| Name | Type | objectTypeName | inheritedObjectTypeName | ActiveDirectoryRight | AccessControl | IdentityReferenceName | OwnerName | DistinguishedName | Owner | ActiveDirectoryRights | InheritanceType | ObjectType | InheritedObjectType | ObjectFlags | AccessControlType | IdentityReference | IsInherited | InheritanceFlags | PropagationFlags |
|---|
| sos.labs | Domain | All | All | DeleteChild | Deny | Everyone | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | DeleteChild | None | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Deny | Everyone | False | None | None |
| sos.labs | Domain | All | All | ReadProperty | Allow | Everyone | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | ReadProperty | None | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | Everyone | False | None | None |
| sos.labs | Domain | All | All | GenericRead | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | GenericRead | None | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | False | None | None |
| sos.labs | Domain | All | All | GenericRead | Allow | NT AUTHORITY\Authenticated Users | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | GenericRead | None | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | NT AUTHORITY\Authenticated Users | False | None | None |
| sos.labs | Domain | All | All | GenericAll | Allow | NT AUTHORITY\SYSTEM | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | GenericAll | None | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | NT AUTHORITY\SYSTEM | False | None | None |
| sos.labs | Domain | All | All | CreateChild, Self, WriteProperty, ExtendedRight, Delete, GenericRead, WriteDacl, WriteOwner | Allow | BUILTIN\Administrators | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | CreateChild, Self, WriteProperty, ExtendedRight, Delete, GenericRead, WriteDacl, WriteOwner | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | BUILTIN\Administrators | False | ContainerInherit | None |
| sos.labs | Domain | All | All | ListChildren | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | ListChildren | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | False | ContainerInherit | None |
| sos.labs | Domain | All | All | ReadProperty, ReadControl | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | ReadProperty, ReadControl | None | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | False | None | None |
| sos.labs | Domain | All | All | CreateChild, Self, WriteProperty, ExtendedRight, GenericRead, WriteDacl, WriteOwner | Allow | sos\Domain Admins | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | CreateChild, Self, WriteProperty, ExtendedRight, GenericRead, WriteDacl, WriteOwner | None | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | sos\Domain Admins | False | None | None |
| sos.labs | Domain | All | All | GenericAll | Allow | sos\Enterprise Admins | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | GenericAll | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | sos\Enterprise Admins | False | ContainerInherit | None |
| sos.labs | Domain | All | All | ReadProperty, GenericExecute | Allow | sos\backdoor | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | ReadProperty, GenericExecute | None | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | sos\backdoor | False | None | None |
| sos.labs | Domain | DS-Validated-Write-Computer | Computer | Self | Allow | CREATOR OWNER | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | Self | Descendents | 9b026da6-0d3c-465c-8bee-5199d7165cba | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | CREATOR OWNER | False | ContainerInherit | InheritOnly |
| sos.labs | Domain | DS-Replication-Manage-Topology | All | ExtendedRight | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | ExtendedRight | None | 1131f6ac-9c07-11d1-f79f-00c04fc2dcd2 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | False | None | None |
| sos.labs | Domain | DS-Replication-Synchronize | All | ExtendedRight | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | ExtendedRight | None | 1131f6ab-9c07-11d1-f79f-00c04fc2dcd2 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | False | None | None |
| sos.labs | Domain | DS-Replication-Get-Changes | All | ExtendedRight | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | ExtendedRight | None | 1131f6aa-9c07-11d1-f79f-00c04fc2dcd2 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | False | None | None |
| sos.labs | Domain | DS-Replication-Get-Changes-In-Filtered-Set | All | ExtendedRight | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | ExtendedRight | None | 89e95b76-444d-4c62-991a-0facbeda640c | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | False | None | None |
| sos.labs | Domain | Token-Groups | User | ReadProperty | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | ReadProperty | Descendents | b7c69e6d-2cc7-11d2-854e-00a0c983f608 | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | False | ContainerInherit | InheritOnly |
| sos.labs | Domain | Token-Groups | Group | ReadProperty | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | ReadProperty | Descendents | b7c69e6d-2cc7-11d2-854e-00a0c983f608 | bf967a9c-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | False | ContainerInherit | InheritOnly |
| sos.labs | Domain | Token-Groups | Computer | ReadProperty | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | ReadProperty | Descendents | b7c69e6d-2cc7-11d2-854e-00a0c983f608 | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | False | ContainerInherit | InheritOnly |
| sos.labs | Domain | Read-Only-Replication-Secret-Synchronization | All | ExtendedRight | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | ExtendedRight | None | 1131f6ae-9c07-11d1-f79f-00c04fc2dcd2 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | False | None | None |
| sos.labs | Domain | Private-Information | All | ReadProperty, WriteProperty, ExtendedRight | Allow | NT AUTHORITY\SELF | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | ReadProperty, WriteProperty, ExtendedRight | Descendents | 91e647de-d96f-4b70-9557-d63ff4f3ccd8 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | NT AUTHORITY\SELF | False | ContainerInherit | InheritOnly |
| sos.labs | Domain | ms-DS-Allowed-To-Act-On-Behalf-Of-Other-Identity | All | ReadProperty, WriteProperty | Allow | NT AUTHORITY\SELF | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | ReadProperty, WriteProperty | All | 3f78c3e5-f79a-46bd-a0b8-9d18116ddc79 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | NT AUTHORITY\SELF | False | ContainerInherit | None |
| sos.labs | Domain | DS-Validated-Write-Computer | Computer | Self | Allow | NT AUTHORITY\SELF | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | Self | Descendents | 9b026da6-0d3c-465c-8bee-5199d7165cba | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\SELF | False | ContainerInherit | InheritOnly |
| sos.labs | Domain | ms-TPM-Tpm-Information-For-Computer | Computer | WriteProperty | Allow | NT AUTHORITY\SELF | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | WriteProperty | Descendents | ea1b7b93-5e48-46d5-bc6c-4df4fda78a35 | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\SELF | False | ContainerInherit | InheritOnly |
| sos.labs | Domain | ms-TPM-OwnerInformation | Computer | WriteProperty | Allow | NT AUTHORITY\SELF | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | WriteProperty | Descendents | aa4e1a6d-550d-4e05-8c35-4afcb917a9fe | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\SELF | False | ContainerInherit | InheritOnly |
| sos.labs | Domain | Update-Password-Not-Required-Bit | All | ExtendedRight | Allow | NT AUTHORITY\Authenticated Users | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | ExtendedRight | None | 280f369c-67c7-438e-ae98-1d46f3c6f541 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | NT AUTHORITY\Authenticated Users | False | None | None |
| sos.labs | Domain | Unexpire-Password | All | ExtendedRight | Allow | NT AUTHORITY\Authenticated Users | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | ExtendedRight | None | ccc2dc7d-a6ad-4a7a-8846-c04e3cc53501 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | NT AUTHORITY\Authenticated Users | False | None | None |
| sos.labs | Domain | Enable-Per-User-Reversibly-Encrypted-Password | All | ExtendedRight | Allow | NT AUTHORITY\Authenticated Users | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | ExtendedRight | None | 05c74c5e-4deb-43b4-bd9f-86664c2a7fd5 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | NT AUTHORITY\Authenticated Users | False | None | None |
| sos.labs | Domain | DS-Replication-Get-Changes-In-Filtered-Set | All | ExtendedRight | Allow | BUILTIN\Administrators | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | ExtendedRight | None | 89e95b76-444d-4c62-991a-0facbeda640c | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | BUILTIN\Administrators | False | None | None |
| sos.labs | Domain | DS-Replication-Get-Changes | All | ExtendedRight | Allow | BUILTIN\Administrators | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | ExtendedRight | None | 1131f6aa-9c07-11d1-f79f-00c04fc2dcd2 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | BUILTIN\Administrators | False | None | None |
| sos.labs | Domain | DS-Replication-Synchronize | All | ExtendedRight | Allow | BUILTIN\Administrators | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | ExtendedRight | None | 1131f6ab-9c07-11d1-f79f-00c04fc2dcd2 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | BUILTIN\Administrators | False | None | None |
| sos.labs | Domain | DS-Replication-Manage-Topology | All | ExtendedRight | Allow | BUILTIN\Administrators | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | ExtendedRight | None | 1131f6ac-9c07-11d1-f79f-00c04fc2dcd2 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | BUILTIN\Administrators | False | None | None |
| sos.labs | Domain | DS-Replication-Get-Changes-All | All | ExtendedRight | Allow | BUILTIN\Administrators | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | ExtendedRight | None | 1131f6ad-9c07-11d1-f79f-00c04fc2dcd2 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | BUILTIN\Administrators | False | None | None |
| sos.labs | Domain | Read-Only-Replication-Secret-Synchronization | All | ExtendedRight | Allow | BUILTIN\Administrators | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | ExtendedRight | None | 1131f6ae-9c07-11d1-f79f-00c04fc2dcd2 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | BUILTIN\Administrators | False | None | None |
| sos.labs | Domain | Membership | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | ReadProperty | Descendents | bc0ac240-79a9-11d0-9020-00c04fc2d4cf | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | False | ContainerInherit | InheritOnly |
| sos.labs | Domain | RAS-Information | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | ReadProperty | Descendents | 037088f8-0ae1-11d2-b422-00a0c968f939 | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | False | ContainerInherit | InheritOnly |
| sos.labs | Domain | User-Account-Restrictions | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | ReadProperty | Descendents | 4c164200-20c0-11d0-a768-00aa006e0529 | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | False | ContainerInherit | InheritOnly |
| sos.labs | Domain | RAS-Information | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | ReadProperty | Descendents | 037088f8-0ae1-11d2-b422-00a0c968f939 | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | False | ContainerInherit | InheritOnly |
| sos.labs | Domain | General-Information | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | ReadProperty | Descendents | 59ba2f42-79a2-11d0-9020-00c04fc2d3cf | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | False | ContainerInherit | InheritOnly |
| sos.labs | Domain | User-Logon | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | ReadProperty | Descendents | 5f202010-79a5-11d0-9020-00c04fc2d4cf | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | False | ContainerInherit | InheritOnly |
| sos.labs | Domain | User-Logon | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | ReadProperty | Descendents | 5f202010-79a5-11d0-9020-00c04fc2d4cf | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | False | ContainerInherit | InheritOnly |
| sos.labs | Domain | All | User | GenericRead | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | GenericRead | Descendents | 00000000-0000-0000-0000-000000000000 | bf967aba-0de6-11d0-a285-00aa003049e2 | InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | False | ContainerInherit | InheritOnly |
| sos.labs | Domain | All | Group | GenericRead | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | GenericRead | Descendents | 00000000-0000-0000-0000-000000000000 | bf967a9c-0de6-11d0-a285-00aa003049e2 | InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | False | ContainerInherit | InheritOnly |
| sos.labs | Domain | General-Information | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | ReadProperty | Descendents | 59ba2f42-79a2-11d0-9020-00c04fc2d3cf | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | False | ContainerInherit | InheritOnly |
| sos.labs | Domain | All | inetOrgPerson | GenericRead | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | GenericRead | Descendents | 00000000-0000-0000-0000-000000000000 | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | False | ContainerInherit | InheritOnly |
| sos.labs | Domain | Membership | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | ReadProperty | Descendents | bc0ac240-79a9-11d0-9020-00c04fc2d4cf | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | False | ContainerInherit | InheritOnly |
| sos.labs | Domain | User-Account-Restrictions | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | ReadProperty | Descendents | 4c164200-20c0-11d0-a768-00aa006e0529 | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | False | ContainerInherit | InheritOnly |
| sos.labs | Domain | Create-Inbound-Forest-Trust | All | ExtendedRight | Allow | BUILTIN\Incoming Forest Trust Builders | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | ExtendedRight | None | e2a36dc9-ae17-47c3-b58b-be34c55ba633 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | BUILTIN\Incoming Forest Trust Builders | False | None | None |
| sos.labs | Domain | DS-Replication-Get-Changes | All | ExtendedRight | Allow | sos\Enterprise Read-only Domain Controllers | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | ExtendedRight | None | 1131f6aa-9c07-11d1-f79f-00c04fc2dcd2 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | sos\Enterprise Read-only Domain Controllers | False | None | None |
| sos.labs | Domain | DS-Replication-Get-Changes-All | All | ExtendedRight | Allow | sos\Domain Controllers | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | ExtendedRight | None | 1131f6ad-9c07-11d1-f79f-00c04fc2dcd2 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | sos\Domain Controllers | False | None | None |
| sos.labs | Domain | DS-Clone-Domain-Controller | All | ExtendedRight | Allow | sos\Cloneable Domain Controllers | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | ExtendedRight | None | 3e0f7e18-2c7a-4c10-ba82-4d926db99a3e | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | sos\Cloneable Domain Controllers | False | None | None |
| sos.labs | Domain | ms-DS-Key-Credential-Link | All | ReadProperty, WriteProperty | Allow | sos\Key Admins | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | ReadProperty, WriteProperty | All | 5b47d60f-6090-40b2-9f37-2a4de88f3063 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | sos\Key Admins | False | ContainerInherit | None |
| sos.labs | Domain | ms-DS-Key-Credential-Link | All | ReadProperty, WriteProperty | Allow | sos\Enterprise Key Admins | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | ReadProperty, WriteProperty | All | 5b47d60f-6090-40b2-9f37-2a4de88f3063 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | sos\Enterprise Key Admins | False | ContainerInherit | None |
| sos.labs | Domain | DS-Replication-Get-Changes | All | ExtendedRight | Allow | sos\backdoor | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | ExtendedRight | None | 1131f6aa-9c07-11d1-f79f-00c04fc2dcd2 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | sos\backdoor | False | None | None |
| sos.labs | Domain | DS-Replication-Get-Changes-All | All | ExtendedRight | Allow | sos\backdoor | BUILTIN\Administrators | DC=sos,DC=labs | BUILTIN\Administrators | ExtendedRight | None | 1131f6ad-9c07-11d1-f79f-00c04fc2dcd2 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | sos\backdoor | False | None | None |
| Domain Controllers | OU | All | All | GenericRead | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | sos\Domain Admins | OU=Domain Controllers,DC=sos,DC=labs | sos\Domain Admins | GenericRead | None | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | False | None | None |
| Domain Controllers | OU | All | All | GenericRead | Allow | NT AUTHORITY\Authenticated Users | sos\Domain Admins | OU=Domain Controllers,DC=sos,DC=labs | sos\Domain Admins | GenericRead | None | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | NT AUTHORITY\Authenticated Users | False | None | None |
| Domain Controllers | OU | All | All | GenericAll | Allow | NT AUTHORITY\SYSTEM | sos\Domain Admins | OU=Domain Controllers,DC=sos,DC=labs | sos\Domain Admins | GenericAll | None | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | NT AUTHORITY\SYSTEM | False | None | None |
| Domain Controllers | OU | All | All | CreateChild, Self, WriteProperty, ExtendedRight, GenericRead, WriteDacl, WriteOwner | Allow | sos\Domain Admins | sos\Domain Admins | OU=Domain Controllers,DC=sos,DC=labs | sos\Domain Admins | CreateChild, Self, WriteProperty, ExtendedRight, GenericRead, WriteDacl, WriteOwner | None | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | sos\Domain Admins | False | None | None |
| Domain Controllers | OU | User-Account-Restrictions | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Domain Controllers,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 4c164200-20c0-11d0-a768-00aa006e0529 | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Domain Controllers | OU | User-Account-Restrictions | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Domain Controllers,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 4c164200-20c0-11d0-a768-00aa006e0529 | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Domain Controllers | OU | User-Logon | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Domain Controllers,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 5f202010-79a5-11d0-9020-00c04fc2d4cf | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Domain Controllers | OU | User-Logon | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Domain Controllers,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 5f202010-79a5-11d0-9020-00c04fc2d4cf | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Domain Controllers | OU | Membership | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Domain Controllers,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | bc0ac240-79a9-11d0-9020-00c04fc2d4cf | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Domain Controllers | OU | Membership | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Domain Controllers,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | bc0ac240-79a9-11d0-9020-00c04fc2d4cf | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Domain Controllers | OU | General-Information | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Domain Controllers,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 59ba2f42-79a2-11d0-9020-00c04fc2d3cf | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Domain Controllers | OU | General-Information | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Domain Controllers,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 59ba2f42-79a2-11d0-9020-00c04fc2d3cf | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Domain Controllers | OU | RAS-Information | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Domain Controllers,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 037088f8-0ae1-11d2-b422-00a0c968f939 | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Domain Controllers | OU | RAS-Information | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Domain Controllers,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 037088f8-0ae1-11d2-b422-00a0c968f939 | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Domain Controllers | OU | All | inetOrgPerson | GenericRead | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Domain Controllers,DC=sos,DC=labs | sos\Domain Admins | GenericRead | Descendents | 00000000-0000-0000-0000-000000000000 | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Domain Controllers | OU | All | Group | GenericRead | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Domain Controllers,DC=sos,DC=labs | sos\Domain Admins | GenericRead | Descendents | 00000000-0000-0000-0000-000000000000 | bf967a9c-0de6-11d0-a285-00aa003049e2 | InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Domain Controllers | OU | All | User | GenericRead | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Domain Controllers,DC=sos,DC=labs | sos\Domain Admins | GenericRead | Descendents | 00000000-0000-0000-0000-000000000000 | bf967aba-0de6-11d0-a285-00aa003049e2 | InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Domain Controllers | OU | ms-DS-Key-Credential-Link | All | ReadProperty, WriteProperty | Allow | sos\Key Admins | sos\Domain Admins | OU=Domain Controllers,DC=sos,DC=labs | sos\Domain Admins | ReadProperty, WriteProperty | All | 5b47d60f-6090-40b2-9f37-2a4de88f3063 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | sos\Key Admins | True | ContainerInherit | None |
| Domain Controllers | OU | ms-DS-Key-Credential-Link | All | ReadProperty, WriteProperty | Allow | sos\Enterprise Key Admins | sos\Domain Admins | OU=Domain Controllers,DC=sos,DC=labs | sos\Domain Admins | ReadProperty, WriteProperty | All | 5b47d60f-6090-40b2-9f37-2a4de88f3063 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | sos\Enterprise Key Admins | True | ContainerInherit | None |
| Domain Controllers | OU | DS-Validated-Write-Computer | Computer | Self | Allow | CREATOR OWNER | sos\Domain Admins | OU=Domain Controllers,DC=sos,DC=labs | sos\Domain Admins | Self | Descendents | 9b026da6-0d3c-465c-8bee-5199d7165cba | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | CREATOR OWNER | True | ContainerInherit | InheritOnly |
| Domain Controllers | OU | DS-Validated-Write-Computer | Computer | Self | Allow | NT AUTHORITY\SELF | sos\Domain Admins | OU=Domain Controllers,DC=sos,DC=labs | sos\Domain Admins | Self | Descendents | 9b026da6-0d3c-465c-8bee-5199d7165cba | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\SELF | True | ContainerInherit | InheritOnly |
| Domain Controllers | OU | Token-Groups | Computer | ReadProperty | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | sos\Domain Admins | OU=Domain Controllers,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | b7c69e6d-2cc7-11d2-854e-00a0c983f608 | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | True | ContainerInherit | InheritOnly |
| Domain Controllers | OU | Token-Groups | Group | ReadProperty | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | sos\Domain Admins | OU=Domain Controllers,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | b7c69e6d-2cc7-11d2-854e-00a0c983f608 | bf967a9c-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | True | ContainerInherit | InheritOnly |
| Domain Controllers | OU | Token-Groups | User | ReadProperty | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | sos\Domain Admins | OU=Domain Controllers,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | b7c69e6d-2cc7-11d2-854e-00a0c983f608 | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | True | ContainerInherit | InheritOnly |
| Domain Controllers | OU | ms-TPM-OwnerInformation | Computer | WriteProperty | Allow | NT AUTHORITY\SELF | sos\Domain Admins | OU=Domain Controllers,DC=sos,DC=labs | sos\Domain Admins | WriteProperty | Descendents | aa4e1a6d-550d-4e05-8c35-4afcb917a9fe | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\SELF | True | ContainerInherit | InheritOnly |
| Domain Controllers | OU | ms-TPM-Tpm-Information-For-Computer | Computer | WriteProperty | Allow | NT AUTHORITY\SELF | sos\Domain Admins | OU=Domain Controllers,DC=sos,DC=labs | sos\Domain Admins | WriteProperty | Descendents | ea1b7b93-5e48-46d5-bc6c-4df4fda78a35 | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\SELF | True | ContainerInherit | InheritOnly |
| Domain Controllers | OU | ms-DS-Allowed-To-Act-On-Behalf-Of-Other-Identity | All | ReadProperty, WriteProperty | Allow | NT AUTHORITY\SELF | sos\Domain Admins | OU=Domain Controllers,DC=sos,DC=labs | sos\Domain Admins | ReadProperty, WriteProperty | All | 3f78c3e5-f79a-46bd-a0b8-9d18116ddc79 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | NT AUTHORITY\SELF | True | ContainerInherit | None |
| Domain Controllers | OU | Private-Information | All | ReadProperty, WriteProperty, ExtendedRight | Allow | NT AUTHORITY\SELF | sos\Domain Admins | OU=Domain Controllers,DC=sos,DC=labs | sos\Domain Admins | ReadProperty, WriteProperty, ExtendedRight | All | 91e647de-d96f-4b70-9557-d63ff4f3ccd8 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | NT AUTHORITY\SELF | True | ContainerInherit | None |
| Domain Controllers | OU | All | All | GenericAll | Allow | sos\Enterprise Admins | sos\Domain Admins | OU=Domain Controllers,DC=sos,DC=labs | sos\Domain Admins | GenericAll | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | sos\Enterprise Admins | True | ContainerInherit | None |
| Domain Controllers | OU | All | All | ListChildren | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Domain Controllers,DC=sos,DC=labs | sos\Domain Admins | ListChildren | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | None |
| Domain Controllers | OU | All | All | CreateChild, Self, WriteProperty, ExtendedRight, Delete, GenericRead, WriteDacl, WriteOwner | Allow | BUILTIN\Administrators | sos\Domain Admins | OU=Domain Controllers,DC=sos,DC=labs | sos\Domain Admins | CreateChild, Self, WriteProperty, ExtendedRight, Delete, GenericRead, WriteDacl, WriteOwner | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | BUILTIN\Administrators | True | ContainerInherit | None |
| Lab Users | OU | All | All | DeleteTree, Delete | Deny | Everyone | sos\Domain Admins | OU=Lab Users,DC=sos,DC=labs | sos\Domain Admins | DeleteTree, Delete | None | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Deny | Everyone | False | None | None |
| Lab Users | OU | All | All | GenericRead | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | sos\Domain Admins | OU=Lab Users,DC=sos,DC=labs | sos\Domain Admins | GenericRead | None | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | False | None | None |
| Lab Users | OU | All | All | GenericRead | Allow | NT AUTHORITY\Authenticated Users | sos\Domain Admins | OU=Lab Users,DC=sos,DC=labs | sos\Domain Admins | GenericRead | None | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | NT AUTHORITY\Authenticated Users | False | None | None |
| Lab Users | OU | All | All | GenericAll | Allow | NT AUTHORITY\SYSTEM | sos\Domain Admins | OU=Lab Users,DC=sos,DC=labs | sos\Domain Admins | GenericAll | None | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | NT AUTHORITY\SYSTEM | False | None | None |
| Lab Users | OU | All | All | GenericAll | Allow | sos\Domain Admins | sos\Domain Admins | OU=Lab Users,DC=sos,DC=labs | sos\Domain Admins | GenericAll | None | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | sos\Domain Admins | False | None | None |
| Lab Users | OU | User | All | CreateChild, DeleteChild | Allow | BUILTIN\Account Operators | sos\Domain Admins | OU=Lab Users,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild | None | bf967aba-0de6-11d0-a285-00aa003049e2 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | BUILTIN\Account Operators | False | None | None |
| Lab Users | OU | Group | All | CreateChild, DeleteChild | Allow | BUILTIN\Account Operators | sos\Domain Admins | OU=Lab Users,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild | None | bf967a9c-0de6-11d0-a285-00aa003049e2 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | BUILTIN\Account Operators | False | None | None |
| Lab Users | OU | Computer | All | CreateChild, DeleteChild | Allow | BUILTIN\Account Operators | sos\Domain Admins | OU=Lab Users,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild | None | bf967a86-0de6-11d0-a285-00aa003049e2 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | BUILTIN\Account Operators | False | None | None |
| Lab Users | OU | inetOrgPerson | All | CreateChild, DeleteChild | Allow | BUILTIN\Account Operators | sos\Domain Admins | OU=Lab Users,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild | None | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | BUILTIN\Account Operators | False | None | None |
| Lab Users | OU | Print-Queue | All | CreateChild, DeleteChild | Allow | BUILTIN\Print Operators | sos\Domain Admins | OU=Lab Users,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild | None | bf967aa8-0de6-11d0-a285-00aa003049e2 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | BUILTIN\Print Operators | False | None | None |
| Lab Users | OU | User-Account-Restrictions | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Lab Users,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 4c164200-20c0-11d0-a768-00aa006e0529 | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Lab Users | OU | User-Account-Restrictions | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Lab Users,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 4c164200-20c0-11d0-a768-00aa006e0529 | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Lab Users | OU | User-Logon | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Lab Users,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 5f202010-79a5-11d0-9020-00c04fc2d4cf | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Lab Users | OU | User-Logon | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Lab Users,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 5f202010-79a5-11d0-9020-00c04fc2d4cf | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Lab Users | OU | Membership | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Lab Users,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | bc0ac240-79a9-11d0-9020-00c04fc2d4cf | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Lab Users | OU | Membership | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Lab Users,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | bc0ac240-79a9-11d0-9020-00c04fc2d4cf | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Lab Users | OU | General-Information | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Lab Users,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 59ba2f42-79a2-11d0-9020-00c04fc2d3cf | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Lab Users | OU | General-Information | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Lab Users,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 59ba2f42-79a2-11d0-9020-00c04fc2d3cf | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Lab Users | OU | RAS-Information | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Lab Users,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 037088f8-0ae1-11d2-b422-00a0c968f939 | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Lab Users | OU | RAS-Information | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Lab Users,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 037088f8-0ae1-11d2-b422-00a0c968f939 | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Lab Users | OU | All | inetOrgPerson | GenericRead | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Lab Users,DC=sos,DC=labs | sos\Domain Admins | GenericRead | Descendents | 00000000-0000-0000-0000-000000000000 | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Lab Users | OU | All | Group | GenericRead | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Lab Users,DC=sos,DC=labs | sos\Domain Admins | GenericRead | Descendents | 00000000-0000-0000-0000-000000000000 | bf967a9c-0de6-11d0-a285-00aa003049e2 | InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Lab Users | OU | All | User | GenericRead | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Lab Users,DC=sos,DC=labs | sos\Domain Admins | GenericRead | Descendents | 00000000-0000-0000-0000-000000000000 | bf967aba-0de6-11d0-a285-00aa003049e2 | InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Lab Users | OU | ms-DS-Key-Credential-Link | All | ReadProperty, WriteProperty | Allow | sos\Key Admins | sos\Domain Admins | OU=Lab Users,DC=sos,DC=labs | sos\Domain Admins | ReadProperty, WriteProperty | All | 5b47d60f-6090-40b2-9f37-2a4de88f3063 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | sos\Key Admins | True | ContainerInherit | None |
| Lab Users | OU | ms-DS-Key-Credential-Link | All | ReadProperty, WriteProperty | Allow | sos\Enterprise Key Admins | sos\Domain Admins | OU=Lab Users,DC=sos,DC=labs | sos\Domain Admins | ReadProperty, WriteProperty | All | 5b47d60f-6090-40b2-9f37-2a4de88f3063 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | sos\Enterprise Key Admins | True | ContainerInherit | None |
| Lab Users | OU | DS-Validated-Write-Computer | Computer | Self | Allow | CREATOR OWNER | sos\Domain Admins | OU=Lab Users,DC=sos,DC=labs | sos\Domain Admins | Self | Descendents | 9b026da6-0d3c-465c-8bee-5199d7165cba | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | CREATOR OWNER | True | ContainerInherit | InheritOnly |
| Lab Users | OU | DS-Validated-Write-Computer | Computer | Self | Allow | NT AUTHORITY\SELF | sos\Domain Admins | OU=Lab Users,DC=sos,DC=labs | sos\Domain Admins | Self | Descendents | 9b026da6-0d3c-465c-8bee-5199d7165cba | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\SELF | True | ContainerInherit | InheritOnly |
| Lab Users | OU | Token-Groups | Computer | ReadProperty | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | sos\Domain Admins | OU=Lab Users,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | b7c69e6d-2cc7-11d2-854e-00a0c983f608 | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | True | ContainerInherit | InheritOnly |
| Lab Users | OU | Token-Groups | Group | ReadProperty | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | sos\Domain Admins | OU=Lab Users,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | b7c69e6d-2cc7-11d2-854e-00a0c983f608 | bf967a9c-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | True | ContainerInherit | InheritOnly |
| Lab Users | OU | Token-Groups | User | ReadProperty | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | sos\Domain Admins | OU=Lab Users,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | b7c69e6d-2cc7-11d2-854e-00a0c983f608 | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | True | ContainerInherit | InheritOnly |
| Lab Users | OU | ms-TPM-OwnerInformation | Computer | WriteProperty | Allow | NT AUTHORITY\SELF | sos\Domain Admins | OU=Lab Users,DC=sos,DC=labs | sos\Domain Admins | WriteProperty | Descendents | aa4e1a6d-550d-4e05-8c35-4afcb917a9fe | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\SELF | True | ContainerInherit | InheritOnly |
| Lab Users | OU | ms-TPM-Tpm-Information-For-Computer | Computer | WriteProperty | Allow | NT AUTHORITY\SELF | sos\Domain Admins | OU=Lab Users,DC=sos,DC=labs | sos\Domain Admins | WriteProperty | Descendents | ea1b7b93-5e48-46d5-bc6c-4df4fda78a35 | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\SELF | True | ContainerInherit | InheritOnly |
| Lab Users | OU | ms-DS-Allowed-To-Act-On-Behalf-Of-Other-Identity | All | ReadProperty, WriteProperty | Allow | NT AUTHORITY\SELF | sos\Domain Admins | OU=Lab Users,DC=sos,DC=labs | sos\Domain Admins | ReadProperty, WriteProperty | All | 3f78c3e5-f79a-46bd-a0b8-9d18116ddc79 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | NT AUTHORITY\SELF | True | ContainerInherit | None |
| Lab Users | OU | Private-Information | All | ReadProperty, WriteProperty, ExtendedRight | Allow | NT AUTHORITY\SELF | sos\Domain Admins | OU=Lab Users,DC=sos,DC=labs | sos\Domain Admins | ReadProperty, WriteProperty, ExtendedRight | All | 91e647de-d96f-4b70-9557-d63ff4f3ccd8 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | NT AUTHORITY\SELF | True | ContainerInherit | None |
| Lab Users | OU | All | All | GenericAll | Allow | sos\Enterprise Admins | sos\Domain Admins | OU=Lab Users,DC=sos,DC=labs | sos\Domain Admins | GenericAll | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | sos\Enterprise Admins | True | ContainerInherit | None |
| Lab Users | OU | All | All | ListChildren | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Lab Users,DC=sos,DC=labs | sos\Domain Admins | ListChildren | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | None |
| Lab Users | OU | All | All | CreateChild, Self, WriteProperty, ExtendedRight, Delete, GenericRead, WriteDacl, WriteOwner | Allow | BUILTIN\Administrators | sos\Domain Admins | OU=Lab Users,DC=sos,DC=labs | sos\Domain Admins | CreateChild, Self, WriteProperty, ExtendedRight, Delete, GenericRead, WriteDacl, WriteOwner | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | BUILTIN\Administrators | True | ContainerInherit | None |
| Priv Accounts | OU | All | All | DeleteTree, Delete | Deny | Everyone | sos\Domain Admins | OU=Priv Accounts,DC=sos,DC=labs | sos\Domain Admins | DeleteTree, Delete | None | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Deny | Everyone | False | None | None |
| Priv Accounts | OU | All | All | GenericRead | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | sos\Domain Admins | OU=Priv Accounts,DC=sos,DC=labs | sos\Domain Admins | GenericRead | None | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | False | None | None |
| Priv Accounts | OU | All | All | GenericRead | Allow | NT AUTHORITY\Authenticated Users | sos\Domain Admins | OU=Priv Accounts,DC=sos,DC=labs | sos\Domain Admins | GenericRead | None | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | NT AUTHORITY\Authenticated Users | False | None | None |
| Priv Accounts | OU | All | All | GenericAll | Allow | NT AUTHORITY\SYSTEM | sos\Domain Admins | OU=Priv Accounts,DC=sos,DC=labs | sos\Domain Admins | GenericAll | None | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | NT AUTHORITY\SYSTEM | False | None | None |
| Priv Accounts | OU | All | All | GenericAll | Allow | sos\Domain Admins | sos\Domain Admins | OU=Priv Accounts,DC=sos,DC=labs | sos\Domain Admins | GenericAll | None | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | sos\Domain Admins | False | None | None |
| Priv Accounts | OU | User | All | CreateChild, DeleteChild | Allow | BUILTIN\Account Operators | sos\Domain Admins | OU=Priv Accounts,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild | None | bf967aba-0de6-11d0-a285-00aa003049e2 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | BUILTIN\Account Operators | False | None | None |
| Priv Accounts | OU | Group | All | CreateChild, DeleteChild | Allow | BUILTIN\Account Operators | sos\Domain Admins | OU=Priv Accounts,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild | None | bf967a9c-0de6-11d0-a285-00aa003049e2 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | BUILTIN\Account Operators | False | None | None |
| Priv Accounts | OU | Computer | All | CreateChild, DeleteChild | Allow | BUILTIN\Account Operators | sos\Domain Admins | OU=Priv Accounts,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild | None | bf967a86-0de6-11d0-a285-00aa003049e2 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | BUILTIN\Account Operators | False | None | None |
| Priv Accounts | OU | inetOrgPerson | All | CreateChild, DeleteChild | Allow | BUILTIN\Account Operators | sos\Domain Admins | OU=Priv Accounts,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild | None | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | BUILTIN\Account Operators | False | None | None |
| Priv Accounts | OU | Print-Queue | All | CreateChild, DeleteChild | Allow | BUILTIN\Print Operators | sos\Domain Admins | OU=Priv Accounts,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild | None | bf967aa8-0de6-11d0-a285-00aa003049e2 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | BUILTIN\Print Operators | False | None | None |
| Priv Accounts | OU | User-Account-Restrictions | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Priv Accounts,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 4c164200-20c0-11d0-a768-00aa006e0529 | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Priv Accounts | OU | User-Account-Restrictions | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Priv Accounts,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 4c164200-20c0-11d0-a768-00aa006e0529 | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Priv Accounts | OU | User-Logon | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Priv Accounts,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 5f202010-79a5-11d0-9020-00c04fc2d4cf | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Priv Accounts | OU | User-Logon | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Priv Accounts,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 5f202010-79a5-11d0-9020-00c04fc2d4cf | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Priv Accounts | OU | Membership | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Priv Accounts,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | bc0ac240-79a9-11d0-9020-00c04fc2d4cf | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Priv Accounts | OU | Membership | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Priv Accounts,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | bc0ac240-79a9-11d0-9020-00c04fc2d4cf | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Priv Accounts | OU | General-Information | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Priv Accounts,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 59ba2f42-79a2-11d0-9020-00c04fc2d3cf | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Priv Accounts | OU | General-Information | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Priv Accounts,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 59ba2f42-79a2-11d0-9020-00c04fc2d3cf | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Priv Accounts | OU | RAS-Information | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Priv Accounts,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 037088f8-0ae1-11d2-b422-00a0c968f939 | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Priv Accounts | OU | RAS-Information | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Priv Accounts,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 037088f8-0ae1-11d2-b422-00a0c968f939 | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Priv Accounts | OU | All | inetOrgPerson | GenericRead | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Priv Accounts,DC=sos,DC=labs | sos\Domain Admins | GenericRead | Descendents | 00000000-0000-0000-0000-000000000000 | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Priv Accounts | OU | All | Group | GenericRead | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Priv Accounts,DC=sos,DC=labs | sos\Domain Admins | GenericRead | Descendents | 00000000-0000-0000-0000-000000000000 | bf967a9c-0de6-11d0-a285-00aa003049e2 | InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Priv Accounts | OU | All | User | GenericRead | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Priv Accounts,DC=sos,DC=labs | sos\Domain Admins | GenericRead | Descendents | 00000000-0000-0000-0000-000000000000 | bf967aba-0de6-11d0-a285-00aa003049e2 | InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Priv Accounts | OU | ms-DS-Key-Credential-Link | All | ReadProperty, WriteProperty | Allow | sos\Key Admins | sos\Domain Admins | OU=Priv Accounts,DC=sos,DC=labs | sos\Domain Admins | ReadProperty, WriteProperty | All | 5b47d60f-6090-40b2-9f37-2a4de88f3063 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | sos\Key Admins | True | ContainerInherit | None |
| Priv Accounts | OU | ms-DS-Key-Credential-Link | All | ReadProperty, WriteProperty | Allow | sos\Enterprise Key Admins | sos\Domain Admins | OU=Priv Accounts,DC=sos,DC=labs | sos\Domain Admins | ReadProperty, WriteProperty | All | 5b47d60f-6090-40b2-9f37-2a4de88f3063 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | sos\Enterprise Key Admins | True | ContainerInherit | None |
| Priv Accounts | OU | DS-Validated-Write-Computer | Computer | Self | Allow | CREATOR OWNER | sos\Domain Admins | OU=Priv Accounts,DC=sos,DC=labs | sos\Domain Admins | Self | Descendents | 9b026da6-0d3c-465c-8bee-5199d7165cba | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | CREATOR OWNER | True | ContainerInherit | InheritOnly |
| Priv Accounts | OU | DS-Validated-Write-Computer | Computer | Self | Allow | NT AUTHORITY\SELF | sos\Domain Admins | OU=Priv Accounts,DC=sos,DC=labs | sos\Domain Admins | Self | Descendents | 9b026da6-0d3c-465c-8bee-5199d7165cba | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\SELF | True | ContainerInherit | InheritOnly |
| Priv Accounts | OU | Token-Groups | Computer | ReadProperty | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | sos\Domain Admins | OU=Priv Accounts,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | b7c69e6d-2cc7-11d2-854e-00a0c983f608 | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | True | ContainerInherit | InheritOnly |
| Priv Accounts | OU | Token-Groups | Group | ReadProperty | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | sos\Domain Admins | OU=Priv Accounts,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | b7c69e6d-2cc7-11d2-854e-00a0c983f608 | bf967a9c-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | True | ContainerInherit | InheritOnly |
| Priv Accounts | OU | Token-Groups | User | ReadProperty | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | sos\Domain Admins | OU=Priv Accounts,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | b7c69e6d-2cc7-11d2-854e-00a0c983f608 | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | True | ContainerInherit | InheritOnly |
| Priv Accounts | OU | ms-TPM-OwnerInformation | Computer | WriteProperty | Allow | NT AUTHORITY\SELF | sos\Domain Admins | OU=Priv Accounts,DC=sos,DC=labs | sos\Domain Admins | WriteProperty | Descendents | aa4e1a6d-550d-4e05-8c35-4afcb917a9fe | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\SELF | True | ContainerInherit | InheritOnly |
| Priv Accounts | OU | ms-TPM-Tpm-Information-For-Computer | Computer | WriteProperty | Allow | NT AUTHORITY\SELF | sos\Domain Admins | OU=Priv Accounts,DC=sos,DC=labs | sos\Domain Admins | WriteProperty | Descendents | ea1b7b93-5e48-46d5-bc6c-4df4fda78a35 | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\SELF | True | ContainerInherit | InheritOnly |
| Priv Accounts | OU | ms-DS-Allowed-To-Act-On-Behalf-Of-Other-Identity | All | ReadProperty, WriteProperty | Allow | NT AUTHORITY\SELF | sos\Domain Admins | OU=Priv Accounts,DC=sos,DC=labs | sos\Domain Admins | ReadProperty, WriteProperty | All | 3f78c3e5-f79a-46bd-a0b8-9d18116ddc79 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | NT AUTHORITY\SELF | True | ContainerInherit | None |
| Priv Accounts | OU | Private-Information | All | ReadProperty, WriteProperty, ExtendedRight | Allow | NT AUTHORITY\SELF | sos\Domain Admins | OU=Priv Accounts,DC=sos,DC=labs | sos\Domain Admins | ReadProperty, WriteProperty, ExtendedRight | All | 91e647de-d96f-4b70-9557-d63ff4f3ccd8 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | NT AUTHORITY\SELF | True | ContainerInherit | None |
| Priv Accounts | OU | All | All | GenericAll | Allow | sos\Enterprise Admins | sos\Domain Admins | OU=Priv Accounts,DC=sos,DC=labs | sos\Domain Admins | GenericAll | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | sos\Enterprise Admins | True | ContainerInherit | None |
| Priv Accounts | OU | All | All | ListChildren | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Priv Accounts,DC=sos,DC=labs | sos\Domain Admins | ListChildren | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | None |
| Priv Accounts | OU | All | All | CreateChild, Self, WriteProperty, ExtendedRight, Delete, GenericRead, WriteDacl, WriteOwner | Allow | BUILTIN\Administrators | sos\Domain Admins | OU=Priv Accounts,DC=sos,DC=labs | sos\Domain Admins | CreateChild, Self, WriteProperty, ExtendedRight, Delete, GenericRead, WriteDacl, WriteOwner | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | BUILTIN\Administrators | True | ContainerInherit | None |
| Workstations | OU | All | All | DeleteTree, Delete | Deny | Everyone | sos\Domain Admins | OU=Workstations,DC=sos,DC=labs | sos\Domain Admins | DeleteTree, Delete | None | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Deny | Everyone | False | None | None |
| Workstations | OU | All | All | GenericRead | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | sos\Domain Admins | OU=Workstations,DC=sos,DC=labs | sos\Domain Admins | GenericRead | None | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | False | None | None |
| Workstations | OU | All | All | GenericRead | Allow | NT AUTHORITY\Authenticated Users | sos\Domain Admins | OU=Workstations,DC=sos,DC=labs | sos\Domain Admins | GenericRead | None | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | NT AUTHORITY\Authenticated Users | False | None | None |
| Workstations | OU | All | All | GenericAll | Allow | NT AUTHORITY\SYSTEM | sos\Domain Admins | OU=Workstations,DC=sos,DC=labs | sos\Domain Admins | GenericAll | None | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | NT AUTHORITY\SYSTEM | False | None | None |
| Workstations | OU | All | All | GenericAll | Allow | sos\Domain Admins | sos\Domain Admins | OU=Workstations,DC=sos,DC=labs | sos\Domain Admins | GenericAll | None | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | sos\Domain Admins | False | None | None |
| Workstations | OU | ms-Mcs-AdmPwdExpirationTime | Computer | ReadProperty, WriteProperty | Allow | NT AUTHORITY\SELF | sos\Domain Admins | OU=Workstations,DC=sos,DC=labs | sos\Domain Admins | ReadProperty, WriteProperty | Descendents | bb5c77d3-b74a-4a5a-b3a2-f6bae01b66e0 | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\SELF | False | ContainerInherit | InheritOnly |
| Workstations | OU | ms-Mcs-AdmPwd | Computer | WriteProperty | Allow | NT AUTHORITY\SELF | sos\Domain Admins | OU=Workstations,DC=sos,DC=labs | sos\Domain Admins | WriteProperty | Descendents | 651f50e7-11e7-4b20-a9e6-04c33f52e5d8 | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\SELF | False | ContainerInherit | InheritOnly |
| Workstations | OU | User | All | CreateChild, DeleteChild | Allow | BUILTIN\Account Operators | sos\Domain Admins | OU=Workstations,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild | None | bf967aba-0de6-11d0-a285-00aa003049e2 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | BUILTIN\Account Operators | False | None | None |
| Workstations | OU | inetOrgPerson | All | CreateChild, DeleteChild | Allow | BUILTIN\Account Operators | sos\Domain Admins | OU=Workstations,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild | None | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | BUILTIN\Account Operators | False | None | None |
| Workstations | OU | Group | All | CreateChild, DeleteChild | Allow | BUILTIN\Account Operators | sos\Domain Admins | OU=Workstations,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild | None | bf967a9c-0de6-11d0-a285-00aa003049e2 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | BUILTIN\Account Operators | False | None | None |
| Workstations | OU | Computer | All | CreateChild, DeleteChild | Allow | BUILTIN\Account Operators | sos\Domain Admins | OU=Workstations,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild | None | bf967a86-0de6-11d0-a285-00aa003049e2 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | BUILTIN\Account Operators | False | None | None |
| Workstations | OU | Print-Queue | All | CreateChild, DeleteChild | Allow | BUILTIN\Print Operators | sos\Domain Admins | OU=Workstations,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild | None | bf967aa8-0de6-11d0-a285-00aa003049e2 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | BUILTIN\Print Operators | False | None | None |
| Workstations | OU | User-Account-Restrictions | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Workstations,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 4c164200-20c0-11d0-a768-00aa006e0529 | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Workstations | OU | User-Account-Restrictions | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Workstations,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 4c164200-20c0-11d0-a768-00aa006e0529 | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Workstations | OU | User-Logon | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Workstations,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 5f202010-79a5-11d0-9020-00c04fc2d4cf | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Workstations | OU | User-Logon | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Workstations,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 5f202010-79a5-11d0-9020-00c04fc2d4cf | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Workstations | OU | Membership | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Workstations,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | bc0ac240-79a9-11d0-9020-00c04fc2d4cf | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Workstations | OU | Membership | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Workstations,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | bc0ac240-79a9-11d0-9020-00c04fc2d4cf | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Workstations | OU | General-Information | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Workstations,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 59ba2f42-79a2-11d0-9020-00c04fc2d3cf | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Workstations | OU | General-Information | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Workstations,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 59ba2f42-79a2-11d0-9020-00c04fc2d3cf | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Workstations | OU | RAS-Information | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Workstations,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 037088f8-0ae1-11d2-b422-00a0c968f939 | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Workstations | OU | RAS-Information | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Workstations,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 037088f8-0ae1-11d2-b422-00a0c968f939 | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Workstations | OU | All | inetOrgPerson | GenericRead | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Workstations,DC=sos,DC=labs | sos\Domain Admins | GenericRead | Descendents | 00000000-0000-0000-0000-000000000000 | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Workstations | OU | All | Group | GenericRead | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Workstations,DC=sos,DC=labs | sos\Domain Admins | GenericRead | Descendents | 00000000-0000-0000-0000-000000000000 | bf967a9c-0de6-11d0-a285-00aa003049e2 | InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Workstations | OU | All | User | GenericRead | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Workstations,DC=sos,DC=labs | sos\Domain Admins | GenericRead | Descendents | 00000000-0000-0000-0000-000000000000 | bf967aba-0de6-11d0-a285-00aa003049e2 | InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Workstations | OU | ms-DS-Key-Credential-Link | All | ReadProperty, WriteProperty | Allow | sos\Key Admins | sos\Domain Admins | OU=Workstations,DC=sos,DC=labs | sos\Domain Admins | ReadProperty, WriteProperty | All | 5b47d60f-6090-40b2-9f37-2a4de88f3063 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | sos\Key Admins | True | ContainerInherit | None |
| Workstations | OU | ms-DS-Key-Credential-Link | All | ReadProperty, WriteProperty | Allow | sos\Enterprise Key Admins | sos\Domain Admins | OU=Workstations,DC=sos,DC=labs | sos\Domain Admins | ReadProperty, WriteProperty | All | 5b47d60f-6090-40b2-9f37-2a4de88f3063 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | sos\Enterprise Key Admins | True | ContainerInherit | None |
| Workstations | OU | DS-Validated-Write-Computer | Computer | Self | Allow | CREATOR OWNER | sos\Domain Admins | OU=Workstations,DC=sos,DC=labs | sos\Domain Admins | Self | Descendents | 9b026da6-0d3c-465c-8bee-5199d7165cba | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | CREATOR OWNER | True | ContainerInherit | InheritOnly |
| Workstations | OU | DS-Validated-Write-Computer | Computer | Self | Allow | NT AUTHORITY\SELF | sos\Domain Admins | OU=Workstations,DC=sos,DC=labs | sos\Domain Admins | Self | Descendents | 9b026da6-0d3c-465c-8bee-5199d7165cba | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\SELF | True | ContainerInherit | InheritOnly |
| Workstations | OU | Token-Groups | Computer | ReadProperty | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | sos\Domain Admins | OU=Workstations,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | b7c69e6d-2cc7-11d2-854e-00a0c983f608 | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | True | ContainerInherit | InheritOnly |
| Workstations | OU | Token-Groups | Group | ReadProperty | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | sos\Domain Admins | OU=Workstations,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | b7c69e6d-2cc7-11d2-854e-00a0c983f608 | bf967a9c-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | True | ContainerInherit | InheritOnly |
| Workstations | OU | Token-Groups | User | ReadProperty | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | sos\Domain Admins | OU=Workstations,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | b7c69e6d-2cc7-11d2-854e-00a0c983f608 | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | True | ContainerInherit | InheritOnly |
| Workstations | OU | ms-TPM-OwnerInformation | Computer | WriteProperty | Allow | NT AUTHORITY\SELF | sos\Domain Admins | OU=Workstations,DC=sos,DC=labs | sos\Domain Admins | WriteProperty | Descendents | aa4e1a6d-550d-4e05-8c35-4afcb917a9fe | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\SELF | True | ContainerInherit | InheritOnly |
| Workstations | OU | ms-TPM-Tpm-Information-For-Computer | Computer | WriteProperty | Allow | NT AUTHORITY\SELF | sos\Domain Admins | OU=Workstations,DC=sos,DC=labs | sos\Domain Admins | WriteProperty | Descendents | ea1b7b93-5e48-46d5-bc6c-4df4fda78a35 | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\SELF | True | ContainerInherit | InheritOnly |
| Workstations | OU | ms-DS-Allowed-To-Act-On-Behalf-Of-Other-Identity | All | ReadProperty, WriteProperty | Allow | NT AUTHORITY\SELF | sos\Domain Admins | OU=Workstations,DC=sos,DC=labs | sos\Domain Admins | ReadProperty, WriteProperty | All | 3f78c3e5-f79a-46bd-a0b8-9d18116ddc79 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | NT AUTHORITY\SELF | True | ContainerInherit | None |
| Workstations | OU | Private-Information | All | ReadProperty, WriteProperty, ExtendedRight | Allow | NT AUTHORITY\SELF | sos\Domain Admins | OU=Workstations,DC=sos,DC=labs | sos\Domain Admins | ReadProperty, WriteProperty, ExtendedRight | All | 91e647de-d96f-4b70-9557-d63ff4f3ccd8 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | NT AUTHORITY\SELF | True | ContainerInherit | None |
| Workstations | OU | All | All | GenericAll | Allow | sos\Enterprise Admins | sos\Domain Admins | OU=Workstations,DC=sos,DC=labs | sos\Domain Admins | GenericAll | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | sos\Enterprise Admins | True | ContainerInherit | None |
| Workstations | OU | All | All | ListChildren | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | OU=Workstations,DC=sos,DC=labs | sos\Domain Admins | ListChildren | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | None |
| Workstations | OU | All | All | CreateChild, Self, WriteProperty, ExtendedRight, Delete, GenericRead, WriteDacl, WriteOwner | Allow | BUILTIN\Administrators | sos\Domain Admins | OU=Workstations,DC=sos,DC=labs | sos\Domain Admins | CreateChild, Self, WriteProperty, ExtendedRight, Delete, GenericRead, WriteDacl, WriteOwner | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | BUILTIN\Administrators | True | ContainerInherit | None |
| Computers | Container | All | All | GenericRead | Allow | NT AUTHORITY\Authenticated Users | sos\Domain Admins | CN=Computers,DC=sos,DC=labs | sos\Domain Admins | GenericRead | None | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | NT AUTHORITY\Authenticated Users | False | None | None |
| Computers | Container | All | All | GenericAll | Allow | NT AUTHORITY\SYSTEM | sos\Domain Admins | CN=Computers,DC=sos,DC=labs | sos\Domain Admins | GenericAll | None | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | NT AUTHORITY\SYSTEM | False | None | None |
| Computers | Container | All | All | CreateChild, DeleteChild, Self, WriteProperty, ExtendedRight, GenericRead, WriteDacl, WriteOwner | Allow | sos\Domain Admins | sos\Domain Admins | CN=Computers,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild, Self, WriteProperty, ExtendedRight, GenericRead, WriteDacl, WriteOwner | None | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | sos\Domain Admins | False | None | None |
| Computers | Container | User | All | CreateChild, DeleteChild | Allow | BUILTIN\Account Operators | sos\Domain Admins | CN=Computers,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild | None | bf967aba-0de6-11d0-a285-00aa003049e2 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | BUILTIN\Account Operators | False | None | None |
| Computers | Container | Group | All | CreateChild, DeleteChild | Allow | BUILTIN\Account Operators | sos\Domain Admins | CN=Computers,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild | None | bf967a9c-0de6-11d0-a285-00aa003049e2 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | BUILTIN\Account Operators | False | None | None |
| Computers | Container | Computer | All | CreateChild, DeleteChild | Allow | BUILTIN\Account Operators | sos\Domain Admins | CN=Computers,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild | None | bf967a86-0de6-11d0-a285-00aa003049e2 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | BUILTIN\Account Operators | False | None | None |
| Computers | Container | inetOrgPerson | All | CreateChild, DeleteChild | Allow | BUILTIN\Account Operators | sos\Domain Admins | CN=Computers,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild | None | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | BUILTIN\Account Operators | False | None | None |
| Computers | Container | Print-Queue | All | CreateChild, DeleteChild | Allow | BUILTIN\Print Operators | sos\Domain Admins | CN=Computers,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild | None | bf967aa8-0de6-11d0-a285-00aa003049e2 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | BUILTIN\Print Operators | False | None | None |
| Computers | Container | User-Account-Restrictions | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Computers,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 4c164200-20c0-11d0-a768-00aa006e0529 | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Computers | Container | User-Account-Restrictions | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Computers,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 4c164200-20c0-11d0-a768-00aa006e0529 | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Computers | Container | User-Logon | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Computers,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 5f202010-79a5-11d0-9020-00c04fc2d4cf | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Computers | Container | User-Logon | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Computers,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 5f202010-79a5-11d0-9020-00c04fc2d4cf | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Computers | Container | Membership | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Computers,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | bc0ac240-79a9-11d0-9020-00c04fc2d4cf | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Computers | Container | Membership | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Computers,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | bc0ac240-79a9-11d0-9020-00c04fc2d4cf | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Computers | Container | General-Information | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Computers,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 59ba2f42-79a2-11d0-9020-00c04fc2d3cf | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Computers | Container | General-Information | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Computers,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 59ba2f42-79a2-11d0-9020-00c04fc2d3cf | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Computers | Container | RAS-Information | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Computers,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 037088f8-0ae1-11d2-b422-00a0c968f939 | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Computers | Container | RAS-Information | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Computers,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 037088f8-0ae1-11d2-b422-00a0c968f939 | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Computers | Container | All | inetOrgPerson | GenericRead | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Computers,DC=sos,DC=labs | sos\Domain Admins | GenericRead | Descendents | 00000000-0000-0000-0000-000000000000 | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Computers | Container | All | Group | GenericRead | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Computers,DC=sos,DC=labs | sos\Domain Admins | GenericRead | Descendents | 00000000-0000-0000-0000-000000000000 | bf967a9c-0de6-11d0-a285-00aa003049e2 | InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Computers | Container | All | User | GenericRead | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Computers,DC=sos,DC=labs | sos\Domain Admins | GenericRead | Descendents | 00000000-0000-0000-0000-000000000000 | bf967aba-0de6-11d0-a285-00aa003049e2 | InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Computers | Container | ms-DS-Key-Credential-Link | All | ReadProperty, WriteProperty | Allow | sos\Key Admins | sos\Domain Admins | CN=Computers,DC=sos,DC=labs | sos\Domain Admins | ReadProperty, WriteProperty | All | 5b47d60f-6090-40b2-9f37-2a4de88f3063 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | sos\Key Admins | True | ContainerInherit | None |
| Computers | Container | ms-DS-Key-Credential-Link | All | ReadProperty, WriteProperty | Allow | sos\Enterprise Key Admins | sos\Domain Admins | CN=Computers,DC=sos,DC=labs | sos\Domain Admins | ReadProperty, WriteProperty | All | 5b47d60f-6090-40b2-9f37-2a4de88f3063 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | sos\Enterprise Key Admins | True | ContainerInherit | None |
| Computers | Container | DS-Validated-Write-Computer | Computer | Self | Allow | CREATOR OWNER | sos\Domain Admins | CN=Computers,DC=sos,DC=labs | sos\Domain Admins | Self | Descendents | 9b026da6-0d3c-465c-8bee-5199d7165cba | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | CREATOR OWNER | True | ContainerInherit | InheritOnly |
| Computers | Container | DS-Validated-Write-Computer | Computer | Self | Allow | NT AUTHORITY\SELF | sos\Domain Admins | CN=Computers,DC=sos,DC=labs | sos\Domain Admins | Self | Descendents | 9b026da6-0d3c-465c-8bee-5199d7165cba | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\SELF | True | ContainerInherit | InheritOnly |
| Computers | Container | Token-Groups | Computer | ReadProperty | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | sos\Domain Admins | CN=Computers,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | b7c69e6d-2cc7-11d2-854e-00a0c983f608 | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | True | ContainerInherit | InheritOnly |
| Computers | Container | Token-Groups | Group | ReadProperty | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | sos\Domain Admins | CN=Computers,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | b7c69e6d-2cc7-11d2-854e-00a0c983f608 | bf967a9c-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | True | ContainerInherit | InheritOnly |
| Computers | Container | Token-Groups | User | ReadProperty | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | sos\Domain Admins | CN=Computers,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | b7c69e6d-2cc7-11d2-854e-00a0c983f608 | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | True | ContainerInherit | InheritOnly |
| Computers | Container | ms-TPM-OwnerInformation | Computer | WriteProperty | Allow | NT AUTHORITY\SELF | sos\Domain Admins | CN=Computers,DC=sos,DC=labs | sos\Domain Admins | WriteProperty | Descendents | aa4e1a6d-550d-4e05-8c35-4afcb917a9fe | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\SELF | True | ContainerInherit | InheritOnly |
| Computers | Container | ms-TPM-Tpm-Information-For-Computer | Computer | WriteProperty | Allow | NT AUTHORITY\SELF | sos\Domain Admins | CN=Computers,DC=sos,DC=labs | sos\Domain Admins | WriteProperty | Descendents | ea1b7b93-5e48-46d5-bc6c-4df4fda78a35 | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\SELF | True | ContainerInherit | InheritOnly |
| Computers | Container | ms-DS-Allowed-To-Act-On-Behalf-Of-Other-Identity | All | ReadProperty, WriteProperty | Allow | NT AUTHORITY\SELF | sos\Domain Admins | CN=Computers,DC=sos,DC=labs | sos\Domain Admins | ReadProperty, WriteProperty | All | 3f78c3e5-f79a-46bd-a0b8-9d18116ddc79 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | NT AUTHORITY\SELF | True | ContainerInherit | None |
| Computers | Container | Private-Information | All | ReadProperty, WriteProperty, ExtendedRight | Allow | NT AUTHORITY\SELF | sos\Domain Admins | CN=Computers,DC=sos,DC=labs | sos\Domain Admins | ReadProperty, WriteProperty, ExtendedRight | All | 91e647de-d96f-4b70-9557-d63ff4f3ccd8 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | NT AUTHORITY\SELF | True | ContainerInherit | None |
| Computers | Container | All | All | GenericAll | Allow | sos\Enterprise Admins | sos\Domain Admins | CN=Computers,DC=sos,DC=labs | sos\Domain Admins | GenericAll | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | sos\Enterprise Admins | True | ContainerInherit | None |
| Computers | Container | All | All | ListChildren | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Computers,DC=sos,DC=labs | sos\Domain Admins | ListChildren | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | None |
| Computers | Container | All | All | CreateChild, Self, WriteProperty, ExtendedRight, Delete, GenericRead, WriteDacl, WriteOwner | Allow | BUILTIN\Administrators | sos\Domain Admins | CN=Computers,DC=sos,DC=labs | sos\Domain Admins | CreateChild, Self, WriteProperty, ExtendedRight, Delete, GenericRead, WriteDacl, WriteOwner | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | BUILTIN\Administrators | True | ContainerInherit | None |
| ForeignSecurityPrincipals | Container | All | All | GenericRead | Allow | NT AUTHORITY\Authenticated Users | sos\Domain Admins | CN=ForeignSecurityPrincipals,DC=sos,DC=labs | sos\Domain Admins | GenericRead | None | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | NT AUTHORITY\Authenticated Users | False | None | None |
| ForeignSecurityPrincipals | Container | All | All | GenericAll | Allow | NT AUTHORITY\SYSTEM | sos\Domain Admins | CN=ForeignSecurityPrincipals,DC=sos,DC=labs | sos\Domain Admins | GenericAll | None | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | NT AUTHORITY\SYSTEM | False | None | None |
| ForeignSecurityPrincipals | Container | All | All | GenericAll | Allow | sos\Domain Admins | sos\Domain Admins | CN=ForeignSecurityPrincipals,DC=sos,DC=labs | sos\Domain Admins | GenericAll | None | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | sos\Domain Admins | False | None | None |
| ForeignSecurityPrincipals | Container | User-Account-Restrictions | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=ForeignSecurityPrincipals,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 4c164200-20c0-11d0-a768-00aa006e0529 | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| ForeignSecurityPrincipals | Container | User-Account-Restrictions | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=ForeignSecurityPrincipals,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 4c164200-20c0-11d0-a768-00aa006e0529 | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| ForeignSecurityPrincipals | Container | User-Logon | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=ForeignSecurityPrincipals,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 5f202010-79a5-11d0-9020-00c04fc2d4cf | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| ForeignSecurityPrincipals | Container | User-Logon | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=ForeignSecurityPrincipals,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 5f202010-79a5-11d0-9020-00c04fc2d4cf | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| ForeignSecurityPrincipals | Container | Membership | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=ForeignSecurityPrincipals,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | bc0ac240-79a9-11d0-9020-00c04fc2d4cf | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| ForeignSecurityPrincipals | Container | Membership | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=ForeignSecurityPrincipals,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | bc0ac240-79a9-11d0-9020-00c04fc2d4cf | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| ForeignSecurityPrincipals | Container | General-Information | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=ForeignSecurityPrincipals,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 59ba2f42-79a2-11d0-9020-00c04fc2d3cf | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| ForeignSecurityPrincipals | Container | General-Information | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=ForeignSecurityPrincipals,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 59ba2f42-79a2-11d0-9020-00c04fc2d3cf | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| ForeignSecurityPrincipals | Container | RAS-Information | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=ForeignSecurityPrincipals,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 037088f8-0ae1-11d2-b422-00a0c968f939 | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| ForeignSecurityPrincipals | Container | RAS-Information | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=ForeignSecurityPrincipals,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 037088f8-0ae1-11d2-b422-00a0c968f939 | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| ForeignSecurityPrincipals | Container | All | inetOrgPerson | GenericRead | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=ForeignSecurityPrincipals,DC=sos,DC=labs | sos\Domain Admins | GenericRead | Descendents | 00000000-0000-0000-0000-000000000000 | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| ForeignSecurityPrincipals | Container | All | Group | GenericRead | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=ForeignSecurityPrincipals,DC=sos,DC=labs | sos\Domain Admins | GenericRead | Descendents | 00000000-0000-0000-0000-000000000000 | bf967a9c-0de6-11d0-a285-00aa003049e2 | InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| ForeignSecurityPrincipals | Container | All | User | GenericRead | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=ForeignSecurityPrincipals,DC=sos,DC=labs | sos\Domain Admins | GenericRead | Descendents | 00000000-0000-0000-0000-000000000000 | bf967aba-0de6-11d0-a285-00aa003049e2 | InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| ForeignSecurityPrincipals | Container | ms-DS-Key-Credential-Link | All | ReadProperty, WriteProperty | Allow | sos\Key Admins | sos\Domain Admins | CN=ForeignSecurityPrincipals,DC=sos,DC=labs | sos\Domain Admins | ReadProperty, WriteProperty | All | 5b47d60f-6090-40b2-9f37-2a4de88f3063 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | sos\Key Admins | True | ContainerInherit | None |
| ForeignSecurityPrincipals | Container | ms-DS-Key-Credential-Link | All | ReadProperty, WriteProperty | Allow | sos\Enterprise Key Admins | sos\Domain Admins | CN=ForeignSecurityPrincipals,DC=sos,DC=labs | sos\Domain Admins | ReadProperty, WriteProperty | All | 5b47d60f-6090-40b2-9f37-2a4de88f3063 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | sos\Enterprise Key Admins | True | ContainerInherit | None |
| ForeignSecurityPrincipals | Container | DS-Validated-Write-Computer | Computer | Self | Allow | CREATOR OWNER | sos\Domain Admins | CN=ForeignSecurityPrincipals,DC=sos,DC=labs | sos\Domain Admins | Self | Descendents | 9b026da6-0d3c-465c-8bee-5199d7165cba | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | CREATOR OWNER | True | ContainerInherit | InheritOnly |
| ForeignSecurityPrincipals | Container | DS-Validated-Write-Computer | Computer | Self | Allow | NT AUTHORITY\SELF | sos\Domain Admins | CN=ForeignSecurityPrincipals,DC=sos,DC=labs | sos\Domain Admins | Self | Descendents | 9b026da6-0d3c-465c-8bee-5199d7165cba | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\SELF | True | ContainerInherit | InheritOnly |
| ForeignSecurityPrincipals | Container | Token-Groups | Computer | ReadProperty | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | sos\Domain Admins | CN=ForeignSecurityPrincipals,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | b7c69e6d-2cc7-11d2-854e-00a0c983f608 | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | True | ContainerInherit | InheritOnly |
| ForeignSecurityPrincipals | Container | Token-Groups | Group | ReadProperty | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | sos\Domain Admins | CN=ForeignSecurityPrincipals,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | b7c69e6d-2cc7-11d2-854e-00a0c983f608 | bf967a9c-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | True | ContainerInherit | InheritOnly |
| ForeignSecurityPrincipals | Container | Token-Groups | User | ReadProperty | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | sos\Domain Admins | CN=ForeignSecurityPrincipals,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | b7c69e6d-2cc7-11d2-854e-00a0c983f608 | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | True | ContainerInherit | InheritOnly |
| ForeignSecurityPrincipals | Container | ms-TPM-OwnerInformation | Computer | WriteProperty | Allow | NT AUTHORITY\SELF | sos\Domain Admins | CN=ForeignSecurityPrincipals,DC=sos,DC=labs | sos\Domain Admins | WriteProperty | Descendents | aa4e1a6d-550d-4e05-8c35-4afcb917a9fe | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\SELF | True | ContainerInherit | InheritOnly |
| ForeignSecurityPrincipals | Container | ms-TPM-Tpm-Information-For-Computer | Computer | WriteProperty | Allow | NT AUTHORITY\SELF | sos\Domain Admins | CN=ForeignSecurityPrincipals,DC=sos,DC=labs | sos\Domain Admins | WriteProperty | Descendents | ea1b7b93-5e48-46d5-bc6c-4df4fda78a35 | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\SELF | True | ContainerInherit | InheritOnly |
| ForeignSecurityPrincipals | Container | ms-DS-Allowed-To-Act-On-Behalf-Of-Other-Identity | All | ReadProperty, WriteProperty | Allow | NT AUTHORITY\SELF | sos\Domain Admins | CN=ForeignSecurityPrincipals,DC=sos,DC=labs | sos\Domain Admins | ReadProperty, WriteProperty | All | 3f78c3e5-f79a-46bd-a0b8-9d18116ddc79 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | NT AUTHORITY\SELF | True | ContainerInherit | None |
| ForeignSecurityPrincipals | Container | Private-Information | All | ReadProperty, WriteProperty, ExtendedRight | Allow | NT AUTHORITY\SELF | sos\Domain Admins | CN=ForeignSecurityPrincipals,DC=sos,DC=labs | sos\Domain Admins | ReadProperty, WriteProperty, ExtendedRight | All | 91e647de-d96f-4b70-9557-d63ff4f3ccd8 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | NT AUTHORITY\SELF | True | ContainerInherit | None |
| ForeignSecurityPrincipals | Container | All | All | GenericAll | Allow | sos\Enterprise Admins | sos\Domain Admins | CN=ForeignSecurityPrincipals,DC=sos,DC=labs | sos\Domain Admins | GenericAll | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | sos\Enterprise Admins | True | ContainerInherit | None |
| ForeignSecurityPrincipals | Container | All | All | ListChildren | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=ForeignSecurityPrincipals,DC=sos,DC=labs | sos\Domain Admins | ListChildren | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | None |
| ForeignSecurityPrincipals | Container | All | All | CreateChild, Self, WriteProperty, ExtendedRight, Delete, GenericRead, WriteDacl, WriteOwner | Allow | BUILTIN\Administrators | sos\Domain Admins | CN=ForeignSecurityPrincipals,DC=sos,DC=labs | sos\Domain Admins | CreateChild, Self, WriteProperty, ExtendedRight, Delete, GenericRead, WriteDacl, WriteOwner | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | BUILTIN\Administrators | True | ContainerInherit | None |
| Keys | Container | All | All | GenericAll | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | sos\Domain Admins | CN=Keys,DC=sos,DC=labs | sos\Domain Admins | GenericAll | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | False | ContainerInherit | None |
| Keys | Container | All | All | GenericAll | Allow | NT AUTHORITY\SYSTEM | sos\Domain Admins | CN=Keys,DC=sos,DC=labs | sos\Domain Admins | GenericAll | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | NT AUTHORITY\SYSTEM | False | ContainerInherit | None |
| Keys | Container | All | All | GenericAll | Allow | sos\Domain Admins | sos\Domain Admins | CN=Keys,DC=sos,DC=labs | sos\Domain Admins | GenericAll | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | sos\Domain Admins | False | ContainerInherit | None |
| Keys | Container | All | All | GenericAll | Allow | sos\Domain Controllers | sos\Domain Admins | CN=Keys,DC=sos,DC=labs | sos\Domain Admins | GenericAll | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | sos\Domain Controllers | False | ContainerInherit | None |
| Keys | Container | All | All | GenericAll | Allow | sos\Enterprise Admins | sos\Domain Admins | CN=Keys,DC=sos,DC=labs | sos\Domain Admins | GenericAll | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | sos\Enterprise Admins | False | ContainerInherit | None |
| Keys | Container | All | All | GenericAll | Allow | sos\Key Admins | sos\Domain Admins | CN=Keys,DC=sos,DC=labs | sos\Domain Admins | GenericAll | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | sos\Key Admins | False | ContainerInherit | None |
| Keys | Container | All | All | GenericAll | Allow | sos\Enterprise Key Admins | sos\Domain Admins | CN=Keys,DC=sos,DC=labs | sos\Domain Admins | GenericAll | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | sos\Enterprise Key Admins | False | ContainerInherit | None |
| Managed Service Accounts | Container | All | All | GenericRead | Allow | NT AUTHORITY\Authenticated Users | sos\Domain Admins | CN=Managed Service Accounts,DC=sos,DC=labs | sos\Domain Admins | GenericRead | None | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | NT AUTHORITY\Authenticated Users | False | None | None |
| Managed Service Accounts | Container | All | All | GenericAll | Allow | NT AUTHORITY\SYSTEM | sos\Domain Admins | CN=Managed Service Accounts,DC=sos,DC=labs | sos\Domain Admins | GenericAll | None | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | NT AUTHORITY\SYSTEM | False | None | None |
| Managed Service Accounts | Container | All | All | CreateChild, DeleteChild, Self, WriteProperty, ExtendedRight, GenericRead, WriteDacl, WriteOwner | Allow | sos\Domain Admins | sos\Domain Admins | CN=Managed Service Accounts,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild, Self, WriteProperty, ExtendedRight, GenericRead, WriteDacl, WriteOwner | None | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | sos\Domain Admins | False | None | None |
| Managed Service Accounts | Container | User | All | CreateChild, DeleteChild | Allow | BUILTIN\Account Operators | sos\Domain Admins | CN=Managed Service Accounts,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild | None | bf967aba-0de6-11d0-a285-00aa003049e2 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | BUILTIN\Account Operators | False | None | None |
| Managed Service Accounts | Container | Group | All | CreateChild, DeleteChild | Allow | BUILTIN\Account Operators | sos\Domain Admins | CN=Managed Service Accounts,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild | None | bf967a9c-0de6-11d0-a285-00aa003049e2 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | BUILTIN\Account Operators | False | None | None |
| Managed Service Accounts | Container | ms-DS-Managed-Service-Account | All | CreateChild, DeleteChild | Allow | BUILTIN\Account Operators | sos\Domain Admins | CN=Managed Service Accounts,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild | None | ce206244-5827-4a86-ba1c-1c0c386c1b64 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | BUILTIN\Account Operators | False | None | None |
| Managed Service Accounts | Container | User-Account-Restrictions | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Managed Service Accounts,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 4c164200-20c0-11d0-a768-00aa006e0529 | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Managed Service Accounts | Container | User-Account-Restrictions | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Managed Service Accounts,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 4c164200-20c0-11d0-a768-00aa006e0529 | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Managed Service Accounts | Container | User-Logon | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Managed Service Accounts,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 5f202010-79a5-11d0-9020-00c04fc2d4cf | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Managed Service Accounts | Container | User-Logon | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Managed Service Accounts,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 5f202010-79a5-11d0-9020-00c04fc2d4cf | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Managed Service Accounts | Container | Membership | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Managed Service Accounts,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | bc0ac240-79a9-11d0-9020-00c04fc2d4cf | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Managed Service Accounts | Container | Membership | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Managed Service Accounts,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | bc0ac240-79a9-11d0-9020-00c04fc2d4cf | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Managed Service Accounts | Container | General-Information | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Managed Service Accounts,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 59ba2f42-79a2-11d0-9020-00c04fc2d3cf | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Managed Service Accounts | Container | General-Information | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Managed Service Accounts,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 59ba2f42-79a2-11d0-9020-00c04fc2d3cf | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Managed Service Accounts | Container | RAS-Information | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Managed Service Accounts,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 037088f8-0ae1-11d2-b422-00a0c968f939 | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Managed Service Accounts | Container | RAS-Information | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Managed Service Accounts,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 037088f8-0ae1-11d2-b422-00a0c968f939 | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Managed Service Accounts | Container | All | inetOrgPerson | GenericRead | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Managed Service Accounts,DC=sos,DC=labs | sos\Domain Admins | GenericRead | Descendents | 00000000-0000-0000-0000-000000000000 | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Managed Service Accounts | Container | All | Group | GenericRead | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Managed Service Accounts,DC=sos,DC=labs | sos\Domain Admins | GenericRead | Descendents | 00000000-0000-0000-0000-000000000000 | bf967a9c-0de6-11d0-a285-00aa003049e2 | InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Managed Service Accounts | Container | All | User | GenericRead | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Managed Service Accounts,DC=sos,DC=labs | sos\Domain Admins | GenericRead | Descendents | 00000000-0000-0000-0000-000000000000 | bf967aba-0de6-11d0-a285-00aa003049e2 | InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Managed Service Accounts | Container | ms-DS-Key-Credential-Link | All | ReadProperty, WriteProperty | Allow | sos\Key Admins | sos\Domain Admins | CN=Managed Service Accounts,DC=sos,DC=labs | sos\Domain Admins | ReadProperty, WriteProperty | All | 5b47d60f-6090-40b2-9f37-2a4de88f3063 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | sos\Key Admins | True | ContainerInherit | None |
| Managed Service Accounts | Container | ms-DS-Key-Credential-Link | All | ReadProperty, WriteProperty | Allow | sos\Enterprise Key Admins | sos\Domain Admins | CN=Managed Service Accounts,DC=sos,DC=labs | sos\Domain Admins | ReadProperty, WriteProperty | All | 5b47d60f-6090-40b2-9f37-2a4de88f3063 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | sos\Enterprise Key Admins | True | ContainerInherit | None |
| Managed Service Accounts | Container | DS-Validated-Write-Computer | Computer | Self | Allow | CREATOR OWNER | sos\Domain Admins | CN=Managed Service Accounts,DC=sos,DC=labs | sos\Domain Admins | Self | Descendents | 9b026da6-0d3c-465c-8bee-5199d7165cba | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | CREATOR OWNER | True | ContainerInherit | InheritOnly |
| Managed Service Accounts | Container | DS-Validated-Write-Computer | Computer | Self | Allow | NT AUTHORITY\SELF | sos\Domain Admins | CN=Managed Service Accounts,DC=sos,DC=labs | sos\Domain Admins | Self | Descendents | 9b026da6-0d3c-465c-8bee-5199d7165cba | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\SELF | True | ContainerInherit | InheritOnly |
| Managed Service Accounts | Container | Token-Groups | Computer | ReadProperty | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | sos\Domain Admins | CN=Managed Service Accounts,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | b7c69e6d-2cc7-11d2-854e-00a0c983f608 | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | True | ContainerInherit | InheritOnly |
| Managed Service Accounts | Container | Token-Groups | Group | ReadProperty | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | sos\Domain Admins | CN=Managed Service Accounts,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | b7c69e6d-2cc7-11d2-854e-00a0c983f608 | bf967a9c-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | True | ContainerInherit | InheritOnly |
| Managed Service Accounts | Container | Token-Groups | User | ReadProperty | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | sos\Domain Admins | CN=Managed Service Accounts,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | b7c69e6d-2cc7-11d2-854e-00a0c983f608 | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | True | ContainerInherit | InheritOnly |
| Managed Service Accounts | Container | ms-TPM-OwnerInformation | Computer | WriteProperty | Allow | NT AUTHORITY\SELF | sos\Domain Admins | CN=Managed Service Accounts,DC=sos,DC=labs | sos\Domain Admins | WriteProperty | Descendents | aa4e1a6d-550d-4e05-8c35-4afcb917a9fe | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\SELF | True | ContainerInherit | InheritOnly |
| Managed Service Accounts | Container | ms-TPM-Tpm-Information-For-Computer | Computer | WriteProperty | Allow | NT AUTHORITY\SELF | sos\Domain Admins | CN=Managed Service Accounts,DC=sos,DC=labs | sos\Domain Admins | WriteProperty | Descendents | ea1b7b93-5e48-46d5-bc6c-4df4fda78a35 | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\SELF | True | ContainerInherit | InheritOnly |
| Managed Service Accounts | Container | ms-DS-Allowed-To-Act-On-Behalf-Of-Other-Identity | All | ReadProperty, WriteProperty | Allow | NT AUTHORITY\SELF | sos\Domain Admins | CN=Managed Service Accounts,DC=sos,DC=labs | sos\Domain Admins | ReadProperty, WriteProperty | All | 3f78c3e5-f79a-46bd-a0b8-9d18116ddc79 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | NT AUTHORITY\SELF | True | ContainerInherit | None |
| Managed Service Accounts | Container | Private-Information | All | ReadProperty, WriteProperty, ExtendedRight | Allow | NT AUTHORITY\SELF | sos\Domain Admins | CN=Managed Service Accounts,DC=sos,DC=labs | sos\Domain Admins | ReadProperty, WriteProperty, ExtendedRight | All | 91e647de-d96f-4b70-9557-d63ff4f3ccd8 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | NT AUTHORITY\SELF | True | ContainerInherit | None |
| Managed Service Accounts | Container | All | All | GenericAll | Allow | sos\Enterprise Admins | sos\Domain Admins | CN=Managed Service Accounts,DC=sos,DC=labs | sos\Domain Admins | GenericAll | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | sos\Enterprise Admins | True | ContainerInherit | None |
| Managed Service Accounts | Container | All | All | ListChildren | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Managed Service Accounts,DC=sos,DC=labs | sos\Domain Admins | ListChildren | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | None |
| Managed Service Accounts | Container | All | All | CreateChild, Self, WriteProperty, ExtendedRight, Delete, GenericRead, WriteDacl, WriteOwner | Allow | BUILTIN\Administrators | sos\Domain Admins | CN=Managed Service Accounts,DC=sos,DC=labs | sos\Domain Admins | CreateChild, Self, WriteProperty, ExtendedRight, Delete, GenericRead, WriteDacl, WriteOwner | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | BUILTIN\Administrators | True | ContainerInherit | None |
| Program Data | Container | All | All | GenericRead | Allow | NT AUTHORITY\Authenticated Users | sos\Domain Admins | CN=Program Data,DC=sos,DC=labs | sos\Domain Admins | GenericRead | None | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | NT AUTHORITY\Authenticated Users | False | None | None |
| Program Data | Container | All | All | GenericAll | Allow | NT AUTHORITY\SYSTEM | sos\Domain Admins | CN=Program Data,DC=sos,DC=labs | sos\Domain Admins | GenericAll | None | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | NT AUTHORITY\SYSTEM | False | None | None |
| Program Data | Container | All | All | GenericAll | Allow | sos\Domain Admins | sos\Domain Admins | CN=Program Data,DC=sos,DC=labs | sos\Domain Admins | GenericAll | None | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | sos\Domain Admins | False | None | None |
| Program Data | Container | User-Account-Restrictions | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Program Data,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 4c164200-20c0-11d0-a768-00aa006e0529 | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Program Data | Container | User-Account-Restrictions | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Program Data,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 4c164200-20c0-11d0-a768-00aa006e0529 | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Program Data | Container | User-Logon | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Program Data,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 5f202010-79a5-11d0-9020-00c04fc2d4cf | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Program Data | Container | User-Logon | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Program Data,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 5f202010-79a5-11d0-9020-00c04fc2d4cf | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Program Data | Container | Membership | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Program Data,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | bc0ac240-79a9-11d0-9020-00c04fc2d4cf | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Program Data | Container | Membership | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Program Data,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | bc0ac240-79a9-11d0-9020-00c04fc2d4cf | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Program Data | Container | General-Information | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Program Data,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 59ba2f42-79a2-11d0-9020-00c04fc2d3cf | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Program Data | Container | General-Information | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Program Data,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 59ba2f42-79a2-11d0-9020-00c04fc2d3cf | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Program Data | Container | RAS-Information | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Program Data,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 037088f8-0ae1-11d2-b422-00a0c968f939 | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Program Data | Container | RAS-Information | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Program Data,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 037088f8-0ae1-11d2-b422-00a0c968f939 | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Program Data | Container | All | inetOrgPerson | GenericRead | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Program Data,DC=sos,DC=labs | sos\Domain Admins | GenericRead | Descendents | 00000000-0000-0000-0000-000000000000 | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Program Data | Container | All | Group | GenericRead | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Program Data,DC=sos,DC=labs | sos\Domain Admins | GenericRead | Descendents | 00000000-0000-0000-0000-000000000000 | bf967a9c-0de6-11d0-a285-00aa003049e2 | InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Program Data | Container | All | User | GenericRead | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Program Data,DC=sos,DC=labs | sos\Domain Admins | GenericRead | Descendents | 00000000-0000-0000-0000-000000000000 | bf967aba-0de6-11d0-a285-00aa003049e2 | InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Program Data | Container | ms-DS-Key-Credential-Link | All | ReadProperty, WriteProperty | Allow | sos\Key Admins | sos\Domain Admins | CN=Program Data,DC=sos,DC=labs | sos\Domain Admins | ReadProperty, WriteProperty | All | 5b47d60f-6090-40b2-9f37-2a4de88f3063 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | sos\Key Admins | True | ContainerInherit | None |
| Program Data | Container | ms-DS-Key-Credential-Link | All | ReadProperty, WriteProperty | Allow | sos\Enterprise Key Admins | sos\Domain Admins | CN=Program Data,DC=sos,DC=labs | sos\Domain Admins | ReadProperty, WriteProperty | All | 5b47d60f-6090-40b2-9f37-2a4de88f3063 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | sos\Enterprise Key Admins | True | ContainerInherit | None |
| Program Data | Container | DS-Validated-Write-Computer | Computer | Self | Allow | CREATOR OWNER | sos\Domain Admins | CN=Program Data,DC=sos,DC=labs | sos\Domain Admins | Self | Descendents | 9b026da6-0d3c-465c-8bee-5199d7165cba | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | CREATOR OWNER | True | ContainerInherit | InheritOnly |
| Program Data | Container | DS-Validated-Write-Computer | Computer | Self | Allow | NT AUTHORITY\SELF | sos\Domain Admins | CN=Program Data,DC=sos,DC=labs | sos\Domain Admins | Self | Descendents | 9b026da6-0d3c-465c-8bee-5199d7165cba | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\SELF | True | ContainerInherit | InheritOnly |
| Program Data | Container | Token-Groups | Computer | ReadProperty | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | sos\Domain Admins | CN=Program Data,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | b7c69e6d-2cc7-11d2-854e-00a0c983f608 | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | True | ContainerInherit | InheritOnly |
| Program Data | Container | Token-Groups | Group | ReadProperty | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | sos\Domain Admins | CN=Program Data,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | b7c69e6d-2cc7-11d2-854e-00a0c983f608 | bf967a9c-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | True | ContainerInherit | InheritOnly |
| Program Data | Container | Token-Groups | User | ReadProperty | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | sos\Domain Admins | CN=Program Data,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | b7c69e6d-2cc7-11d2-854e-00a0c983f608 | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | True | ContainerInherit | InheritOnly |
| Program Data | Container | ms-TPM-OwnerInformation | Computer | WriteProperty | Allow | NT AUTHORITY\SELF | sos\Domain Admins | CN=Program Data,DC=sos,DC=labs | sos\Domain Admins | WriteProperty | Descendents | aa4e1a6d-550d-4e05-8c35-4afcb917a9fe | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\SELF | True | ContainerInherit | InheritOnly |
| Program Data | Container | ms-TPM-Tpm-Information-For-Computer | Computer | WriteProperty | Allow | NT AUTHORITY\SELF | sos\Domain Admins | CN=Program Data,DC=sos,DC=labs | sos\Domain Admins | WriteProperty | Descendents | ea1b7b93-5e48-46d5-bc6c-4df4fda78a35 | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\SELF | True | ContainerInherit | InheritOnly |
| Program Data | Container | ms-DS-Allowed-To-Act-On-Behalf-Of-Other-Identity | All | ReadProperty, WriteProperty | Allow | NT AUTHORITY\SELF | sos\Domain Admins | CN=Program Data,DC=sos,DC=labs | sos\Domain Admins | ReadProperty, WriteProperty | All | 3f78c3e5-f79a-46bd-a0b8-9d18116ddc79 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | NT AUTHORITY\SELF | True | ContainerInherit | None |
| Program Data | Container | Private-Information | All | ReadProperty, WriteProperty, ExtendedRight | Allow | NT AUTHORITY\SELF | sos\Domain Admins | CN=Program Data,DC=sos,DC=labs | sos\Domain Admins | ReadProperty, WriteProperty, ExtendedRight | All | 91e647de-d96f-4b70-9557-d63ff4f3ccd8 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | NT AUTHORITY\SELF | True | ContainerInherit | None |
| Program Data | Container | All | All | GenericAll | Allow | sos\Enterprise Admins | sos\Domain Admins | CN=Program Data,DC=sos,DC=labs | sos\Domain Admins | GenericAll | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | sos\Enterprise Admins | True | ContainerInherit | None |
| Program Data | Container | All | All | ListChildren | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Program Data,DC=sos,DC=labs | sos\Domain Admins | ListChildren | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | None |
| Program Data | Container | All | All | CreateChild, Self, WriteProperty, ExtendedRight, Delete, GenericRead, WriteDacl, WriteOwner | Allow | BUILTIN\Administrators | sos\Domain Admins | CN=Program Data,DC=sos,DC=labs | sos\Domain Admins | CreateChild, Self, WriteProperty, ExtendedRight, Delete, GenericRead, WriteDacl, WriteOwner | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | BUILTIN\Administrators | True | ContainerInherit | None |
| System | Container | All | All | GenericRead | Allow | NT AUTHORITY\Authenticated Users | sos\Domain Admins | CN=System,DC=sos,DC=labs | sos\Domain Admins | GenericRead | None | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | NT AUTHORITY\Authenticated Users | False | None | None |
| System | Container | All | All | GenericAll | Allow | NT AUTHORITY\SYSTEM | sos\Domain Admins | CN=System,DC=sos,DC=labs | sos\Domain Admins | GenericAll | None | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | NT AUTHORITY\SYSTEM | False | None | None |
| System | Container | All | All | CreateChild, Self, WriteProperty, ExtendedRight, GenericRead, WriteDacl, WriteOwner | Allow | sos\Domain Admins | sos\Domain Admins | CN=System,DC=sos,DC=labs | sos\Domain Admins | CreateChild, Self, WriteProperty, ExtendedRight, GenericRead, WriteDacl, WriteOwner | None | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | sos\Domain Admins | False | None | None |
| System | Container | User-Account-Restrictions | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=System,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 4c164200-20c0-11d0-a768-00aa006e0529 | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| System | Container | User-Account-Restrictions | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=System,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 4c164200-20c0-11d0-a768-00aa006e0529 | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| System | Container | User-Logon | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=System,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 5f202010-79a5-11d0-9020-00c04fc2d4cf | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| System | Container | User-Logon | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=System,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 5f202010-79a5-11d0-9020-00c04fc2d4cf | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| System | Container | Membership | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=System,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | bc0ac240-79a9-11d0-9020-00c04fc2d4cf | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| System | Container | Membership | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=System,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | bc0ac240-79a9-11d0-9020-00c04fc2d4cf | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| System | Container | General-Information | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=System,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 59ba2f42-79a2-11d0-9020-00c04fc2d3cf | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| System | Container | General-Information | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=System,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 59ba2f42-79a2-11d0-9020-00c04fc2d3cf | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| System | Container | RAS-Information | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=System,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 037088f8-0ae1-11d2-b422-00a0c968f939 | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| System | Container | RAS-Information | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=System,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 037088f8-0ae1-11d2-b422-00a0c968f939 | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| System | Container | All | inetOrgPerson | GenericRead | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=System,DC=sos,DC=labs | sos\Domain Admins | GenericRead | Descendents | 00000000-0000-0000-0000-000000000000 | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| System | Container | All | Group | GenericRead | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=System,DC=sos,DC=labs | sos\Domain Admins | GenericRead | Descendents | 00000000-0000-0000-0000-000000000000 | bf967a9c-0de6-11d0-a285-00aa003049e2 | InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| System | Container | All | User | GenericRead | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=System,DC=sos,DC=labs | sos\Domain Admins | GenericRead | Descendents | 00000000-0000-0000-0000-000000000000 | bf967aba-0de6-11d0-a285-00aa003049e2 | InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| System | Container | ms-DS-Key-Credential-Link | All | ReadProperty, WriteProperty | Allow | sos\Key Admins | sos\Domain Admins | CN=System,DC=sos,DC=labs | sos\Domain Admins | ReadProperty, WriteProperty | All | 5b47d60f-6090-40b2-9f37-2a4de88f3063 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | sos\Key Admins | True | ContainerInherit | None |
| System | Container | ms-DS-Key-Credential-Link | All | ReadProperty, WriteProperty | Allow | sos\Enterprise Key Admins | sos\Domain Admins | CN=System,DC=sos,DC=labs | sos\Domain Admins | ReadProperty, WriteProperty | All | 5b47d60f-6090-40b2-9f37-2a4de88f3063 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | sos\Enterprise Key Admins | True | ContainerInherit | None |
| System | Container | DS-Validated-Write-Computer | Computer | Self | Allow | CREATOR OWNER | sos\Domain Admins | CN=System,DC=sos,DC=labs | sos\Domain Admins | Self | Descendents | 9b026da6-0d3c-465c-8bee-5199d7165cba | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | CREATOR OWNER | True | ContainerInherit | InheritOnly |
| System | Container | DS-Validated-Write-Computer | Computer | Self | Allow | NT AUTHORITY\SELF | sos\Domain Admins | CN=System,DC=sos,DC=labs | sos\Domain Admins | Self | Descendents | 9b026da6-0d3c-465c-8bee-5199d7165cba | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\SELF | True | ContainerInherit | InheritOnly |
| System | Container | Token-Groups | Computer | ReadProperty | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | sos\Domain Admins | CN=System,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | b7c69e6d-2cc7-11d2-854e-00a0c983f608 | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | True | ContainerInherit | InheritOnly |
| System | Container | Token-Groups | Group | ReadProperty | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | sos\Domain Admins | CN=System,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | b7c69e6d-2cc7-11d2-854e-00a0c983f608 | bf967a9c-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | True | ContainerInherit | InheritOnly |
| System | Container | Token-Groups | User | ReadProperty | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | sos\Domain Admins | CN=System,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | b7c69e6d-2cc7-11d2-854e-00a0c983f608 | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | True | ContainerInherit | InheritOnly |
| System | Container | ms-TPM-OwnerInformation | Computer | WriteProperty | Allow | NT AUTHORITY\SELF | sos\Domain Admins | CN=System,DC=sos,DC=labs | sos\Domain Admins | WriteProperty | Descendents | aa4e1a6d-550d-4e05-8c35-4afcb917a9fe | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\SELF | True | ContainerInherit | InheritOnly |
| System | Container | ms-TPM-Tpm-Information-For-Computer | Computer | WriteProperty | Allow | NT AUTHORITY\SELF | sos\Domain Admins | CN=System,DC=sos,DC=labs | sos\Domain Admins | WriteProperty | Descendents | ea1b7b93-5e48-46d5-bc6c-4df4fda78a35 | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\SELF | True | ContainerInherit | InheritOnly |
| System | Container | ms-DS-Allowed-To-Act-On-Behalf-Of-Other-Identity | All | ReadProperty, WriteProperty | Allow | NT AUTHORITY\SELF | sos\Domain Admins | CN=System,DC=sos,DC=labs | sos\Domain Admins | ReadProperty, WriteProperty | All | 3f78c3e5-f79a-46bd-a0b8-9d18116ddc79 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | NT AUTHORITY\SELF | True | ContainerInherit | None |
| System | Container | Private-Information | All | ReadProperty, WriteProperty, ExtendedRight | Allow | NT AUTHORITY\SELF | sos\Domain Admins | CN=System,DC=sos,DC=labs | sos\Domain Admins | ReadProperty, WriteProperty, ExtendedRight | All | 91e647de-d96f-4b70-9557-d63ff4f3ccd8 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | NT AUTHORITY\SELF | True | ContainerInherit | None |
| System | Container | All | All | GenericAll | Allow | sos\Enterprise Admins | sos\Domain Admins | CN=System,DC=sos,DC=labs | sos\Domain Admins | GenericAll | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | sos\Enterprise Admins | True | ContainerInherit | None |
| System | Container | All | All | ListChildren | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=System,DC=sos,DC=labs | sos\Domain Admins | ListChildren | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | None |
| System | Container | All | All | CreateChild, Self, WriteProperty, ExtendedRight, Delete, GenericRead, WriteDacl, WriteOwner | Allow | BUILTIN\Administrators | sos\Domain Admins | CN=System,DC=sos,DC=labs | sos\Domain Admins | CreateChild, Self, WriteProperty, ExtendedRight, Delete, GenericRead, WriteDacl, WriteOwner | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | BUILTIN\Administrators | True | ContainerInherit | None |
| Users | Container | All | All | GenericRead | Allow | NT AUTHORITY\Authenticated Users | sos\Domain Admins | CN=Users,DC=sos,DC=labs | sos\Domain Admins | GenericRead | None | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | NT AUTHORITY\Authenticated Users | False | None | None |
| Users | Container | All | All | GenericAll | Allow | NT AUTHORITY\SYSTEM | sos\Domain Admins | CN=Users,DC=sos,DC=labs | sos\Domain Admins | GenericAll | None | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | NT AUTHORITY\SYSTEM | False | None | None |
| Users | Container | All | All | CreateChild, DeleteChild, Self, WriteProperty, ExtendedRight, GenericRead, WriteDacl, WriteOwner | Allow | sos\Domain Admins | sos\Domain Admins | CN=Users,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild, Self, WriteProperty, ExtendedRight, GenericRead, WriteDacl, WriteOwner | None | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | sos\Domain Admins | False | None | None |
| Users | Container | Group | All | CreateChild, DeleteChild | Allow | BUILTIN\Account Operators | sos\Domain Admins | CN=Users,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild | None | bf967a9c-0de6-11d0-a285-00aa003049e2 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | BUILTIN\Account Operators | False | None | None |
| Users | Container | User | All | CreateChild, DeleteChild | Allow | BUILTIN\Account Operators | sos\Domain Admins | CN=Users,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild | None | bf967aba-0de6-11d0-a285-00aa003049e2 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | BUILTIN\Account Operators | False | None | None |
| Users | Container | inetOrgPerson | All | CreateChild, DeleteChild | Allow | BUILTIN\Account Operators | sos\Domain Admins | CN=Users,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild | None | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | BUILTIN\Account Operators | False | None | None |
| Users | Container | Print-Queue | All | CreateChild, DeleteChild | Allow | BUILTIN\Print Operators | sos\Domain Admins | CN=Users,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild | None | bf967aa8-0de6-11d0-a285-00aa003049e2 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | BUILTIN\Print Operators | False | None | None |
| Users | Container | User-Account-Restrictions | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Users,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 4c164200-20c0-11d0-a768-00aa006e0529 | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Users | Container | User-Account-Restrictions | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Users,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 4c164200-20c0-11d0-a768-00aa006e0529 | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Users | Container | User-Logon | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Users,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 5f202010-79a5-11d0-9020-00c04fc2d4cf | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Users | Container | User-Logon | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Users,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 5f202010-79a5-11d0-9020-00c04fc2d4cf | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Users | Container | Membership | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Users,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | bc0ac240-79a9-11d0-9020-00c04fc2d4cf | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Users | Container | Membership | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Users,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | bc0ac240-79a9-11d0-9020-00c04fc2d4cf | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Users | Container | General-Information | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Users,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 59ba2f42-79a2-11d0-9020-00c04fc2d3cf | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Users | Container | General-Information | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Users,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 59ba2f42-79a2-11d0-9020-00c04fc2d3cf | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Users | Container | RAS-Information | inetOrgPerson | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Users,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 037088f8-0ae1-11d2-b422-00a0c968f939 | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Users | Container | RAS-Information | User | ReadProperty | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Users,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | 037088f8-0ae1-11d2-b422-00a0c968f939 | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Users | Container | All | inetOrgPerson | GenericRead | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Users,DC=sos,DC=labs | sos\Domain Admins | GenericRead | Descendents | 00000000-0000-0000-0000-000000000000 | 4828cc14-1437-45bc-9b07-ad6f015e5f28 | InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Users | Container | All | Group | GenericRead | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Users,DC=sos,DC=labs | sos\Domain Admins | GenericRead | Descendents | 00000000-0000-0000-0000-000000000000 | bf967a9c-0de6-11d0-a285-00aa003049e2 | InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Users | Container | All | User | GenericRead | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Users,DC=sos,DC=labs | sos\Domain Admins | GenericRead | Descendents | 00000000-0000-0000-0000-000000000000 | bf967aba-0de6-11d0-a285-00aa003049e2 | InheritedObjectAceTypePresent | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | InheritOnly |
| Users | Container | ms-DS-Key-Credential-Link | All | ReadProperty, WriteProperty | Allow | sos\Key Admins | sos\Domain Admins | CN=Users,DC=sos,DC=labs | sos\Domain Admins | ReadProperty, WriteProperty | All | 5b47d60f-6090-40b2-9f37-2a4de88f3063 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | sos\Key Admins | True | ContainerInherit | None |
| Users | Container | ms-DS-Key-Credential-Link | All | ReadProperty, WriteProperty | Allow | sos\Enterprise Key Admins | sos\Domain Admins | CN=Users,DC=sos,DC=labs | sos\Domain Admins | ReadProperty, WriteProperty | All | 5b47d60f-6090-40b2-9f37-2a4de88f3063 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | sos\Enterprise Key Admins | True | ContainerInherit | None |
| Users | Container | DS-Validated-Write-Computer | Computer | Self | Allow | CREATOR OWNER | sos\Domain Admins | CN=Users,DC=sos,DC=labs | sos\Domain Admins | Self | Descendents | 9b026da6-0d3c-465c-8bee-5199d7165cba | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | CREATOR OWNER | True | ContainerInherit | InheritOnly |
| Users | Container | DS-Validated-Write-Computer | Computer | Self | Allow | NT AUTHORITY\SELF | sos\Domain Admins | CN=Users,DC=sos,DC=labs | sos\Domain Admins | Self | Descendents | 9b026da6-0d3c-465c-8bee-5199d7165cba | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\SELF | True | ContainerInherit | InheritOnly |
| Users | Container | Token-Groups | Computer | ReadProperty | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | sos\Domain Admins | CN=Users,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | b7c69e6d-2cc7-11d2-854e-00a0c983f608 | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | True | ContainerInherit | InheritOnly |
| Users | Container | Token-Groups | Group | ReadProperty | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | sos\Domain Admins | CN=Users,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | b7c69e6d-2cc7-11d2-854e-00a0c983f608 | bf967a9c-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | True | ContainerInherit | InheritOnly |
| Users | Container | Token-Groups | User | ReadProperty | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | sos\Domain Admins | CN=Users,DC=sos,DC=labs | sos\Domain Admins | ReadProperty | Descendents | b7c69e6d-2cc7-11d2-854e-00a0c983f608 | bf967aba-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | True | ContainerInherit | InheritOnly |
| Users | Container | ms-TPM-OwnerInformation | Computer | WriteProperty | Allow | NT AUTHORITY\SELF | sos\Domain Admins | CN=Users,DC=sos,DC=labs | sos\Domain Admins | WriteProperty | Descendents | aa4e1a6d-550d-4e05-8c35-4afcb917a9fe | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\SELF | True | ContainerInherit | InheritOnly |
| Users | Container | ms-TPM-Tpm-Information-For-Computer | Computer | WriteProperty | Allow | NT AUTHORITY\SELF | sos\Domain Admins | CN=Users,DC=sos,DC=labs | sos\Domain Admins | WriteProperty | Descendents | ea1b7b93-5e48-46d5-bc6c-4df4fda78a35 | bf967a86-0de6-11d0-a285-00aa003049e2 | ObjectAceTypePresent, InheritedObjectAceTypePresent | Allow | NT AUTHORITY\SELF | True | ContainerInherit | InheritOnly |
| Users | Container | ms-DS-Allowed-To-Act-On-Behalf-Of-Other-Identity | All | ReadProperty, WriteProperty | Allow | NT AUTHORITY\SELF | sos\Domain Admins | CN=Users,DC=sos,DC=labs | sos\Domain Admins | ReadProperty, WriteProperty | All | 3f78c3e5-f79a-46bd-a0b8-9d18116ddc79 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | NT AUTHORITY\SELF | True | ContainerInherit | None |
| Users | Container | Private-Information | All | ReadProperty, WriteProperty, ExtendedRight | Allow | NT AUTHORITY\SELF | sos\Domain Admins | CN=Users,DC=sos,DC=labs | sos\Domain Admins | ReadProperty, WriteProperty, ExtendedRight | All | 91e647de-d96f-4b70-9557-d63ff4f3ccd8 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | NT AUTHORITY\SELF | True | ContainerInherit | None |
| Users | Container | All | All | GenericAll | Allow | sos\Enterprise Admins | sos\Domain Admins | CN=Users,DC=sos,DC=labs | sos\Domain Admins | GenericAll | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | sos\Enterprise Admins | True | ContainerInherit | None |
| Users | Container | All | All | ListChildren | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | sos\Domain Admins | CN=Users,DC=sos,DC=labs | sos\Domain Admins | ListChildren | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | BUILTIN\Pre-Windows 2000 Compatible Access | True | ContainerInherit | None |
| Users | Container | All | All | CreateChild, Self, WriteProperty, ExtendedRight, Delete, GenericRead, WriteDacl, WriteOwner | Allow | BUILTIN\Administrators | sos\Domain Admins | CN=Users,DC=sos,DC=labs | sos\Domain Admins | CreateChild, Self, WriteProperty, ExtendedRight, Delete, GenericRead, WriteDacl, WriteOwner | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | BUILTIN\Administrators | True | ContainerInherit | None |
| Default Domain Policy | GPO | All | All | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | Allow | CREATOR OWNER | sos\Domain Admins | CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | Descendents | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | CREATOR OWNER | False | ContainerInherit | InheritOnly |
| Default Domain Policy | GPO | All | All | GenericRead | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | sos\Domain Admins | CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | GenericRead | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | False | ContainerInherit | None |
| Default Domain Policy | GPO | All | All | GenericRead | Allow | NT AUTHORITY\Authenticated Users | sos\Domain Admins | CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | GenericRead | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | NT AUTHORITY\Authenticated Users | False | ContainerInherit | None |
| Default Domain Policy | GPO | All | All | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | Allow | NT AUTHORITY\SYSTEM | sos\Domain Admins | CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | NT AUTHORITY\SYSTEM | False | ContainerInherit | None |
| Default Domain Policy | GPO | All | All | CreateChild, Self, WriteProperty, GenericRead, WriteDacl, WriteOwner | Allow | sos\Domain Admins | sos\Domain Admins | CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | CreateChild, Self, WriteProperty, GenericRead, WriteDacl, WriteOwner | None | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | sos\Domain Admins | False | None | None |
| Default Domain Policy | GPO | All | All | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | Allow | sos\Domain Admins | sos\Domain Admins | CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | Descendents | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | sos\Domain Admins | False | ContainerInherit | InheritOnly |
| Default Domain Policy | GPO | All | All | CreateChild, Self, WriteProperty, GenericRead, WriteDacl, WriteOwner | Allow | sos\Domain Admins | sos\Domain Admins | CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | CreateChild, Self, WriteProperty, GenericRead, WriteDacl, WriteOwner | None | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | sos\Domain Admins | False | None | None |
| Default Domain Policy | GPO | All | All | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | Allow | sos\Enterprise Admins | sos\Domain Admins | CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | Descendents | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | sos\Enterprise Admins | False | ContainerInherit | InheritOnly |
| Default Domain Policy | GPO | All | All | CreateChild, Self, WriteProperty, GenericRead, WriteDacl, WriteOwner | Allow | sos\Enterprise Admins | sos\Domain Admins | CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | CreateChild, Self, WriteProperty, GenericRead, WriteDacl, WriteOwner | None | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | sos\Enterprise Admins | False | None | None |
| Default Domain Policy | GPO | Apply-Group-Policy | All | ExtendedRight | Allow | NT AUTHORITY\Authenticated Users | sos\Domain Admins | CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | ExtendedRight | All | edacfd8f-ffb3-11d1-b41d-00a0c968f939 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | NT AUTHORITY\Authenticated Users | False | ContainerInherit | None |
| Default Domain Controllers Policy | GPO | All | All | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | Allow | CREATOR OWNER | sos\Domain Admins | CN={6AC1786C-016F-11D2-945F-00C04fB984F9},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | Descendents | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | CREATOR OWNER | False | ContainerInherit | InheritOnly |
| Default Domain Controllers Policy | GPO | All | All | GenericRead | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | sos\Domain Admins | CN={6AC1786C-016F-11D2-945F-00C04fB984F9},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | GenericRead | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | False | ContainerInherit | None |
| Default Domain Controllers Policy | GPO | All | All | GenericRead | Allow | NT AUTHORITY\Authenticated Users | sos\Domain Admins | CN={6AC1786C-016F-11D2-945F-00C04fB984F9},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | GenericRead | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | NT AUTHORITY\Authenticated Users | False | ContainerInherit | None |
| Default Domain Controllers Policy | GPO | All | All | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | Allow | NT AUTHORITY\SYSTEM | sos\Domain Admins | CN={6AC1786C-016F-11D2-945F-00C04fB984F9},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | NT AUTHORITY\SYSTEM | False | ContainerInherit | None |
| Default Domain Controllers Policy | GPO | All | All | CreateChild, Self, WriteProperty, GenericRead, WriteDacl, WriteOwner | Allow | sos\Domain Admins | sos\Domain Admins | CN={6AC1786C-016F-11D2-945F-00C04fB984F9},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | CreateChild, Self, WriteProperty, GenericRead, WriteDacl, WriteOwner | None | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | sos\Domain Admins | False | None | None |
| Default Domain Controllers Policy | GPO | All | All | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | Allow | sos\Domain Admins | sos\Domain Admins | CN={6AC1786C-016F-11D2-945F-00C04fB984F9},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | Descendents | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | sos\Domain Admins | False | ContainerInherit | InheritOnly |
| Default Domain Controllers Policy | GPO | All | All | CreateChild, Self, WriteProperty, GenericRead, WriteDacl, WriteOwner | Allow | sos\Domain Admins | sos\Domain Admins | CN={6AC1786C-016F-11D2-945F-00C04fB984F9},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | CreateChild, Self, WriteProperty, GenericRead, WriteDacl, WriteOwner | None | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | sos\Domain Admins | False | None | None |
| Default Domain Controllers Policy | GPO | All | All | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | Allow | sos\Enterprise Admins | sos\Domain Admins | CN={6AC1786C-016F-11D2-945F-00C04fB984F9},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | Descendents | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | sos\Enterprise Admins | False | ContainerInherit | InheritOnly |
| Default Domain Controllers Policy | GPO | All | All | CreateChild, Self, WriteProperty, GenericRead, WriteDacl, WriteOwner | Allow | sos\Enterprise Admins | sos\Domain Admins | CN={6AC1786C-016F-11D2-945F-00C04fB984F9},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | CreateChild, Self, WriteProperty, GenericRead, WriteDacl, WriteOwner | None | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | sos\Enterprise Admins | False | None | None |
| Default Domain Controllers Policy | GPO | Apply-Group-Policy | All | ExtendedRight | Allow | NT AUTHORITY\Authenticated Users | sos\Domain Admins | CN={6AC1786C-016F-11D2-945F-00C04fB984F9},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | ExtendedRight | All | edacfd8f-ffb3-11d1-b41d-00a0c968f939 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | NT AUTHORITY\Authenticated Users | False | ContainerInherit | None |
| LAPS | GPO | All | All | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | Allow | CREATOR OWNER | sos\Domain Admins | CN={F3768285-65F2-4483-9050-0ED8E69A2ECB},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | Descendents | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | CREATOR OWNER | False | ContainerInherit | InheritOnly |
| LAPS | GPO | All | All | GenericRead | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | sos\Domain Admins | CN={F3768285-65F2-4483-9050-0ED8E69A2ECB},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | GenericRead | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | False | ContainerInherit | None |
| LAPS | GPO | All | All | GenericRead | Allow | NT AUTHORITY\Authenticated Users | sos\Domain Admins | CN={F3768285-65F2-4483-9050-0ED8E69A2ECB},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | GenericRead | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | NT AUTHORITY\Authenticated Users | False | ContainerInherit | None |
| LAPS | GPO | All | All | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | Allow | NT AUTHORITY\SYSTEM | sos\Domain Admins | CN={F3768285-65F2-4483-9050-0ED8E69A2ECB},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | NT AUTHORITY\SYSTEM | False | ContainerInherit | None |
| LAPS | GPO | All | All | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | Allow | sos\Domain Admins | sos\Domain Admins | CN={F3768285-65F2-4483-9050-0ED8E69A2ECB},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | sos\Domain Admins | False | ContainerInherit | None |
| LAPS | GPO | All | All | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | Allow | sos\Enterprise Admins | sos\Domain Admins | CN={F3768285-65F2-4483-9050-0ED8E69A2ECB},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | sos\Enterprise Admins | False | ContainerInherit | None |
| LAPS | GPO | Apply-Group-Policy | All | ExtendedRight | Allow | NT AUTHORITY\Authenticated Users | sos\Domain Admins | CN={F3768285-65F2-4483-9050-0ED8E69A2ECB},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | ExtendedRight | All | edacfd8f-ffb3-11d1-b41d-00a0c968f939 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | NT AUTHORITY\Authenticated Users | False | ContainerInherit | None |
| BitLocker | GPO | All | All | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | Allow | CREATOR OWNER | sos\Domain Admins | CN={36DDC97F-78D7-4A68-8EE9-E101EF56B324},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | Descendents | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | CREATOR OWNER | False | ContainerInherit | InheritOnly |
| BitLocker | GPO | All | All | GenericRead | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | sos\Domain Admins | CN={36DDC97F-78D7-4A68-8EE9-E101EF56B324},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | GenericRead | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | False | ContainerInherit | None |
| BitLocker | GPO | All | All | GenericRead | Allow | NT AUTHORITY\Authenticated Users | sos\Domain Admins | CN={36DDC97F-78D7-4A68-8EE9-E101EF56B324},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | GenericRead | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | NT AUTHORITY\Authenticated Users | False | ContainerInherit | None |
| BitLocker | GPO | All | All | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | Allow | NT AUTHORITY\SYSTEM | sos\Domain Admins | CN={36DDC97F-78D7-4A68-8EE9-E101EF56B324},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | NT AUTHORITY\SYSTEM | False | ContainerInherit | None |
| BitLocker | GPO | All | All | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | Allow | sos\Domain Admins | sos\Domain Admins | CN={36DDC97F-78D7-4A68-8EE9-E101EF56B324},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | sos\Domain Admins | False | ContainerInherit | None |
| BitLocker | GPO | All | All | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | Allow | sos\Enterprise Admins | sos\Domain Admins | CN={36DDC97F-78D7-4A68-8EE9-E101EF56B324},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | sos\Enterprise Admins | False | ContainerInherit | None |
| BitLocker | GPO | Apply-Group-Policy | All | ExtendedRight | Allow | NT AUTHORITY\Authenticated Users | sos\Domain Admins | CN={36DDC97F-78D7-4A68-8EE9-E101EF56B324},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | ExtendedRight | All | edacfd8f-ffb3-11d1-b41d-00a0c968f939 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | NT AUTHORITY\Authenticated Users | False | ContainerInherit | None |
| Windows Event Forwarding Server | GPO | All | All | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | Allow | CREATOR OWNER | sos\Domain Admins | CN={F5017D73-D6EA-464A-8F2E-8C5E5DCE8B6C},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | Descendents | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | CREATOR OWNER | False | ContainerInherit | InheritOnly |
| Windows Event Forwarding Server | GPO | All | All | GenericRead | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | sos\Domain Admins | CN={F5017D73-D6EA-464A-8F2E-8C5E5DCE8B6C},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | GenericRead | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | False | ContainerInherit | None |
| Windows Event Forwarding Server | GPO | All | All | GenericRead | Allow | NT AUTHORITY\Authenticated Users | sos\Domain Admins | CN={F5017D73-D6EA-464A-8F2E-8C5E5DCE8B6C},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | GenericRead | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | NT AUTHORITY\Authenticated Users | False | ContainerInherit | None |
| Windows Event Forwarding Server | GPO | All | All | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | Allow | NT AUTHORITY\SYSTEM | sos\Domain Admins | CN={F5017D73-D6EA-464A-8F2E-8C5E5DCE8B6C},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | NT AUTHORITY\SYSTEM | False | ContainerInherit | None |
| Windows Event Forwarding Server | GPO | All | All | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | Allow | sos\Domain Admins | sos\Domain Admins | CN={F5017D73-D6EA-464A-8F2E-8C5E5DCE8B6C},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | sos\Domain Admins | False | ContainerInherit | None |
| Windows Event Forwarding Server | GPO | All | All | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | Allow | sos\Enterprise Admins | sos\Domain Admins | CN={F5017D73-D6EA-464A-8F2E-8C5E5DCE8B6C},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | sos\Enterprise Admins | False | ContainerInherit | None |
| Windows Event Forwarding Server | GPO | Apply-Group-Policy | All | ExtendedRight | Allow | NT AUTHORITY\Authenticated Users | sos\Domain Admins | CN={F5017D73-D6EA-464A-8F2E-8C5E5DCE8B6C},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | ExtendedRight | All | edacfd8f-ffb3-11d1-b41d-00a0c968f939 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | NT AUTHORITY\Authenticated Users | False | ContainerInherit | None |
| Custom Event Channel Permissions | GPO | All | All | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | Allow | CREATOR OWNER | sos\Domain Admins | CN={5621D5FA-603B-44BB-8719-FAA5F26E8CE3},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | Descendents | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | CREATOR OWNER | False | ContainerInherit | InheritOnly |
| Custom Event Channel Permissions | GPO | All | All | GenericRead | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | sos\Domain Admins | CN={5621D5FA-603B-44BB-8719-FAA5F26E8CE3},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | GenericRead | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | False | ContainerInherit | None |
| Custom Event Channel Permissions | GPO | All | All | GenericRead | Allow | NT AUTHORITY\Authenticated Users | sos\Domain Admins | CN={5621D5FA-603B-44BB-8719-FAA5F26E8CE3},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | GenericRead | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | NT AUTHORITY\Authenticated Users | False | ContainerInherit | None |
| Custom Event Channel Permissions | GPO | All | All | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | Allow | NT AUTHORITY\SYSTEM | sos\Domain Admins | CN={5621D5FA-603B-44BB-8719-FAA5F26E8CE3},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | NT AUTHORITY\SYSTEM | False | ContainerInherit | None |
| Custom Event Channel Permissions | GPO | All | All | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | Allow | sos\Domain Admins | sos\Domain Admins | CN={5621D5FA-603B-44BB-8719-FAA5F26E8CE3},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | sos\Domain Admins | False | ContainerInherit | None |
| Custom Event Channel Permissions | GPO | All | All | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | Allow | sos\Enterprise Admins | sos\Domain Admins | CN={5621D5FA-603B-44BB-8719-FAA5F26E8CE3},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | sos\Enterprise Admins | False | ContainerInherit | None |
| Custom Event Channel Permissions | GPO | Apply-Group-Policy | All | ExtendedRight | Allow | NT AUTHORITY\Authenticated Users | sos\Domain Admins | CN={5621D5FA-603B-44BB-8719-FAA5F26E8CE3},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | ExtendedRight | All | edacfd8f-ffb3-11d1-b41d-00a0c968f939 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | NT AUTHORITY\Authenticated Users | False | ContainerInherit | None |
| Domain Controllers Enhanced Auditing Policy | GPO | All | All | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | Allow | CREATOR OWNER | sos\Domain Admins | CN={80C12234-9939-4F9B-BB17-7D50FDA95D92},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | Descendents | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | CREATOR OWNER | False | ContainerInherit | InheritOnly |
| Domain Controllers Enhanced Auditing Policy | GPO | All | All | GenericRead | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | sos\Domain Admins | CN={80C12234-9939-4F9B-BB17-7D50FDA95D92},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | GenericRead | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | False | ContainerInherit | None |
| Domain Controllers Enhanced Auditing Policy | GPO | All | All | GenericRead | Allow | NT AUTHORITY\Authenticated Users | sos\Domain Admins | CN={80C12234-9939-4F9B-BB17-7D50FDA95D92},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | GenericRead | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | NT AUTHORITY\Authenticated Users | False | ContainerInherit | None |
| Domain Controllers Enhanced Auditing Policy | GPO | All | All | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | Allow | NT AUTHORITY\SYSTEM | sos\Domain Admins | CN={80C12234-9939-4F9B-BB17-7D50FDA95D92},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | NT AUTHORITY\SYSTEM | False | ContainerInherit | None |
| Domain Controllers Enhanced Auditing Policy | GPO | All | All | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | Allow | sos\Domain Admins | sos\Domain Admins | CN={80C12234-9939-4F9B-BB17-7D50FDA95D92},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | sos\Domain Admins | False | ContainerInherit | None |
| Domain Controllers Enhanced Auditing Policy | GPO | All | All | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | Allow | sos\Enterprise Admins | sos\Domain Admins | CN={80C12234-9939-4F9B-BB17-7D50FDA95D92},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | CreateChild, DeleteChild, Self, WriteProperty, DeleteTree, Delete, GenericRead, WriteDacl, WriteOwner | All | 00000000-0000-0000-0000-000000000000 | 00000000-0000-0000-0000-000000000000 | None | Allow | sos\Enterprise Admins | False | ContainerInherit | None |
| Domain Controllers Enhanced Auditing Policy | GPO | Apply-Group-Policy | All | ExtendedRight | Allow | NT AUTHORITY\Authenticated Users | sos\Domain Admins | CN={80C12234-9939-4F9B-BB17-7D50FDA95D92},CN=Policies,CN=System,DC=sos,DC=labs | sos\Domain Admins | ExtendedRight | All | edacfd8f-ffb3-11d1-b41d-00a0c968f939 | 00000000-0000-0000-0000-000000000000 | ObjectAceTypePresent | Allow | NT AUTHORITY\Authenticated Users | False | ContainerInherit | None |