improve comment in acl.py test

Change-Id: I8d4e4604ade653d39438311a05277db37582f375
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
dsdb-acl: Remove SEC_STD_DELETE and SEC_ADS_DELETE_TREE from any ACE by the creator user in SeMachineAccountPrivilege

Change-Id: I3a6e260e2c5854ebcb59b0872cb83fbd02edd719
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
dsdb-tests: Assert that the SEC_STD_DELETE and SEC_ADS_DELETE_TREE was removed any ACE by the creator user in SeMachineAccountPrivilege

Change-Id: I2dbb86836892fa198756636751f15c551a2948a6
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
dsdb-tests: Improve test further

Change-Id: If4d44bf175f9aa82f4b602cfd0eaecb557e3fd02
dsdb-tests: Confirm we can not create non-DC accounts

Change-Id: I045fe02c93d73510aecc79c97c15318f94eb5465
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
dsdb-test: Ensure against privilege attacks by creating a DC with SeMachineAccountPrivilege

Change-Id: I63f47707845e83872c7afb55622b7be54b751c42
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
dsdb-test: Improve test to run against Windows 2012R2 and 2008R2

Change-Id: Ia87b2c15312dd2092e249803c59eeed0a1ac98a8
dsdb-test: Ensure that we can not add any other attributes with SeMachineAccountPrivilege

Change-Id: Iea7764b358afcd3565e3036610a34f8296419d1b
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
dsdb: Assert the set of supplied attributes

Signed-off-by: Samuel Cabrero <samuelcabrero@kernevil.me>
dsdb-acl: Return the same error code as windows

Signed-off-by: Samuel Cabrero <samuelcabrero@kernevil.me>
dsdb: Set proper UAC on computer accounts created over SAMR

Tests have revealed that computer accounts created over SAM-R does not
have the UF_ACCOUNTDISABLE bit set

Signed-off-by: Samuel Cabrero <samuelcabrero@kernevil.me>