EguibarIT

1.85.144

Config.xml

                                <?xml version="1.0" encoding="utf-8"?>

<N>

   <RegisteredOrg>EguibarIT</RegisteredOrg>

   <RegisteredOwner>Vicente Rodriguez Eguibar</RegisteredOwner>

   <PCs>

      <DC1>

         <Name>DC1</Name>

         <IPv4>192.168.0.200</IPv4>

         <PrefixLengthIPv4>23</PrefixLengthIPv4>

         <IPv6>fd36:46d4:a1a7:9d18::200</IPv6>

         <PrefixLengthIPv6>64</PrefixLengthIPv6>

         <DNS1IPv4>192.168.1.1</DNS1IPv4>

         <DNS1IPv6>fd36:46d4:a1a7:9d18::1</DNS1IPv6>

         <NetBIOSDomainName>EguibarIT</NetBIOSDomainName>

         <DnsDomainName>EguibarIT.local</DnsDomainName>

         <Disks>Multiple-Disks</Disks>

      </DC1>

      <DC2>

         <Name>DC2</Name>

         <IPv4>192.168.0.100</IPv4>

         <PrefixLengthIPv4>23</PrefixLengthIPv4>

         <IPv6>fd36:46d4:a1a7:9d18::100</IPv6>

         <PrefixLengthIPv6>64</PrefixLengthIPv6>

         <DNS1IPv4>192.168.1.1</DNS1IPv4>

         <DNS1IPv6>fd36:46d4:a1a7:9d18::1</DNS1IPv6>

         <NetBIOSDomainName>EguibarIT</NetBIOSDomainName>

         <DnsDomainName>EguibarIT.local</DnsDomainName>

      </DC2>

      <DC3>

         <Name>DC3</Name>

         <IPv4>192.168.0.150</IPv4>

         <PrefixLengthIPv4>23</PrefixLengthIPv4>

         <IPv6>fd36:46d4:a1a7:9d18::150</IPv6>

         <PrefixLengthIPv6>64</PrefixLengthIPv6>

         <NetBIOSDomainName>Admin</NetBIOSDomainName>

         <DnsDomainName>Admin.local</DnsDomainName>

      </DC3>

      <DC4>

         <Name>DC4</Name>

         <IPv4>192.168.0.50</IPv4>

         <PrefixLengthIPv4>23</PrefixLengthIPv4>

         <IPv6>fd36:46d4:a1a7:9d18::50</IPv6>

         <PrefixLengthIPv6>64</PrefixLengthIPv6>

         <NetBIOSDomainName>Admin</NetBIOSDomainName>

         <DnsDomainName>Admin.local</DnsDomainName>

      </DC4>

      <PAW0>

         <Name>PAW0</Name>

         <IPv4>192.168.0.240</IPv4>

         <PrefixLengthIPv4>23</PrefixLengthIPv4>

         <IPv6>fd36:46d4:a1a7:9d18::240</IPv6>

         <PrefixLengthIPv6>64</PrefixLengthIPv6>

      </PAW0>

      <PAW1>

         <Name>PAW1</Name>

         <IPv4>192.168.0.70</IPv4>

         <PrefixLengthIPv4>23</PrefixLengthIPv4>

         <IPv6>fd36:46d4:a1a7:9d18::70</IPv6>

         <PrefixLengthIPv6>64</PrefixLengthIPv6>

      </PAW1>

      <PAW2>

         <Name>PAW2</Name>

         <IPv4>192.168.0.140</IPv4>

         <PrefixLengthIPv4>23</PrefixLengthIPv4>

         <IPv6>fd36:46d4:a1a7:9d18::140</IPv6>

         <PrefixLengthIPv6>64</PrefixLengthIPv6>

      </PAW2>

      <PC1>

         <Name>PC1</Name>

         <IPv4>192.168.0.40</IPv4>

         <PrefixLengthIPv4>23</PrefixLengthIPv4>

         <IPv6>fd36:46d4:a1a7:9d18::40</IPv6>

         <PrefixLengthIPv6>64</PrefixLengthIPv6>

      </PC1>

      <PC2>

         <Name>PC2</Name>

         <IPv4>192.168.0.72</IPv4>

         <PrefixLengthIPv4>23</PrefixLengthIPv4>

         <IPv6>fd36:46d4:a1a7:9d18::72</IPv6>

         <PrefixLengthIPv6>64</PrefixLengthIPv6>

      </PC2>

      <PC3>

         <Name>PC3</Name>

         <IPv4>192.168.0.142</IPv4>

         <PrefixLengthIPv4>23</PrefixLengthIPv4>

         <IPv6>fd36:46d4:a1a7:9d18::142</IPv6>

         <PrefixLengthIPv6>64</PrefixLengthIPv6>

      </PC3>

      <Srv1>

         <Name>Srv1</Name>

         <IPv4>192.168.0.230</IPv4>

         <PrefixLengthIPv4>23</PrefixLengthIPv4>

         <IPv6>fd36:46d4:a1a7:9d18::230</IPv6>

         <PrefixLengthIPv6>64</PrefixLengthIPv6>

      </Srv1>

      <Srv2>

         <Name>Srv2</Name>

         <IPv4>192.168.0.30</IPv4>

         <PrefixLengthIPv4>23</PrefixLengthIPv4>

         <IPv6>fd36:46d4:a1a7:9d18::30</IPv6>

         <PrefixLengthIPv6>64</PrefixLengthIPv6>

      </Srv2>

      <Srv3>

         <Name>Srv3</Name>

         <IPv4>192.168.0.90</IPv4>

         <PrefixLengthIPv4>23</PrefixLengthIPv4>

         <IPv6>fd36:46d4:a1a7:9d18::90</IPv6>

         <PrefixLengthIPv6>64</PrefixLengthIPv6>

      </Srv3>

      <Srv4>

         <Name>Srv4</Name>

         <IPv4>192.168.0.170</IPv4>

         <PrefixLengthIPv4>23</PrefixLengthIPv4>

         <IPv6>fd36:46d4:a1a7:9d18::170</IPv6>

         <PrefixLengthIPv6>64</PrefixLengthIPv6>

      </Srv4>

      <Srv5>

         <Name>Srv5</Name>

         <IPv4>192.168.0.232</IPv4>

         <PrefixLengthIPv4>23</PrefixLengthIPv4>

         <IPv6>fd36:46d4:a1a7:9d18::232</IPv6>

         <PrefixLengthIPv6>64</PrefixLengthIPv6>

      </Srv5>

      <wsus1>

         <Name>wsus1</Name>

         <IPv4>192.168.0.20</IPv4>

         <PrefixLengthIPv4>23</PrefixLengthIPv4>

         <IPv6>fd36:46d4:a1a7:9d18::20</IPv6>

         <PrefixLengthIPv6>64</PrefixLengthIPv6>

      </wsus1>

      <ca1>

         <Name>CA1</Name>

         <IPv4>192.168.0.24</IPv4>

         <PrefixLengthIPv4>23</PrefixLengthIPv4>

         <IPv6>fd36:46d4:a1a7:9d18::24</IPv6>

         <PrefixLengthIPv6>64</PrefixLengthIPv6>

      </ca1>

      <scom1>

         <Name>scom1</Name>

         <IPv4>192.168.0.94</IPv4>

         <PrefixLengthIPv4>23</PrefixLengthIPv4>

         <IPv6>fd36:46d4:a1a7:9d18::94</IPv6>

         <PrefixLengthIPv6>64</PrefixLengthIPv6>

      </scom1>

      <sccm1>

         <Name>sccm1</Name>

         <IPv4>192.168.0.174</IPv4>

         <PrefixLengthIPv4>23</PrefixLengthIPv4>

         <IPv6>fd36:46d4:a1a7:9d18::174</IPv6>

         <PrefixLengthIPv6>64</PrefixLengthIPv6>

      </sccm1>

      <mdt1>

         <Name>mdt1</Name>

         <IPv4>192.168.0.234</IPv4>

         <PrefixLengthIPv4>23</PrefixLengthIPv4>

         <IPv6>fd36:46d4:a1a7:9d18::234</IPv6>

         <PrefixLengthIPv6>64</PrefixLengthIPv6>

      </mdt1>

      <wac1>

         <Name>wac1</Name>

         <IPv4>192.168.0.26</IPv4>

         <PrefixLengthIPv4>23</PrefixLengthIPv4>

         <IPv6>fd36:46d4:a1a7:9d18::26</IPv6>

         <PrefixLengthIPv6>64</PrefixLengthIPv6>

      </wac1>

      <DscSrv1>

         <Name>DscSrv1</Name>

         <IPv4>192.168.0.96</IPv4>

         <PrefixLengthIPv4>23</PrefixLengthIPv4>

         <IPv6>fd36:46d4:a1a7:9d18::96</IPv6>

         <PrefixLengthIPv6>64</PrefixLengthIPv6>

      </DscSrv1>

   </PCs>

   <IP>

      <GatewayIPv4>192.168.1.1</GatewayIPv4>

      <GatewayIPv6>fd36:46d4:a1a7:9d18:ceed:dcff:fe02:f87d</GatewayIPv6>

      <DNSserver1>192.168.1.1</DNSserver1>

      <DNSserver1IPv6>fd36:46d4:a1a7:9d18:ceed:dcff:fe02:f87d</DNSserver1IPv6>

      <IPv4ReverseZone>0.168.192.in-addr.arpa</IPv4ReverseZone>

      <IPv6ReverseZone>8.1.d.9.7.a.1.a.4.d.6.4.6.3.d.f.ip6.arpa</IPv6ReverseZone>

      <GoogleDns1Ipv4>8.8.8.8</GoogleDns1Ipv4>

      <GoogleDns2Ipv4>8.8.4.4</GoogleDns2Ipv4>

      <GoogleDns1Ipv6>2001:4860:4860::8888</GoogleDns1Ipv6>

      <GoogleDns2Ipv6>2001:4860:4860::8844</GoogleDns2Ipv6>

   </IP>

   <NTP>0.europe.pool.ntp.org,0x9 1.europe.pool.ntp.org,0xA 2.europe.pool.ntp.org,0xA

      3.europe.pool.ntp.org,0xA</NTP>

   <userCSVfile>StarWars-Users.csv</userCSVfile>

   <groupCSVfile>group.csv</groupCSVfile>

   <shareCSVfile>share.csv</shareCSVfile>

   <svcaccCSVfile>mngdsvcacc.csv</svcaccCSVfile>

   <Domains>

      <Prod>

         <NETBiosName>EguibarIT</NETBiosName>

         <DnsDomainName>EguibarIT.local</DnsDomainName>

         <CreateExContainers>False</CreateExContainers>

         <CreateDFS>True</CreateDFS>

         <CreateCA>False</CreateCA>

         <CreateDHCP>True</CreateDHCP>

         <CreateAGPM>True</CreateAGPM>

         <CreateLAPS>True</CreateLAPS>

      </Prod>

      <Admin>

         <NETBiosName>Admin</NETBiosName>

         <DnsDomainName>Admin.local</DnsDomainName>

         <CreateExContainers>False</CreateExContainers>

         <CreateDFS>True</CreateDFS>

         <CreateCA>False</CreateCA>

         <CreateDHCP>True</CreateDHCP>

         <CreateAGPM>True</CreateAGPM>

         <CreateLAPS>True</CreateLAPS>

      </Admin>

   </Domains>

   <DcPromo>

      <Unattended>GcInstall.ini</Unattended>

      <DomainLevel>10</DomainLevel>

      <ForestLevel>10</ForestLevel>

      <!--

            The functional level of the forest and root domain. This defaults to 7.

            Windows Server 2003    : 2

            Windows Server 2008    : 3

            Windows Server 2008 R2 : 4

            Windows Server 2012    : 5

            Windows Server 2012 R2 : 6

            Windows Server 2016    : 7

            Windows Server 2019    : -

            Windows Server 2022    : -

            Windows Server 2025    : 10

        -->

      <SysvolPath>C:\SYSVOL</SysvolPath>

      <NtdsPath>C:\NTDS</NtdsPath>

      <NtdsLogsPath>C:\NTDS</NtdsLogsPath>

   </DcPromo>

   <Shares>

      <ShareLocation>C:\Shares</ShareLocation>

      <RootShare>Shares</RootShare>

      <AreasName>Areas</AreasName>

      <HomeFoldersName>HomeFolder</HomeFoldersName>

   </Shares>

   <!-- Administration Area/Red Area/Tier0 objects -->

   <Admin>

      <OUs>

         <ItAdminOU>

            <Name>Admin</Name>

            <description>OU for IT Administration purposes, containing objects necessary for theses

               tasks</description>

         </ItAdminOU>

         <ItAdminAccountsOU>

            <Name>Users</Name>

            <description>IT Administration purposes, containing Privileged and SemiPrivileged users</description>

         </ItAdminAccountsOU>

         <ItAdminGroupsOU>

            <Name>Groups</Name>

            <description>IT Administration purposes, containing SemiPrivileged groups</description>

         </ItAdminGroupsOU>

         <ItAdminSrvGroupsOU>

            <Name>Server Access Groups</Name>

            <description>IT Administration purposes, containing groups used to grant local server

               Admin access.</description>

         </ItAdminSrvGroupsOU>

         <ItPrivGroupsOU>

            <Name>PG</Name>

            <description>IT Administration purposes, containing Privileged groups</description>

         </ItPrivGroupsOU>

         <ItExchangeOU>

            <Name>Exchange</Name>

            <description></description>

         </ItExchangeOU>

         <ItRightsOU>

            <Name>Rights</Name>

            <description>IT Administration purposes, containing Domain Local groups referenced on

               ACLs</description>

         </ItRightsOU>

         <ItHousekeepingOU>

            <Name>Housekeeping</Name>

            <description>IT Administration purposes, containing staled objects (users, computers,

               etc.) in quarentine</description>

         </ItHousekeepingOU>

         <ItPawOU>

            <Name>PAW</Name>

            <description>Container for PAWs according to tier</description>

         </ItPawOU>

         <ItPawT0OU>

            <Name>PawT0</Name>

            <description>Tier 0 PAWs</description>

         </ItPawT0OU>

         <ItPawT1OU>

            <Name>PawT1</Name>

            <description>Tier 1 PAWs</description>

         </ItPawT1OU>

         <ItPawT2OU>

            <Name>PawT2</Name>

            <description>Tier 2 PAWs</description>

         </ItPawT2OU>

         <ItPawStagingOU>

            <Name>PawStaging</Name>

            <description>PAW staging and maintenance</description>

         </ItPawStagingOU>

         <ItServiceAccountsOU>

            <Name>Service Accounts</Name>

            <description>IT Administration purposes, containing Service Accounts, Managed Service

               Accounts and Group Managed Service Accounts</description>

         </ItServiceAccountsOU>

         <ItSAT0OU>

            <Name>T0SA</Name>

            <description>Tier 0 Service Accounts</description>

         </ItSAT0OU>

         <ItSAT1OU>

            <Name>T1SA</Name>

            <description>Tier 1 Service Accounts</description>

         </ItSAT1OU>

         <ItSAT2OU>

            <Name>T2SA</Name>

            <description>Tier 2 Service Accounts</description>

         </ItSAT2OU>

         <ItInfraOU>

            <Name>Infra</Name>

            <description>IT Administration purposes, containing IT Infrastructure Services</description>

         </ItInfraOU>

         <ItInfraT0OU>

            <Name>InfraT0</Name>

            <description>Tier 0 Infrastructure Services</description>

         </ItInfraT0OU>

         <ItInfraT1OU>

            <Name>InfraT1</Name>

            <description>Tier 1 Infrastructure Services</description>

         </ItInfraT1OU>

         <ItInfraT2OU>

            <Name>InfraT2</Name>

            <description>Tier 2 Infrastructure Services</description>

         </ItInfraT2OU>

         <ItInfraStagingOU>

            <Name>InfraStaging</Name>

            <description>Infrastructure Services staging and maintenance</description>

         </ItInfraStagingOU>

         <ItNewComputersOU>

            <Name>Quarantine-PC</Name>

            <description>IT Administration (quarantine), New Default Container for COMPUTERS</description>

         </ItNewComputersOU>

         <ItNewUsersOU>

            <Name>Quarantine-Users</Name>

            <description>IT Administration (quarantine), New Default Container for USERS</description>

         </ItNewUsersOU>

      </OUs>

      <Users>

         <Admin>

            <Name>TheGood</Name>

            <description>Default Built-In Administrator account</description>

            <department></department>

            <Country></Country>

            <State></State>

         </Admin>

         <NEWAdmin>

            <Name>TheUgly</Name>

            <description>New Administrator account used to replace the Built-In Administrator

               account, which is disabled and not used</description>

            <department>IT Operations and Architecture</department>

            <Country>Mexico</Country>

            <State>Puebla</State>

         </NEWAdmin>

         <Guest>

            <Name>TheBad</Name>

            <description>Default Guest account</description>

            <department></department>

            <Country></Country>

            <State></State>

         </Guest>

      </Users>

      <gMSA>

         <AGPM>

            <Name>msa_AGPM</Name>

            <SamAccountName>msa_AGPM</SamAccountName>

            <Description>Managed Service account used for Advanced Group Policy Management service</Description>

            <DisplayName></DisplayName>

         </AGPM>

         <AdTaskScheduler>

            <Name>gMSA_AdTskSchd</Name>

            <SamAccountName>gMSA_AdTskSchd</SamAccountName>

            <Description>Group Managed Service Account used by Domain Controllers to securely run

               scheduled tasks.</Description>

            <DisplayName>AD Task Scheduler Group Managed Service Account</DisplayName>

            <C></C>

            <Co>EguibarIT</Co>

            <Company></Company>

            <Department>IT Operations</Department>

            <l>Mexico</l>

         </AdTaskScheduler>

      </gMSA>

      <GPOs>

         <DefaultDomain>

            <Name>Default Domain Policy</Name>

            <Scope></Scope>

            <gpoLink></gpoLink>

            <backupID>449AB838-5CD8-4C71-B99C-CBD86AC4F49E</backupID>

         </DefaultDomain>

         <DefaultDomainControllers>

            <Name>Default Domain Controllers Policy</Name>

            <Scope></Scope>

            <gpoLink></gpoLink>

            <backupID>C6A0C480-D6FB-4999-BE97-22BBFBA5446C</backupID>

         </DefaultDomainControllers>

         <DCbaseline>

            <Name>DomainControllers</Name>

            <Scope>C</Scope>

            <gpoLink>OU=Domain Controllers</gpoLink>

            <backupID>D1C229AA-D61C-4107-93B8-AA6389D6D674</backupID>

         </DCbaseline>

         <PCbaseline>

            <Name></Name>

            <Scope>C</Scope>

            <gpoLink></gpoLink>

            <backupID>DF2E783B-CC73-4710-86BA-734BC9A3930B</backupID>

         </PCbaseline>

         <Userbaseline>

            <Name></Name>

            <Scope>U</Scope>

            <gpoLink></gpoLink>

            <backupID>13861E2A-3EA2-41B7-B88C-0EF81E57A8C7</backupID>

         </Userbaseline>

         <AdminUserbaseline>

            <Name>Admin</Name>

            <Scope>U</Scope>

            <gpoLink></gpoLink>

            <backupID></backupID>

         </AdminUserbaseline>

         <PAWbaseline>

            <Name>PAW</Name>

            <Scope>C</Scope>

            <gpoLink></gpoLink>

            <backupID>7DFB26B1-5358-4637-A5DD-F1E2AB0CD6C8</backupID>

         </PAWbaseline>

         <PAWT0baseline>

            <Name>PawT0</Name>

            <Scope>C</Scope>

            <gpoLink></gpoLink>

            <backupID>088AA3A3-6CE7-407F-8487-23C5B3CDF382</backupID>

         </PAWT0baseline>

         <PawStagingbaseline>

            <Name>PawStaging</Name>

            <Scope>C</Scope>

            <gpoLink></gpoLink>

            <backupID>FF1E85C7-C236-44BA-B715-15F207B0BF73</backupID>

         </PawStagingbaseline>

         <INFRAbaseline>

            <Name>Infra</Name>

            <Scope>C</Scope>

            <gpoLink></gpoLink>

            <backupID>03BFC58A-7E1E-415D-9D17-990362FA7DFC</backupID>

         </INFRAbaseline>

         <INFRAT0baseline>

            <Name>InfraT0</Name>

            <Scope>C</Scope>

            <gpoLink></gpoLink>

            <backupID>6D768CF7-502C-434A-805E-5A18579C5207</backupID>

         </INFRAT0baseline>

         <INFRAStagingBaseline>

            <Name>InfraStaging</Name>

            <Scope>C</Scope>

            <gpoLink></gpoLink>

            <backupID>29B65987-9A81-4BBA-9196-4ED4F204DAEC</backupID>

         </INFRAStagingBaseline>

         <Adminbaseline>

            <Name>ItAdmin</Name>

            <Scope>C</Scope>

            <gpoLink></gpoLink>

            <backupID></backupID>

         </Adminbaseline>

         <ServersBaseline>

            <Name>Servers</Name>

            <Scope>C</Scope>

            <gpoLink></gpoLink>

            <backupID>C4697770-DDA4-4567-AE14-DE33C4D08CC5</backupID>

         </ServersBaseline>

      </GPOs>

      <PSOs>

         <ItAdminsPSO>

            <Name>ItAminsPSO</Name>

            <Precedence>500</Precedence>

            <ComplexityEnabled>$true</ComplexityEnabled>

            <Description>IT Administrators Accounts Password Policy</Description>

            <DisplayName>IT Amins PSO</DisplayName>

            <LockoutDuration>1.00:00:00</LockoutDuration>

            <LockoutObservationWindow>0.12:00:00</LockoutObservationWindow>

            <LockoutThreshold>5</LockoutThreshold>

            <MaxPasswordAge>42.00:00:00</MaxPasswordAge>

            <MinPasswordAge>1.00:00:00</MinPasswordAge>

            <MinPasswordLength>14</MinPasswordLength>

            <PasswordHistoryCount>48</PasswordHistoryCount>

            <ReversibleEncryptionEnabled>$true</ReversibleEncryptionEnabled>

         </ItAdminsPSO>

         <ServiceAccountsPSO>

            <Name>ServiceAccountsPSO</Name>

            <Precedence>400</Precedence>

            <ComplexityEnabled>$true</ComplexityEnabled>

            <Description>Service Accounts Password Policy</Description>

            <DisplayName>Service Account PSO</DisplayName>

            <LockoutDuration>4.00:00:00</LockoutDuration>

            <LockoutObservationWindow>2.00:00:00</LockoutObservationWindow>

            <LockoutThreshold>3</LockoutThreshold>

            <MaxPasswordAge>42.00:00:00</MaxPasswordAge>

            <MinPasswordAge>1.00:00:00</MinPasswordAge>

            <MinPasswordLength>32</MinPasswordLength>

            <PasswordHistoryCount>90</PasswordHistoryCount>

            <ReversibleEncryptionEnabled>$true</ReversibleEncryptionEnabled>

         </ServiceAccountsPSO>

      </PSOs>

      <GG>

         <InfraAdmins>

            <Name>InfraAdmins</Name>

            <DisplayName>Infrastructure Admins</DisplayName>

            <Description>Members of this group are Infrastructure Administrators</Description>

         </InfraAdmins>

         <AdAdmins>

            <Name>AdAdmins</Name>

            <DisplayName>Active Directory Admins</DisplayName>

            <Description>Members of this group are Active Directory Administrators</Description>

         </AdAdmins>

         <Tier0ServiceAccount>

            <Name>T0SA</Name>

            <DisplayName>Tier 0 Service Account</DisplayName>

            <Description>Members of this group are Tier 0 Service Account</Description>

         </Tier0ServiceAccount>

         <Tier1ServiceAccount>

            <Name>T1SA</Name>

            <DisplayName>Tier 1 Service Account</DisplayName>

            <Description>Members of this group are Tier 1 Service Account</Description>

         </Tier1ServiceAccount>

         <Tier2ServiceAccount>

            <Name>T2SA</Name>

            <DisplayName>Tier 2 Service Account</DisplayName>

            <Description>Members of this group are Tier 2 Service Account</Description>

         </Tier2ServiceAccount>

         <GpoAdmins>

            <Name>GpoAdmins</Name>

            <DisplayName>GPO Admin</DisplayName>

            <Description>Members of this group are GPO Administrators</Description>

         </GpoAdmins>

         <Tier0Admins>

            <Name>Tier0Admins</Name>

            <DisplayName>Tier 0 Administrators</DisplayName>

            <Description>Members of this group are Tier 0 Administrators</Description>

         </Tier0Admins>

         <Tier1Admins>

            <Name>Tier1Admins</Name>

            <DisplayName>Tier 1 Administrators</DisplayName>

            <Description>Members of this group are Tier 1 Administrators</Description>

         </Tier1Admins>

         <Tier2Admins>

            <Name>Tier2Admins</Name>

            <DisplayName>Tier 2 Administrators</DisplayName>

            <Description>Members of this group are Tier 2 Administrators</Description>

         </Tier2Admins>

         <AllSiteAdmins>

            <Name>AllSiteAdmins</Name>

            <DisplayName>All Sites Admins</DisplayName>

            <Description>Members of this group are Site Administrators of all sites</Description>

         </AllSiteAdmins>

         <AllGALAdmins>

            <Name>AllGALAdmins</Name>

            <DisplayName>All GAL Admins</DisplayName>

            <Description>Members of this group are Global Address List (GAL) Administrators</Description>

         </AllGALAdmins>

         <ServiceDesk>

            <Name>ServiceDesk</Name>

            <DisplayName>Service Desk</DisplayName>

            <Description>Members of this group are Service Desk Agents</Description>

         </ServiceDesk>

         <GlobalUserAdmins>

            <Name>GlobalUserAdmins</Name>

            <DisplayName>Global User Admins</DisplayName>

            <Description>Members of this group are Global User Administrators</Description>

         </GlobalUserAdmins>

         <GlobalPcAdmins>

            <Name>GlobalPcAdmins</Name>

            <DisplayName>Global PC Admins</DisplayName>

            <Description>Members of this group are Global PC Administrators</Description>

         </GlobalPcAdmins>

         <GlobalGroupAdmins>

            <Name>GlobalGroupAdmins</Name>

            <DisplayName>Global Group Admins</DisplayName>

            <Description>Members of this group are Global Group Administrators</Description>

         </GlobalGroupAdmins>

      </GG>

      <LG>

         <InfraRight>

            <Name>InfraRight</Name>

            <DisplayName>Infrastructure Right</DisplayName>

            <Description>Delegated Rights to make Infrastructure Changes</Description>

         </InfraRight>

         <AdRight>

            <Name>AdRight</Name>

            <DisplayName>Active Directory Right</DisplayName>

            <Description>Delegated Rights to make Active Directory Changes</Description>

         </AdRight>

         <PUM>

            <Name>PUM</Name>

            <DisplayName>Privileged User Management Right</DisplayName>

            <Description>Delegated Rights for Privileged User Management</Description>

         </PUM>

         <PGM>

            <Name>PGM</Name>

            <DisplayName>Privileged Group Management Right</DisplayName>

            <Description>Delegated Rights for Privileged Group Management</Description>

         </PGM>

         <UM>

            <Name>UM</Name>

            <DisplayName>Semi-Privileged User Management Right</DisplayName>

            <Description>Delegated Rights for Semi-Privileged User Management</Description>

         </UM>

         <GM>

            <Name>GM</Name>

            <DisplayName>Semi-Privileged Group Management Right</DisplayName>

            <Description>Delegated Rights for Semi-Privileged Group Management</Description>

         </GM>

         <SAGM>

            <Name>SAGM</Name>

            <DisplayName>Semi-Privileged Group Management for Local Server Administrative Right</DisplayName>

            <Description>Delegated Rights for Semi-Privileged Local Server Admin Access Group

               Management</Description>

         </SAGM>

         <PISM>

            <Name>PISM</Name>

            <DisplayName>Privileged Infrastructure Services Management Right</DisplayName>

            <Description>Delegated Rights for Privileged Infrastructure Services Management</Description>

         </PISM>

         <PAWM>

            <Name>PAWM</Name>

            <DisplayName>Privileged Access Workstation Management Right</DisplayName>

            <Description>Delegated Rights for Privileged Access Workstation Management</Description>

         </PAWM>

         <PSAM>

            <Name>PSAM</Name>

            <DisplayName>Privileged Service Account Management</DisplayName>

            <Description>Delegated Rights to manage Service Accounts, Managed Service Accounts and

               Group Managed Service Accounts</Description>

         </PSAM>

         <PAWs>

            <Name>PAWs</Name>

            <DisplayName>PAWs</DisplayName>

            <Description>Group containing All PAWs</Description>

         </PAWs>

         <InfraServers>

            <Name>InfrastructureServers</Name>

            <DisplayName>Infrastructure Servers</DisplayName>

            <Description>Group containing All Infrastructure Servers</Description>

         </InfraServers>

         <GpoAdminRight>

            <Name>GpoAdminRight</Name>

            <DisplayName>GPO Administrator Right</DisplayName>

            <Description>Delegated Rights to Administer GPO</Description>

         </GpoAdminRight>

         <DnsAdminRight>

            <Name>DnsAdminRight</Name>

            <DisplayName>DNS Administrator Right</DisplayName>

            <Description>Delegated Rights to Administer DNS</Description>

         </DnsAdminRight>

         <DirReplRight>

            <Name>DirReplRight</Name>

            <DisplayName>Directory Replication Right</DisplayName>

            <Description>Delegated Rights to Replicate Directory</Description>

         </DirReplRight>

         <PromoteDcRight>

            <Name>PromoteDcRight</Name>

            <DisplayName>Promote DC Right</DisplayName>

            <Description>Delegated Rights to promote and Demote Domain Controllers</Description>

         </PromoteDcRight>

         <TransferFSMOright>

            <Name>TransferFSMOright</Name>

            <DisplayName>Transfer FSMO roles</DisplayName>

            <Description>Delegated Rights to transfer FSMO roles</Description>

         </TransferFSMOright>

         <DcManagement>

            <Name>DcManagement</Name>

            <DisplayName>DC Management</DisplayName>

            <Description>Delegated rights to administer the Domain Controller (Install Software,

               Create files/Folders, etc.)</Description>

         </DcManagement>

         <GlobalGroupRight>

            <Name>GlobalGroupRight</Name>

            <DisplayName>Global Group Management Right</DisplayName>

            <Description>Delegated Rights to Manage Global Groups</Description>

         </GlobalGroupRight>

         <GlobalAppAccUserRight>

            <Name>GlobalAppAccUserRight</Name>

            <DisplayName>Global Application Access User Management Right</DisplayName>

            <Description>Delegated Rights to Manage users for Application Access</Description>

         </GlobalAppAccUserRight>

      </LG>

      <UPNsufix>

         <DefaultUpnSufix>EguibarIT.local</DefaultUpnSufix>

      </UPNsufix>

   </Admin>

   <AdminXtra>

      <OUs>

         <ItExchangeOU>

            <Name>Exchange</Name>

            <description>OU for IT Administration purposes, Exchange</description>

         </ItExchangeOU>

         <ItExDistGroups>

            <Name>Distribution Groups</Name>

            <description>OU for IT Administration purposes, containing Exchange Distribution Groups</description>

         </ItExDistGroups>

         <ItExExternalContact>

            <Name>External Contacts</Name>

            <description>OU for IT Administration purposes, containing Exchange External Contacts</description>

         </ItExExternalContact>

         <ItExResource>

            <Name>Resource Mailboxes</Name>

            <description>OU for IT Administration purposes, containing Exchange Resource Mailboxes</description>

         </ItExResource>

         <ItExShared>

            <Name>Shared Mailboxes</Name>

            <description>OU for IT Administration purposes, containing Exchange Shared Mailboxes</description>

         </ItExShared>

         <ItExEquip>

            <Name>Equipment Mailboxes</Name>

            <description>OU for IT Administration purposes, containing Exchange Equipment Mailboxes</description>

         </ItExEquip>

      </OUs>

      <GPOs>

         <ExCas>

            <Name>CAS</Name>

            <Scope></Scope>

            <gpoLink></gpoLink>

            <backupID>a1f3d411-282d-4d59-9026-8980e53c3f99</backupID>

         </ExCas>

         <ExHub>

            <Name>Hub</Name>

            <Scope></Scope>

            <gpoLink></gpoLink>

            <backupID>329d52a4-4c55-46b1-9b20-159ba1665cd3</backupID>

         </ExHub>

         <ExMailbox>

            <Name>Mailbox</Name>

            <Scope></Scope>

            <gpoLink></gpoLink>

            <backupID>20511458-fca3-43fa-b35c-e0dcaa18cef7</backupID>

         </ExMailbox>

         <ExEdge>

            <Name>Edge</Name>

            <Scope></Scope>

            <gpoLink></gpoLink>

            <backupID>482df34d-5af0-4bf3-8a03-40be657f8cff</backupID>

         </ExEdge>

      </GPOs>

      <GG>

         <DfsAdmins>

            <Name>DfsAdmins</Name>

            <DisplayName>DFS Admins</DisplayName>

            <Description>Members of this group are full DFS Administrators</Description>

         </DfsAdmins>

         <ExAdmins>

            <Name>ExAdmins</Name>

            <DisplayName>Exchange Admins</DisplayName>

            <Description>Members of this group are Exchange Administrators</Description>

         </ExAdmins>

         <PkiAdmins>

            <Name>PkiAdmins</Name>

            <DisplayName>Certificate Authority Administrator Group</DisplayName>

            <Description>Members of this group can Administer Certificate Authority</Description>

         </PkiAdmins>

         <PkiTemplateAdmins>

            <Name>PkiTemplateAdmins</Name>

            <DisplayName>Certificate Authority Template Admin Group</DisplayName>

            <Description>Members of this group can Manage Certificate Authority Templates</Description>

         </PkiTemplateAdmins>

         <DHCPAdmins>

            <Name>DHCPAdmins</Name>

            <DisplayName>DHCP Administrators</DisplayName>

            <Description>Members of this group are DHCP Administrators</Description>

         </DHCPAdmins>

      </GG>

      <LG>

         <GpoApproverRight>

            <Name>GpoApproverRight</Name>

            <DisplayName>GPO Approver Rights</DisplayName>

            <Description>Delegated Advanced Group Policy Management (AGPM) APPROVER Rights</Description>

         </GpoApproverRight>

         <GpoEditorRight>

            <Name>GpoEditorRight</Name>

            <DisplayName>GPO Editor Rights</DisplayName>

            <Description>Delegated Advanced Group Policy Management (AGPM) EDITOR Rights</Description>

         </GpoEditorRight>

         <GpoReviewerRight>

            <Name>GpoReviewerRight</Name>

            <DisplayName>GPO Reviewer Rights</DisplayName>

            <Description>Delegated Advanced Group Policy Management (AGPM) REVIEWER Rights</Description>

         </GpoReviewerRight>

         <DfsRight>

            <Name>DfsRight</Name>

            <DisplayName>DFS Right</DisplayName>

            <Description>Delegated Rights for DFS Administration</Description>

         </DfsRight>

         <ExRight>

            <Name>ExRight</Name>

            <DisplayName>Exchange Right</DisplayName>

            <Description>Delegated Rights for Exchange Management</Description>

         </ExRight>

         <PkiRight>

            <Name>PkiRight</Name>

            <DisplayName>Certificate Authority Rights Group</DisplayName>

            <Description>Delegated Rights to Administer Certificate Authority</Description>

         </PkiRight>

         <PkiTemplateRight>

            <Name>PkiTemplateRight</Name>

            <DisplayName>Certificate Authority Template Rights</DisplayName>

            <Description>Delegated Rights to Administer Certificate Authority Templates</Description>

         </PkiTemplateRight>

         <DHCPRight>

            <Name>DHCPRight</Name>

            <DisplayName>DHCP Rights</DisplayName>

            <Description>Delegated Rights to DHCP management</Description>

         </DHCPRight>

      </LG>

   </AdminXtra>

   <!-- Servers Area/Green Area/Tier1 objects -->

   <Servers>

      <OUs>

         <ServersOU>

            <Name>Servers</Name>

            <description>Root OU for Global Servers, containing computer server objects.</description>

         </ServersOU>

         <ApplicationOU>

            <Name>Apps</Name>

            <description>Global Application Servers</description>

         </ApplicationOU>

         <FileOU>

            <Name>File</Name>

            <description>Global File Servers</description>

         </FileOU>

         <HypervOU>

            <Name>Hyper-V</Name>

            <description>Global Hyper-V Servers</description>

         </HypervOU>

         <LinuxOU>

            <Name>Linux</Name>

            <description>Global Linux Servers</description>

         </LinuxOU>

         <RemoteDesktopOU>

            <Name>Remote Desktop</Name>

            <description>Global Remote Desktop Servers</description>

         </RemoteDesktopOU>

         <SqlOU>

            <Name>SQL</Name>

            <description>Global SQL Servers</description>

         </SqlOU>

         <WebOU>

            <Name>Web</Name>

            <description>Global Web Servers</description>

         </WebOU>

         <ExchangeOU>

            <Name>Exchange</Name>

            <description>OU for Global Exchange Servers</description>

         </ExchangeOU>

         <ExCasOU>

            <Name>CAS</Name>

            <description>OU for Global Exchange Client-Access Servers</description>

         </ExCasOU>

         <ExHubOU>

            <Name>HUB</Name>

            <description>OU for Global Exchange Hub Servers</description>

         </ExHubOU>

         <ExEdgeOU>

            <Name>UM Role</Name>

            <description>OU for Global Exchange Edge Servers</description>

         </ExEdgeOU>

         <ExMailboxOU>

            <Name>Mailbox</Name>

            <description>OU for Global Exchange Mailbox Servers</description>

         </ExMailboxOU>

         <ExMixedRolOU>

            <Name>Mixed Roles</Name>

            <description>OU for Global Exchange Mixed Servers</description>

         </ExMixedRolOU>

      </OUs>

      <GPOs>

         <Servers>

            <Name>Servers</Name>

            <Scope>C</Scope>

            <gpoLink></gpoLink>

            <backupID>79382470-AEA9-43AC-A494-CA2633BA1FA9</backupID>

         </Servers>

         <FileSrv>

            <Name>FileServer</Name>

            <Scope>C</Scope>

            <gpoLink></gpoLink>

            <backupID>5C450516-81E1-4B54-9B0D-530AFB7AE594</backupID>

         </FileSrv>

         <HyperV>

            <Name>HyperV</Name>

            <Scope>C</Scope>

            <gpoLink></gpoLink>

            <backupID>85B17C59-5E7A-4474-BF76-6DBEF710F8DA</backupID>

         </HyperV>

         <RemoteDesktop>

            <Name>RemoteDesktop</Name>

            <Scope>C</Scope>

            <gpoLink></gpoLink>

            <backupID>478E36A0-0D18-417C-90A6-01E9FC340243</backupID>

         </RemoteDesktop>

         <WebSrv>

            <Name>WebServer</Name>

            <Scope>C</Scope>

            <gpoLink></gpoLink>

            <backupID>C4A8CFC2-21EC-408E-B8B3-E5F3F6D7DBD1</backupID>

         </WebSrv>

      </GPOs>

      <GG>

         <Operations>

            <Name>Operations</Name>

            <DisplayName>Server Operations</DisplayName>

            <Description>Members of this group are Server Operators</Description>

         </Operations>

         <ServerAdmins>

            <Name>ServerAdmins</Name>

            <DisplayName>Server Admins</DisplayName>

            <Description>Members of this group are full Server Administrators</Description>

         </ServerAdmins>

         <HyperVAdmins>

            <Name>HyperVAdmins</Name>

            <DisplayName>Hyper-V Admins</DisplayName>

            <Description>Members of this group are full Hyper-V Administrators</Description>

         </HyperVAdmins>

      </GG>

      <LG>

         <SvrAdmRight>

            <Name>SvrAdmRight</Name>

            <DisplayName>Server Admin Right</DisplayName>

            <Description>Delegated Rights for Server Administration</Description>

         </SvrAdmRight>

         <SvrOpsRight>

            <Name>SvrOpsRight</Name>

            <DisplayName>Server Ops Management Right</DisplayName>

            <Description>Delegated Rights for Server Operations</Description>

         </SvrOpsRight>

      </LG>

   </Servers>

   <!-- Sites Area/Blue Area/Tier2 objects -->

   <Sites>

      <OUs>

         <SitesOU>

            <Name>Sites</Name>

            <description>Root OU for Sites, containing objects necessary for each defined site.</description>

            <Scope>C</Scope>

            <gpoLink></gpoLink>

            <backupID>B96355B5-3392-4B4E-90F2-A6A7134544AE</backupID>

         </SitesOU>

         <OuSiteUser>

            <Name>Users</Name>

            <description>Site for Physical users</description>

            <Scope>U</Scope>

            <gpoLink></gpoLink>

            <backupID>7C3F1D6F-9F31-4B8E-850F-3A67F8BC5CA8</backupID>

         </OuSiteUser>

         <OuSiteComputer>

            <Name>Desktops</Name>

            <description>Site for Desktop computers</description>

            <Scope>C</Scope>

            <gpoLink></gpoLink>

            <backupID>2406E8A5-02E6-4F62-8D3A-575EFCFE37A8</backupID>

         </OuSiteComputer>

         <OuSiteLaptop>

            <Name>Laptops</Name>

            <description>Site for Laptop computers</description>

            <Scope>C</Scope>

            <gpoLink></gpoLink>

            <backupID>2406E8A5-02E6-4F62-8D3A-575EFCFE37A8</backupID>

         </OuSiteLaptop>

         <OuSiteGroup>

            <Name>Groups</Name>

            <description>Site for Security Groups</description>

         </OuSiteGroup>

         <OuSitePrintQueue>

            <Name>Print Queues</Name>

            <description>Site for Print Queues published in AD</description>

         </OuSitePrintQueue>

         <OuSiteShares>

            <Name>Shares</Name>

            <description>Site for Shared Folders published in AD</description>

         </OuSiteShares>

         <OuSiteMailbox>

            <Name>Mailboxes</Name>

            <description>Site for mailboxes (Equipment, Resource and Shared)</description>

         </OuSiteMailbox>

         <OuSiteDistGroup>

            <Name>Distribution Groups</Name>

            <description>Site for Distribution Groups</description>

         </OuSiteDistGroup>

         <OuSiteContact>

            <Name>External Contacts</Name>

            <description>Site for External Contacts</description>

         </OuSiteContact>

         <OuSiteGlobal>

            <Name>_Global</Name>

            <description>GLOBAL OU, containing global objects for all sites.</description>

         </OuSiteGlobal>

         <OuSiteGlobalGroups>

            <Name>Groups</Name>

            <description>GLOBAL Groups OU, containing global group objects for all sites.</description>

         </OuSiteGlobalGroups>

         <OuSiteGlobalAppAccessUsers>

            <Name>Application Access Users</Name>

            <description>GLOBAL Application Access Users OU, containing global User objects for all

               sites.</description>

         </OuSiteGlobalAppAccessUsers>

      </OUs>

      <GG>

         <PwdAdmins>

            <Name>PwdAdmins</Name>

            <DisplayName>Password Admins</DisplayName>

            <Description>Site. Members of this group are Password admins of Site OU</Description>

         </PwdAdmins>

         <ComputerAdmins>

            <Name>ComputerAdmins</Name>

            <DisplayName>Computers Admins</DisplayName>

            <Description>Site. Members of this group are Computer admins of Site OU</Description>

         </ComputerAdmins>

         <GroupAdmins>

            <Name>GroupAdmins</Name>

            <DisplayName>Group Admins</DisplayName>

            <Description>Site. Members of this group are Group admins of Site OU</Description>

         </GroupAdmins>

         <UserAdmins>

            <Name>UserAdmins</Name>

            <DisplayName>User Admins</DisplayName>

            <Description>Site. Members of this group are User admins of Site OU</Description>

         </UserAdmins>

         <GALAdmins>

            <Name>GALAdmins</Name>

            <DisplayName>GAL Admins</DisplayName>

            <Description>Site. Members of this group are Global Address List (GAL) admins of Site OU</Description>

         </GALAdmins>

         <SiteAdmins>

            <Name>SiteAdmins</Name>

            <DisplayName>Site Admins</DisplayName>

            <Description>Site. Members of this group are Administrators of Site OU</Description>

         </SiteAdmins>

      </GG>

      <LG>

         <PwdRight>

            <Name>PwdRight</Name>

            <DisplayName>Password Management Right</DisplayName>

            <Description>Site. Delegated Password Management Right of Site OU</Description>

         </PwdRight>

         <PcRight>

            <Name>PcRight</Name>

            <DisplayName>Computer Management / Domain-Join Right</DisplayName>

            <Description>Site. Delegated Right to Manage and Domain-Join computers within Site OU</Description>

         </PcRight>

         <GroupRight>

            <Name>GroupRight</Name>

            <DisplayName>Group Right</DisplayName>

            <Description>Site. Delegated Right to administer Groups within Site OU</Description>

         </GroupRight>

         <CreateUserRight>

            <Name>CreateUserRight</Name>

            <DisplayName>Create Users Right</DisplayName>

            <Description>Site. Delegated Right of Site for creating/deleting users</Description>

         </CreateUserRight>

         <GALRight>

            <Name>GALRight</Name>

            <DisplayName>GAL Right</DisplayName>

            <Description>Site. Delegated Global Address List (GAL) Right of Site OU</Description>

         </GALRight>

         <SiteRight>

            <Name>SiteRight</Name>

            <DisplayName>Site Right</DisplayName>

            <Description>Site. Delegated Right of Site OU</Description>

         </SiteRight>

      </LG>

   </Sites>

   <DefaultPassword>P@ssword 123456</DefaultPassword>

   <!-- Naming Conventions -->

   <NC>

      <Delimiter>_</Delimiter>

      <LocalDomainGroupPreffix>SL</LocalDomainGroupPreffix>

      <GlobalGroupPreffix>SG</GlobalGroupPreffix>

      <UniversalGroupPreffix>SU</UniversalGroupPreffix>

      <AdminAccSufix0>T0</AdminAccSufix0>

      <AdminAccSufix1>T1</AdminAccSufix1>

      <AdminAccSufix2>T2</AdminAccSufix2>

      <!--

        #Open the configuration XML file

        $configXML = [xml](Get-Content (Join-Path -Path $DMscripts -ChildPath Config.xml -Resolve))

# Naming conventions hashtable

$NC = @{"sl"    = $confXML.n.NC.LocalDomainGroupPreffix;

        "sg"    = $confXML.n.NC.GlobalGroupPreffix;

        "su"    = $confXML.n.NC.UniversalGroupPreffix;

        "Delim" = $confXML.n.NC.Delimiter;

        "T0"    = $confXML.n.NC.AdminAccSufix0;

        "T1"    = $confXML.n.NC.AdminAccSufix1;

        "T2"    = $confXML.n.NC.AdminAccSufix2

}

# The following code

#('{0}{1}{2}{1}{3}' -f $NC["sg"], $NC["Delim"], $configXML.Config.Administration.lg.PAWM,

      $NC["T0"])

# will produce SG_PAWM_T0

       -->

   </NC>

</N>