TrustedDomain Object Access Rights

The TrustedDomain object type has the following access types:

Access type Description
TRUSTED_QUERY_DOMAIN_NAME This access type is needed to query the name of the trusted domain.
TRUSTED_SET_CONTROLLERS This access type is needed to set the list of controllers of the trusted domain.
TRUSTED_QUERY_POSIX This access type is needed to retrieve the Posix ID offset of a trusted domain.
TRUSTED_SET_POSIX This access type is needed to set the Posix ID offset of a trusted domain.

 

Generic Access Masks

This object type has the following generic access mappings:

    GENERIC_READ        STANDARD_RIGHTS_READ |
                    TRUSTED_QUERY_DOMAIN_NAME

    GENERIC_WRITE        STANDARD_RIGHTS_WRITE |
                    TRUSTED_SET_POSIX

    GENERIC_EXECUTE    STANDARD_RIGHTS_EXECUTE |
                    TRUSTED_QUERY_POSIX

Standard Access Types

This object does not support the (optional) SYNCHRONIZE standard access type. All required access types are supported. The mask of all supported access types for this object type is:

    TRUSTED_ALL_ACCESS    STANDARD_RIGHTS_REQUIRED |
                    TRUSTED_QUERY_DOMAIN_NAME |
                    TRUSTED_QUERY_CONTROLLERS |
                    TRUSTED_SET_CONTROLLERS