Well-Known Domain-Relative Security Principals

In each domain NC, there are certain well-known security principals. These well-known security principals are given default privileges in the domain. For more information, see section 5 and also see [MS-SAMR] section

Each of these objects has the following attributes:

parent: Users Container (section

objectSid: A SID consisting of the objectSid of the domain NC root, followed by the RID that is specified for each child in the following subsections.

The objects of class user have the following attribute:

primaryGroupID: This value is a RID, which refers to another well-known domain relative security principal.