507 lines
11 KiB
Plaintext
507 lines
11 KiB
Plaintext
|
OID for policy attributes: 1.2.840.113556.1.4.7000.418.*
|
||
|
|
OID for Policy classes: 1.2.840.113556.1.5.7000.169.*
|
||
|
|
|
||
|
|
Policy Parameter Class Types
|
||
|
|
----------------------------
|
||
|
|
|
||
|
|
Usage: Instances represent numeric range type named
|
||
|
|
Update Frequency:
|
||
|
|
Update Privilege:
|
||
|
|
UI:
|
||
|
|
|
||
|
|
cn = ms-wmi-RangeParam
|
||
|
|
governsID = 1.2.840.113556.1.5.7000.169.1
|
||
|
|
rDnAttId = cn
|
||
|
|
mustContain =
|
||
|
|
ms-wmi-PropertyName,
|
||
|
|
ms-wmi-TargetClass,
|
||
|
|
ms-wmi-TargetType
|
||
|
|
possSuperiors = Policy
|
||
|
|
objectClassCategory = 1
|
||
|
|
subClassOf = top
|
||
|
|
defaultObjectCategory = ms-wmi-RangeParam
|
||
|
|
defaultHidingValue = FALSE
|
||
|
|
defaultSecurityDescriptor
|
||
|
|
schemaIdGUID = <unique GUID>
|
||
|
|
objectClass = classSchema
|
||
|
|
|
||
|
|
Usage: Instances represent numeric range type named parameter settings for individual policy objs
|
||
|
|
Update Frequency:
|
||
|
|
Update Privilege:
|
||
|
|
UI:
|
||
|
|
|
||
|
|
cn = ms-wmi-IntRangeParam
|
||
|
|
governsID = 1.2.840.113556.1.5.7000.169.2
|
||
|
|
rDnAttId = cn
|
||
|
|
mustContain =
|
||
|
|
ms-wmi-intDefault
|
||
|
|
mayContain =
|
||
|
|
ms-wmi-intMin,
|
||
|
|
ms-wmi-intMax
|
||
|
|
possSuperiors = Policy
|
||
|
|
objectClassCategory = 1
|
||
|
|
subClassOf = ms-wmi-RangeParam
|
||
|
|
defaultObjectCategory = ms-wmi-IntRangeParam
|
||
|
|
defaultHidingValue = FALSE
|
||
|
|
defaultSecurityDescriptor
|
||
|
|
schemaIdGUID = <unique GUID>
|
||
|
|
objectClass = classSchema
|
||
|
|
|
||
|
|
(other range parameters are defined similarly)
|
||
|
|
|
||
|
|
Usage: Instances represent numeric set type named parameter settings for individual policy objs
|
||
|
|
Update Frequency:
|
||
|
|
Update Privilege:
|
||
|
|
UI:
|
||
|
|
|
||
|
|
cn = ms-wmi-IntSetParam
|
||
|
|
governsID = 1.2.840.113556.1.5.7000.169.3
|
||
|
|
rDnAttId = cn
|
||
|
|
mustContain =
|
||
|
|
ms-wmi-intDefault
|
||
|
|
mayContain =
|
||
|
|
ms-wmi-intValidValues
|
||
|
|
possSuperiors = Policy
|
||
|
|
objectClassCategory = 1
|
||
|
|
subClassOf = ms-wmi-RangeParam
|
||
|
|
defaultObjectCategory = ms-wmi-IntSetParam
|
||
|
|
defaultHidingValue = FALSE
|
||
|
|
defaultSecurityDescriptor
|
||
|
|
schemaIdGUID = <unique GUID>
|
||
|
|
objectClass = classSchema
|
||
|
|
|
||
|
|
(other set parameters are defined similarly)
|
||
|
|
|
||
|
|
PolicyTemplate Class
|
||
|
|
--------------------
|
||
|
|
|
||
|
|
Usage: Instances of this class represent instances of policy object in AD
|
||
|
|
Update Frequency:
|
||
|
|
Update Privilege:
|
||
|
|
UI:
|
||
|
|
|
||
|
|
cn = ms-wmi-PolicyTemplate
|
||
|
|
governsID = 1.2.840.113556.1.5.7000.169.4
|
||
|
|
rDnAttId = cn
|
||
|
|
mustContain =
|
||
|
|
ms-wmi-ID,
|
||
|
|
ms-wmi-Mof,
|
||
|
|
ms-wmi-Name,
|
||
|
|
ms-wmi-TargetNamespace,
|
||
|
|
ms-wmi-TargetClass,
|
||
|
|
ms-wmi-TargetPath,
|
||
|
|
ms-wmi-SourceOrganization,
|
||
|
|
ms-wmi-Author,
|
||
|
|
ms-wmi-ChangeDate,
|
||
|
|
ms-wmi-CreationDate
|
||
|
|
possSuperiors = Container
|
||
|
|
objectClassCategory = 1
|
||
|
|
subClassOf = top
|
||
|
|
defaultObjectCategory = ms-wmi-PolicyTemplate
|
||
|
|
defaultHidingValue = FALSE
|
||
|
|
defaultSecurityDescriptor =
|
||
|
|
schemaIdGUID = <unique GUID>
|
||
|
|
objectClass = classSchema
|
||
|
|
|
||
|
|
Usage: Instances of this class represent instances of policy
|
||
|
|
Update Frequency:
|
||
|
|
Update Privilege:
|
||
|
|
UI:
|
||
|
|
|
||
|
|
cn = ms-wmi-SimplePolicyTemplate
|
||
|
|
governsID = 1.2.840.113556.1.5.7000.169.5
|
||
|
|
rDnAttId = cn
|
||
|
|
mustContain =
|
||
|
|
ms-wmi-TargetObject
|
||
|
|
possSuperiors = Container
|
||
|
|
objectClassCategory = 1
|
||
|
|
subClassOf = ms-wmi-PolicyTemplate
|
||
|
|
defaultObjectCategory = ms-wmi-SimplePolicyTemplate
|
||
|
|
defaultHidingValue = FALSE
|
||
|
|
defaultSecurityDescriptor =
|
||
|
|
schemaIdGUID = <unique GUID>
|
||
|
|
objectClass = classSchema
|
||
|
|
|
||
|
|
Usage: Instances of this class represent instances of policy
|
||
|
|
Update Frequency:
|
||
|
|
Update Privilege:
|
||
|
|
UI:
|
||
|
|
|
||
|
|
cn = ms-wmi-MergeablePolicyTemplate
|
||
|
|
governsID = 1.2.840.113556.1.5.7000.169.6
|
||
|
|
rDnAttId = cn
|
||
|
|
mustContain =
|
||
|
|
possSuperiors = Container
|
||
|
|
objectClassCategory = 1
|
||
|
|
subClassOf = ms-wmi-PolicyTemplate
|
||
|
|
defaultObjectCategory = ms-wmi-MergeablePolicyTemplate
|
||
|
|
defaultHidingValue = FALSE
|
||
|
|
defaultSecurityDescriptor =
|
||
|
|
schemaIdGUID = <unique GUID>
|
||
|
|
objectClass = classSchema
|
||
|
|
|
||
|
|
Som Class
|
||
|
|
----------
|
||
|
|
|
||
|
|
Usage: represents an individual som
|
||
|
|
Update Frequency:
|
||
|
|
Update Privilege:
|
||
|
|
UI:
|
||
|
|
|
||
|
|
cn = ms-wmi-Rule
|
||
|
|
governsID = 1.2.840.113556.1.5.7000.169.7
|
||
|
|
rDnAttId = cn
|
||
|
|
mustContain =
|
||
|
|
ms-wmi-QueryLanguage,
|
||
|
|
ms-wmi-TargetNameSpace,
|
||
|
|
ms-wmi-Query
|
||
|
|
possSuperiors = ms-wmi-Som
|
||
|
|
objectClassCategory = 1
|
||
|
|
subClassOf = top
|
||
|
|
defaultObjectCategory = ms-wmi-Som
|
||
|
|
defaultHidingValue = FALSE
|
||
|
|
defaultSecurityDescriptor =
|
||
|
|
schemaIdGUID = <unique GUID>
|
||
|
|
objectClass = classSchema
|
||
|
|
|
||
|
|
Usage: represents an individual som
|
||
|
|
Update Frequency:
|
||
|
|
Update Privilege:
|
||
|
|
UI:
|
||
|
|
|
||
|
|
cn = ms-wmi-Som
|
||
|
|
governsID = 1.2.840.113556.1.5.7000.169.8
|
||
|
|
rDnAttId = cn
|
||
|
|
mustContain =
|
||
|
|
ms-wmi-ID,
|
||
|
|
ms-wmi-Name,
|
||
|
|
ms-wmi-SourceOrganization,
|
||
|
|
ms-wmi-Author,
|
||
|
|
ms-wmi-ChangeDate,
|
||
|
|
ms-wmi-CreationDate
|
||
|
|
possSuperiors = Container
|
||
|
|
objectClassCategory = 1
|
||
|
|
subClassOf = top
|
||
|
|
defaultObjectCategory = ms-wmi-Som
|
||
|
|
defaultHidingValue = FALSE
|
||
|
|
defaultSecurityDescriptor =
|
||
|
|
schemaIdGUID = <unique GUID>
|
||
|
|
objectClass = classSchema
|
||
|
|
|
||
|
|
PolicyType Class
|
||
|
|
----------------
|
||
|
|
|
||
|
|
Usage: Holds a mof definition for a specific policy type.
|
||
|
|
Update Frequency:
|
||
|
|
Update Privilege:
|
||
|
|
UI:
|
||
|
|
|
||
|
|
cn = ms-wmi-PolicyType
|
||
|
|
governsID = 1.2.840.113556.1.5.7000.169.9
|
||
|
|
rDnAttId = cn
|
||
|
|
mustContain =
|
||
|
|
ms-wmi-TargetClass,
|
||
|
|
ms-wmi-TargetNameSpace,
|
||
|
|
ms-wmi-ClassDefinition
|
||
|
|
possSuperiors = Container
|
||
|
|
objectClassCategory = 1
|
||
|
|
subClassOf = top
|
||
|
|
defaultObjectCategory = ms-wmi-PolicyType
|
||
|
|
defaultHidingValue = FALSE
|
||
|
|
defaultSecurityDescriptor =
|
||
|
|
schemaIdGUID = <unique GUID>
|
||
|
|
objectClass = classSchema
|
||
|
|
|
||
|
|
Class WMIGPO
|
||
|
|
------------
|
||
|
|
|
||
|
|
Usage: The author of a policy object
|
||
|
|
Size:
|
||
|
|
Update Frequency:
|
||
|
|
Update Privilege:
|
||
|
|
UI:
|
||
|
|
|
||
|
|
cn = ms-wmi-Reference
|
||
|
|
governsID = 1.2.840.113556.1.5.7000.169.10
|
||
|
|
rDnAttId = cn
|
||
|
|
mustContain =
|
||
|
|
ms-wmi-ID
|
||
|
|
possSuperiors = <GPO object>
|
||
|
|
objectClassCategory = 1
|
||
|
|
subClassOf = top
|
||
|
|
defaultObjectCategory = ms-wmi-Reference
|
||
|
|
defaultHidingValue = FALSE
|
||
|
|
defaultSecurityDescriptor =
|
||
|
|
schemaIdGUID = <unique GUID>
|
||
|
|
objectClass = classSchema
|
||
|
|
|
||
|
|
Class Attributes
|
||
|
|
----------------
|
||
|
|
|
||
|
|
Usage: The author of a policy object
|
||
|
|
Size:
|
||
|
|
Update Frequency:
|
||
|
|
Update Privilege:
|
||
|
|
UI:
|
||
|
|
|
||
|
|
cn = ms-wmi-Author
|
||
|
|
singleValued = TRUE
|
||
|
|
objectClass = attributeSchema
|
||
|
|
attributeID = 1.2.840.113556.1.4.7000.418.1
|
||
|
|
attributeSyntax = 2.5.5.12 // unicode string
|
||
|
|
oMSyntax = 64
|
||
|
|
searchFlags = 0
|
||
|
|
|
||
|
|
Usage:
|
||
|
|
Size:
|
||
|
|
Update Frequency:
|
||
|
|
Update Privilege:
|
||
|
|
UI:
|
||
|
|
|
||
|
|
cn = ms-wmi-ChangeDate
|
||
|
|
singleValued = TRUE
|
||
|
|
objectClass = attributeSchema
|
||
|
|
attributeID = 1.2.840.113556.1.4.7000.418.2
|
||
|
|
attributeSyntax = 2.5.5.12 // unicode string
|
||
|
|
oMSyntax = 64
|
||
|
|
searchFlags = 0
|
||
|
|
|
||
|
|
Usage:
|
||
|
|
Size:
|
||
|
|
Update Frequency:
|
||
|
|
Update Privilege:
|
||
|
|
UI:
|
||
|
|
|
||
|
|
cn = ms-wmi-ClassDefinition
|
||
|
|
singleValued = TRUE
|
||
|
|
objectClass = attributeSchema
|
||
|
|
attributeID = 1.2.840.113556.1.4.7000.418.3
|
||
|
|
attributeSyntax = 2.5.5.12
|
||
|
|
oMSyntax = 64
|
||
|
|
searchFlags = 0
|
||
|
|
|
||
|
|
Usage:
|
||
|
|
Size:
|
||
|
|
Update Frequency:
|
||
|
|
Update Privilege:
|
||
|
|
UI:
|
||
|
|
|
||
|
|
cn = ms-wmi-CreationDate
|
||
|
|
singleValued = TRUE
|
||
|
|
objectClass = attributeSchema
|
||
|
|
attributeID = 1.2.840.113556.1.4.7000.418.4
|
||
|
|
attributeSyntax = 2.5.5.12 // unicode string
|
||
|
|
oMSyntax = 64
|
||
|
|
searchFlags = 0
|
||
|
|
|
||
|
|
Usage: signed integer numeric default value for a numeric policy parameter
|
||
|
|
Size:
|
||
|
|
Update Frequency:
|
||
|
|
Update Privilege:
|
||
|
|
UI:
|
||
|
|
|
||
|
|
cn = ms-wmi-intDefault
|
||
|
|
singleValued = TRUE
|
||
|
|
objectClass = attributeSchema
|
||
|
|
attributeID = 1.2.840.113556.1.4.7000.418.5
|
||
|
|
attributeSyntax = 2.5.5.9 // Integer
|
||
|
|
oMSyntax = 2
|
||
|
|
searchFlags = 0
|
||
|
|
|
||
|
|
Usage: Unique id (GUID) for a policy object so references to it can be expressed in AD
|
||
|
|
Size:
|
||
|
|
Update Frequency:
|
||
|
|
Update Privilege:
|
||
|
|
UI:
|
||
|
|
|
||
|
|
cn = ms-wmi-ID
|
||
|
|
singleValued = TRUE
|
||
|
|
objectClass = attributeSchema
|
||
|
|
attributeID = 1.2.840.113556.1.4.7000.418.6
|
||
|
|
attributeSyntax = 2.5.5.12 // unicode string
|
||
|
|
oMSyntax = 64
|
||
|
|
searchFlags = 1
|
||
|
|
|
||
|
|
Usage: signed integer minimum value for a numeric range parameter
|
||
|
|
Size:
|
||
|
|
Update Frequency:
|
||
|
|
Update Privilege:
|
||
|
|
UI:
|
||
|
|
|
||
|
|
cn = ms-wmi-intMin
|
||
|
|
singleValued = TRUE
|
||
|
|
objectClass = attributeSchema
|
||
|
|
attributeID = 1.2.840.113556.1.4.7000.418.7
|
||
|
|
attributeSyntax = 2.5.5.9 // Integer
|
||
|
|
oMSyntax = 2
|
||
|
|
searchFlags = 0
|
||
|
|
|
||
|
|
Usage: signed integer maximum value for a numeric range parameter
|
||
|
|
Size:
|
||
|
|
Update Frequency:
|
||
|
|
Update Privilege:
|
||
|
|
UI:
|
||
|
|
|
||
|
|
cn = ms-wmi-intMax
|
||
|
|
singleValued = TRUE
|
||
|
|
objectClass = attributeSchema
|
||
|
|
attributeID = 1.2.840.113556.1.4.7000.418.8
|
||
|
|
attributeSyntax = 2.5.5.9 // Integer
|
||
|
|
oMSyntax = 2
|
||
|
|
searchFlags = 0
|
||
|
|
|
||
|
|
Usage: signed integer collection of set members for a numeric set parameter
|
||
|
|
Size:
|
||
|
|
Update Frequency:
|
||
|
|
Update Privilege:
|
||
|
|
UI:
|
||
|
|
|
||
|
|
cn = ms-wmi-intValidValues
|
||
|
|
singleValued = FALSE
|
||
|
|
objectClass = attributeSchema
|
||
|
|
attributeID = 1.2.840.113556.1.4.7000.418.9
|
||
|
|
attributeSyntax = 2.5.5.9 // Integer
|
||
|
|
oMSyntax = 2
|
||
|
|
searchFlags = 0
|
||
|
|
|
||
|
|
Usage:
|
||
|
|
Size:
|
||
|
|
Update Frequency:
|
||
|
|
Update Privilege:
|
||
|
|
UI:
|
||
|
|
|
||
|
|
cn = ms-wmi-Name
|
||
|
|
singleValued = TRUE
|
||
|
|
objectClass = attributeSchema
|
||
|
|
attributeID = 1.2.840.113556.1.4.7000.418.10
|
||
|
|
attributeSyntax = 2.5.5.12 // unicode string
|
||
|
|
oMSyntax = 64
|
||
|
|
searchFlags = 0
|
||
|
|
|
||
|
|
Usage: the name of a parameter object that is part of some policy instance
|
||
|
|
Size:
|
||
|
|
Update Frequency:
|
||
|
|
Update Privilege:
|
||
|
|
UI:
|
||
|
|
|
||
|
|
cn = ms-wmi-PropertyName
|
||
|
|
singleValued = TRUE
|
||
|
|
objectClass = attributeSchema
|
||
|
|
attributeID = 1.2.840.113556.1.4.7000.418.11
|
||
|
|
attributeSyntax = 2.5.5.12 // unicode string
|
||
|
|
oMSyntax = 64
|
||
|
|
searchFlags = 0
|
||
|
|
|
||
|
|
Usage: collection of one or more strings representing rules belonging to some som object
|
||
|
|
Size:
|
||
|
|
Update Frequency:
|
||
|
|
Update Privilege:
|
||
|
|
UI:
|
||
|
|
|
||
|
|
cn = ms-wmi-Query
|
||
|
|
singleValued = TRUE
|
||
|
|
objectClass = attributeSchema
|
||
|
|
attributeID = 1.2.840.113556.1.4.7000.418.12
|
||
|
|
attributeSyntax = 2.5.5.12 // unicode string
|
||
|
|
oMSyntax = 64
|
||
|
|
searchFlags = 0
|
||
|
|
|
||
|
|
Usage: collection of one or more strings representing rules belonging to some som object
|
||
|
|
Size:
|
||
|
|
Update Frequency:
|
||
|
|
Update Privilege:
|
||
|
|
UI:
|
||
|
|
|
||
|
|
cn = ms-wmi-QueryLanguage
|
||
|
|
singleValued = TRUE
|
||
|
|
objectClass = attributeSchema
|
||
|
|
attributeID = 1.2.840.113556.1.4.7000.418.13
|
||
|
|
attributeSyntax = 2.5.5.12 // unicode string
|
||
|
|
oMSyntax = 64
|
||
|
|
searchFlags = 0
|
||
|
|
|
||
|
|
Usage: Optional organization that an object is associated with
|
||
|
|
Size:
|
||
|
|
Update Frequency:
|
||
|
|
Update Privilege:
|
||
|
|
UI:
|
||
|
|
|
||
|
|
cn = ms-wmi-SourceOrganization
|
||
|
|
singleValued = TRUE
|
||
|
|
objectClass = attributeSchema
|
||
|
|
attributeID = 1.2.840.113556.1.4.7000.418.14
|
||
|
|
attributeSyntax = 2.5.5.12 // unicode string
|
||
|
|
oMSyntax = 64
|
||
|
|
searchFlags = 0
|
||
|
|
|
||
|
|
Usage: The name of the actual policy type that an instance of PolicyTemplate actually represents
|
||
|
|
Size:
|
||
|
|
Update Frequency:
|
||
|
|
Update Privilege:
|
||
|
|
UI:
|
||
|
|
|
||
|
|
cn = ms-wmi-TargetClass
|
||
|
|
singleValued = TRUE
|
||
|
|
objectClass = attributeSchema
|
||
|
|
attributeID = 1.2.840.113556.1.4.7000.418.15
|
||
|
|
attributeSyntax = 2.5.5.12 // unicode string
|
||
|
|
oMSyntax = 64
|
||
|
|
searchFlags = 0
|
||
|
|
|
||
|
|
Usage: The namespace in WMI that an object should reside in
|
||
|
|
Size:
|
||
|
|
Update Frequency:
|
||
|
|
Update Privilege:
|
||
|
|
UI:
|
||
|
|
|
||
|
|
cn = ms-wmi-TargetNameSpace
|
||
|
|
singleValued = TRUE
|
||
|
|
objectClass = attributeSchema
|
||
|
|
attributeID = 1.2.840.113556.1.4.7000.418.16
|
||
|
|
attributeSyntax = 2.5.5.12 // unicode string
|
||
|
|
oMSyntax = 64
|
||
|
|
searchFlags = 0
|
||
|
|
|
||
|
|
Usage:
|
||
|
|
Size:
|
||
|
|
Update Frequency:
|
||
|
|
Update Privilege:
|
||
|
|
UI:
|
||
|
|
|
||
|
|
cn = ms-wmi-TargetObject
|
||
|
|
singleValued = TRUE
|
||
|
|
objectClass = attributeSchema
|
||
|
|
attributeID = 1.2.840.113556.1.4.7000.418.17
|
||
|
|
attributeSyntax = 2.5.5.12 // unicode string
|
||
|
|
oMSyntax = 64
|
||
|
|
searchFlags = 0
|
||
|
|
|
||
|
|
Usage:
|
||
|
|
Size:
|
||
|
|
Update Frequency:
|
||
|
|
Update Privilege:
|
||
|
|
UI:
|
||
|
|
|
||
|
|
cn = ms-wmi-TargetType
|
||
|
|
singleValued = TRUE
|
||
|
|
objectClass = attributeSchema
|
||
|
|
attributeID = 1.2.840.113556.1.4.7000.418.18
|
||
|
|
attributeSyntax = 2.5.5.12 // unicode string
|
||
|
|
oMSyntax = 64
|
||
|
|
searchFlags = 0
|
||
|
|
|
||
|
|
Usage:
|
||
|
|
Size:
|
||
|
|
Update Frequency:
|
||
|
|
Update Privilege:
|
||
|
|
UI:
|
||
|
|
|
||
|
|
cn = ms-wmi-Mof
|
||
|
|
singleValued = TRUE
|
||
|
|
objectClass = attributeSchema
|
||
|
|
attributeID = 1.2.840.113556.1.4.7000.418.19
|
||
|
|
attributeSyntax = 2.5.5.12 // unicode string
|
||
|
|
oMSyntax = 64
|
||
|
|
searchFlags = 0
|
||
|
|
|