This topic has not yet been rated - Rate this topic

SAM-Enumerate-Entire-Domain extended right

Applies to: desktop apps only

This control access right can be used to restrict who can be allowed to use a downlevel API, such as NetQueryDisplayInformation and NetUser/GroupEnum, and enumerate the entire domain.

CN	SAM-Enumerate-Entire-Domain
Display-Name	Enumerate Entire SAM Domain
Rights-GUID	91d67418-0135-4acc-8d79-c08e857cfbec

Windows Server 2003

Applies-To	Sam-Server
Localization-Display-ID	57

Windows Server 2003 R2

Applies-To	Sam-Server
Localization-Display-ID	57

Windows Server 2008

Applies-To	Sam-Server
Localization-Display-ID	57

Windows Server 2008 R2

Applies-To	Sam-Server
Localization-Display-ID	57

Windows Server 8 Beta

Applies-To	Sam-Server
Localization-Display-ID	57

Send comments about this topic to Microsoft

Build date: 2/3/2012

Did you find this helpful? Yes No

Not accurate

Not enough depth

Need more code examples

(1500 characters remaining)

Community Content Add

FAQ