Hi I'm working on Powershell script to create a machine account and as part of giving right to users / groups to have access to add that machine to the Domain im looking for some Rights GUID values .
On searching i got the below values for guid's:
RIGHTS_GUID_RESET_PASSWORD = "00299570-246D-11D0-A768-00AA006E0529"
RIGHTS_GUID_VALIDATED_WRITE_DNS = "72E39547-7B18-11D1-ADEF-00C04FD8D5CD"
RIGHTS_GUID_VALIDATED_WRITE_SPN = "F3A64788-5306-11D1-A9C5-0000F80367C1"
RIGHTS_GUID_ACCT_RESTRICTIONS = "4C164200-20C0-11D0-A768-00AA006E0529"
which helped in selecting the four options for domain user account security properties , what if i need to allow more permission for this security group , like i need to enable the "Change Password " permission for the "Domain Users" what will be the GUID value , can you please share the complete list of guid values or provide me a solution to add Domain users and provide him with necessary rights to get joined to the domain .
Os : win 10