions

	Trustee	Allow	Access	Inhereted	Children
	NT AUTHORITY\Authenticated Users		Read permissions List a tree of objects Read the properties Enumerate an object
	BUILTIN\Administrators		Modify owner Write permissions Read permissions Delete an object Extended access rights List a tree of objects Write the properties Read the properties Validate property Enumerate an object Delete child object Create child object
	ADSCRIBE\Enterprise Admins		Modify owner Write permissions Read permissions Extended access rights List a tree of objects Write the properties Read the properties Validate property Enumerate an object Delete child object Create child object
	ADSCRIBE\Domain Admins		Modify owner Write permissions Read permissions Extended access rights List a tree of objects Write the properties Read the properties Validate property Enumerate an object Delete child object Create child object
	NT AUTHORITY\SYSTEM		Full control Modify owner Write permissions Read permissions Delete an object Extended access rights List a tree of objects Delete a tree of objects Write the properties Read the properties Validate property Enumerate an object Delete child object Create child object
	BUILTIN\Pre-Windows 2000 Compatible Access		Read the properties		Remote Access Information
	BUILTIN\Pre-Windows 2000 Compatible Access		Read the properties		General Information
	BUILTIN\Pre-Windows 2000 Compatible Access		Read the properties		Group Membership
	BUILTIN\Pre-Windows 2000 Compatible Access		Read the properties		Account Restrictions
	BUILTIN\Pre-Windows 2000 Compatible Access		Read the properties		Logon Information
	BUILTIN\Pre-Windows 2000 Compatible Access		Read permissions List a tree of objects Read the properties Enumerate an object
	Everyone		Extended access rights		Change Password
	NT AUTHORITY\SELF		Extended access rights		Change Password
	ADSCRIBE\Cert Publishers		Write the properties Read the properties		UserCertificate
	BUILTIN\Pre-Windows 2000 Compatible Access		Read the properties		Remote Access Information
	BUILTIN\Pre-Windows 2000 Compatible Access		Read the properties		General Information
	BUILTIN\Pre-Windows 2000 Compatible Access		Read the properties		Group Membership
	BUILTIN\Pre-Windows 2000 Compatible Access		Read the properties		Account Restrictions
	BUILTIN\Pre-Windows 2000 Compatible Access		Read the properties		Logon Information
	BUILTIN\Pre-Windows 2000 Compatible Access		Read permissions List a tree of objects Read the properties Enumerate an object
	BUILTIN\Windows Authorization Access Group		Read the properties		TokenGroupsGlobalAndUniversal
	BUILTIN\Terminal Server License Servers		Write the properties Read the properties		TerminalServer

Total: 22 security permission(s)

Audit permissions

	Trustee	Access	Inhereted	Children	Attribute
	Everyone	Modify owner Write permissions Write the properties
	Everyone	Write the properties		OrganizationalUnit	GPLink
	Everyone	Write the properties		OrganizationalUnit	GPOptions

Total: 3 audit permission(s)

See Also

List of groups