Extended Rights
The following extended rights are defined by Active Directory.
- Abandon-Replication
- Add-GUID
- Allocate-Rids
- Allowed-To-Authenticate
- Apply-Group-Policy
- Certificate-Enrollment
- Change-Domain-Master
- Change-Infrastructure-Master
- Change-PDC
- Change-Rid-Master
- Change-Schema-Master
- Create-Inbound-Forest-Trust
- Do-Garbage-Collection
- Domain-Administer-Server
- DS-Check-Stale-Phantoms
- DS-Clone-Domain-Controller
- DS-Execute-Intentions-Script
- DS-Install-Replica
- DS-Query-Self-Quota
- DS-Replication-Get-Changes
- DS-Replication-Get-Changes-All
- DS-Replication-Get-Changes-In-Filtered-Set
- DS-Replication-Manage-Topology
- DS-Replication-Monitor-Topology
- DS-Replication-Synchronize
- Enable-Per-User-Reversibly-Encrypted-Password
- Generate-RSoP-Logging
- Generate-RSoP-Planning
- Manage-Optional-Features
- Migrate-SID-History
- msmq-Open-Connector
- msmq-Peek
- msmq-Peek-computer-Journal
- msmq-Peek-Dead-Letter
- msmq-Receive
- msmq-Receive-computer-Journal
- msmq-Receive-Dead-Letter
- msmq-Receive-journal
- msmq-Send
- Open-Address-Book
- Read-Only-Replication-Secret-Synchronization
- Reanimate-Tombstones
- Recalculate-Hierarchy
- Recalculate-Security-Inheritance
- Receive-As
- Refresh-Group-Cache
- Reload-SSL-Certificate
- Run-Protect-Admin-Groups-Task
- SAM-Enumerate-Entire-Domain
- Send-As
- Send-To
- Unexpire-Password
- Update-Password-Not-Required-Bit
- Update-Schema-Cache
- User-Change-Password
- User-Force-Change-Password
Send comments about this topic to Microsoft
Build date: 2/3/2012
