Revision Summary Date Revision History Revision Class Comments 3/2/2007 1.0 New Version 1.0 release 4/3/2007 1.1 Minor Version 1.1 release 5/11/2007 1.2 Minor Version 1.2 release 6/1/2007 2.0 Updated and revised the technical content. 7/3/2007 2.0.1 Editorial Changed language and formatting in the technical content. 8/10/2007 2.0.2 Editorial Changed language and formatting in the technical content. 9/28/2007 3.0 Major Converted to unified format. 10/23/2007 3.0.1 Editorial Changed language and formatting in the technical content. 1/25/2008 4.0 Major Updated and revised the technical content. 3/14/2008 4.1 Minor Clarified the meaning of the technical content. 6/20/2008 5.0 Major Updated and revised the
technical content. 7/25/2008 5.0.1 Editorial Changed language and formatting in the technical content. 8/29/2008 5.0.2 Editorial Changed language and formatting in the technical content. 10/24/2008 5.1 Clarified the meaning of the technical content. 12/5/2008 5.2 Minor Clarified the meaning of the technical content. 1/16/2009 5.3 Minor Clarified the meaning of the technical content. 2/27/2009 6.0 Major Updated and revised the technical content. 4/10/2009 7.0 Updated and revised the technical content. 5/22/2009 8.0 Major Updated and revised the technical content. 7/2/2009 8.1 Clarified the meaning of the technical content.
the technical content. 9/23/2011 12.2 None No changes to the meaning, language, or formatting of the technical content. 12/16/2011 13.0 Major Updated and revised the technical content. 3/30/2012 14.0 Updated and revised the technical content. 7/12/2012 15.0 Updated and revised the technical content. 10/25/2012 15.0 None No changes to the meaning, language, or formatting of the technical content. 1/31/2013 15.0 None No changes to the meaning, language, or formatting of the technical content. 8/8/2013 16.0 Major Updated and revised the technical content. 11/14/2013 16.0 None No changes to the meaning, language,
or formatting of the technical content. 2/13/2014 16.0 None No changes to the meaning, language, or formatting of the technical content. 5/15/2014 16.0 None No changes to the meaning, language, or formatting of the technical content. 6/30/2015 17.0 Significantly changed the technical content. 10/16/2015 17.0 None No changes to the meaning, language, or formatting of the technical content. 7/14/2016 17.0 None No changes to the meaning, language, or formatting of the technical content.
S-1-5-19 Local Service AlwaysFilter S-1-5-20 Network Service AlwaysFilter S-1-5-21 NT Account Domain AlwaysFilter S-1-5-21-x Partially formed SID AlwaysFilter Partially formed SID AlwaysFilter Invalid domain SID (too many RIDs) AlwaysFilter Identifies a domain, not a principal AlwaysFilter Compounded Authentication NeverFilter<27> Claims NeverFilter<28> R<500 Well-known SID range ForestSpecific Administrator ForestSpecific<29> Guest ForestSpecific<30> Krbtgt ForestSpecific<31> Domain Admins ForestSpecific<32> Domain Users ForestSpecific<33> Domain Guests ForestSpecific<34> Domain Computers ForestSpecific<35> 500 R X-Y-Z
Domain Controllers ForestSpecific<36> Cert Publishers ForestSpecific<37> Schema Admins ForestSpecific<38> Enterprise Admins ForestSpecific<39> Group Policy Creator Owners ForestSpecific<40> <= < 1000 Except and above Reserved values. assigned as primary identities to user accounts. ForestSpecific<41> R >= 1000 Identifiers for end domain identities and domain groups. Not filtered at domain and external trust boundaries. Can be filtered at member, quarantined, and cross-forest boundaries. does not match this <domain>. All Except on trusted domain object (TDO) If the trusting domain is configured to filter all except on TDO, then the domain controller filters all SIDs that are not from the trusted domain. where does not match identities of the domains in All Except on Forest Information (FtInfo) Identities from other forests. If the trusting domain is configured to filter all except on FtInfo, then the domain controller filters all SIDs that are not from the R
Index A 9 35 C 45 34 Common data types and fields ( 10, 11) 24 Constructed security 12 12 11 40 18 D Data types and fields common ( 10, 11) 24 Details 10 12 E 30 34 32 30 34 F 40 9 Filtering 40 35 35 G 5 12 I 40 40 8 5 K 11 14 L 9 32 N 7 21 O 8 P 18 35 25 22 20 19 27 26 13 22 12 40 12 12 11 21 20 41 24 21 7 8 7 9 S 24 21 Security 35 40 40 35 40 35 35 structure types 12 12 11 35 SID 35