diff --git a/cmd/api/src/api/v2/file_uploads_integration_test.go b/cmd/api/src/api/v2/file_uploads_integration_test.go
index 1c5ba6f2b2..bf2acb2959 100644
--- a/cmd/api/src/api/v2/file_uploads_integration_test.go
+++ b/cmd/api/src/api/v2/file_uploads_integration_test.go
@@ -170,6 +170,34 @@ func Test_FileUploadWorkFlowVersion6(t *testing.T) {
 	testCtx.AssertIngest(fixtures.IngestAssertions)
 }
 
+func Test_FileUploadVersion6AllOptionADCS(t *testing.T) {
+	testCtx := integration.NewContext(t, integration.StartBHServer)
+
+	if adcsFlag, err := testCtx.DB.GetFlagByKey("adcs"); err != nil {
+		t.Fatalf("unable to get adcs flag: %v", err)
+	} else {
+		adcsFlag.Enabled = true
+		testCtx.DB.SetFlag(adcsFlag)
+	}
+
+	testCtx.SendFileIngest([]string{
+		"v6/all/aiacas.json",
+		"v6/all/certtemplates.json",
+		"v6/all/computers.json",
+		"v6/all/containers.json",
+		"v6/all/domains.json",
+		"v6/all/enterprisecas.json",
+		"v6/all/gpos.json",
+		"v6/all/groups.json",
+		"v6/all/ntauthstores.json",
+		"v6/all/ous.json",
+		"v6/all/rootcas.json",
+		"v6/all/users.json",
+	})
+
+	testCtx.AssertIngest(fixtures.IngestADCSAssertions)
+}
+
 func Test_CompressedFileUploadWorkFlowVersion5(t *testing.T) {
 	testCtx := integration.NewContext(t, integration.StartBHServer)
 
diff --git a/cmd/api/src/test/fixtures/fixture.go b/cmd/api/src/test/fixtures/fixture.go
index a87ede3f3f..695d2b8a24 100644
--- a/cmd/api/src/test/fixtures/fixture.go
+++ b/cmd/api/src/test/fixtures/fixture.go
@@ -1,17 +1,17 @@
 // Copyright 2023 Specter Ops, Inc.
-// 
+//
 // Licensed under the Apache License, Version 2.0
 // you may not use this file except in compliance with the License.
 // You may obtain a copy of the License at
-// 
+//
 //     http://www.apache.org/licenses/LICENSE-2.0
-// 
+//
 // Unless required by applicable law or agreed to in writing, software
 // distributed under the License is distributed on an "AS IS" BASIS,
 // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 // See the License for the specific language governing permissions and
 // limitations under the License.
-// 
+//
 // SPDX-License-Identifier: Apache-2.0
 
 package fixtures
@@ -64,6 +64,7 @@ func (s loader) Get(path string) []byte {
 		s.errorHandler(path, err)
 		return nil
 	} else {
+		content = bytes.TrimPrefix(content, []byte("\xef\xbb\xbf"))
 		return content
 	}
 }
diff --git a/cmd/api/src/test/fixtures/fixtures/expected_ingest.go b/cmd/api/src/test/fixtures/fixtures/expected_ingest.go
index c783cb5ac7..7b06ce0c1a 100644
--- a/cmd/api/src/test/fixtures/fixtures/expected_ingest.go
+++ b/cmd/api/src/test/fixtures/fixtures/expected_ingest.go
@@ -18,6 +18,7 @@ package fixtures
 
 import (
 	"bytes"
+
 	"github.com/specterops/bloodhound/cypher/frontend"
 	"github.com/specterops/bloodhound/cypher/model"
 	"github.com/specterops/bloodhound/dawgs/graph"
@@ -246,7 +247,7 @@ var (
 	}
 )
 
-func formatQueryComponent(criteria graph.Criteria) string {
+func FormatQueryComponent(criteria graph.Criteria) string {
 	var (
 		emitter      = frontend.NewCypherEmitter(false)
 		stringBuffer = &bytes.Buffer{}
@@ -262,6 +263,6 @@ func formatQueryComponent(criteria graph.Criteria) string {
 func IngestAssertions(testCtrl test.Controller, tx graph.Transaction) {
 	for _, assertionCriteria := range ingestRelationshipAssertionCriteria {
 		_, err := tx.Relationships().Filter(assertionCriteria).First()
-		require.Nilf(testCtrl, err, "Unable to find an expected relationship: %s", formatQueryComponent(assertionCriteria))
+		require.Nilf(testCtrl, err, "Unable to find an expected relationship: %s", FormatQueryComponent(assertionCriteria))
 	}
 }
diff --git a/cmd/api/src/test/fixtures/fixtures/expected_ingest_adcs.go b/cmd/api/src/test/fixtures/fixtures/expected_ingest_adcs.go
new file mode 100644
index 0000000000..e6b5111810
--- /dev/null
+++ b/cmd/api/src/test/fixtures/fixtures/expected_ingest_adcs.go
@@ -0,0 +1,554 @@
+// Copyright 2023 Specter Ops, Inc.
+//
+// Licensed under the Apache License, Version 2.0
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+//
+// SPDX-License-Identifier: Apache-2.0
+
+package fixtures
+
+import (
+	"github.com/specterops/bloodhound/dawgs/graph"
+	"github.com/specterops/bloodhound/dawgs/query"
+	"github.com/specterops/bloodhound/graphschema/ad"
+	"github.com/specterops/bloodhound/graphschema/common"
+	"github.com/specterops/bloodhound/src/test"
+	"github.com/stretchr/testify/require"
+)
+
+var (
+	relationshipCriteria = []graph.Criteria{
+		// The commands for generating these criteria from the json will be at the top of each criteria block
+
+		//AIACA ContainedBy
+		//cat bhce/cmd/api/src/test/fixtures/fixtures/v6/all/aiacas.json | jq -r '.data | .[] | select(.ContainedBy.ObjectIdentifier != null) | (.ContainedBy.ObjectIdentifier | ascii_upcase) as $containerId | ("ad." + .ContainedBy.ObjectType) as $containerType | "query.And(query.Kind(query.Start(), \($containerType)), query.Equals(query.StartProperty(common.ObjectID.String()), \"" + $containerId + "\"), query.Kind(query.Relationship(), ad.Contains), query.Kind(query.End(), ad.AIACA), query.Equals(query.EndProperty(common.ObjectID.String()), \"\(.ObjectIdentifier)\")),"'
+
+		query.And(query.Kind(query.Start(), ad.Container), query.Equals(query.StartProperty(common.ObjectID.String()), "D44AC8AF-C24E-489B-B0BB-E832A5E3C91A"), query.Kind(query.Relationship(), ad.Contains), query.Kind(query.End(), ad.AIACA), query.Equals(query.EndProperty(common.ObjectID.String()), "6345151F-D854-4D83-B7D0-D94E10CFBAF2")),
+
+		//AIACA ACE Rels
+		//cat bhce/cmd/api/src/test/fixtures/fixtures/v6/all/aiacas.json | jq -r '.data | map(.)[] | .ObjectIdentifier as $targetId | .Aces[] | (.PrincipalSID | ascii_upcase) as $sourceId | ("ad." + .PrincipalType) as $sourceType | ("ad." + .RightName) as $relType |"query.And(query.Kind(query.Start(), \($sourceType)), query.Equals(query.StartProperty(common.ObjectID.String()), \"" + $sourceId + "\"), query.Kind(query.Relationship(), \($relType)), query.Kind(query.End(), ad.AIACA), query.Equals(query.EndProperty(common.ObjectID.String()), \"\($targetId)\")),"'
+
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Owns), query.Kind(query.End(), ad.AIACA), query.Equals(query.EndProperty(common.ObjectID.String()), "6345151F-D854-4D83-B7D0-D94E10CFBAF2")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "ESC1.LOCAL-S-1-5-32-544"), query.Kind(query.Relationship(), ad.GenericAll), query.Kind(query.End(), ad.AIACA), query.Equals(query.EndProperty(common.ObjectID.String()), "6345151F-D854-4D83-B7D0-D94E10CFBAF2")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.GenericAll), query.Kind(query.End(), ad.AIACA), query.Equals(query.EndProperty(common.ObjectID.String()), "6345151F-D854-4D83-B7D0-D94E10CFBAF2")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.GenericAll), query.Kind(query.End(), ad.AIACA), query.Equals(query.EndProperty(common.ObjectID.String()), "6345151F-D854-4D83-B7D0-D94E10CFBAF2")),
+		query.And(query.Kind(query.Start(), ad.Computer), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-1000"), query.Kind(query.Relationship(), ad.GenericAll), query.Kind(query.End(), ad.AIACA), query.Equals(query.EndProperty(common.ObjectID.String()), "6345151F-D854-4D83-B7D0-D94E10CFBAF2")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.GenericAll), query.Kind(query.End(), ad.AIACA), query.Equals(query.EndProperty(common.ObjectID.String()), "6345151F-D854-4D83-B7D0-D94E10CFBAF2")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.AIACA), query.Equals(query.EndProperty(common.ObjectID.String()), "6345151F-D854-4D83-B7D0-D94E10CFBAF2")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.AIACA), query.Equals(query.EndProperty(common.ObjectID.String()), "6345151F-D854-4D83-B7D0-D94E10CFBAF2")),
+
+		//CertTemplates ContainedBy
+		//cat bhce/cmd/api/src/test/fixtures/fixtures/v6/all/certtemplates.json | jq -r '.data | map(.)[] | select(.ContainedBy.ObjectIdentifier != null) | (.ContainedBy.ObjectIdentifier | ascii_upcase) as $containerId | ("ad." + .ContainedBy.ObjectType) as $containerType | "query.And(query.Kind(query.Start(), \($containerType)), query.Equals(query.StartProperty(common.ObjectID.String()), \"" + $containerId + "\"), query.Kind(query.Relationship(), ad.Contains), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), \"\(.ObjectIdentifier)\")),"'
+
+		query.And(query.Kind(query.Start(), ad.Container), query.Equals(query.StartProperty(common.ObjectID.String()), "95D1A36E-7782-4CC5-823C-F5994359DDC0"), query.Kind(query.Relationship(), ad.Contains), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "72F15D5F-C7B4-4FD9-ADCE-302F0D3DC91A")),
+		query.And(query.Kind(query.Start(), ad.Container), query.Equals(query.StartProperty(common.ObjectID.String()), "95D1A36E-7782-4CC5-823C-F5994359DDC0"), query.Kind(query.Relationship(), ad.Contains), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "01BCD578-1031-400B-ADBA-0B8AEAB95929")),
+		query.And(query.Kind(query.Start(), ad.Container), query.Equals(query.StartProperty(common.ObjectID.String()), "95D1A36E-7782-4CC5-823C-F5994359DDC0"), query.Kind(query.Relationship(), ad.Contains), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "251BB763-E8FE-4B7A-9E61-1EDE247847E1")),
+		query.And(query.Kind(query.Start(), ad.Container), query.Equals(query.StartProperty(common.ObjectID.String()), "95D1A36E-7782-4CC5-823C-F5994359DDC0"), query.Kind(query.Relationship(), ad.Contains), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "E928FF44-D63B-4C60-B20A-94B72B782E38")),
+		query.And(query.Kind(query.Start(), ad.Container), query.Equals(query.StartProperty(common.ObjectID.String()), "95D1A36E-7782-4CC5-823C-F5994359DDC0"), query.Kind(query.Relationship(), ad.Contains), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "E249A350-93EA-4290-9E28-CFC9A5718C86")),
+		query.And(query.Kind(query.Start(), ad.Container), query.Equals(query.StartProperty(common.ObjectID.String()), "95D1A36E-7782-4CC5-823C-F5994359DDC0"), query.Kind(query.Relationship(), ad.Contains), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "F951BBAA-F10A-4A70-9507-BCD8F188D70B")),
+		query.And(query.Kind(query.Start(), ad.Container), query.Equals(query.StartProperty(common.ObjectID.String()), "95D1A36E-7782-4CC5-823C-F5994359DDC0"), query.Kind(query.Relationship(), ad.Contains), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "CDDAE05D-4623-464C-AB48-AE38BC7EC8BA")),
+		query.And(query.Kind(query.Start(), ad.Container), query.Equals(query.StartProperty(common.ObjectID.String()), "95D1A36E-7782-4CC5-823C-F5994359DDC0"), query.Kind(query.Relationship(), ad.Contains), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "43616DDD-A336-439F-8A08-088CC0AA85C1")),
+		query.And(query.Kind(query.Start(), ad.Container), query.Equals(query.StartProperty(common.ObjectID.String()), "95D1A36E-7782-4CC5-823C-F5994359DDC0"), query.Kind(query.Relationship(), ad.Contains), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "C6DC9FD9-2A52-4064-9D8E-ED9BBA52FD51")),
+		query.And(query.Kind(query.Start(), ad.Container), query.Equals(query.StartProperty(common.ObjectID.String()), "95D1A36E-7782-4CC5-823C-F5994359DDC0"), query.Kind(query.Relationship(), ad.Contains), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "39E1A53E-3D9E-4341-A3E8-8F297FEB34CD")),
+		query.And(query.Kind(query.Start(), ad.Container), query.Equals(query.StartProperty(common.ObjectID.String()), "95D1A36E-7782-4CC5-823C-F5994359DDC0"), query.Kind(query.Relationship(), ad.Contains), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "63FB126D-499F-48DA-A707-A134B92764BD")),
+		query.And(query.Kind(query.Start(), ad.Container), query.Equals(query.StartProperty(common.ObjectID.String()), "95D1A36E-7782-4CC5-823C-F5994359DDC0"), query.Kind(query.Relationship(), ad.Contains), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "621424AD-1DD5-487C-B38D-12D094A38153")),
+		query.And(query.Kind(query.Start(), ad.Container), query.Equals(query.StartProperty(common.ObjectID.String()), "95D1A36E-7782-4CC5-823C-F5994359DDC0"), query.Kind(query.Relationship(), ad.Contains), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "091BE19E-A0D3-4920-A967-5673A2214268")),
+		query.And(query.Kind(query.Start(), ad.Container), query.Equals(query.StartProperty(common.ObjectID.String()), "95D1A36E-7782-4CC5-823C-F5994359DDC0"), query.Kind(query.Relationship(), ad.Contains), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "441D7EAE-CF79-4B97-83A2-B770C231E4DA")),
+		query.And(query.Kind(query.Start(), ad.Container), query.Equals(query.StartProperty(common.ObjectID.String()), "95D1A36E-7782-4CC5-823C-F5994359DDC0"), query.Kind(query.Relationship(), ad.Contains), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "AACF5D02-3165-4AC7-9AA9-BD604F95011F")),
+		query.And(query.Kind(query.Start(), ad.Container), query.Equals(query.StartProperty(common.ObjectID.String()), "95D1A36E-7782-4CC5-823C-F5994359DDC0"), query.Kind(query.Relationship(), ad.Contains), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "4DC38500-E84C-4A92-9354-AE4665CCC80A")),
+		query.And(query.Kind(query.Start(), ad.Container), query.Equals(query.StartProperty(common.ObjectID.String()), "95D1A36E-7782-4CC5-823C-F5994359DDC0"), query.Kind(query.Relationship(), ad.Contains), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "99679751-132B-4732-89EE-E21F0A1B1B30")),
+		query.And(query.Kind(query.Start(), ad.Container), query.Equals(query.StartProperty(common.ObjectID.String()), "95D1A36E-7782-4CC5-823C-F5994359DDC0"), query.Kind(query.Relationship(), ad.Contains), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "89486D6B-D221-4435-9544-9CDC8B4E6933")),
+		query.And(query.Kind(query.Start(), ad.Container), query.Equals(query.StartProperty(common.ObjectID.String()), "95D1A36E-7782-4CC5-823C-F5994359DDC0"), query.Kind(query.Relationship(), ad.Contains), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "3F2F49C7-53C2-4AFB-8DA2-306C2CD1DDCA")),
+		query.And(query.Kind(query.Start(), ad.Container), query.Equals(query.StartProperty(common.ObjectID.String()), "95D1A36E-7782-4CC5-823C-F5994359DDC0"), query.Kind(query.Relationship(), ad.Contains), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "08FA76AA-B3B1-480E-81E2-48CC2AF009B5")),
+		query.And(query.Kind(query.Start(), ad.Container), query.Equals(query.StartProperty(common.ObjectID.String()), "95D1A36E-7782-4CC5-823C-F5994359DDC0"), query.Kind(query.Relationship(), ad.Contains), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "2D3B649A-50E0-485B-AEF3-6C8ED9DB0A2A")),
+		query.And(query.Kind(query.Start(), ad.Container), query.Equals(query.StartProperty(common.ObjectID.String()), "95D1A36E-7782-4CC5-823C-F5994359DDC0"), query.Kind(query.Relationship(), ad.Contains), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "A938AA1C-1A2E-4636-9926-43EE00945106")),
+		query.And(query.Kind(query.Start(), ad.Container), query.Equals(query.StartProperty(common.ObjectID.String()), "95D1A36E-7782-4CC5-823C-F5994359DDC0"), query.Kind(query.Relationship(), ad.Contains), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "1467B8A3-2ACD-4A8B-9CF1-E9333110A00C")),
+		query.And(query.Kind(query.Start(), ad.Container), query.Equals(query.StartProperty(common.ObjectID.String()), "95D1A36E-7782-4CC5-823C-F5994359DDC0"), query.Kind(query.Relationship(), ad.Contains), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "55BCF264-BBB0-4D50-ACC0-69235586DFC9")),
+		query.And(query.Kind(query.Start(), ad.Container), query.Equals(query.StartProperty(common.ObjectID.String()), "95D1A36E-7782-4CC5-823C-F5994359DDC0"), query.Kind(query.Relationship(), ad.Contains), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "75957C42-9FFB-4D75-A297-7CDB8B11D74F")),
+		query.And(query.Kind(query.Start(), ad.Container), query.Equals(query.StartProperty(common.ObjectID.String()), "95D1A36E-7782-4CC5-823C-F5994359DDC0"), query.Kind(query.Relationship(), ad.Contains), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "EDB16956-50D9-4E16-B448-441EFC1D1FB8")),
+		query.And(query.Kind(query.Start(), ad.Container), query.Equals(query.StartProperty(common.ObjectID.String()), "95D1A36E-7782-4CC5-823C-F5994359DDC0"), query.Kind(query.Relationship(), ad.Contains), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "3C412345-7109-47BC-B33E-D765B14BBE99")),
+		query.And(query.Kind(query.Start(), ad.Container), query.Equals(query.StartProperty(common.ObjectID.String()), "95D1A36E-7782-4CC5-823C-F5994359DDC0"), query.Kind(query.Relationship(), ad.Contains), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "8426B1B2-6678-4223-BB03-0EBA065D8976")),
+		query.And(query.Kind(query.Start(), ad.Container), query.Equals(query.StartProperty(common.ObjectID.String()), "95D1A36E-7782-4CC5-823C-F5994359DDC0"), query.Kind(query.Relationship(), ad.Contains), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "64AC5BD1-1DE3-46D4-9796-5C9D98E4B0F7")),
+		query.And(query.Kind(query.Start(), ad.Container), query.Equals(query.StartProperty(common.ObjectID.String()), "95D1A36E-7782-4CC5-823C-F5994359DDC0"), query.Kind(query.Relationship(), ad.Contains), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "DEBC8BEB-40AF-48B5-940F-AAFAFE961B26")),
+		query.And(query.Kind(query.Start(), ad.Container), query.Equals(query.StartProperty(common.ObjectID.String()), "95D1A36E-7782-4CC5-823C-F5994359DDC0"), query.Kind(query.Relationship(), ad.Contains), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "9F29EC9F-1DF5-4505-82FB-3DB8B952FDE3")),
+		query.And(query.Kind(query.Start(), ad.Container), query.Equals(query.StartProperty(common.ObjectID.String()), "95D1A36E-7782-4CC5-823C-F5994359DDC0"), query.Kind(query.Relationship(), ad.Contains), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "176D3356-0094-4E80-868A-00E74B651CC0")),
+		query.And(query.Kind(query.Start(), ad.Container), query.Equals(query.StartProperty(common.ObjectID.String()), "95D1A36E-7782-4CC5-823C-F5994359DDC0"), query.Kind(query.Relationship(), ad.Contains), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "4376BA2D-B316-41E1-96DF-A0CB1EA0667F")),
+		query.And(query.Kind(query.Start(), ad.Container), query.Equals(query.StartProperty(common.ObjectID.String()), "95D1A36E-7782-4CC5-823C-F5994359DDC0"), query.Kind(query.Relationship(), ad.Contains), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "67CE0FEC-166C-4E5E-BF87-6FBAF0E9C8A8")),
+
+		//CertTemplate ACE Rels
+		//cat bhce/cmd/api/src/test/fixtures/fixtures/v6/all/certtemplates.json | jq -r '.data | map(.)[] | .ObjectIdentifier as $targetId | .Aces[] | (.PrincipalSID | ascii_upcase) as $sourceId | ("ad." + .PrincipalType) as $sourceType | ("ad." + .RightName) as $relType |"query.And(query.Kind(query.Start(), \($sourceType)), query.Equals(query.StartProperty(common.ObjectID.String()), \"" + $sourceId + "\"), query.Kind(query.Relationship(), \($relType)), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), \"\($targetId)\")),"'
+
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Owns), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "72F15D5F-C7B4-4FD9-ADCE-302F0D3DC91A")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "72F15D5F-C7B4-4FD9-ADCE-302F0D3DC91A")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "72F15D5F-C7B4-4FD9-ADCE-302F0D3DC91A")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "72F15D5F-C7B4-4FD9-ADCE-302F0D3DC91A")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "72F15D5F-C7B4-4FD9-ADCE-302F0D3DC91A")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "72F15D5F-C7B4-4FD9-ADCE-302F0D3DC91A")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-513"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "72F15D5F-C7B4-4FD9-ADCE-302F0D3DC91A")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "72F15D5F-C7B4-4FD9-ADCE-302F0D3DC91A")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Owns), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "01BCD578-1031-400B-ADBA-0B8AEAB95929")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "01BCD578-1031-400B-ADBA-0B8AEAB95929")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "01BCD578-1031-400B-ADBA-0B8AEAB95929")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "01BCD578-1031-400B-ADBA-0B8AEAB95929")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "01BCD578-1031-400B-ADBA-0B8AEAB95929")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "01BCD578-1031-400B-ADBA-0B8AEAB95929")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "01BCD578-1031-400B-ADBA-0B8AEAB95929")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Owns), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "251BB763-E8FE-4B7A-9E61-1EDE247847E1")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "251BB763-E8FE-4B7A-9E61-1EDE247847E1")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "251BB763-E8FE-4B7A-9E61-1EDE247847E1")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "251BB763-E8FE-4B7A-9E61-1EDE247847E1")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "251BB763-E8FE-4B7A-9E61-1EDE247847E1")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "251BB763-E8FE-4B7A-9E61-1EDE247847E1")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "251BB763-E8FE-4B7A-9E61-1EDE247847E1")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Owns), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "E928FF44-D63B-4C60-B20A-94B72B782E38")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "E928FF44-D63B-4C60-B20A-94B72B782E38")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "E928FF44-D63B-4C60-B20A-94B72B782E38")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "E928FF44-D63B-4C60-B20A-94B72B782E38")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "E928FF44-D63B-4C60-B20A-94B72B782E38")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "E928FF44-D63B-4C60-B20A-94B72B782E38")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "E928FF44-D63B-4C60-B20A-94B72B782E38")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Owns), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "E249A350-93EA-4290-9E28-CFC9A5718C86")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "E249A350-93EA-4290-9E28-CFC9A5718C86")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "E249A350-93EA-4290-9E28-CFC9A5718C86")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "E249A350-93EA-4290-9E28-CFC9A5718C86")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "E249A350-93EA-4290-9E28-CFC9A5718C86")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "E249A350-93EA-4290-9E28-CFC9A5718C86")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "E249A350-93EA-4290-9E28-CFC9A5718C86")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Owns), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "F951BBAA-F10A-4A70-9507-BCD8F188D70B")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "F951BBAA-F10A-4A70-9507-BCD8F188D70B")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "F951BBAA-F10A-4A70-9507-BCD8F188D70B")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "F951BBAA-F10A-4A70-9507-BCD8F188D70B")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "F951BBAA-F10A-4A70-9507-BCD8F188D70B")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "F951BBAA-F10A-4A70-9507-BCD8F188D70B")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "F951BBAA-F10A-4A70-9507-BCD8F188D70B")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Owns), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "CDDAE05D-4623-464C-AB48-AE38BC7EC8BA")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "CDDAE05D-4623-464C-AB48-AE38BC7EC8BA")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "CDDAE05D-4623-464C-AB48-AE38BC7EC8BA")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "CDDAE05D-4623-464C-AB48-AE38BC7EC8BA")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "CDDAE05D-4623-464C-AB48-AE38BC7EC8BA")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "CDDAE05D-4623-464C-AB48-AE38BC7EC8BA")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "CDDAE05D-4623-464C-AB48-AE38BC7EC8BA")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Owns), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "43616DDD-A336-439F-8A08-088CC0AA85C1")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "43616DDD-A336-439F-8A08-088CC0AA85C1")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "43616DDD-A336-439F-8A08-088CC0AA85C1")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "43616DDD-A336-439F-8A08-088CC0AA85C1")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "43616DDD-A336-439F-8A08-088CC0AA85C1")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "43616DDD-A336-439F-8A08-088CC0AA85C1")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "43616DDD-A336-439F-8A08-088CC0AA85C1")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Owns), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "C6DC9FD9-2A52-4064-9D8E-ED9BBA52FD51")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "C6DC9FD9-2A52-4064-9D8E-ED9BBA52FD51")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "C6DC9FD9-2A52-4064-9D8E-ED9BBA52FD51")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "C6DC9FD9-2A52-4064-9D8E-ED9BBA52FD51")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "C6DC9FD9-2A52-4064-9D8E-ED9BBA52FD51")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "C6DC9FD9-2A52-4064-9D8E-ED9BBA52FD51")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-515"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "C6DC9FD9-2A52-4064-9D8E-ED9BBA52FD51")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "C6DC9FD9-2A52-4064-9D8E-ED9BBA52FD51")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Owns), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "39E1A53E-3D9E-4341-A3E8-8F297FEB34CD")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "39E1A53E-3D9E-4341-A3E8-8F297FEB34CD")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "39E1A53E-3D9E-4341-A3E8-8F297FEB34CD")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "39E1A53E-3D9E-4341-A3E8-8F297FEB34CD")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "39E1A53E-3D9E-4341-A3E8-8F297FEB34CD")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "39E1A53E-3D9E-4341-A3E8-8F297FEB34CD")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "39E1A53E-3D9E-4341-A3E8-8F297FEB34CD")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Owns), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "63FB126D-499F-48DA-A707-A134B92764BD")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "63FB126D-499F-48DA-A707-A134B92764BD")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "63FB126D-499F-48DA-A707-A134B92764BD")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "63FB126D-499F-48DA-A707-A134B92764BD")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "63FB126D-499F-48DA-A707-A134B92764BD")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "ESC1.LOCAL-S-1-5-9"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "63FB126D-499F-48DA-A707-A134B92764BD")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-498"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "63FB126D-499F-48DA-A707-A134B92764BD")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "63FB126D-499F-48DA-A707-A134B92764BD")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-516"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "63FB126D-499F-48DA-A707-A134B92764BD")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "63FB126D-499F-48DA-A707-A134B92764BD")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Owns), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "621424AD-1DD5-487C-B38D-12D094A38153")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "621424AD-1DD5-487C-B38D-12D094A38153")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "621424AD-1DD5-487C-B38D-12D094A38153")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "621424AD-1DD5-487C-B38D-12D094A38153")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "621424AD-1DD5-487C-B38D-12D094A38153")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "621424AD-1DD5-487C-B38D-12D094A38153")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "621424AD-1DD5-487C-B38D-12D094A38153")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Owns), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "091BE19E-A0D3-4920-A967-5673A2214268")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "091BE19E-A0D3-4920-A967-5673A2214268")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "091BE19E-A0D3-4920-A967-5673A2214268")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "091BE19E-A0D3-4920-A967-5673A2214268")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "091BE19E-A0D3-4920-A967-5673A2214268")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "091BE19E-A0D3-4920-A967-5673A2214268")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "091BE19E-A0D3-4920-A967-5673A2214268")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Owns), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "441D7EAE-CF79-4B97-83A2-B770C231E4DA")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "441D7EAE-CF79-4B97-83A2-B770C231E4DA")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "441D7EAE-CF79-4B97-83A2-B770C231E4DA")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "441D7EAE-CF79-4B97-83A2-B770C231E4DA")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "441D7EAE-CF79-4B97-83A2-B770C231E4DA")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "441D7EAE-CF79-4B97-83A2-B770C231E4DA")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "441D7EAE-CF79-4B97-83A2-B770C231E4DA")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Owns), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "AACF5D02-3165-4AC7-9AA9-BD604F95011F")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "AACF5D02-3165-4AC7-9AA9-BD604F95011F")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "AACF5D02-3165-4AC7-9AA9-BD604F95011F")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "AACF5D02-3165-4AC7-9AA9-BD604F95011F")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "AACF5D02-3165-4AC7-9AA9-BD604F95011F")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "AACF5D02-3165-4AC7-9AA9-BD604F95011F")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-515"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "AACF5D02-3165-4AC7-9AA9-BD604F95011F")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-516"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "AACF5D02-3165-4AC7-9AA9-BD604F95011F")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "AACF5D02-3165-4AC7-9AA9-BD604F95011F")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Owns), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "4DC38500-E84C-4A92-9354-AE4665CCC80A")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "4DC38500-E84C-4A92-9354-AE4665CCC80A")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "4DC38500-E84C-4A92-9354-AE4665CCC80A")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "4DC38500-E84C-4A92-9354-AE4665CCC80A")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "4DC38500-E84C-4A92-9354-AE4665CCC80A")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "4DC38500-E84C-4A92-9354-AE4665CCC80A")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "4DC38500-E84C-4A92-9354-AE4665CCC80A")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Owns), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "99679751-132B-4732-89EE-E21F0A1B1B30")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "99679751-132B-4732-89EE-E21F0A1B1B30")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "99679751-132B-4732-89EE-E21F0A1B1B30")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "99679751-132B-4732-89EE-E21F0A1B1B30")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "99679751-132B-4732-89EE-E21F0A1B1B30")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "99679751-132B-4732-89EE-E21F0A1B1B30")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "99679751-132B-4732-89EE-E21F0A1B1B30")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Owns), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "89486D6B-D221-4435-9544-9CDC8B4E6933")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "89486D6B-D221-4435-9544-9CDC8B4E6933")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "89486D6B-D221-4435-9544-9CDC8B4E6933")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "89486D6B-D221-4435-9544-9CDC8B4E6933")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "89486D6B-D221-4435-9544-9CDC8B4E6933")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "89486D6B-D221-4435-9544-9CDC8B4E6933")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "89486D6B-D221-4435-9544-9CDC8B4E6933")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Owns), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "3F2F49C7-53C2-4AFB-8DA2-306C2CD1DDCA")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "3F2F49C7-53C2-4AFB-8DA2-306C2CD1DDCA")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "3F2F49C7-53C2-4AFB-8DA2-306C2CD1DDCA")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "3F2F49C7-53C2-4AFB-8DA2-306C2CD1DDCA")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "3F2F49C7-53C2-4AFB-8DA2-306C2CD1DDCA")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "3F2F49C7-53C2-4AFB-8DA2-306C2CD1DDCA")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "3F2F49C7-53C2-4AFB-8DA2-306C2CD1DDCA")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Owns), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "08FA76AA-B3B1-480E-81E2-48CC2AF009B5")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "08FA76AA-B3B1-480E-81E2-48CC2AF009B5")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "08FA76AA-B3B1-480E-81E2-48CC2AF009B5")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "08FA76AA-B3B1-480E-81E2-48CC2AF009B5")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "08FA76AA-B3B1-480E-81E2-48CC2AF009B5")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "08FA76AA-B3B1-480E-81E2-48CC2AF009B5")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "08FA76AA-B3B1-480E-81E2-48CC2AF009B5")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Owns), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "2D3B649A-50E0-485B-AEF3-6C8ED9DB0A2A")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "2D3B649A-50E0-485B-AEF3-6C8ED9DB0A2A")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "2D3B649A-50E0-485B-AEF3-6C8ED9DB0A2A")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "2D3B649A-50E0-485B-AEF3-6C8ED9DB0A2A")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "2D3B649A-50E0-485B-AEF3-6C8ED9DB0A2A")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "2D3B649A-50E0-485B-AEF3-6C8ED9DB0A2A")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "2D3B649A-50E0-485B-AEF3-6C8ED9DB0A2A")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Owns), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "A938AA1C-1A2E-4636-9926-43EE00945106")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "A938AA1C-1A2E-4636-9926-43EE00945106")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "A938AA1C-1A2E-4636-9926-43EE00945106")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "A938AA1C-1A2E-4636-9926-43EE00945106")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "A938AA1C-1A2E-4636-9926-43EE00945106")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "A938AA1C-1A2E-4636-9926-43EE00945106")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "A938AA1C-1A2E-4636-9926-43EE00945106")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Owns), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "1467B8A3-2ACD-4A8B-9CF1-E9333110A00C")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "1467B8A3-2ACD-4A8B-9CF1-E9333110A00C")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "1467B8A3-2ACD-4A8B-9CF1-E9333110A00C")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "1467B8A3-2ACD-4A8B-9CF1-E9333110A00C")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "1467B8A3-2ACD-4A8B-9CF1-E9333110A00C")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "1467B8A3-2ACD-4A8B-9CF1-E9333110A00C")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "1467B8A3-2ACD-4A8B-9CF1-E9333110A00C")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Owns), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "55BCF264-BBB0-4D50-ACC0-69235586DFC9")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "55BCF264-BBB0-4D50-ACC0-69235586DFC9")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "55BCF264-BBB0-4D50-ACC0-69235586DFC9")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "55BCF264-BBB0-4D50-ACC0-69235586DFC9")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "55BCF264-BBB0-4D50-ACC0-69235586DFC9")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "ESC1.LOCAL-S-1-5-9"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "55BCF264-BBB0-4D50-ACC0-69235586DFC9")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-498"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "55BCF264-BBB0-4D50-ACC0-69235586DFC9")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "55BCF264-BBB0-4D50-ACC0-69235586DFC9")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-516"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "55BCF264-BBB0-4D50-ACC0-69235586DFC9")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "55BCF264-BBB0-4D50-ACC0-69235586DFC9")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Owns), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "75957C42-9FFB-4D75-A297-7CDB8B11D74F")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "75957C42-9FFB-4D75-A297-7CDB8B11D74F")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "75957C42-9FFB-4D75-A297-7CDB8B11D74F")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "75957C42-9FFB-4D75-A297-7CDB8B11D74F")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "75957C42-9FFB-4D75-A297-7CDB8B11D74F")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "ESC1.LOCAL-S-1-5-9"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "75957C42-9FFB-4D75-A297-7CDB8B11D74F")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-498"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "75957C42-9FFB-4D75-A297-7CDB8B11D74F")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "75957C42-9FFB-4D75-A297-7CDB8B11D74F")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-516"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "75957C42-9FFB-4D75-A297-7CDB8B11D74F")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "75957C42-9FFB-4D75-A297-7CDB8B11D74F")),
+		query.And(query.Kind(query.Start(), ad.User), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-1105"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "75957C42-9FFB-4D75-A297-7CDB8B11D74F")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-1106"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "75957C42-9FFB-4D75-A297-7CDB8B11D74F")),
+		query.And(query.Kind(query.Start(), ad.User), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-1110"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "75957C42-9FFB-4D75-A297-7CDB8B11D74F")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Owns), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "EDB16956-50D9-4E16-B448-441EFC1D1FB8")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "EDB16956-50D9-4E16-B448-441EFC1D1FB8")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "EDB16956-50D9-4E16-B448-441EFC1D1FB8")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "EDB16956-50D9-4E16-B448-441EFC1D1FB8")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "EDB16956-50D9-4E16-B448-441EFC1D1FB8")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "EDB16956-50D9-4E16-B448-441EFC1D1FB8")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-513"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "EDB16956-50D9-4E16-B448-441EFC1D1FB8")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "EDB16956-50D9-4E16-B448-441EFC1D1FB8")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Owns), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "3C412345-7109-47BC-B33E-D765B14BBE99")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "3C412345-7109-47BC-B33E-D765B14BBE99")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "3C412345-7109-47BC-B33E-D765B14BBE99")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "3C412345-7109-47BC-B33E-D765B14BBE99")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "3C412345-7109-47BC-B33E-D765B14BBE99")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "3C412345-7109-47BC-B33E-D765B14BBE99")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-515"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "3C412345-7109-47BC-B33E-D765B14BBE99")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "3C412345-7109-47BC-B33E-D765B14BBE99")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Owns), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "8426B1B2-6678-4223-BB03-0EBA065D8976")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "8426B1B2-6678-4223-BB03-0EBA065D8976")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "8426B1B2-6678-4223-BB03-0EBA065D8976")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "8426B1B2-6678-4223-BB03-0EBA065D8976")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "8426B1B2-6678-4223-BB03-0EBA065D8976")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "8426B1B2-6678-4223-BB03-0EBA065D8976")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "8426B1B2-6678-4223-BB03-0EBA065D8976")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-553"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "8426B1B2-6678-4223-BB03-0EBA065D8976")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Owns), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "64AC5BD1-1DE3-46D4-9796-5C9D98E4B0F7")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "64AC5BD1-1DE3-46D4-9796-5C9D98E4B0F7")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "64AC5BD1-1DE3-46D4-9796-5C9D98E4B0F7")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "64AC5BD1-1DE3-46D4-9796-5C9D98E4B0F7")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "64AC5BD1-1DE3-46D4-9796-5C9D98E4B0F7")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "ESC1.LOCAL-S-1-5-9"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "64AC5BD1-1DE3-46D4-9796-5C9D98E4B0F7")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-498"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "64AC5BD1-1DE3-46D4-9796-5C9D98E4B0F7")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "64AC5BD1-1DE3-46D4-9796-5C9D98E4B0F7")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-516"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "64AC5BD1-1DE3-46D4-9796-5C9D98E4B0F7")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "64AC5BD1-1DE3-46D4-9796-5C9D98E4B0F7")),
+		query.And(query.Kind(query.Start(), ad.User), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-500"), query.Kind(query.Relationship(), ad.Owns), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "DEBC8BEB-40AF-48B5-940F-AAFAFE961B26")),
+		query.And(query.Kind(query.Start(), ad.User), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-500"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "DEBC8BEB-40AF-48B5-940F-AAFAFE961B26")),
+		query.And(query.Kind(query.Start(), ad.User), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-500"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "DEBC8BEB-40AF-48B5-940F-AAFAFE961B26")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "DEBC8BEB-40AF-48B5-940F-AAFAFE961B26")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "DEBC8BEB-40AF-48B5-940F-AAFAFE961B26")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "DEBC8BEB-40AF-48B5-940F-AAFAFE961B26")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "DEBC8BEB-40AF-48B5-940F-AAFAFE961B26")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "DEBC8BEB-40AF-48B5-940F-AAFAFE961B26")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "DEBC8BEB-40AF-48B5-940F-AAFAFE961B26")),
+		query.And(query.Kind(query.Start(), ad.User), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-1105"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "DEBC8BEB-40AF-48B5-940F-AAFAFE961B26")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-1106"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "DEBC8BEB-40AF-48B5-940F-AAFAFE961B26")),
+		query.And(query.Kind(query.Start(), ad.User), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-1110"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "DEBC8BEB-40AF-48B5-940F-AAFAFE961B26")),
+		query.And(query.Kind(query.Start(), ad.User), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-1112"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "DEBC8BEB-40AF-48B5-940F-AAFAFE961B26")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Owns), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "9F29EC9F-1DF5-4505-82FB-3DB8B952FDE3")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "9F29EC9F-1DF5-4505-82FB-3DB8B952FDE3")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "9F29EC9F-1DF5-4505-82FB-3DB8B952FDE3")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "9F29EC9F-1DF5-4505-82FB-3DB8B952FDE3")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "9F29EC9F-1DF5-4505-82FB-3DB8B952FDE3")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "9F29EC9F-1DF5-4505-82FB-3DB8B952FDE3")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "9F29EC9F-1DF5-4505-82FB-3DB8B952FDE3")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Owns), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "176D3356-0094-4E80-868A-00E74B651CC0")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "176D3356-0094-4E80-868A-00E74B651CC0")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "176D3356-0094-4E80-868A-00E74B651CC0")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "176D3356-0094-4E80-868A-00E74B651CC0")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "176D3356-0094-4E80-868A-00E74B651CC0")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "176D3356-0094-4E80-868A-00E74B651CC0")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-513"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "176D3356-0094-4E80-868A-00E74B651CC0")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "176D3356-0094-4E80-868A-00E74B651CC0")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Owns), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "4376BA2D-B316-41E1-96DF-A0CB1EA0667F")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "4376BA2D-B316-41E1-96DF-A0CB1EA0667F")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "4376BA2D-B316-41E1-96DF-A0CB1EA0667F")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "4376BA2D-B316-41E1-96DF-A0CB1EA0667F")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "4376BA2D-B316-41E1-96DF-A0CB1EA0667F")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "4376BA2D-B316-41E1-96DF-A0CB1EA0667F")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "4376BA2D-B316-41E1-96DF-A0CB1EA0667F")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Owns), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "67CE0FEC-166C-4E5E-BF87-6FBAF0E9C8A8")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "67CE0FEC-166C-4E5E-BF87-6FBAF0E9C8A8")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "67CE0FEC-166C-4E5E-BF87-6FBAF0E9C8A8")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "67CE0FEC-166C-4E5E-BF87-6FBAF0E9C8A8")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "67CE0FEC-166C-4E5E-BF87-6FBAF0E9C8A8")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "67CE0FEC-166C-4E5E-BF87-6FBAF0E9C8A8")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-513"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "67CE0FEC-166C-4E5E-BF87-6FBAF0E9C8A8")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "67CE0FEC-166C-4E5E-BF87-6FBAF0E9C8A8")),
+
+		//Computer ContainedBy
+		//cat bhce/cmd/api/src/test/fixtures/fixtures/v6/all/computers.json | jq -r '.data | map(.)[] | select(.ContainedBy.ObjectIdentifier != null) | (.ContainedBy.ObjectIdentifier | ascii_upcase) as $containerId | ("ad." + .ContainedBy.ObjectType) as $containerType | "query.And(query.Kind(query.Start(), \($containerType)), query.Equals(query.StartProperty(common.ObjectID.String()), \"" + $containerId + "\"), query.Kind(query.Relationship(), ad.Contains), query.Kind(query.End(), ad.Computer), query.Equals(query.EndProperty(common.ObjectID.String()), \"\(.ObjectIdentifier)\")),"'
+
+		query.And(query.Kind(query.Start(), ad.OU), query.Equals(query.StartProperty(common.ObjectID.String()), "1AEEE963-F4C8-49DA-BBE6-A6107F42CAF0"), query.Kind(query.Relationship(), ad.Contains), query.Kind(query.End(), ad.Computer), query.Equals(query.EndProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-1000")),
+		query.And(query.Kind(query.Start(), ad.Container), query.Equals(query.StartProperty(common.ObjectID.String()), "CC7D845D-04FF-470C-8E6B-8C810AB1B4FB"), query.Kind(query.Relationship(), ad.Contains), query.Kind(query.End(), ad.Computer), query.Equals(query.EndProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-1103")),
+
+		//Computer ACE Rels
+		//cat bhce/cmd/api/src/test/fixtures/fixtures/v6/all/computers.json | jq -r '.data | map(.)[] | .ObjectIdentifier as $targetId | .Aces[] | (.PrincipalSID | ascii_upcase) as $sourceId | ("ad." + .PrincipalType) as $sourceType | ("ad." + .RightName) as $relType |"query.And(query.Kind(query.Start(), \($sourceType)), query.Equals(query.StartProperty(common.ObjectID.String()), \"" + $sourceId + "\"), query.Kind(query.Relationship(), \($relType)), query.Kind(query.End(), ad.Computer), query.Equals(query.EndProperty(common.ObjectID.String()), \"\($targetId)\")),"'
+
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.Owns), query.Kind(query.End(), ad.Computer), query.Equals(query.EndProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-1000")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.GenericAll), query.Kind(query.End(), ad.Computer), query.Equals(query.EndProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-1000")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-526"), query.Kind(query.Relationship(), ad.AddKeyCredentialLink), query.Kind(query.End(), ad.Computer), query.Equals(query.EndProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-1000")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-527"), query.Kind(query.Relationship(), ad.AddKeyCredentialLink), query.Kind(query.End(), ad.Computer), query.Equals(query.EndProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-1000")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.GenericAll), query.Kind(query.End(), ad.Computer), query.Equals(query.EndProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-1000")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "ESC1.LOCAL-S-1-5-32-544"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.Computer), query.Equals(query.EndProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-1000")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "ESC1.LOCAL-S-1-5-32-544"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.Computer), query.Equals(query.EndProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-1000")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "ESC1.LOCAL-S-1-5-32-544"), query.Kind(query.Relationship(), ad.GenericWrite), query.Kind(query.End(), ad.Computer), query.Equals(query.EndProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-1000")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.Owns), query.Kind(query.End(), ad.Computer), query.Equals(query.EndProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-1103")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "ESC1.LOCAL-S-1-5-32-548"), query.Kind(query.Relationship(), ad.GenericAll), query.Kind(query.End(), ad.Computer), query.Equals(query.EndProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-1103")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.GenericAll), query.Kind(query.End(), ad.Computer), query.Equals(query.EndProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-1103")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-526"), query.Kind(query.Relationship(), ad.AddKeyCredentialLink), query.Kind(query.End(), ad.Computer), query.Equals(query.EndProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-1103")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-527"), query.Kind(query.Relationship(), ad.AddKeyCredentialLink), query.Kind(query.End(), ad.Computer), query.Equals(query.EndProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-1103")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.GenericAll), query.Kind(query.End(), ad.Computer), query.Equals(query.EndProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-1103")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "ESC1.LOCAL-S-1-5-32-544"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.Computer), query.Equals(query.EndProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-1103")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "ESC1.LOCAL-S-1-5-32-544"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.Computer), query.Equals(query.EndProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-1103")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "ESC1.LOCAL-S-1-5-32-544"), query.Kind(query.Relationship(), ad.GenericWrite), query.Kind(query.End(), ad.Computer), query.Equals(query.EndProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-1103")),
+
+		//EnterpriseCAs ContainedBy
+		//cat bhce/cmd/api/src/test/fixtures/fixtures/v6/all/enterprisecas.json | jq -r '.data | map(.)[] | select(.ContainedBy.ObjectIdentifier != null) | (.ContainedBy.ObjectIdentifier | ascii_upcase) as $containerId | ("ad." + .ContainedBy.ObjectType) as $containerType | "query.And(query.Kind(query.Start(), \($containerType)), query.Equals(query.StartProperty(common.ObjectID.String()), \"" + $containerId + "\"), query.Kind(query.Relationship(), ad.Contains), query.Kind(query.End(), ad.EnterpriseCA), query.Equals(query.EndProperty(common.ObjectID.String()), \"\(.ObjectIdentifier)\")),"'
+
+		query.And(query.Kind(query.Start(), ad.Container), query.Equals(query.StartProperty(common.ObjectID.String()), "22F8BB5D-B81E-4856-96A9-A6448386EB23"), query.Kind(query.Relationship(), ad.Contains), query.Kind(query.End(), ad.EnterpriseCA), query.Equals(query.EndProperty(common.ObjectID.String()), "14CEE53E-4D95-4DDD-A244-BF15C73DC06A")),
+
+		//EnterpriseCAs PublishedTo Rels
+		//cat bhce/cmd/api/src/test/fixtures/fixtures/v6/all/enterprisecas.json | jq -r '.data | map(.)[] | .ObjectIdentifier as $targetId | .EnabledCertTemplates[] | (.ObjectIdentifier | ascii_upcase) as $sourceId |"query.And(query.Kind(query.Start(), ad.CertTemplate), query.Equals(query.StartProperty(common.ObjectID.String()), \"" + $sourceId + "\"), query.Kind(query.Relationship(), ad.PublishedTo), query.Kind(query.End(), ad.EnterpriseCA), query.Equals(query.EndProperty(common.ObjectID.String()), \"\($targetId)\")),"'
+
+		query.And(query.Kind(query.Start(), ad.CertTemplate), query.Equals(query.StartProperty(common.ObjectID.String()), "DEBC8BEB-40AF-48B5-940F-AAFAFE961B26"), query.Kind(query.Relationship(), ad.PublishedTo), query.Kind(query.End(), ad.EnterpriseCA), query.Equals(query.EndProperty(common.ObjectID.String()), "14CEE53E-4D95-4DDD-A244-BF15C73DC06A")),
+		query.And(query.Kind(query.Start(), ad.CertTemplate), query.Equals(query.StartProperty(common.ObjectID.String()), "55BCF264-BBB0-4D50-ACC0-69235586DFC9"), query.Kind(query.Relationship(), ad.PublishedTo), query.Kind(query.End(), ad.EnterpriseCA), query.Equals(query.EndProperty(common.ObjectID.String()), "14CEE53E-4D95-4DDD-A244-BF15C73DC06A")),
+		query.And(query.Kind(query.Start(), ad.CertTemplate), query.Equals(query.StartProperty(common.ObjectID.String()), "75957C42-9FFB-4D75-A297-7CDB8B11D74F"), query.Kind(query.Relationship(), ad.PublishedTo), query.Kind(query.End(), ad.EnterpriseCA), query.Equals(query.EndProperty(common.ObjectID.String()), "14CEE53E-4D95-4DDD-A244-BF15C73DC06A")),
+		query.And(query.Kind(query.Start(), ad.CertTemplate), query.Equals(query.StartProperty(common.ObjectID.String()), "64AC5BD1-1DE3-46D4-9796-5C9D98E4B0F7"), query.Kind(query.Relationship(), ad.PublishedTo), query.Kind(query.End(), ad.EnterpriseCA), query.Equals(query.EndProperty(common.ObjectID.String()), "14CEE53E-4D95-4DDD-A244-BF15C73DC06A")),
+		query.And(query.Kind(query.Start(), ad.CertTemplate), query.Equals(query.StartProperty(common.ObjectID.String()), "E249A350-93EA-4290-9E28-CFC9A5718C86"), query.Kind(query.Relationship(), ad.PublishedTo), query.Kind(query.End(), ad.EnterpriseCA), query.Equals(query.EndProperty(common.ObjectID.String()), "14CEE53E-4D95-4DDD-A244-BF15C73DC06A")),
+		query.And(query.Kind(query.Start(), ad.CertTemplate), query.Equals(query.StartProperty(common.ObjectID.String()), "EDB16956-50D9-4E16-B448-441EFC1D1FB8"), query.Kind(query.Relationship(), ad.PublishedTo), query.Kind(query.End(), ad.EnterpriseCA), query.Equals(query.EndProperty(common.ObjectID.String()), "14CEE53E-4D95-4DDD-A244-BF15C73DC06A")),
+		query.And(query.Kind(query.Start(), ad.CertTemplate), query.Equals(query.StartProperty(common.ObjectID.String()), "63FB126D-499F-48DA-A707-A134B92764BD"), query.Kind(query.Relationship(), ad.PublishedTo), query.Kind(query.End(), ad.EnterpriseCA), query.Equals(query.EndProperty(common.ObjectID.String()), "14CEE53E-4D95-4DDD-A244-BF15C73DC06A")),
+		query.And(query.Kind(query.Start(), ad.CertTemplate), query.Equals(query.StartProperty(common.ObjectID.String()), "621424AD-1DD5-487C-B38D-12D094A38153"), query.Kind(query.Relationship(), ad.PublishedTo), query.Kind(query.End(), ad.EnterpriseCA), query.Equals(query.EndProperty(common.ObjectID.String()), "14CEE53E-4D95-4DDD-A244-BF15C73DC06A")),
+		query.And(query.Kind(query.Start(), ad.CertTemplate), query.Equals(query.StartProperty(common.ObjectID.String()), "C6DC9FD9-2A52-4064-9D8E-ED9BBA52FD51"), query.Kind(query.Relationship(), ad.PublishedTo), query.Kind(query.End(), ad.EnterpriseCA), query.Equals(query.EndProperty(common.ObjectID.String()), "14CEE53E-4D95-4DDD-A244-BF15C73DC06A")),
+		query.And(query.Kind(query.Start(), ad.CertTemplate), query.Equals(query.StartProperty(common.ObjectID.String()), "72F15D5F-C7B4-4FD9-ADCE-302F0D3DC91A"), query.Kind(query.Relationship(), ad.PublishedTo), query.Kind(query.End(), ad.EnterpriseCA), query.Equals(query.EndProperty(common.ObjectID.String()), "14CEE53E-4D95-4DDD-A244-BF15C73DC06A")),
+		query.And(query.Kind(query.Start(), ad.CertTemplate), query.Equals(query.StartProperty(common.ObjectID.String()), "441D7EAE-CF79-4B97-83A2-B770C231E4DA"), query.Kind(query.Relationship(), ad.PublishedTo), query.Kind(query.End(), ad.EnterpriseCA), query.Equals(query.EndProperty(common.ObjectID.String()), "14CEE53E-4D95-4DDD-A244-BF15C73DC06A")),
+		query.And(query.Kind(query.Start(), ad.CertTemplate), query.Equals(query.StartProperty(common.ObjectID.String()), "251BB763-E8FE-4B7A-9E61-1EDE247847E1"), query.Kind(query.Relationship(), ad.PublishedTo), query.Kind(query.End(), ad.EnterpriseCA), query.Equals(query.EndProperty(common.ObjectID.String()), "14CEE53E-4D95-4DDD-A244-BF15C73DC06A")),
+
+		//EnterpriseCAs Hosting Computer
+		query.And(query.Kind(query.Start(), ad.Computer), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-1000"), query.Kind(query.Relationship(), ad.HostsCAService), query.Kind(query.End(), ad.EnterpriseCA), query.Equals(query.EndProperty(common.ObjectID.String()), "14CEE53E-4D95-4DDD-A244-BF15C73DC06A")),
+
+		//EnterpriseCAs DelegatedEnrollmentAgent
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-513"), query.Kind(query.Relationship(), ad.DelegatedEnrollmentAgent), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "DEBC8BEB-40AF-48B5-940F-AAFAFE961B26")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-513"), query.Kind(query.Relationship(), ad.DelegatedEnrollmentAgent), query.Kind(query.End(), ad.CertTemplate), query.Equals(query.EndProperty(common.ObjectID.String()), "55BCF264-BBB0-4D50-ACC0-69235586DFC9")),
+
+		//EnterpriseCAs ACE Rels
+		//cat bhce/cmd/api/src/test/fixtures/fixtures/v6/all/enterprisecas.json | jq -r '.data | map(.)[] | .ObjectIdentifier as $targetId | .Aces[] | (.PrincipalSID | ascii_upcase) as $sourceId | ("ad." + .PrincipalType) as $sourceType | ("ad." + .RightName) as $relType |"query.And(query.Kind(query.Start(), \($sourceType)), query.Equals(query.StartProperty(common.ObjectID.String()), \"" + $sourceId + "\"), query.Kind(query.Relationship(), \($relType)), query.Kind(query.End(), ad.EnterpriseCA), query.Equals(query.EndProperty(common.ObjectID.String()), \"\($targetId)\")),"'
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Owns), query.Kind(query.End(), ad.EnterpriseCA), query.Equals(query.EndProperty(common.ObjectID.String()), "14CEE53E-4D95-4DDD-A244-BF15C73DC06A")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.EnterpriseCA), query.Equals(query.EndProperty(common.ObjectID.String()), "14CEE53E-4D95-4DDD-A244-BF15C73DC06A")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.EnterpriseCA), query.Equals(query.EndProperty(common.ObjectID.String()), "14CEE53E-4D95-4DDD-A244-BF15C73DC06A")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.ManageCA), query.Kind(query.End(), ad.EnterpriseCA), query.Equals(query.EndProperty(common.ObjectID.String()), "14CEE53E-4D95-4DDD-A244-BF15C73DC06A")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.ManageCertificates), query.Kind(query.End(), ad.EnterpriseCA), query.Equals(query.EndProperty(common.ObjectID.String()), "14CEE53E-4D95-4DDD-A244-BF15C73DC06A")),
+		query.And(query.Kind(query.Start(), ad.Computer), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-1000"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.EnterpriseCA), query.Equals(query.EndProperty(common.ObjectID.String()), "14CEE53E-4D95-4DDD-A244-BF15C73DC06A")),
+		query.And(query.Kind(query.Start(), ad.Computer), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-1000"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.EnterpriseCA), query.Equals(query.EndProperty(common.ObjectID.String()), "14CEE53E-4D95-4DDD-A244-BF15C73DC06A")),
+		query.And(query.Kind(query.Start(), ad.Computer), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-1000"), query.Kind(query.Relationship(), ad.ManageCA), query.Kind(query.End(), ad.EnterpriseCA), query.Equals(query.EndProperty(common.ObjectID.String()), "14CEE53E-4D95-4DDD-A244-BF15C73DC06A")),
+		query.And(query.Kind(query.Start(), ad.Computer), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-1000"), query.Kind(query.Relationship(), ad.ManageCertificates), query.Kind(query.End(), ad.EnterpriseCA), query.Equals(query.EndProperty(common.ObjectID.String()), "14CEE53E-4D95-4DDD-A244-BF15C73DC06A")),
+		query.And(query.Kind(query.Start(), ad.User), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-1105"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.EnterpriseCA), query.Equals(query.EndProperty(common.ObjectID.String()), "14CEE53E-4D95-4DDD-A244-BF15C73DC06A")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-1108"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.EnterpriseCA), query.Equals(query.EndProperty(common.ObjectID.String()), "14CEE53E-4D95-4DDD-A244-BF15C73DC06A")),
+		query.And(query.Kind(query.Start(), ad.User), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-1111"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.EnterpriseCA), query.Equals(query.EndProperty(common.ObjectID.String()), "14CEE53E-4D95-4DDD-A244-BF15C73DC06A")),
+		query.And(query.Kind(query.Start(), ad.User), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-1113"), query.Kind(query.Relationship(), ad.Enroll), query.Kind(query.End(), ad.EnterpriseCA), query.Equals(query.EndProperty(common.ObjectID.String()), "14CEE53E-4D95-4DDD-A244-BF15C73DC06A")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.GenericAll), query.Kind(query.End(), ad.EnterpriseCA), query.Equals(query.EndProperty(common.ObjectID.String()), "14CEE53E-4D95-4DDD-A244-BF15C73DC06A")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.EnterpriseCA), query.Equals(query.EndProperty(common.ObjectID.String()), "14CEE53E-4D95-4DDD-A244-BF15C73DC06A")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.EnterpriseCA), query.Equals(query.EndProperty(common.ObjectID.String()), "14CEE53E-4D95-4DDD-A244-BF15C73DC06A")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.ManageCA), query.Kind(query.End(), ad.EnterpriseCA), query.Equals(query.EndProperty(common.ObjectID.String()), "14CEE53E-4D95-4DDD-A244-BF15C73DC06A")),
+
+		//NTAuthStores ContainedBy
+		//cat bhce/cmd/api/src/test/fixtures/fixtures/v6/all/ntauthstores.json | jq -r '.data | map(.)[] | select(.ContainedBy.ObjectIdentifier != null) | (.ContainedBy.ObjectIdentifier | ascii_upcase) as $containerId | ("ad." + .ContainedBy.ObjectType) as $containerType | "query.And(query.Kind(query.Start(), \($containerType)), query.Equals(query.StartProperty(common.ObjectID.String()), \"" + $containerId + "\"), query.Kind(query.Relationship(), ad.Contains), query.Kind(query.End(), ad.NTAuthStore), query.Equals(query.EndProperty(common.ObjectID.String()), \"\(.ObjectIdentifier)\")),"'
+
+		query.And(query.Kind(query.Start(), ad.Container), query.Equals(query.StartProperty(common.ObjectID.String()), "A18A3A99-3E4C-46DD-9C90-E5542FA4EC84"), query.Kind(query.Relationship(), ad.Contains), query.Kind(query.End(), ad.NTAuthStore), query.Equals(query.EndProperty(common.ObjectID.String()), "722A8BB3-AEF5-49C7-9C8C-C1C97A219007")),
+
+		//NTAuthStoreFor
+		query.And(
+			query.Kind(query.Start(), ad.NTAuthStore),
+			query.Equals(query.StartProperty(common.ObjectID.String()), "722A8BB3-AEF5-49C7-9C8C-C1C97A219007"),
+			query.Kind(query.Relationship(), ad.NTAuthStoreFor),
+			query.Kind(query.End(), ad.Domain),
+			query.Equals(query.EndProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266")),
+
+		//NTAuthStore ACE Rels
+		//cat bhce/cmd/api/src/test/fixtures/fixtures/v6/all/ntauthstores.json | jq -r '.data | map(.)[] | .ObjectIdentifier as $targetId | .Aces[] | (.PrincipalSID | ascii_upcase) as $sourceId | ("ad." + .PrincipalType) as $sourceType | ("ad." + .RightName) as $relType |"query.And(query.Kind(query.Start(), \($sourceType)), query.Equals(query.StartProperty(common.ObjectID.String()), \"" + $sourceId + "\"), query.Kind(query.Relationship(), \($relType)), query.Kind(query.End(), ad.NTAuthStore), query.Equals(query.EndProperty(common.ObjectID.String()), \"\($targetId)\")),"'
+
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Owns), query.Kind(query.End(), ad.NTAuthStore), query.Equals(query.EndProperty(common.ObjectID.String()), "722A8BB3-AEF5-49C7-9C8C-C1C97A219007")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "ESC1.LOCAL-S-1-5-32-544"), query.Kind(query.Relationship(), ad.GenericAll), query.Kind(query.End(), ad.NTAuthStore), query.Equals(query.EndProperty(common.ObjectID.String()), "722A8BB3-AEF5-49C7-9C8C-C1C97A219007")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.GenericAll), query.Kind(query.End(), ad.NTAuthStore), query.Equals(query.EndProperty(common.ObjectID.String()), "722A8BB3-AEF5-49C7-9C8C-C1C97A219007")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.GenericAll), query.Kind(query.End(), ad.NTAuthStore), query.Equals(query.EndProperty(common.ObjectID.String()), "722A8BB3-AEF5-49C7-9C8C-C1C97A219007")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.GenericAll), query.Kind(query.End(), ad.NTAuthStore), query.Equals(query.EndProperty(common.ObjectID.String()), "722A8BB3-AEF5-49C7-9C8C-C1C97A219007")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.NTAuthStore), query.Equals(query.EndProperty(common.ObjectID.String()), "722A8BB3-AEF5-49C7-9C8C-C1C97A219007")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.NTAuthStore), query.Equals(query.EndProperty(common.ObjectID.String()), "722A8BB3-AEF5-49C7-9C8C-C1C97A219007")),
+
+		//RootCAs ContainedBy
+		//cat bhce/cmd/api/src/test/fixtures/fixtures/v6/all/rootcas.json | jq -r '.data | map(.)[] | select(.ContainedBy.ObjectIdentifier != null) | (.ContainedBy.ObjectIdentifier | ascii_upcase) as $containerId | ("ad." + .ContainedBy.ObjectType) as $containerType | "query.And(query.Kind(query.Start(), \($containerType)), query.Equals(query.StartProperty(common.ObjectID.String()), \"" + $containerId + "\"), query.Kind(query.Relationship(), ad.Contains), query.Kind(query.End(), ad.RootCA), query.Equals(query.EndProperty(common.ObjectID.String()), \"\(.ObjectIdentifier)\")),"'
+
+		query.And(query.Kind(query.Start(), ad.Container), query.Equals(query.StartProperty(common.ObjectID.String()), "242AB0E0-13D1-4517-BEB0-07E504802B6B"), query.Kind(query.Relationship(), ad.Contains), query.Kind(query.End(), ad.RootCA), query.Equals(query.EndProperty(common.ObjectID.String()), "4B5183E1-DB57-4A57-8159-3E9649F3B01C")),
+
+		//RootCAFor
+		query.And(
+			query.Kind(query.Start(), ad.RootCA),
+			query.Equals(query.StartProperty(common.ObjectID.String()), "4B5183E1-DB57-4A57-8159-3E9649F3B01C"),
+			query.Kind(query.Relationship(), ad.RootCAFor),
+			query.Kind(query.End(), ad.Domain),
+			query.Equals(query.EndProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266")),
+
+		//RootCAs ACE Rels
+		//cat bhce/cmd/api/src/test/fixtures/fixtures/v6/all/rootcas.json | jq -r '.data | map(.)[] | .ObjectIdentifier as $targetId | .Aces[] | (.PrincipalSID | ascii_upcase) as $sourceId | ("ad." + .PrincipalType) as $sourceType | ("ad." + .RightName) as $relType |"query.And(query.Kind(query.Start(), \($sourceType)), query.Equals(query.StartProperty(common.ObjectID.String()), \"" + $sourceId + "\"), query.Kind(query.Relationship(), \($relType)), query.Kind(query.End(), ad.RootCA), query.Equals(query.EndProperty(common.ObjectID.String()), \"\($targetId)\")),"'
+
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.Owns), query.Kind(query.End(), ad.RootCA), query.Equals(query.EndProperty(common.ObjectID.String()), "4B5183E1-DB57-4A57-8159-3E9649F3B01C")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "ESC1.LOCAL-S-1-5-32-544"), query.Kind(query.Relationship(), ad.GenericAll), query.Kind(query.End(), ad.RootCA), query.Equals(query.EndProperty(common.ObjectID.String()), "4B5183E1-DB57-4A57-8159-3E9649F3B01C")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.GenericAll), query.Kind(query.End(), ad.RootCA), query.Equals(query.EndProperty(common.ObjectID.String()), "4B5183E1-DB57-4A57-8159-3E9649F3B01C")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-517"), query.Kind(query.Relationship(), ad.GenericAll), query.Kind(query.End(), ad.RootCA), query.Equals(query.EndProperty(common.ObjectID.String()), "4B5183E1-DB57-4A57-8159-3E9649F3B01C")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.GenericAll), query.Kind(query.End(), ad.RootCA), query.Equals(query.EndProperty(common.ObjectID.String()), "4B5183E1-DB57-4A57-8159-3E9649F3B01C")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-519"), query.Kind(query.Relationship(), ad.GenericAll), query.Kind(query.End(), ad.RootCA), query.Equals(query.EndProperty(common.ObjectID.String()), "4B5183E1-DB57-4A57-8159-3E9649F3B01C")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteDACL), query.Kind(query.End(), ad.RootCA), query.Equals(query.EndProperty(common.ObjectID.String()), "4B5183E1-DB57-4A57-8159-3E9649F3B01C")),
+		query.And(query.Kind(query.Start(), ad.Group), query.Equals(query.StartProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-512"), query.Kind(query.Relationship(), ad.WriteOwner), query.Kind(query.End(), ad.RootCA), query.Equals(query.EndProperty(common.ObjectID.String()), "4B5183E1-DB57-4A57-8159-3E9649F3B01C")),
+	}
+
+	nodeAssertionCriteria = []graph.Criteria{
+		//AIACA Properties
+		//cat bhce/cmd/api/src/test/fixtures/fixtures/v6/all/aiacas.json | jq -r '.data | map(.)[] | "query.And(query.Kind(query.Node(), ad.AIACA), query.Equals(query.NodeProperty(common.ObjectID.String()), \"\(.ObjectIdentifier)\"), query.Equals(query.NodeProperty(common.Name.String()), \"\(.Properties.name)\"), query.Equals(query.NodeProperty(ad.DomainSID.String()), \"\(.Properties.domainsid)\"), query.Equals(query.NodeProperty(ad.DistinguishedName.String()), \"\(.Properties.distinguishedname)\"), query.Equals(query.NodeProperty(ad.CertThumbprint.String()), \"\(.Properties.certthumbprint)\"), query.Equals(query.NodeProperty(ad.CrossCertificatePair.String()), []string{\(.Properties.crosscertificatepair | @csv)}), query.Equals(query.NodeProperty(ad.HasCrossCertificatePair.String()), \(.Properties.hascrosscertificatepair)), query.Equals(query.NodeProperty(ad.CertName.String()), \"\(.Properties.certname)\"), query.Equals(query.NodeProperty(ad.CertChain.String()), []string{\(.Properties.certchain | @csv)}), query.Equals(query.NodeProperty(ad.HasBasicConstraints.String()), \(.Properties.hasbasicconstraints)), query.Equals(query.NodeProperty(ad.BasicConstraintPathLength.String()), \(.Properties.basicconstraintpathlength))),"'
+
+		query.And(query.Kind(query.Node(), ad.AIACA), query.Equals(query.NodeProperty(common.ObjectID.String()), "6345151F-D854-4D83-B7D0-D94E10CFBAF2"), query.Equals(query.NodeProperty(common.Name.String()), "ESC1-ESC1-DC-CA@ESC1.LOCAL"), query.Equals(query.NodeProperty(ad.DomainSID.String()), "S-1-5-21-909015691-3030120388-2582151266"), query.Equals(query.NodeProperty(ad.DistinguishedName.String()), "CN=ESC1-ESC1-DC-CA,CN=AIA,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL"), query.Equals(query.NodeProperty(ad.CertThumbprint.String()), "5F0143662A7EA16E8DB90E44D0F1F1FC87B1E703"), query.Equals(query.NodeProperty(ad.CrossCertificatePair.String()), []string{}), query.Equals(query.NodeProperty(ad.HasCrossCertificatePair.String()), false), query.Equals(query.NodeProperty(ad.CertName.String()), "5F0143662A7EA16E8DB90E44D0F1F1FC87B1E703"), query.Equals(query.NodeProperty(ad.CertChain.String()), []string{"5F0143662A7EA16E8DB90E44D0F1F1FC87B1E703"}), query.Equals(query.NodeProperty(ad.HasBasicConstraints.String()), false), query.Equals(query.NodeProperty(ad.BasicConstraintPathLength.String()), 0)),
+
+		//CertTemplate Properties
+		//cat bhce/cmd/api/src/test/fixtures/fixtures/v6/all/certtemplates.json | jq -r '.data | map(.)[] | "query.And(query.Kind(query.Node(), ad.CertTemplate), query.Equals(query.NodeProperty(common.ObjectID.String()), \"\(.ObjectIdentifier)\"), query.Equals(query.NodeProperty(common.Name.String()), \"\(.Properties.name)\"), query.Equals(query.NodeProperty(ad.DomainSID.String()), \"\(.Properties.domainsid)\"), query.Equals(query.NodeProperty(ad.DistinguishedName.String()), \"\(.Properties.distinguishedname)\"), query.Equals(query.NodeProperty(ad.ValidityPeriod.String()), \"\(.Properties.validityperiod)\"), query.Equals(query.NodeProperty(ad.RenewalPeriod.String()), \"\(.Properties.renewalperiod)\"), query.Equals(query.NodeProperty(ad.SchemaVersion.String()), \(.Properties.schemaversion)), query.Equals(query.NodeProperty(ad.OID.String()), \"\(.Properties.oid)\"), query.Equals(query.NodeProperty(ad.EnrollmentFlag.String()), \"\(.Properties.enrollmentflag)\"), query.Equals(query.NodeProperty(ad.RequiresManagerApproval.String()), \(.Properties.requiresmanagerapproval)), query.Equals(query.NodeProperty(ad.NoSecurityExtension.String()), \(.Properties.nosecurityextension)), query.Equals(query.NodeProperty(ad.CertificateNameFlag.String()), \"\(.Properties.certificatenameflag)\"), query.Equals(query.NodeProperty(ad.EnrolleeSuppliesSubject.String()), \(.Properties.enrolleesuppliessubject)), query.Equals(query.NodeProperty(ad.SubjectAltRequireUPN.String()), \(.Properties.subjectaltrequireupn)), query.Equals(query.NodeProperty(ad.EKUs.String()), []string{\(.Properties.ekus | @csv)}), query.Equals(query.NodeProperty(ad.CertificateApplicationPolicy.String()), []string{\(.Properties.certificateapplicationpolicy | @csv)}), query.Equals(query.NodeProperty(ad.AuthorizedSignatures.String()), \(.Properties.authorizedsignatures)), query.Equals(query.NodeProperty(ad.ApplicationPolicies.String()), []string{\(.Properties.applicationpolicies | @csv)}), query.Equals(query.NodeProperty(ad.IssuancePolicies.String()), []string{\(.Properties.issuancepolicies | @csv)}), query.Equals(query.NodeProperty(ad.EffectiveEKUs.String()), []string{\(.Properties.effectiveekus | @csv)}), query.Equals(query.NodeProperty(ad.AuthenticationEnabled.String()), \(.Properties.authenticationenabled))),"'
+		query.And(query.Kind(query.Node(), ad.CertTemplate), query.Equals(query.NodeProperty(common.ObjectID.String()), "72F15D5F-C7B4-4FD9-ADCE-302F0D3DC91A"), query.Equals(query.NodeProperty(common.Name.String()), "USER@ESC1.LOCAL"), query.Equals(query.NodeProperty(ad.DomainSID.String()), "S-1-5-21-909015691-3030120388-2582151266"), query.Equals(query.NodeProperty(ad.DistinguishedName.String()), "CN=USER,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL"), query.Equals(query.NodeProperty(ad.ValidityPeriod.String()), "1 year"), query.Equals(query.NodeProperty(ad.RenewalPeriod.String()), "6 weeks"), query.Equals(query.NodeProperty(ad.SchemaVersion.String()), 1), query.Equals(query.NodeProperty(ad.OID.String()), "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.1"), query.Equals(query.NodeProperty(ad.EnrollmentFlag.String()), "INCLUDE_SYMMETRIC_ALGORITHMS, PUBLISH_TO_DS, AUTO_ENROLLMENT"), query.Equals(query.NodeProperty(ad.RequiresManagerApproval.String()), false), query.Equals(query.NodeProperty(ad.NoSecurityExtension.String()), false), query.Equals(query.NodeProperty(ad.CertificateNameFlag.String()), "SUBJECT_ALT_REQUIRE_UPN, SUBJECT_ALT_REQUIRE_EMAIL, SUBJECT_REQUIRE_EMAIL, SUBJECT_REQUIRE_DIRECTORY_PATH"), query.Equals(query.NodeProperty(ad.EnrolleeSuppliesSubject.String()), false), query.Equals(query.NodeProperty(ad.SubjectAltRequireUPN.String()), true), query.Equals(query.NodeProperty(ad.EKUs.String()), []string{"1.3.6.1.4.1.311.10.3.4", "1.3.6.1.5.5.7.3.4", "1.3.6.1.5.5.7.3.2"}), query.Equals(query.NodeProperty(ad.CertificateApplicationPolicy.String()), []string{}), query.Equals(query.NodeProperty(ad.AuthorizedSignatures.String()), 0), query.Equals(query.NodeProperty(ad.ApplicationPolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.IssuancePolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.EffectiveEKUs.String()), []string{"1.3.6.1.4.1.311.10.3.4", "1.3.6.1.5.5.7.3.4", "1.3.6.1.5.5.7.3.2"}), query.Equals(query.NodeProperty(ad.AuthenticationEnabled.String()), true)),
+		query.And(query.Kind(query.Node(), ad.CertTemplate), query.Equals(query.NodeProperty(common.ObjectID.String()), "01BCD578-1031-400B-ADBA-0B8AEAB95929"), query.Equals(query.NodeProperty(common.Name.String()), "SMARTCARDLOGON@ESC1.LOCAL"), query.Equals(query.NodeProperty(ad.DomainSID.String()), "S-1-5-21-909015691-3030120388-2582151266"), query.Equals(query.NodeProperty(ad.DistinguishedName.String()), "CN=SMARTCARDLOGON,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL"), query.Equals(query.NodeProperty(ad.ValidityPeriod.String()), "1 year"), query.Equals(query.NodeProperty(ad.RenewalPeriod.String()), "6 weeks"), query.Equals(query.NodeProperty(ad.SchemaVersion.String()), 1), query.Equals(query.NodeProperty(ad.OID.String()), "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.5"), query.Equals(query.NodeProperty(ad.EnrollmentFlag.String()), "NONE"), query.Equals(query.NodeProperty(ad.RequiresManagerApproval.String()), false), query.Equals(query.NodeProperty(ad.NoSecurityExtension.String()), false), query.Equals(query.NodeProperty(ad.CertificateNameFlag.String()), "SUBJECT_ALT_REQUIRE_UPN, SUBJECT_REQUIRE_DIRECTORY_PATH"), query.Equals(query.NodeProperty(ad.EnrolleeSuppliesSubject.String()), false), query.Equals(query.NodeProperty(ad.SubjectAltRequireUPN.String()), true), query.Equals(query.NodeProperty(ad.EKUs.String()), []string{"1.3.6.1.5.5.7.3.2", "1.3.6.1.4.1.311.20.2.2"}), query.Equals(query.NodeProperty(ad.CertificateApplicationPolicy.String()), []string{}), query.Equals(query.NodeProperty(ad.AuthorizedSignatures.String()), 0), query.Equals(query.NodeProperty(ad.ApplicationPolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.IssuancePolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.EffectiveEKUs.String()), []string{"1.3.6.1.5.5.7.3.2", "1.3.6.1.4.1.311.20.2.2"}), query.Equals(query.NodeProperty(ad.AuthenticationEnabled.String()), true)),
+		query.And(query.Kind(query.Node(), ad.CertTemplate), query.Equals(query.NodeProperty(common.ObjectID.String()), "251BB763-E8FE-4B7A-9E61-1EDE247847E1"), query.Equals(query.NodeProperty(common.Name.String()), "ADMINISTRATOR@ESC1.LOCAL"), query.Equals(query.NodeProperty(ad.DomainSID.String()), "S-1-5-21-909015691-3030120388-2582151266"), query.Equals(query.NodeProperty(ad.DistinguishedName.String()), "CN=ADMINISTRATOR,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL"), query.Equals(query.NodeProperty(ad.ValidityPeriod.String()), "1 year"), query.Equals(query.NodeProperty(ad.RenewalPeriod.String()), "6 weeks"), query.Equals(query.NodeProperty(ad.SchemaVersion.String()), 1), query.Equals(query.NodeProperty(ad.OID.String()), "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.7"), query.Equals(query.NodeProperty(ad.EnrollmentFlag.String()), "INCLUDE_SYMMETRIC_ALGORITHMS, PUBLISH_TO_DS, AUTO_ENROLLMENT"), query.Equals(query.NodeProperty(ad.RequiresManagerApproval.String()), false), query.Equals(query.NodeProperty(ad.NoSecurityExtension.String()), false), query.Equals(query.NodeProperty(ad.CertificateNameFlag.String()), "SUBJECT_ALT_REQUIRE_UPN, SUBJECT_ALT_REQUIRE_EMAIL, SUBJECT_REQUIRE_EMAIL, SUBJECT_REQUIRE_DIRECTORY_PATH"), query.Equals(query.NodeProperty(ad.EnrolleeSuppliesSubject.String()), false), query.Equals(query.NodeProperty(ad.SubjectAltRequireUPN.String()), true), query.Equals(query.NodeProperty(ad.EKUs.String()), []string{"1.3.6.1.4.1.311.10.3.1", "1.3.6.1.4.1.311.10.3.4", "1.3.6.1.5.5.7.3.4", "1.3.6.1.5.5.7.3.2"}), query.Equals(query.NodeProperty(ad.CertificateApplicationPolicy.String()), []string{}), query.Equals(query.NodeProperty(ad.AuthorizedSignatures.String()), 0), query.Equals(query.NodeProperty(ad.ApplicationPolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.IssuancePolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.EffectiveEKUs.String()), []string{"1.3.6.1.4.1.311.10.3.1", "1.3.6.1.4.1.311.10.3.4", "1.3.6.1.5.5.7.3.4", "1.3.6.1.5.5.7.3.2"}), query.Equals(query.NodeProperty(ad.AuthenticationEnabled.String()), true)),
+		query.And(query.Kind(query.Node(), ad.CertTemplate), query.Equals(query.NodeProperty(common.ObjectID.String()), "E928FF44-D63B-4C60-B20A-94B72B782E38"), query.Equals(query.NodeProperty(common.Name.String()), "CODESIGNING@ESC1.LOCAL"), query.Equals(query.NodeProperty(ad.DomainSID.String()), "S-1-5-21-909015691-3030120388-2582151266"), query.Equals(query.NodeProperty(ad.DistinguishedName.String()), "CN=CODESIGNING,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL"), query.Equals(query.NodeProperty(ad.ValidityPeriod.String()), "1 year"), query.Equals(query.NodeProperty(ad.RenewalPeriod.String()), "6 weeks"), query.Equals(query.NodeProperty(ad.SchemaVersion.String()), 1), query.Equals(query.NodeProperty(ad.OID.String()), "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.9"), query.Equals(query.NodeProperty(ad.EnrollmentFlag.String()), "AUTO_ENROLLMENT"), query.Equals(query.NodeProperty(ad.RequiresManagerApproval.String()), false), query.Equals(query.NodeProperty(ad.NoSecurityExtension.String()), false), query.Equals(query.NodeProperty(ad.CertificateNameFlag.String()), "SUBJECT_ALT_REQUIRE_UPN, SUBJECT_REQUIRE_DIRECTORY_PATH"), query.Equals(query.NodeProperty(ad.EnrolleeSuppliesSubject.String()), false), query.Equals(query.NodeProperty(ad.SubjectAltRequireUPN.String()), true), query.Equals(query.NodeProperty(ad.EKUs.String()), []string{"1.3.6.1.5.5.7.3.3"}), query.Equals(query.NodeProperty(ad.CertificateApplicationPolicy.String()), []string{}), query.Equals(query.NodeProperty(ad.AuthorizedSignatures.String()), 0), query.Equals(query.NodeProperty(ad.ApplicationPolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.IssuancePolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.EffectiveEKUs.String()), []string{"1.3.6.1.5.5.7.3.3"}), query.Equals(query.NodeProperty(ad.AuthenticationEnabled.String()), false)),
+		query.And(query.Kind(query.Node(), ad.CertTemplate), query.Equals(query.NodeProperty(common.ObjectID.String()), "E249A350-93EA-4290-9E28-CFC9A5718C86"), query.Equals(query.NodeProperty(common.Name.String()), "EFSRECOVERY@ESC1.LOCAL"), query.Equals(query.NodeProperty(ad.DomainSID.String()), "S-1-5-21-909015691-3030120388-2582151266"), query.Equals(query.NodeProperty(ad.DistinguishedName.String()), "CN=EFSRECOVERY,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL"), query.Equals(query.NodeProperty(ad.ValidityPeriod.String()), "5 years"), query.Equals(query.NodeProperty(ad.RenewalPeriod.String()), "6 weeks"), query.Equals(query.NodeProperty(ad.SchemaVersion.String()), 1), query.Equals(query.NodeProperty(ad.OID.String()), "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.8"), query.Equals(query.NodeProperty(ad.EnrollmentFlag.String()), "INCLUDE_SYMMETRIC_ALGORITHMS, AUTO_ENROLLMENT"), query.Equals(query.NodeProperty(ad.RequiresManagerApproval.String()), false), query.Equals(query.NodeProperty(ad.NoSecurityExtension.String()), false), query.Equals(query.NodeProperty(ad.CertificateNameFlag.String()), "SUBJECT_ALT_REQUIRE_UPN, SUBJECT_REQUIRE_DIRECTORY_PATH"), query.Equals(query.NodeProperty(ad.EnrolleeSuppliesSubject.String()), false), query.Equals(query.NodeProperty(ad.SubjectAltRequireUPN.String()), true), query.Equals(query.NodeProperty(ad.EKUs.String()), []string{"1.3.6.1.4.1.311.10.3.4.1"}), query.Equals(query.NodeProperty(ad.CertificateApplicationPolicy.String()), []string{}), query.Equals(query.NodeProperty(ad.AuthorizedSignatures.String()), 0), query.Equals(query.NodeProperty(ad.ApplicationPolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.IssuancePolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.EffectiveEKUs.String()), []string{"1.3.6.1.4.1.311.10.3.4.1"}), query.Equals(query.NodeProperty(ad.AuthenticationEnabled.String()), false)),
+		query.And(query.Kind(query.Node(), ad.CertTemplate), query.Equals(query.NodeProperty(common.ObjectID.String()), "F951BBAA-F10A-4A70-9507-BCD8F188D70B"), query.Equals(query.NodeProperty(common.Name.String()), "CTLSIGNING@ESC1.LOCAL"), query.Equals(query.NodeProperty(ad.DomainSID.String()), "S-1-5-21-909015691-3030120388-2582151266"), query.Equals(query.NodeProperty(ad.DistinguishedName.String()), "CN=CTLSIGNING,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL"), query.Equals(query.NodeProperty(ad.ValidityPeriod.String()), "1 year"), query.Equals(query.NodeProperty(ad.RenewalPeriod.String()), "6 weeks"), query.Equals(query.NodeProperty(ad.SchemaVersion.String()), 1), query.Equals(query.NodeProperty(ad.OID.String()), "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.10"), query.Equals(query.NodeProperty(ad.EnrollmentFlag.String()), "AUTO_ENROLLMENT"), query.Equals(query.NodeProperty(ad.RequiresManagerApproval.String()), false), query.Equals(query.NodeProperty(ad.NoSecurityExtension.String()), false), query.Equals(query.NodeProperty(ad.CertificateNameFlag.String()), "SUBJECT_ALT_REQUIRE_UPN, SUBJECT_REQUIRE_DIRECTORY_PATH"), query.Equals(query.NodeProperty(ad.EnrolleeSuppliesSubject.String()), false), query.Equals(query.NodeProperty(ad.SubjectAltRequireUPN.String()), true), query.Equals(query.NodeProperty(ad.EKUs.String()), []string{"1.3.6.1.4.1.311.10.3.1"}), query.Equals(query.NodeProperty(ad.CertificateApplicationPolicy.String()), []string{}), query.Equals(query.NodeProperty(ad.AuthorizedSignatures.String()), 0), query.Equals(query.NodeProperty(ad.ApplicationPolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.IssuancePolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.EffectiveEKUs.String()), []string{"1.3.6.1.4.1.311.10.3.1"}), query.Equals(query.NodeProperty(ad.AuthenticationEnabled.String()), false)),
+		query.And(query.Kind(query.Node(), ad.CertTemplate), query.Equals(query.NodeProperty(common.ObjectID.String()), "CDDAE05D-4623-464C-AB48-AE38BC7EC8BA"), query.Equals(query.NodeProperty(common.Name.String()), "ENROLLMENTAGENT@ESC1.LOCAL"), query.Equals(query.NodeProperty(ad.DomainSID.String()), "S-1-5-21-909015691-3030120388-2582151266"), query.Equals(query.NodeProperty(ad.DistinguishedName.String()), "CN=ENROLLMENTAGENT,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL"), query.Equals(query.NodeProperty(ad.ValidityPeriod.String()), "2 years"), query.Equals(query.NodeProperty(ad.RenewalPeriod.String()), "6 weeks"), query.Equals(query.NodeProperty(ad.SchemaVersion.String()), 1), query.Equals(query.NodeProperty(ad.OID.String()), "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.11"), query.Equals(query.NodeProperty(ad.EnrollmentFlag.String()), "AUTO_ENROLLMENT"), query.Equals(query.NodeProperty(ad.RequiresManagerApproval.String()), false), query.Equals(query.NodeProperty(ad.NoSecurityExtension.String()), false), query.Equals(query.NodeProperty(ad.CertificateNameFlag.String()), "SUBJECT_ALT_REQUIRE_UPN, SUBJECT_REQUIRE_DIRECTORY_PATH"), query.Equals(query.NodeProperty(ad.EnrolleeSuppliesSubject.String()), false), query.Equals(query.NodeProperty(ad.SubjectAltRequireUPN.String()), true), query.Equals(query.NodeProperty(ad.EKUs.String()), []string{"1.3.6.1.4.1.311.20.2.1"}), query.Equals(query.NodeProperty(ad.CertificateApplicationPolicy.String()), []string{}), query.Equals(query.NodeProperty(ad.AuthorizedSignatures.String()), 0), query.Equals(query.NodeProperty(ad.ApplicationPolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.IssuancePolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.EffectiveEKUs.String()), []string{"1.3.6.1.4.1.311.20.2.1"}), query.Equals(query.NodeProperty(ad.AuthenticationEnabled.String()), false)),
+		query.And(query.Kind(query.Node(), ad.CertTemplate), query.Equals(query.NodeProperty(common.ObjectID.String()), "43616DDD-A336-439F-8A08-088CC0AA85C1"), query.Equals(query.NodeProperty(common.Name.String()), "ENROLLMENTAGENTOFFLINE@ESC1.LOCAL"), query.Equals(query.NodeProperty(ad.DomainSID.String()), "S-1-5-21-909015691-3030120388-2582151266"), query.Equals(query.NodeProperty(ad.DistinguishedName.String()), "CN=ENROLLMENTAGENTOFFLINE,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL"), query.Equals(query.NodeProperty(ad.ValidityPeriod.String()), "2 years"), query.Equals(query.NodeProperty(ad.RenewalPeriod.String()), "6 weeks"), query.Equals(query.NodeProperty(ad.SchemaVersion.String()), 1), query.Equals(query.NodeProperty(ad.OID.String()), "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.12"), query.Equals(query.NodeProperty(ad.EnrollmentFlag.String()), "NONE"), query.Equals(query.NodeProperty(ad.RequiresManagerApproval.String()), false), query.Equals(query.NodeProperty(ad.NoSecurityExtension.String()), false), query.Equals(query.NodeProperty(ad.CertificateNameFlag.String()), "ENROLLEE_SUPPLIES_SUBJECT"), query.Equals(query.NodeProperty(ad.EnrolleeSuppliesSubject.String()), true), query.Equals(query.NodeProperty(ad.SubjectAltRequireUPN.String()), false), query.Equals(query.NodeProperty(ad.EKUs.String()), []string{"1.3.6.1.4.1.311.20.2.1"}), query.Equals(query.NodeProperty(ad.CertificateApplicationPolicy.String()), []string{}), query.Equals(query.NodeProperty(ad.AuthorizedSignatures.String()), 0), query.Equals(query.NodeProperty(ad.ApplicationPolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.IssuancePolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.EffectiveEKUs.String()), []string{"1.3.6.1.4.1.311.20.2.1"}), query.Equals(query.NodeProperty(ad.AuthenticationEnabled.String()), false)),
+		query.And(query.Kind(query.Node(), ad.CertTemplate), query.Equals(query.NodeProperty(common.ObjectID.String()), "C6DC9FD9-2A52-4064-9D8E-ED9BBA52FD51"), query.Equals(query.NodeProperty(common.Name.String()), "MACHINE@ESC1.LOCAL"), query.Equals(query.NodeProperty(ad.DomainSID.String()), "S-1-5-21-909015691-3030120388-2582151266"), query.Equals(query.NodeProperty(ad.DistinguishedName.String()), "CN=MACHINE,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL"), query.Equals(query.NodeProperty(ad.ValidityPeriod.String()), "1 year"), query.Equals(query.NodeProperty(ad.RenewalPeriod.String()), "6 weeks"), query.Equals(query.NodeProperty(ad.SchemaVersion.String()), 1), query.Equals(query.NodeProperty(ad.OID.String()), "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.14"), query.Equals(query.NodeProperty(ad.EnrollmentFlag.String()), "AUTO_ENROLLMENT"), query.Equals(query.NodeProperty(ad.RequiresManagerApproval.String()), false), query.Equals(query.NodeProperty(ad.NoSecurityExtension.String()), false), query.Equals(query.NodeProperty(ad.CertificateNameFlag.String()), "SUBJECT_ALT_REQUIRE_DNS, SUBJECT_REQUIRE_DNS_AS_CN"), query.Equals(query.NodeProperty(ad.EnrolleeSuppliesSubject.String()), false), query.Equals(query.NodeProperty(ad.SubjectAltRequireUPN.String()), false), query.Equals(query.NodeProperty(ad.EKUs.String()), []string{"1.3.6.1.5.5.7.3.2", "1.3.6.1.5.5.7.3.1"}), query.Equals(query.NodeProperty(ad.CertificateApplicationPolicy.String()), []string{}), query.Equals(query.NodeProperty(ad.AuthorizedSignatures.String()), 0), query.Equals(query.NodeProperty(ad.ApplicationPolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.IssuancePolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.EffectiveEKUs.String()), []string{"1.3.6.1.5.5.7.3.2", "1.3.6.1.5.5.7.3.1"}), query.Equals(query.NodeProperty(ad.AuthenticationEnabled.String()), true)),
+		query.And(query.Kind(query.Node(), ad.CertTemplate), query.Equals(query.NodeProperty(common.ObjectID.String()), "39E1A53E-3D9E-4341-A3E8-8F297FEB34CD"), query.Equals(query.NodeProperty(common.Name.String()), "MACHINEENROLLMENTAGENT@ESC1.LOCAL"), query.Equals(query.NodeProperty(ad.DomainSID.String()), "S-1-5-21-909015691-3030120388-2582151266"), query.Equals(query.NodeProperty(ad.DistinguishedName.String()), "CN=MACHINEENROLLMENTAGENT,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL"), query.Equals(query.NodeProperty(ad.ValidityPeriod.String()), "2 years"), query.Equals(query.NodeProperty(ad.RenewalPeriod.String()), "6 weeks"), query.Equals(query.NodeProperty(ad.SchemaVersion.String()), 1), query.Equals(query.NodeProperty(ad.OID.String()), "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.13"), query.Equals(query.NodeProperty(ad.EnrollmentFlag.String()), "AUTO_ENROLLMENT"), query.Equals(query.NodeProperty(ad.RequiresManagerApproval.String()), false), query.Equals(query.NodeProperty(ad.NoSecurityExtension.String()), false), query.Equals(query.NodeProperty(ad.CertificateNameFlag.String()), "SUBJECT_ALT_REQUIRE_DNS, SUBJECT_REQUIRE_DNS_AS_CN"), query.Equals(query.NodeProperty(ad.EnrolleeSuppliesSubject.String()), false), query.Equals(query.NodeProperty(ad.SubjectAltRequireUPN.String()), false), query.Equals(query.NodeProperty(ad.EKUs.String()), []string{"1.3.6.1.4.1.311.20.2.1"}), query.Equals(query.NodeProperty(ad.CertificateApplicationPolicy.String()), []string{}), query.Equals(query.NodeProperty(ad.AuthorizedSignatures.String()), 0), query.Equals(query.NodeProperty(ad.ApplicationPolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.IssuancePolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.EffectiveEKUs.String()), []string{"1.3.6.1.4.1.311.20.2.1"}), query.Equals(query.NodeProperty(ad.AuthenticationEnabled.String()), false)),
+		query.And(query.Kind(query.Node(), ad.CertTemplate), query.Equals(query.NodeProperty(common.ObjectID.String()), "63FB126D-499F-48DA-A707-A134B92764BD"), query.Equals(query.NodeProperty(common.Name.String()), "DOMAINCONTROLLER@ESC1.LOCAL"), query.Equals(query.NodeProperty(ad.DomainSID.String()), "S-1-5-21-909015691-3030120388-2582151266"), query.Equals(query.NodeProperty(ad.DistinguishedName.String()), "CN=DOMAINCONTROLLER,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL"), query.Equals(query.NodeProperty(ad.ValidityPeriod.String()), "1 year"), query.Equals(query.NodeProperty(ad.RenewalPeriod.String()), "6 weeks"), query.Equals(query.NodeProperty(ad.SchemaVersion.String()), 1), query.Equals(query.NodeProperty(ad.OID.String()), "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.15"), query.Equals(query.NodeProperty(ad.EnrollmentFlag.String()), "INCLUDE_SYMMETRIC_ALGORITHMS, PUBLISH_TO_DS, AUTO_ENROLLMENT"), query.Equals(query.NodeProperty(ad.RequiresManagerApproval.String()), false), query.Equals(query.NodeProperty(ad.NoSecurityExtension.String()), false), query.Equals(query.NodeProperty(ad.CertificateNameFlag.String()), "SUBJECT_ALT_REQUIRE_DIRECTORY_GUID, SUBJECT_ALT_REQUIRE_DNS, SUBJECT_REQUIRE_DNS_AS_CN"), query.Equals(query.NodeProperty(ad.EnrolleeSuppliesSubject.String()), false), query.Equals(query.NodeProperty(ad.SubjectAltRequireUPN.String()), false), query.Equals(query.NodeProperty(ad.EKUs.String()), []string{"1.3.6.1.5.5.7.3.2", "1.3.6.1.5.5.7.3.1"}), query.Equals(query.NodeProperty(ad.CertificateApplicationPolicy.String()), []string{}), query.Equals(query.NodeProperty(ad.AuthorizedSignatures.String()), 0), query.Equals(query.NodeProperty(ad.ApplicationPolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.IssuancePolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.EffectiveEKUs.String()), []string{"1.3.6.1.5.5.7.3.2", "1.3.6.1.5.5.7.3.1"}), query.Equals(query.NodeProperty(ad.AuthenticationEnabled.String()), true)),
+		query.And(query.Kind(query.Node(), ad.CertTemplate), query.Equals(query.NodeProperty(common.ObjectID.String()), "621424AD-1DD5-487C-B38D-12D094A38153"), query.Equals(query.NodeProperty(common.Name.String()), "WEBSERVER@ESC1.LOCAL"), query.Equals(query.NodeProperty(ad.DomainSID.String()), "S-1-5-21-909015691-3030120388-2582151266"), query.Equals(query.NodeProperty(ad.DistinguishedName.String()), "CN=WEBSERVER,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL"), query.Equals(query.NodeProperty(ad.ValidityPeriod.String()), "2 years"), query.Equals(query.NodeProperty(ad.RenewalPeriod.String()), "6 weeks"), query.Equals(query.NodeProperty(ad.SchemaVersion.String()), 1), query.Equals(query.NodeProperty(ad.OID.String()), "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.16"), query.Equals(query.NodeProperty(ad.EnrollmentFlag.String()), "NONE"), query.Equals(query.NodeProperty(ad.RequiresManagerApproval.String()), false), query.Equals(query.NodeProperty(ad.NoSecurityExtension.String()), false), query.Equals(query.NodeProperty(ad.CertificateNameFlag.String()), "ENROLLEE_SUPPLIES_SUBJECT"), query.Equals(query.NodeProperty(ad.EnrolleeSuppliesSubject.String()), true), query.Equals(query.NodeProperty(ad.SubjectAltRequireUPN.String()), false), query.Equals(query.NodeProperty(ad.EKUs.String()), []string{"1.3.6.1.5.5.7.3.1"}), query.Equals(query.NodeProperty(ad.CertificateApplicationPolicy.String()), []string{}), query.Equals(query.NodeProperty(ad.AuthorizedSignatures.String()), 0), query.Equals(query.NodeProperty(ad.ApplicationPolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.IssuancePolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.EffectiveEKUs.String()), []string{"1.3.6.1.5.5.7.3.1"}), query.Equals(query.NodeProperty(ad.AuthenticationEnabled.String()), false)),
+		query.And(query.Kind(query.Node(), ad.CertTemplate), query.Equals(query.NodeProperty(common.ObjectID.String()), "091BE19E-A0D3-4920-A967-5673A2214268"), query.Equals(query.NodeProperty(common.Name.String()), "CA@ESC1.LOCAL"), query.Equals(query.NodeProperty(ad.DomainSID.String()), "S-1-5-21-909015691-3030120388-2582151266"), query.Equals(query.NodeProperty(ad.DistinguishedName.String()), "CN=CA,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL"), query.Equals(query.NodeProperty(ad.ValidityPeriod.String()), "5 years"), query.Equals(query.NodeProperty(ad.RenewalPeriod.String()), "6 weeks"), query.Equals(query.NodeProperty(ad.SchemaVersion.String()), 1), query.Equals(query.NodeProperty(ad.OID.String()), "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.17"), query.Equals(query.NodeProperty(ad.EnrollmentFlag.String()), "NONE"), query.Equals(query.NodeProperty(ad.RequiresManagerApproval.String()), false), query.Equals(query.NodeProperty(ad.NoSecurityExtension.String()), false), query.Equals(query.NodeProperty(ad.CertificateNameFlag.String()), "ENROLLEE_SUPPLIES_SUBJECT"), query.Equals(query.NodeProperty(ad.EnrolleeSuppliesSubject.String()), true), query.Equals(query.NodeProperty(ad.SubjectAltRequireUPN.String()), false), query.Equals(query.NodeProperty(ad.EKUs.String()), []string{}), query.Equals(query.NodeProperty(ad.CertificateApplicationPolicy.String()), []string{}), query.Equals(query.NodeProperty(ad.AuthorizedSignatures.String()), 0), query.Equals(query.NodeProperty(ad.ApplicationPolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.IssuancePolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.EffectiveEKUs.String()), []string{}), query.Equals(query.NodeProperty(ad.AuthenticationEnabled.String()), true)),
+		query.And(query.Kind(query.Node(), ad.CertTemplate), query.Equals(query.NodeProperty(common.ObjectID.String()), "441D7EAE-CF79-4B97-83A2-B770C231E4DA"), query.Equals(query.NodeProperty(common.Name.String()), "SUBCA@ESC1.LOCAL"), query.Equals(query.NodeProperty(ad.DomainSID.String()), "S-1-5-21-909015691-3030120388-2582151266"), query.Equals(query.NodeProperty(ad.DistinguishedName.String()), "CN=SUBCA,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL"), query.Equals(query.NodeProperty(ad.ValidityPeriod.String()), "5 years"), query.Equals(query.NodeProperty(ad.RenewalPeriod.String()), "6 weeks"), query.Equals(query.NodeProperty(ad.SchemaVersion.String()), 1), query.Equals(query.NodeProperty(ad.OID.String()), "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.18"), query.Equals(query.NodeProperty(ad.EnrollmentFlag.String()), "NONE"), query.Equals(query.NodeProperty(ad.RequiresManagerApproval.String()), false), query.Equals(query.NodeProperty(ad.NoSecurityExtension.String()), false), query.Equals(query.NodeProperty(ad.CertificateNameFlag.String()), "ENROLLEE_SUPPLIES_SUBJECT"), query.Equals(query.NodeProperty(ad.EnrolleeSuppliesSubject.String()), true), query.Equals(query.NodeProperty(ad.SubjectAltRequireUPN.String()), false), query.Equals(query.NodeProperty(ad.EKUs.String()), []string{}), query.Equals(query.NodeProperty(ad.CertificateApplicationPolicy.String()), []string{}), query.Equals(query.NodeProperty(ad.AuthorizedSignatures.String()), 0), query.Equals(query.NodeProperty(ad.ApplicationPolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.IssuancePolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.EffectiveEKUs.String()), []string{}), query.Equals(query.NodeProperty(ad.AuthenticationEnabled.String()), true)),
+		query.And(query.Kind(query.Node(), ad.CertTemplate), query.Equals(query.NodeProperty(common.ObjectID.String()), "AACF5D02-3165-4AC7-9AA9-BD604F95011F"), query.Equals(query.NodeProperty(common.Name.String()), "IPSECINTERMEDIATEONLINE@ESC1.LOCAL"), query.Equals(query.NodeProperty(ad.DomainSID.String()), "S-1-5-21-909015691-3030120388-2582151266"), query.Equals(query.NodeProperty(ad.DistinguishedName.String()), "CN=IPSECINTERMEDIATEONLINE,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL"), query.Equals(query.NodeProperty(ad.ValidityPeriod.String()), "2 years"), query.Equals(query.NodeProperty(ad.RenewalPeriod.String()), "6 weeks"), query.Equals(query.NodeProperty(ad.SchemaVersion.String()), 1), query.Equals(query.NodeProperty(ad.OID.String()), "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.19"), query.Equals(query.NodeProperty(ad.EnrollmentFlag.String()), "AUTO_ENROLLMENT"), query.Equals(query.NodeProperty(ad.RequiresManagerApproval.String()), false), query.Equals(query.NodeProperty(ad.NoSecurityExtension.String()), false), query.Equals(query.NodeProperty(ad.CertificateNameFlag.String()), "SUBJECT_ALT_REQUIRE_DNS, SUBJECT_REQUIRE_DNS_AS_CN"), query.Equals(query.NodeProperty(ad.EnrolleeSuppliesSubject.String()), false), query.Equals(query.NodeProperty(ad.SubjectAltRequireUPN.String()), false), query.Equals(query.NodeProperty(ad.EKUs.String()), []string{"1.3.6.1.5.5.8.2.2"}), query.Equals(query.NodeProperty(ad.CertificateApplicationPolicy.String()), []string{}), query.Equals(query.NodeProperty(ad.AuthorizedSignatures.String()), 0), query.Equals(query.NodeProperty(ad.ApplicationPolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.IssuancePolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.EffectiveEKUs.String()), []string{"1.3.6.1.5.5.8.2.2"}), query.Equals(query.NodeProperty(ad.AuthenticationEnabled.String()), false)),
+		query.And(query.Kind(query.Node(), ad.CertTemplate), query.Equals(query.NodeProperty(common.ObjectID.String()), "4DC38500-E84C-4A92-9354-AE4665CCC80A"), query.Equals(query.NodeProperty(common.Name.String()), "IPSECINTERMEDIATEOFFLINE@ESC1.LOCAL"), query.Equals(query.NodeProperty(ad.DomainSID.String()), "S-1-5-21-909015691-3030120388-2582151266"), query.Equals(query.NodeProperty(ad.DistinguishedName.String()), "CN=IPSECINTERMEDIATEOFFLINE,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL"), query.Equals(query.NodeProperty(ad.ValidityPeriod.String()), "2 years"), query.Equals(query.NodeProperty(ad.RenewalPeriod.String()), "6 weeks"), query.Equals(query.NodeProperty(ad.SchemaVersion.String()), 1), query.Equals(query.NodeProperty(ad.OID.String()), "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.20"), query.Equals(query.NodeProperty(ad.EnrollmentFlag.String()), "NONE"), query.Equals(query.NodeProperty(ad.RequiresManagerApproval.String()), false), query.Equals(query.NodeProperty(ad.NoSecurityExtension.String()), false), query.Equals(query.NodeProperty(ad.CertificateNameFlag.String()), "ENROLLEE_SUPPLIES_SUBJECT"), query.Equals(query.NodeProperty(ad.EnrolleeSuppliesSubject.String()), true), query.Equals(query.NodeProperty(ad.SubjectAltRequireUPN.String()), false), query.Equals(query.NodeProperty(ad.EKUs.String()), []string{"1.3.6.1.5.5.8.2.2"}), query.Equals(query.NodeProperty(ad.CertificateApplicationPolicy.String()), []string{}), query.Equals(query.NodeProperty(ad.AuthorizedSignatures.String()), 0), query.Equals(query.NodeProperty(ad.ApplicationPolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.IssuancePolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.EffectiveEKUs.String()), []string{"1.3.6.1.5.5.8.2.2"}), query.Equals(query.NodeProperty(ad.AuthenticationEnabled.String()), false)),
+		query.And(query.Kind(query.Node(), ad.CertTemplate), query.Equals(query.NodeProperty(common.ObjectID.String()), "99679751-132B-4732-89EE-E21F0A1B1B30"), query.Equals(query.NodeProperty(common.Name.String()), "OFFLINEROUTER@ESC1.LOCAL"), query.Equals(query.NodeProperty(ad.DomainSID.String()), "S-1-5-21-909015691-3030120388-2582151266"), query.Equals(query.NodeProperty(ad.DistinguishedName.String()), "CN=OFFLINEROUTER,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL"), query.Equals(query.NodeProperty(ad.ValidityPeriod.String()), "2 years"), query.Equals(query.NodeProperty(ad.RenewalPeriod.String()), "6 weeks"), query.Equals(query.NodeProperty(ad.SchemaVersion.String()), 1), query.Equals(query.NodeProperty(ad.OID.String()), "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.21"), query.Equals(query.NodeProperty(ad.EnrollmentFlag.String()), "NONE"), query.Equals(query.NodeProperty(ad.RequiresManagerApproval.String()), false), query.Equals(query.NodeProperty(ad.NoSecurityExtension.String()), false), query.Equals(query.NodeProperty(ad.CertificateNameFlag.String()), "ENROLLEE_SUPPLIES_SUBJECT"), query.Equals(query.NodeProperty(ad.EnrolleeSuppliesSubject.String()), true), query.Equals(query.NodeProperty(ad.SubjectAltRequireUPN.String()), false), query.Equals(query.NodeProperty(ad.EKUs.String()), []string{"1.3.6.1.5.5.7.3.2"}), query.Equals(query.NodeProperty(ad.CertificateApplicationPolicy.String()), []string{}), query.Equals(query.NodeProperty(ad.AuthorizedSignatures.String()), 0), query.Equals(query.NodeProperty(ad.ApplicationPolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.IssuancePolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.EffectiveEKUs.String()), []string{"1.3.6.1.5.5.7.3.2"}), query.Equals(query.NodeProperty(ad.AuthenticationEnabled.String()), true)),
+		query.And(query.Kind(query.Node(), ad.CertTemplate), query.Equals(query.NodeProperty(common.ObjectID.String()), "89486D6B-D221-4435-9544-9CDC8B4E6933"), query.Equals(query.NodeProperty(common.Name.String()), "CEPENCRYPTION@ESC1.LOCAL"), query.Equals(query.NodeProperty(ad.DomainSID.String()), "S-1-5-21-909015691-3030120388-2582151266"), query.Equals(query.NodeProperty(ad.DistinguishedName.String()), "CN=CEPENCRYPTION,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL"), query.Equals(query.NodeProperty(ad.ValidityPeriod.String()), "2 years"), query.Equals(query.NodeProperty(ad.RenewalPeriod.String()), "6 weeks"), query.Equals(query.NodeProperty(ad.SchemaVersion.String()), 1), query.Equals(query.NodeProperty(ad.OID.String()), "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.22"), query.Equals(query.NodeProperty(ad.EnrollmentFlag.String()), "NONE"), query.Equals(query.NodeProperty(ad.RequiresManagerApproval.String()), false), query.Equals(query.NodeProperty(ad.NoSecurityExtension.String()), false), query.Equals(query.NodeProperty(ad.CertificateNameFlag.String()), "ENROLLEE_SUPPLIES_SUBJECT"), query.Equals(query.NodeProperty(ad.EnrolleeSuppliesSubject.String()), true), query.Equals(query.NodeProperty(ad.SubjectAltRequireUPN.String()), false), query.Equals(query.NodeProperty(ad.EKUs.String()), []string{"1.3.6.1.4.1.311.20.2.1"}), query.Equals(query.NodeProperty(ad.CertificateApplicationPolicy.String()), []string{}), query.Equals(query.NodeProperty(ad.AuthorizedSignatures.String()), 0), query.Equals(query.NodeProperty(ad.ApplicationPolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.IssuancePolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.EffectiveEKUs.String()), []string{"1.3.6.1.4.1.311.20.2.1"}), query.Equals(query.NodeProperty(ad.AuthenticationEnabled.String()), false)),
+		query.And(query.Kind(query.Node(), ad.CertTemplate), query.Equals(query.NodeProperty(common.ObjectID.String()), "3F2F49C7-53C2-4AFB-8DA2-306C2CD1DDCA"), query.Equals(query.NodeProperty(common.Name.String()), "EXCHANGEUSER@ESC1.LOCAL"), query.Equals(query.NodeProperty(ad.DomainSID.String()), "S-1-5-21-909015691-3030120388-2582151266"), query.Equals(query.NodeProperty(ad.DistinguishedName.String()), "CN=EXCHANGEUSER,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL"), query.Equals(query.NodeProperty(ad.ValidityPeriod.String()), "1 year"), query.Equals(query.NodeProperty(ad.RenewalPeriod.String()), "6 weeks"), query.Equals(query.NodeProperty(ad.SchemaVersion.String()), 1), query.Equals(query.NodeProperty(ad.OID.String()), "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.23"), query.Equals(query.NodeProperty(ad.EnrollmentFlag.String()), "INCLUDE_SYMMETRIC_ALGORITHMS"), query.Equals(query.NodeProperty(ad.RequiresManagerApproval.String()), false), query.Equals(query.NodeProperty(ad.NoSecurityExtension.String()), false), query.Equals(query.NodeProperty(ad.CertificateNameFlag.String()), "ENROLLEE_SUPPLIES_SUBJECT"), query.Equals(query.NodeProperty(ad.EnrolleeSuppliesSubject.String()), true), query.Equals(query.NodeProperty(ad.SubjectAltRequireUPN.String()), false), query.Equals(query.NodeProperty(ad.EKUs.String()), []string{"1.3.6.1.5.5.7.3.4"}), query.Equals(query.NodeProperty(ad.CertificateApplicationPolicy.String()), []string{}), query.Equals(query.NodeProperty(ad.AuthorizedSignatures.String()), 0), query.Equals(query.NodeProperty(ad.ApplicationPolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.IssuancePolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.EffectiveEKUs.String()), []string{"1.3.6.1.5.5.7.3.4"}), query.Equals(query.NodeProperty(ad.AuthenticationEnabled.String()), false)),
+		query.And(query.Kind(query.Node(), ad.CertTemplate), query.Equals(query.NodeProperty(common.ObjectID.String()), "08FA76AA-B3B1-480E-81E2-48CC2AF009B5"), query.Equals(query.NodeProperty(common.Name.String()), "CROSSCA@ESC1.LOCAL"), query.Equals(query.NodeProperty(ad.DomainSID.String()), "S-1-5-21-909015691-3030120388-2582151266"), query.Equals(query.NodeProperty(ad.DistinguishedName.String()), "CN=CROSSCA,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL"), query.Equals(query.NodeProperty(ad.ValidityPeriod.String()), "5 years"), query.Equals(query.NodeProperty(ad.RenewalPeriod.String()), "6 weeks"), query.Equals(query.NodeProperty(ad.SchemaVersion.String()), 2), query.Equals(query.NodeProperty(ad.OID.String()), "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.25"), query.Equals(query.NodeProperty(ad.EnrollmentFlag.String()), "PUBLISH_TO_DS"), query.Equals(query.NodeProperty(ad.RequiresManagerApproval.String()), false), query.Equals(query.NodeProperty(ad.NoSecurityExtension.String()), false), query.Equals(query.NodeProperty(ad.CertificateNameFlag.String()), "ENROLLEE_SUPPLIES_SUBJECT"), query.Equals(query.NodeProperty(ad.EnrolleeSuppliesSubject.String()), true), query.Equals(query.NodeProperty(ad.SubjectAltRequireUPN.String()), false), query.Equals(query.NodeProperty(ad.EKUs.String()), []string{}), query.Equals(query.NodeProperty(ad.CertificateApplicationPolicy.String()), []string{}), query.Equals(query.NodeProperty(ad.AuthorizedSignatures.String()), 1), query.Equals(query.NodeProperty(ad.ApplicationPolicies.String()), []string{"1.3.6.1.4.1.311.10.3.10"}), query.Equals(query.NodeProperty(ad.IssuancePolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.EffectiveEKUs.String()), []string{}), query.Equals(query.NodeProperty(ad.AuthenticationEnabled.String()), true)),
+		query.And(query.Kind(query.Node(), ad.CertTemplate), query.Equals(query.NodeProperty(common.ObjectID.String()), "2D3B649A-50E0-485B-AEF3-6C8ED9DB0A2A"), query.Equals(query.NodeProperty(common.Name.String()), "CAEXCHANGE@ESC1.LOCAL"), query.Equals(query.NodeProperty(ad.DomainSID.String()), "S-1-5-21-909015691-3030120388-2582151266"), query.Equals(query.NodeProperty(ad.DistinguishedName.String()), "CN=CAEXCHANGE,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL"), query.Equals(query.NodeProperty(ad.ValidityPeriod.String()), "1 week"), query.Equals(query.NodeProperty(ad.RenewalPeriod.String()), "1 day"), query.Equals(query.NodeProperty(ad.SchemaVersion.String()), 2), query.Equals(query.NodeProperty(ad.OID.String()), "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.26"), query.Equals(query.NodeProperty(ad.EnrollmentFlag.String()), "INCLUDE_SYMMETRIC_ALGORITHMS"), query.Equals(query.NodeProperty(ad.RequiresManagerApproval.String()), false), query.Equals(query.NodeProperty(ad.NoSecurityExtension.String()), false), query.Equals(query.NodeProperty(ad.CertificateNameFlag.String()), "ENROLLEE_SUPPLIES_SUBJECT"), query.Equals(query.NodeProperty(ad.EnrolleeSuppliesSubject.String()), true), query.Equals(query.NodeProperty(ad.SubjectAltRequireUPN.String()), false), query.Equals(query.NodeProperty(ad.EKUs.String()), []string{"1.3.6.1.4.1.311.21.5"}), query.Equals(query.NodeProperty(ad.CertificateApplicationPolicy.String()), []string{"1.3.6.1.4.1.311.21.5"}), query.Equals(query.NodeProperty(ad.AuthorizedSignatures.String()), 0), query.Equals(query.NodeProperty(ad.ApplicationPolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.IssuancePolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.EffectiveEKUs.String()), []string{"1.3.6.1.4.1.311.21.5"}), query.Equals(query.NodeProperty(ad.AuthenticationEnabled.String()), false)),
+		query.And(query.Kind(query.Node(), ad.CertTemplate), query.Equals(query.NodeProperty(common.ObjectID.String()), "A938AA1C-1A2E-4636-9926-43EE00945106"), query.Equals(query.NodeProperty(common.Name.String()), "EXCHANGEUSERSIGNATURE@ESC1.LOCAL"), query.Equals(query.NodeProperty(ad.DomainSID.String()), "S-1-5-21-909015691-3030120388-2582151266"), query.Equals(query.NodeProperty(ad.DistinguishedName.String()), "CN=EXCHANGEUSERSIGNATURE,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL"), query.Equals(query.NodeProperty(ad.ValidityPeriod.String()), "1 year"), query.Equals(query.NodeProperty(ad.RenewalPeriod.String()), "6 weeks"), query.Equals(query.NodeProperty(ad.SchemaVersion.String()), 1), query.Equals(query.NodeProperty(ad.OID.String()), "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.24"), query.Equals(query.NodeProperty(ad.EnrollmentFlag.String()), "NONE"), query.Equals(query.NodeProperty(ad.RequiresManagerApproval.String()), false), query.Equals(query.NodeProperty(ad.NoSecurityExtension.String()), false), query.Equals(query.NodeProperty(ad.CertificateNameFlag.String()), "ENROLLEE_SUPPLIES_SUBJECT"), query.Equals(query.NodeProperty(ad.EnrolleeSuppliesSubject.String()), true), query.Equals(query.NodeProperty(ad.SubjectAltRequireUPN.String()), false), query.Equals(query.NodeProperty(ad.EKUs.String()), []string{"1.3.6.1.5.5.7.3.4"}), query.Equals(query.NodeProperty(ad.CertificateApplicationPolicy.String()), []string{}), query.Equals(query.NodeProperty(ad.AuthorizedSignatures.String()), 0), query.Equals(query.NodeProperty(ad.ApplicationPolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.IssuancePolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.EffectiveEKUs.String()), []string{"1.3.6.1.5.5.7.3.4"}), query.Equals(query.NodeProperty(ad.AuthenticationEnabled.String()), false)),
+		query.And(query.Kind(query.Node(), ad.CertTemplate), query.Equals(query.NodeProperty(common.ObjectID.String()), "1467B8A3-2ACD-4A8B-9CF1-E9333110A00C"), query.Equals(query.NodeProperty(common.Name.String()), "KEYRECOVERYAGENT@ESC1.LOCAL"), query.Equals(query.NodeProperty(ad.DomainSID.String()), "S-1-5-21-909015691-3030120388-2582151266"), query.Equals(query.NodeProperty(ad.DistinguishedName.String()), "CN=KEYRECOVERYAGENT,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL"), query.Equals(query.NodeProperty(ad.ValidityPeriod.String()), "2 years"), query.Equals(query.NodeProperty(ad.RenewalPeriod.String()), "6 weeks"), query.Equals(query.NodeProperty(ad.SchemaVersion.String()), 2), query.Equals(query.NodeProperty(ad.OID.String()), "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.27"), query.Equals(query.NodeProperty(ad.EnrollmentFlag.String()), "INCLUDE_SYMMETRIC_ALGORITHMS, PEND_ALL_REQUESTS, PUBLISH_TO_KRA_CONTAINER, AUTO_ENROLLMENT"), query.Equals(query.NodeProperty(ad.RequiresManagerApproval.String()), true), query.Equals(query.NodeProperty(ad.NoSecurityExtension.String()), false), query.Equals(query.NodeProperty(ad.CertificateNameFlag.String()), "SUBJECT_ALT_REQUIRE_UPN, SUBJECT_REQUIRE_DIRECTORY_PATH"), query.Equals(query.NodeProperty(ad.EnrolleeSuppliesSubject.String()), false), query.Equals(query.NodeProperty(ad.SubjectAltRequireUPN.String()), true), query.Equals(query.NodeProperty(ad.EKUs.String()), []string{"1.3.6.1.4.1.311.21.6"}), query.Equals(query.NodeProperty(ad.CertificateApplicationPolicy.String()), []string{"1.3.6.1.4.1.311.21.6"}), query.Equals(query.NodeProperty(ad.AuthorizedSignatures.String()), 0), query.Equals(query.NodeProperty(ad.ApplicationPolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.IssuancePolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.EffectiveEKUs.String()), []string{"1.3.6.1.4.1.311.21.6"}), query.Equals(query.NodeProperty(ad.AuthenticationEnabled.String()), false)),
+		query.And(query.Kind(query.Node(), ad.CertTemplate), query.Equals(query.NodeProperty(common.ObjectID.String()), "55BCF264-BBB0-4D50-ACC0-69235586DFC9"), query.Equals(query.NodeProperty(common.Name.String()), "DIRECTORYEMAILREPLICATION@ESC1.LOCAL"), query.Equals(query.NodeProperty(ad.DomainSID.String()), "S-1-5-21-909015691-3030120388-2582151266"), query.Equals(query.NodeProperty(ad.DistinguishedName.String()), "CN=DIRECTORYEMAILREPLICATION,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL"), query.Equals(query.NodeProperty(ad.ValidityPeriod.String()), "1 year"), query.Equals(query.NodeProperty(ad.RenewalPeriod.String()), "6 weeks"), query.Equals(query.NodeProperty(ad.SchemaVersion.String()), 2), query.Equals(query.NodeProperty(ad.OID.String()), "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.29"), query.Equals(query.NodeProperty(ad.EnrollmentFlag.String()), "INCLUDE_SYMMETRIC_ALGORITHMS, PUBLISH_TO_DS, AUTO_ENROLLMENT"), query.Equals(query.NodeProperty(ad.RequiresManagerApproval.String()), false), query.Equals(query.NodeProperty(ad.NoSecurityExtension.String()), false), query.Equals(query.NodeProperty(ad.CertificateNameFlag.String()), "SUBJECT_ALT_REQUIRE_DIRECTORY_GUID, SUBJECT_ALT_REQUIRE_DNS"), query.Equals(query.NodeProperty(ad.EnrolleeSuppliesSubject.String()), false), query.Equals(query.NodeProperty(ad.SubjectAltRequireUPN.String()), false), query.Equals(query.NodeProperty(ad.EKUs.String()), []string{"1.3.6.1.4.1.311.21.19"}), query.Equals(query.NodeProperty(ad.CertificateApplicationPolicy.String()), []string{"1.3.6.1.4.1.311.21.19"}), query.Equals(query.NodeProperty(ad.AuthorizedSignatures.String()), 0), query.Equals(query.NodeProperty(ad.ApplicationPolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.IssuancePolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.EffectiveEKUs.String()), []string{"1.3.6.1.4.1.311.21.19"}), query.Equals(query.NodeProperty(ad.AuthenticationEnabled.String()), false)),
+		query.And(query.Kind(query.Node(), ad.CertTemplate), query.Equals(query.NodeProperty(common.ObjectID.String()), "75957C42-9FFB-4D75-A297-7CDB8B11D74F"), query.Equals(query.NodeProperty(common.Name.String()), "DOMAINCONTROLLERAUTHENTICATION@ESC1.LOCAL"), query.Equals(query.NodeProperty(ad.DomainSID.String()), "S-1-5-21-909015691-3030120388-2582151266"), query.Equals(query.NodeProperty(ad.DistinguishedName.String()), "CN=DOMAINCONTROLLERAUTHENTICATION,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL"), query.Equals(query.NodeProperty(ad.ValidityPeriod.String()), "1 year"), query.Equals(query.NodeProperty(ad.RenewalPeriod.String()), "6 weeks"), query.Equals(query.NodeProperty(ad.SchemaVersion.String()), 2), query.Equals(query.NodeProperty(ad.OID.String()), "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.28"), query.Equals(query.NodeProperty(ad.EnrollmentFlag.String()), "NONE"), query.Equals(query.NodeProperty(ad.RequiresManagerApproval.String()), false), query.Equals(query.NodeProperty(ad.NoSecurityExtension.String()), false), query.Equals(query.NodeProperty(ad.CertificateNameFlag.String()), "ENROLLEE_SUPPLIES_SUBJECT"), query.Equals(query.NodeProperty(ad.EnrolleeSuppliesSubject.String()), true), query.Equals(query.NodeProperty(ad.SubjectAltRequireUPN.String()), false), query.Equals(query.NodeProperty(ad.EKUs.String()), []string{"1.3.6.1.5.5.7.3.2", "1.3.6.1.5.5.7.3.1", "1.3.6.1.4.1.311.20.2.2"}), query.Equals(query.NodeProperty(ad.CertificateApplicationPolicy.String()), []string{"1.3.6.1.5.5.7.3.2", "1.3.6.1.5.5.7.3.1", "1.3.6.1.4.1.311.20.2.2"}), query.Equals(query.NodeProperty(ad.AuthorizedSignatures.String()), 0), query.Equals(query.NodeProperty(ad.ApplicationPolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.IssuancePolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.EffectiveEKUs.String()), []string{"1.3.6.1.5.5.7.3.2", "1.3.6.1.5.5.7.3.1", "1.3.6.1.4.1.311.20.2.2"}), query.Equals(query.NodeProperty(ad.AuthenticationEnabled.String()), true)),
+		query.And(query.Kind(query.Node(), ad.CertTemplate), query.Equals(query.NodeProperty(common.ObjectID.String()), "EDB16956-50D9-4E16-B448-441EFC1D1FB8"), query.Equals(query.NodeProperty(common.Name.String()), "EFS@ESC1.LOCAL"), query.Equals(query.NodeProperty(ad.DomainSID.String()), "S-1-5-21-909015691-3030120388-2582151266"), query.Equals(query.NodeProperty(ad.DistinguishedName.String()), "CN=EFS,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL"), query.Equals(query.NodeProperty(ad.ValidityPeriod.String()), "1 year"), query.Equals(query.NodeProperty(ad.RenewalPeriod.String()), "6 weeks"), query.Equals(query.NodeProperty(ad.SchemaVersion.String()), 1), query.Equals(query.NodeProperty(ad.OID.String()), "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.6"), query.Equals(query.NodeProperty(ad.EnrollmentFlag.String()), "INCLUDE_SYMMETRIC_ALGORITHMS, PUBLISH_TO_DS, AUTO_ENROLLMENT"), query.Equals(query.NodeProperty(ad.RequiresManagerApproval.String()), false), query.Equals(query.NodeProperty(ad.NoSecurityExtension.String()), false), query.Equals(query.NodeProperty(ad.CertificateNameFlag.String()), "SUBJECT_ALT_REQUIRE_UPN, SUBJECT_REQUIRE_DIRECTORY_PATH"), query.Equals(query.NodeProperty(ad.EnrolleeSuppliesSubject.String()), false), query.Equals(query.NodeProperty(ad.SubjectAltRequireUPN.String()), true), query.Equals(query.NodeProperty(ad.EKUs.String()), []string{"1.3.6.1.4.1.311.10.3.4"}), query.Equals(query.NodeProperty(ad.CertificateApplicationPolicy.String()), []string{}), query.Equals(query.NodeProperty(ad.AuthorizedSignatures.String()), 0), query.Equals(query.NodeProperty(ad.ApplicationPolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.IssuancePolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.EffectiveEKUs.String()), []string{"1.3.6.1.4.1.311.10.3.4"}), query.Equals(query.NodeProperty(ad.AuthenticationEnabled.String()), false)),
+		query.And(query.Kind(query.Node(), ad.CertTemplate), query.Equals(query.NodeProperty(common.ObjectID.String()), "3C412345-7109-47BC-B33E-D765B14BBE99"), query.Equals(query.NodeProperty(common.Name.String()), "WORKSTATION@ESC1.LOCAL"), query.Equals(query.NodeProperty(ad.DomainSID.String()), "S-1-5-21-909015691-3030120388-2582151266"), query.Equals(query.NodeProperty(ad.DistinguishedName.String()), "CN=WORKSTATION,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL"), query.Equals(query.NodeProperty(ad.ValidityPeriod.String()), "1 year"), query.Equals(query.NodeProperty(ad.RenewalPeriod.String()), "6 weeks"), query.Equals(query.NodeProperty(ad.SchemaVersion.String()), 2), query.Equals(query.NodeProperty(ad.OID.String()), "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.30"), query.Equals(query.NodeProperty(ad.EnrollmentFlag.String()), "AUTO_ENROLLMENT"), query.Equals(query.NodeProperty(ad.RequiresManagerApproval.String()), false), query.Equals(query.NodeProperty(ad.NoSecurityExtension.String()), false), query.Equals(query.NodeProperty(ad.CertificateNameFlag.String()), "SUBJECT_ALT_REQUIRE_DNS"), query.Equals(query.NodeProperty(ad.EnrolleeSuppliesSubject.String()), false), query.Equals(query.NodeProperty(ad.SubjectAltRequireUPN.String()), false), query.Equals(query.NodeProperty(ad.EKUs.String()), []string{"1.3.6.1.5.5.7.3.2"}), query.Equals(query.NodeProperty(ad.CertificateApplicationPolicy.String()), []string{"1.3.6.1.5.5.7.3.2"}), query.Equals(query.NodeProperty(ad.AuthorizedSignatures.String()), 0), query.Equals(query.NodeProperty(ad.ApplicationPolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.IssuancePolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.EffectiveEKUs.String()), []string{"1.3.6.1.5.5.7.3.2"}), query.Equals(query.NodeProperty(ad.AuthenticationEnabled.String()), true)),
+		query.And(query.Kind(query.Node(), ad.CertTemplate), query.Equals(query.NodeProperty(common.ObjectID.String()), "8426B1B2-6678-4223-BB03-0EBA065D8976"), query.Equals(query.NodeProperty(common.Name.String()), "RASANDIASSERVER@ESC1.LOCAL"), query.Equals(query.NodeProperty(ad.DomainSID.String()), "S-1-5-21-909015691-3030120388-2582151266"), query.Equals(query.NodeProperty(ad.DistinguishedName.String()), "CN=RASANDIASSERVER,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL"), query.Equals(query.NodeProperty(ad.ValidityPeriod.String()), "1 year"), query.Equals(query.NodeProperty(ad.RenewalPeriod.String()), "6 weeks"), query.Equals(query.NodeProperty(ad.SchemaVersion.String()), 2), query.Equals(query.NodeProperty(ad.OID.String()), "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.31"), query.Equals(query.NodeProperty(ad.EnrollmentFlag.String()), "AUTO_ENROLLMENT"), query.Equals(query.NodeProperty(ad.RequiresManagerApproval.String()), false), query.Equals(query.NodeProperty(ad.NoSecurityExtension.String()), false), query.Equals(query.NodeProperty(ad.CertificateNameFlag.String()), "SUBJECT_ALT_REQUIRE_DNS, SUBJECT_REQUIRE_COMMON_NAME"), query.Equals(query.NodeProperty(ad.EnrolleeSuppliesSubject.String()), false), query.Equals(query.NodeProperty(ad.SubjectAltRequireUPN.String()), false), query.Equals(query.NodeProperty(ad.EKUs.String()), []string{"1.3.6.1.5.5.7.3.2", "1.3.6.1.5.5.7.3.1"}), query.Equals(query.NodeProperty(ad.CertificateApplicationPolicy.String()), []string{"1.3.6.1.5.5.7.3.2", "1.3.6.1.5.5.7.3.1"}), query.Equals(query.NodeProperty(ad.AuthorizedSignatures.String()), 0), query.Equals(query.NodeProperty(ad.ApplicationPolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.IssuancePolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.EffectiveEKUs.String()), []string{"1.3.6.1.5.5.7.3.2", "1.3.6.1.5.5.7.3.1"}), query.Equals(query.NodeProperty(ad.AuthenticationEnabled.String()), true)),
+		query.And(query.Kind(query.Node(), ad.CertTemplate), query.Equals(query.NodeProperty(common.ObjectID.String()), "64AC5BD1-1DE3-46D4-9796-5C9D98E4B0F7"), query.Equals(query.NodeProperty(common.Name.String()), "KERBEROSAUTHENTICATION@ESC1.LOCAL"), query.Equals(query.NodeProperty(ad.DomainSID.String()), "S-1-5-21-909015691-3030120388-2582151266"), query.Equals(query.NodeProperty(ad.DistinguishedName.String()), "CN=KERBEROSAUTHENTICATION,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL"), query.Equals(query.NodeProperty(ad.ValidityPeriod.String()), "1 year"), query.Equals(query.NodeProperty(ad.RenewalPeriod.String()), "6 weeks"), query.Equals(query.NodeProperty(ad.SchemaVersion.String()), 2), query.Equals(query.NodeProperty(ad.OID.String()), "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.33"), query.Equals(query.NodeProperty(ad.EnrollmentFlag.String()), "AUTO_ENROLLMENT"), query.Equals(query.NodeProperty(ad.RequiresManagerApproval.String()), false), query.Equals(query.NodeProperty(ad.NoSecurityExtension.String()), false), query.Equals(query.NodeProperty(ad.CertificateNameFlag.String()), "SUBJECT_ALT_REQUIRE_DOMAIN_DNS, SUBJECT_ALT_REQUIRE_DNS"), query.Equals(query.NodeProperty(ad.EnrolleeSuppliesSubject.String()), false), query.Equals(query.NodeProperty(ad.SubjectAltRequireUPN.String()), false), query.Equals(query.NodeProperty(ad.EKUs.String()), []string{"1.3.6.1.5.5.7.3.2", "1.3.6.1.5.5.7.3.1", "1.3.6.1.4.1.311.20.2.2", "1.3.6.1.5.2.3.5"}), query.Equals(query.NodeProperty(ad.CertificateApplicationPolicy.String()), []string{"1.3.6.1.5.5.7.3.2", "1.3.6.1.5.5.7.3.1", "1.3.6.1.4.1.311.20.2.2", "1.3.6.1.5.2.3.5"}), query.Equals(query.NodeProperty(ad.AuthorizedSignatures.String()), 0), query.Equals(query.NodeProperty(ad.ApplicationPolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.IssuancePolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.EffectiveEKUs.String()), []string{"1.3.6.1.5.5.7.3.2", "1.3.6.1.5.5.7.3.1", "1.3.6.1.4.1.311.20.2.2", "1.3.6.1.5.2.3.5"}), query.Equals(query.NodeProperty(ad.AuthenticationEnabled.String()), true)),
+		query.And(query.Kind(query.Node(), ad.CertTemplate), query.Equals(query.NodeProperty(common.ObjectID.String()), "DEBC8BEB-40AF-48B5-940F-AAFAFE961B26"), query.Equals(query.NodeProperty(common.Name.String()), "ESC1@ESC1.LOCAL"), query.Equals(query.NodeProperty(ad.DomainSID.String()), "S-1-5-21-909015691-3030120388-2582151266"), query.Equals(query.NodeProperty(ad.DistinguishedName.String()), "CN=ESC1,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL"), query.Equals(query.NodeProperty(ad.ValidityPeriod.String()), "1 year"), query.Equals(query.NodeProperty(ad.RenewalPeriod.String()), "6 weeks"), query.Equals(query.NodeProperty(ad.SchemaVersion.String()), 2), query.Equals(query.NodeProperty(ad.OID.String()), "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.13327915.10315889"), query.Equals(query.NodeProperty(ad.EnrollmentFlag.String()), "INCLUDE_SYMMETRIC_ALGORITHMS, PUBLISH_TO_DS"), query.Equals(query.NodeProperty(ad.RequiresManagerApproval.String()), false), query.Equals(query.NodeProperty(ad.NoSecurityExtension.String()), false), query.Equals(query.NodeProperty(ad.CertificateNameFlag.String()), "ENROLLEE_SUPPLIES_SUBJECT"), query.Equals(query.NodeProperty(ad.EnrolleeSuppliesSubject.String()), true), query.Equals(query.NodeProperty(ad.SubjectAltRequireUPN.String()), false), query.Equals(query.NodeProperty(ad.EKUs.String()), []string{"1.3.6.1.5.5.7.3.2", "1.3.6.1.5.5.7.3.4", "1.3.6.1.4.1.311.10.3.4"}), query.Equals(query.NodeProperty(ad.CertificateApplicationPolicy.String()), []string{"1.3.6.1.5.5.7.3.2", "1.3.6.1.5.5.7.3.4", "1.3.6.1.4.1.311.10.3.4"}), query.Equals(query.NodeProperty(ad.AuthorizedSignatures.String()), 0), query.Equals(query.NodeProperty(ad.ApplicationPolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.IssuancePolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.EffectiveEKUs.String()), []string{"1.3.6.1.5.5.7.3.2", "1.3.6.1.5.5.7.3.4", "1.3.6.1.4.1.311.10.3.4"}), query.Equals(query.NodeProperty(ad.AuthenticationEnabled.String()), true)),
+		query.And(query.Kind(query.Node(), ad.CertTemplate), query.Equals(query.NodeProperty(common.ObjectID.String()), "9F29EC9F-1DF5-4505-82FB-3DB8B952FDE3"), query.Equals(query.NodeProperty(common.Name.String()), "OCSPRESPONSESIGNING@ESC1.LOCAL"), query.Equals(query.NodeProperty(ad.DomainSID.String()), "S-1-5-21-909015691-3030120388-2582151266"), query.Equals(query.NodeProperty(ad.DistinguishedName.String()), "CN=OCSPRESPONSESIGNING,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL"), query.Equals(query.NodeProperty(ad.ValidityPeriod.String()), "2 weeks"), query.Equals(query.NodeProperty(ad.RenewalPeriod.String()), "2 days"), query.Equals(query.NodeProperty(ad.SchemaVersion.String()), 3), query.Equals(query.NodeProperty(ad.OID.String()), "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.32"), query.Equals(query.NodeProperty(ad.EnrollmentFlag.String()), "ADD_OCSP_NOCHECK, NOREVOCATIONINFOINISSUEDCERTS"), query.Equals(query.NodeProperty(ad.RequiresManagerApproval.String()), false), query.Equals(query.NodeProperty(ad.NoSecurityExtension.String()), false), query.Equals(query.NodeProperty(ad.CertificateNameFlag.String()), "SUBJECT_ALT_REQUIRE_DNS, SUBJECT_REQUIRE_DNS_AS_CN"), query.Equals(query.NodeProperty(ad.EnrolleeSuppliesSubject.String()), false), query.Equals(query.NodeProperty(ad.SubjectAltRequireUPN.String()), false), query.Equals(query.NodeProperty(ad.EKUs.String()), []string{"1.3.6.1.5.5.7.3.9"}), query.Equals(query.NodeProperty(ad.CertificateApplicationPolicy.String()), []string{"1.3.6.1.5.5.7.3.9"}), query.Equals(query.NodeProperty(ad.AuthorizedSignatures.String()), 0), query.Equals(query.NodeProperty(ad.ApplicationPolicies.String()), []string{"msPKI-Asymmetric-Algorithm`PZPWSTR`RSA`msPKI-Hash-Algorithm`PZPWSTR`SHA1`msPKI-Key-Security-Descriptor`PZPWSTR`D:P(A;;FA;;;BA)(A;;FA;;;SY)(A;;GR;;;S-1-5-80-3804348527-3718992918-2141599610-3686422417-2726379419)`msPKI-Key-Usage`DWORD`2`"}), query.Equals(query.NodeProperty(ad.IssuancePolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.EffectiveEKUs.String()), []string{"1.3.6.1.5.5.7.3.9"}), query.Equals(query.NodeProperty(ad.AuthenticationEnabled.String()), false)),
+		query.And(query.Kind(query.Node(), ad.CertTemplate), query.Equals(query.NodeProperty(common.ObjectID.String()), "176D3356-0094-4E80-868A-00E74B651CC0"), query.Equals(query.NodeProperty(common.Name.String()), "USERSIGNATURE@ESC1.LOCAL"), query.Equals(query.NodeProperty(ad.DomainSID.String()), "S-1-5-21-909015691-3030120388-2582151266"), query.Equals(query.NodeProperty(ad.DistinguishedName.String()), "CN=USERSIGNATURE,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL"), query.Equals(query.NodeProperty(ad.ValidityPeriod.String()), "1 year"), query.Equals(query.NodeProperty(ad.RenewalPeriod.String()), "6 weeks"), query.Equals(query.NodeProperty(ad.SchemaVersion.String()), 1), query.Equals(query.NodeProperty(ad.OID.String()), "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.2"), query.Equals(query.NodeProperty(ad.EnrollmentFlag.String()), "AUTO_ENROLLMENT"), query.Equals(query.NodeProperty(ad.RequiresManagerApproval.String()), false), query.Equals(query.NodeProperty(ad.NoSecurityExtension.String()), false), query.Equals(query.NodeProperty(ad.CertificateNameFlag.String()), "SUBJECT_ALT_REQUIRE_UPN, SUBJECT_ALT_REQUIRE_EMAIL, SUBJECT_REQUIRE_EMAIL, SUBJECT_REQUIRE_DIRECTORY_PATH"), query.Equals(query.NodeProperty(ad.EnrolleeSuppliesSubject.String()), false), query.Equals(query.NodeProperty(ad.SubjectAltRequireUPN.String()), true), query.Equals(query.NodeProperty(ad.EKUs.String()), []string{"1.3.6.1.5.5.7.3.4", "1.3.6.1.5.5.7.3.2"}), query.Equals(query.NodeProperty(ad.CertificateApplicationPolicy.String()), []string{}), query.Equals(query.NodeProperty(ad.AuthorizedSignatures.String()), 0), query.Equals(query.NodeProperty(ad.ApplicationPolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.IssuancePolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.EffectiveEKUs.String()), []string{"1.3.6.1.5.5.7.3.4", "1.3.6.1.5.5.7.3.2"}), query.Equals(query.NodeProperty(ad.AuthenticationEnabled.String()), true)),
+		query.And(query.Kind(query.Node(), ad.CertTemplate), query.Equals(query.NodeProperty(common.ObjectID.String()), "4376BA2D-B316-41E1-96DF-A0CB1EA0667F"), query.Equals(query.NodeProperty(common.Name.String()), "SMARTCARDUSER@ESC1.LOCAL"), query.Equals(query.NodeProperty(ad.DomainSID.String()), "S-1-5-21-909015691-3030120388-2582151266"), query.Equals(query.NodeProperty(ad.DistinguishedName.String()), "CN=SMARTCARDUSER,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL"), query.Equals(query.NodeProperty(ad.ValidityPeriod.String()), "1 year"), query.Equals(query.NodeProperty(ad.RenewalPeriod.String()), "6 weeks"), query.Equals(query.NodeProperty(ad.SchemaVersion.String()), 1), query.Equals(query.NodeProperty(ad.OID.String()), "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.3"), query.Equals(query.NodeProperty(ad.EnrollmentFlag.String()), "INCLUDE_SYMMETRIC_ALGORITHMS, PUBLISH_TO_DS"), query.Equals(query.NodeProperty(ad.RequiresManagerApproval.String()), false), query.Equals(query.NodeProperty(ad.NoSecurityExtension.String()), false), query.Equals(query.NodeProperty(ad.CertificateNameFlag.String()), "SUBJECT_ALT_REQUIRE_UPN, SUBJECT_ALT_REQUIRE_EMAIL, SUBJECT_REQUIRE_EMAIL, SUBJECT_REQUIRE_DIRECTORY_PATH"), query.Equals(query.NodeProperty(ad.EnrolleeSuppliesSubject.String()), false), query.Equals(query.NodeProperty(ad.SubjectAltRequireUPN.String()), true), query.Equals(query.NodeProperty(ad.EKUs.String()), []string{"1.3.6.1.5.5.7.3.4", "1.3.6.1.5.5.7.3.2", "1.3.6.1.4.1.311.20.2.2"}), query.Equals(query.NodeProperty(ad.CertificateApplicationPolicy.String()), []string{}), query.Equals(query.NodeProperty(ad.AuthorizedSignatures.String()), 0), query.Equals(query.NodeProperty(ad.ApplicationPolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.IssuancePolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.EffectiveEKUs.String()), []string{"1.3.6.1.5.5.7.3.4", "1.3.6.1.5.5.7.3.2", "1.3.6.1.4.1.311.20.2.2"}), query.Equals(query.NodeProperty(ad.AuthenticationEnabled.String()), true)),
+		query.And(query.Kind(query.Node(), ad.CertTemplate), query.Equals(query.NodeProperty(common.ObjectID.String()), "67CE0FEC-166C-4E5E-BF87-6FBAF0E9C8A8"), query.Equals(query.NodeProperty(common.Name.String()), "CLIENTAUTH@ESC1.LOCAL"), query.Equals(query.NodeProperty(ad.DomainSID.String()), "S-1-5-21-909015691-3030120388-2582151266"), query.Equals(query.NodeProperty(ad.DistinguishedName.String()), "CN=CLIENTAUTH,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL"), query.Equals(query.NodeProperty(ad.ValidityPeriod.String()), "1 year"), query.Equals(query.NodeProperty(ad.RenewalPeriod.String()), "6 weeks"), query.Equals(query.NodeProperty(ad.SchemaVersion.String()), 1), query.Equals(query.NodeProperty(ad.OID.String()), "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.4"), query.Equals(query.NodeProperty(ad.EnrollmentFlag.String()), "AUTO_ENROLLMENT"), query.Equals(query.NodeProperty(ad.RequiresManagerApproval.String()), false), query.Equals(query.NodeProperty(ad.NoSecurityExtension.String()), false), query.Equals(query.NodeProperty(ad.CertificateNameFlag.String()), "SUBJECT_ALT_REQUIRE_UPN, SUBJECT_REQUIRE_DIRECTORY_PATH"), query.Equals(query.NodeProperty(ad.EnrolleeSuppliesSubject.String()), false), query.Equals(query.NodeProperty(ad.SubjectAltRequireUPN.String()), true), query.Equals(query.NodeProperty(ad.EKUs.String()), []string{"1.3.6.1.5.5.7.3.2"}), query.Equals(query.NodeProperty(ad.CertificateApplicationPolicy.String()), []string{}), query.Equals(query.NodeProperty(ad.AuthorizedSignatures.String()), 0), query.Equals(query.NodeProperty(ad.ApplicationPolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.IssuancePolicies.String()), []string{}), query.Equals(query.NodeProperty(ad.EffectiveEKUs.String()), []string{"1.3.6.1.5.5.7.3.2"}), query.Equals(query.NodeProperty(ad.AuthenticationEnabled.String()), true)),
+
+		//Computer Properties
+		query.And(query.Kind(query.Node(), ad.Computer), query.Equals(query.NodeProperty(common.ObjectID.String()), "S-1-5-21-909015691-3030120388-2582151266-1000"), query.Equals(query.NodeProperty(ad.StrongCertificateBindingEnforcementRaw.String()), 2), query.Equals(query.NodeProperty(ad.StrongCertificateBindingEnforcement.String()), "Full enforcement mode"), query.Equals(query.NodeProperty(ad.CertificateMappingMethods.String()), []string{"Registry value does not exist"}), query.Equals(query.NodeProperty(ad.CertificateMappingMethodsRaw.String()), -1)),
+
+		//EnterpriseCA Properties
+		//cat bhce/cmd/api/src/test/fixtures/fixtures/v6/all/enterprisecas.json | jq -r '.data | map(.)[] | "query.And(query.Kind(query.Node(), ad.EnterpriseCA), query.Equals(query.NodeProperty(common.ObjectID.String()), \"\(.ObjectIdentifier)\"), query.Equals(query.NodeProperty(common.Name.String()), \"\(.Properties.name)\"), query.Equals(query.NodeProperty(ad.DomainSID.String()), \"\(.Properties.domainsid)\"), query.Equals(query.NodeProperty(ad.DistinguishedName.String()), \"\(.Properties.distinguishedname)\"), query.Equals(query.NodeProperty(ad.Flags.String()), \"\(.Properties.flags)\"), query.Equals(query.NodeProperty(ad.CAName.String()), \"\(.Properties.caname)\"), query.Equals(query.NodeProperty(ad.DNSHostname.String()), \"\(.Properties.dnshostname)\"), query.Equals(query.NodeProperty(ad.CertThumbprint.String()), \"\(.Properties.certthumbprint)\"), query.Equals(query.NodeProperty(ad.CertName.String()), \"\(.Properties.certname)\"), query.Equals(query.NodeProperty(ad.CertChain.String()), []string{\(.Properties.certchain | @csv)}), query.Equals(query.NodeProperty(ad.HasBasicConstraints.String()), \(.Properties.hasbasicconstraints)), query.Equals(query.NodeProperty(ad.BasicConstraintPathLength.String()), \(.Properties.basicconstraintpathlength)), query.Equals(query.NodeProperty(ad.CASecurityCollected.String()), \(.Properties.casecuritycollected)), query.Equals(query.NodeProperty(ad.EnrollmentAgentRestrictionsCollected.String()), \(.Properties.enrollmentagentrestrictionscollected)), query.Equals(query.NodeProperty(ad.BasicConstraintPathLength.String()), \(.Properties.basicconstraintpathlength))),"'
+
+		query.And(query.Kind(query.Node(), ad.EnterpriseCA), query.Equals(query.NodeProperty(common.ObjectID.String()), "14CEE53E-4D95-4DDD-A244-BF15C73DC06A"), query.Equals(query.NodeProperty(common.Name.String()), "ESC1-ESC1-DC-CA@ESC1.LOCAL"), query.Equals(query.NodeProperty(ad.DomainSID.String()), "S-1-5-21-909015691-3030120388-2582151266"), query.Equals(query.NodeProperty(ad.DistinguishedName.String()), "CN=ESC1-ESC1-DC-CA,CN=ENROLLMENT SERVICES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL"), query.Equals(query.NodeProperty(ad.Flags.String()), "SUPPORTS_NT_AUTHENTICATION, CA_SERVERTYPE_ADVANCED"), query.Equals(query.NodeProperty(ad.CAName.String()), "ESC1-ESC1-DC-CA"), query.Equals(query.NodeProperty(ad.DNSHostname.String()), "ESC1-DC.ESC1.LOCAL"), query.Equals(query.NodeProperty(ad.CertThumbprint.String()), "5F0143662A7EA16E8DB90E44D0F1F1FC87B1E703"), query.Equals(query.NodeProperty(ad.CertName.String()), "5F0143662A7EA16E8DB90E44D0F1F1FC87B1E703"), query.Equals(query.NodeProperty(ad.CertChain.String()), []string{"5F0143662A7EA16E8DB90E44D0F1F1FC87B1E703"}), query.Equals(query.NodeProperty(ad.HasBasicConstraints.String()), false), query.Equals(query.NodeProperty(ad.BasicConstraintPathLength.String()), 0), query.Equals(query.NodeProperty(ad.CASecurityCollected.String()), true), query.Equals(query.NodeProperty(ad.EnrollmentAgentRestrictionsCollected.String()), true), query.Equals(query.NodeProperty(ad.BasicConstraintPathLength.String()), 0)),
+
+		query.And(query.Kind(query.Node(), ad.EnterpriseCA), query.Equals(query.NodeProperty(common.ObjectID.String()), "14CEE53E-4D95-4DDD-A244-BF15C73DC06A"), query.Equals(query.NodeProperty(ad.IsUserSpecifiesSanEnabled.String()), false), query.Equals(query.NodeProperty(ad.HasEnrollmentAgentRestrictions.String()), true)),
+
+		//RootCA Properties
+		//cat bhce/cmd/api/src/test/fixtures/fixtures/v6/all/rootcas.json | jq -r '.data | map(.)[] | "query.And(query.Kind(query.Node(), ad.RootCA), query.Equals(query.NodeProperty(common.ObjectID.String()), \"\(.ObjectIdentifier)\"), query.Equals(query.NodeProperty(common.Name.String()), \"\(.Properties.name)\"), query.Equals(query.NodeProperty(ad.DomainSID.String()), \"\(.Properties.domainsid)\"), query.Equals(query.NodeProperty(ad.DistinguishedName.String()), \"\(.Properties.distinguishedname)\"), query.Equals(query.NodeProperty(ad.CertThumbprint.String()), \"\(.Properties.certthumbprint)\"), query.Equals(query.NodeProperty(ad.CertName.String()), \"\(.Properties.certname)\"), query.Equals(query.NodeProperty(ad.CertChain.String()), []string{\(.Properties.certchain | @csv)}), query.Equals(query.NodeProperty(ad.HasBasicConstraints.String()), \(.Properties.hasbasicconstraints)), query.Equals(query.NodeProperty(ad.BasicConstraintPathLength.String()), \(.Properties.basicconstraintpathlength))),"'
+
+		query.And(query.Kind(query.Node(), ad.RootCA), query.Equals(query.NodeProperty(common.ObjectID.String()), "4B5183E1-DB57-4A57-8159-3E9649F3B01C"), query.Equals(query.NodeProperty(common.Name.String()), "ESC1-ESC1-DC-CA@ESC1.LOCAL"), query.Equals(query.NodeProperty(ad.DomainSID.String()), "S-1-5-21-909015691-3030120388-2582151266"), query.Equals(query.NodeProperty(ad.DistinguishedName.String()), "CN=ESC1-ESC1-DC-CA,CN=CERTIFICATION AUTHORITIES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL"), query.Equals(query.NodeProperty(ad.CertThumbprint.String()), "5F0143662A7EA16E8DB90E44D0F1F1FC87B1E703"), query.Equals(query.NodeProperty(ad.CertName.String()), "5F0143662A7EA16E8DB90E44D0F1F1FC87B1E703"), query.Equals(query.NodeProperty(ad.CertChain.String()), []string{"5F0143662A7EA16E8DB90E44D0F1F1FC87B1E703"}), query.Equals(query.NodeProperty(ad.HasBasicConstraints.String()), false), query.Equals(query.NodeProperty(ad.BasicConstraintPathLength.String()), 0)),
+	}
+)
+
+func IngestADCSAssertions(testCtrl test.Controller, tx graph.Transaction) {
+	for _, assertionCriteria := range relationshipCriteria {
+		_, err := tx.Relationships().Filter(assertionCriteria).First()
+		require.Nilf(testCtrl, err, "Unable to find an expected relationship: %s", FormatQueryComponent(assertionCriteria))
+	}
+
+	for _, assertionCriteria := range nodeAssertionCriteria {
+		_, err := tx.Nodes().Filter(assertionCriteria).First()
+		require.Nilf(testCtrl, err, "Node assertion failed: %s", FormatQueryComponent(assertionCriteria))
+	}
+}
diff --git a/cmd/api/src/test/fixtures/fixtures/v6/all/aiacas.json b/cmd/api/src/test/fixtures/fixtures/v6/all/aiacas.json
new file mode 100644
index 0000000000..09b34535dc
--- /dev/null
+++ b/cmd/api/src/test/fixtures/fixtures/v6/all/aiacas.json
@@ -0,0 +1,79 @@
+{
+  "data": [
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "ESC1-ESC1-DC-CA@ESC1.LOCAL",
+        "distinguishedname": "CN=ESC1-ESC1-DC-CA,CN=AIA,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "description": null,
+        "whencreated": 1664426237,
+        "crosscertificatepair": [],
+        "hascrosscertificatepair": false,
+        "certthumbprint": "5F0143662A7EA16E8DB90E44D0F1F1FC87B1E703",
+        "certname": "5F0143662A7EA16E8DB90E44D0F1F1FC87B1E703",
+        "certchain": ["5F0143662A7EA16E8DB90E44D0F1F1FC87B1E703"],
+        "hasbasicconstraints": false,
+        "basicconstraintpathlength": 0
+      },
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-1000",
+          "PrincipalType": "Computer",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "6345151F-D854-4D83-B7D0-D94E10CFBAF2",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "D44AC8AF-C24E-489B-B0BB-E832A5E3C91A",
+        "ObjectType": "Container"
+      }
+    }
+  ],
+  "meta": { "methods": 521215, "type": "aiacas", "count": 1, "version": 6 }
+}
diff --git a/cmd/api/src/test/fixtures/fixtures/v6/all/certtemplates.json b/cmd/api/src/test/fixtures/fixtures/v6/all/certtemplates.json
new file mode 100644
index 0000000000..e5f524c10c
--- /dev/null
+++ b/cmd/api/src/test/fixtures/fixtures/v6/all/certtemplates.json
@@ -0,0 +1,2946 @@
+{
+  "data": [
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "USER@ESC1.LOCAL",
+        "distinguishedname": "CN=USER,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "description": null,
+        "whencreated": 1664426237,
+        "validityperiod": "1 year",
+        "renewalperiod": "6 weeks",
+        "schemaversion": 1,
+        "displayname": "User",
+        "oid": "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.1",
+        "enrollmentflag": "INCLUDE_SYMMETRIC_ALGORITHMS, PUBLISH_TO_DS, AUTO_ENROLLMENT",
+        "requiresmanagerapproval": false,
+        "nosecurityextension": false,
+        "certificatenameflag": "SUBJECT_ALT_REQUIRE_UPN, SUBJECT_ALT_REQUIRE_EMAIL, SUBJECT_REQUIRE_EMAIL, SUBJECT_REQUIRE_DIRECTORY_PATH",
+        "enrolleesuppliessubject": false,
+        "subjectaltrequireupn": true,
+        "ekus": [
+          "1.3.6.1.4.1.311.10.3.4",
+          "1.3.6.1.5.5.7.3.4",
+          "1.3.6.1.5.5.7.3.2"
+        ],
+        "certificateapplicationpolicy": [],
+        "authorizedsignatures": 0,
+        "applicationpolicies": [],
+        "issuancepolicies": [],
+        "effectiveekus": [
+          "1.3.6.1.4.1.311.10.3.4",
+          "1.3.6.1.5.5.7.3.4",
+          "1.3.6.1.5.5.7.3.2"
+        ],
+        "authenticationenabled": true
+      },
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-513",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "72F15D5F-C7B4-4FD9-ADCE-302F0D3DC91A",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": {
+        "ObjectIdentifier": "95D1A36E-7782-4CC5-823C-F5994359DDC0",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "SMARTCARDLOGON@ESC1.LOCAL",
+        "distinguishedname": "CN=SMARTCARDLOGON,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "description": null,
+        "whencreated": 1664426237,
+        "validityperiod": "1 year",
+        "renewalperiod": "6 weeks",
+        "schemaversion": 1,
+        "displayname": "Smartcard Logon",
+        "oid": "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.5",
+        "enrollmentflag": "NONE",
+        "requiresmanagerapproval": false,
+        "nosecurityextension": false,
+        "certificatenameflag": "SUBJECT_ALT_REQUIRE_UPN, SUBJECT_REQUIRE_DIRECTORY_PATH",
+        "enrolleesuppliessubject": false,
+        "subjectaltrequireupn": true,
+        "ekus": ["1.3.6.1.5.5.7.3.2", "1.3.6.1.4.1.311.20.2.2"],
+        "certificateapplicationpolicy": [],
+        "authorizedsignatures": 0,
+        "applicationpolicies": [],
+        "issuancepolicies": [],
+        "effectiveekus": ["1.3.6.1.5.5.7.3.2", "1.3.6.1.4.1.311.20.2.2"],
+        "authenticationenabled": true
+      },
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "01BCD578-1031-400B-ADBA-0B8AEAB95929",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": {
+        "ObjectIdentifier": "95D1A36E-7782-4CC5-823C-F5994359DDC0",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "EFS@ESC1.LOCAL",
+        "distinguishedname": "CN=EFS,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "description": null,
+        "whencreated": 1664426237,
+        "validityperiod": "1 year",
+        "renewalperiod": "6 weeks",
+        "schemaversion": 1,
+        "displayname": "Basic EFS",
+        "oid": "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.6",
+        "enrollmentflag": "INCLUDE_SYMMETRIC_ALGORITHMS, PUBLISH_TO_DS, AUTO_ENROLLMENT",
+        "requiresmanagerapproval": false,
+        "nosecurityextension": false,
+        "certificatenameflag": "SUBJECT_ALT_REQUIRE_UPN, SUBJECT_REQUIRE_DIRECTORY_PATH",
+        "enrolleesuppliessubject": false,
+        "subjectaltrequireupn": true,
+        "ekus": ["1.3.6.1.4.1.311.10.3.4"],
+        "certificateapplicationpolicy": [],
+        "authorizedsignatures": 0,
+        "applicationpolicies": [],
+        "issuancepolicies": [],
+        "effectiveekus": ["1.3.6.1.4.1.311.10.3.4"],
+        "authenticationenabled": false
+      },
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-513",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "EDB16956-50D9-4E16-B448-441EFC1D1FB8",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": {
+        "ObjectIdentifier": "95D1A36E-7782-4CC5-823C-F5994359DDC0",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "ADMINISTRATOR@ESC1.LOCAL",
+        "distinguishedname": "CN=ADMINISTRATOR,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "description": null,
+        "whencreated": 1664426237,
+        "validityperiod": "1 year",
+        "renewalperiod": "6 weeks",
+        "schemaversion": 1,
+        "displayname": "Administrator",
+        "oid": "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.7",
+        "enrollmentflag": "INCLUDE_SYMMETRIC_ALGORITHMS, PUBLISH_TO_DS, AUTO_ENROLLMENT",
+        "requiresmanagerapproval": false,
+        "nosecurityextension": false,
+        "certificatenameflag": "SUBJECT_ALT_REQUIRE_UPN, SUBJECT_ALT_REQUIRE_EMAIL, SUBJECT_REQUIRE_EMAIL, SUBJECT_REQUIRE_DIRECTORY_PATH",
+        "enrolleesuppliessubject": false,
+        "subjectaltrequireupn": true,
+        "ekus": [
+          "1.3.6.1.4.1.311.10.3.1",
+          "1.3.6.1.4.1.311.10.3.4",
+          "1.3.6.1.5.5.7.3.4",
+          "1.3.6.1.5.5.7.3.2"
+        ],
+        "certificateapplicationpolicy": [],
+        "authorizedsignatures": 0,
+        "applicationpolicies": [],
+        "issuancepolicies": [],
+        "effectiveekus": [
+          "1.3.6.1.4.1.311.10.3.1",
+          "1.3.6.1.4.1.311.10.3.4",
+          "1.3.6.1.5.5.7.3.4",
+          "1.3.6.1.5.5.7.3.2"
+        ],
+        "authenticationenabled": true
+      },
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "251BB763-E8FE-4B7A-9E61-1EDE247847E1",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": {
+        "ObjectIdentifier": "95D1A36E-7782-4CC5-823C-F5994359DDC0",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "EFSRECOVERY@ESC1.LOCAL",
+        "distinguishedname": "CN=EFSRECOVERY,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "description": null,
+        "whencreated": 1664426237,
+        "validityperiod": "5 years",
+        "renewalperiod": "6 weeks",
+        "schemaversion": 1,
+        "displayname": "EFS Recovery Agent",
+        "oid": "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.8",
+        "enrollmentflag": "INCLUDE_SYMMETRIC_ALGORITHMS, AUTO_ENROLLMENT",
+        "requiresmanagerapproval": false,
+        "nosecurityextension": false,
+        "certificatenameflag": "SUBJECT_ALT_REQUIRE_UPN, SUBJECT_REQUIRE_DIRECTORY_PATH",
+        "enrolleesuppliessubject": false,
+        "subjectaltrequireupn": true,
+        "ekus": ["1.3.6.1.4.1.311.10.3.4.1"],
+        "certificateapplicationpolicy": [],
+        "authorizedsignatures": 0,
+        "applicationpolicies": [],
+        "issuancepolicies": [],
+        "effectiveekus": ["1.3.6.1.4.1.311.10.3.4.1"],
+        "authenticationenabled": false
+      },
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "E249A350-93EA-4290-9E28-CFC9A5718C86",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": {
+        "ObjectIdentifier": "95D1A36E-7782-4CC5-823C-F5994359DDC0",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "CODESIGNING@ESC1.LOCAL",
+        "distinguishedname": "CN=CODESIGNING,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "description": null,
+        "whencreated": 1664426237,
+        "validityperiod": "1 year",
+        "renewalperiod": "6 weeks",
+        "schemaversion": 1,
+        "displayname": "Code Signing",
+        "oid": "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.9",
+        "enrollmentflag": "AUTO_ENROLLMENT",
+        "requiresmanagerapproval": false,
+        "nosecurityextension": false,
+        "certificatenameflag": "SUBJECT_ALT_REQUIRE_UPN, SUBJECT_REQUIRE_DIRECTORY_PATH",
+        "enrolleesuppliessubject": false,
+        "subjectaltrequireupn": true,
+        "ekus": ["1.3.6.1.5.5.7.3.3"],
+        "certificateapplicationpolicy": [],
+        "authorizedsignatures": 0,
+        "applicationpolicies": [],
+        "issuancepolicies": [],
+        "effectiveekus": ["1.3.6.1.5.5.7.3.3"],
+        "authenticationenabled": false
+      },
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "E928FF44-D63B-4C60-B20A-94B72B782E38",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": {
+        "ObjectIdentifier": "95D1A36E-7782-4CC5-823C-F5994359DDC0",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "ENROLLMENTAGENT@ESC1.LOCAL",
+        "distinguishedname": "CN=ENROLLMENTAGENT,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "description": null,
+        "whencreated": 1664426237,
+        "validityperiod": "2 years",
+        "renewalperiod": "6 weeks",
+        "schemaversion": 1,
+        "displayname": "Enrollment Agent",
+        "oid": "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.11",
+        "enrollmentflag": "AUTO_ENROLLMENT",
+        "requiresmanagerapproval": false,
+        "nosecurityextension": false,
+        "certificatenameflag": "SUBJECT_ALT_REQUIRE_UPN, SUBJECT_REQUIRE_DIRECTORY_PATH",
+        "enrolleesuppliessubject": false,
+        "subjectaltrequireupn": true,
+        "ekus": ["1.3.6.1.4.1.311.20.2.1"],
+        "certificateapplicationpolicy": [],
+        "authorizedsignatures": 0,
+        "applicationpolicies": [],
+        "issuancepolicies": [],
+        "effectiveekus": ["1.3.6.1.4.1.311.20.2.1"],
+        "authenticationenabled": false
+      },
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "CDDAE05D-4623-464C-AB48-AE38BC7EC8BA",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": {
+        "ObjectIdentifier": "95D1A36E-7782-4CC5-823C-F5994359DDC0",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "ENROLLMENTAGENTOFFLINE@ESC1.LOCAL",
+        "distinguishedname": "CN=ENROLLMENTAGENTOFFLINE,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "description": null,
+        "whencreated": 1664426237,
+        "validityperiod": "2 years",
+        "renewalperiod": "6 weeks",
+        "schemaversion": 1,
+        "displayname": "Exchange Enrollment Agent (Offline request)",
+        "oid": "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.12",
+        "enrollmentflag": "NONE",
+        "requiresmanagerapproval": false,
+        "nosecurityextension": false,
+        "certificatenameflag": "ENROLLEE_SUPPLIES_SUBJECT",
+        "enrolleesuppliessubject": true,
+        "subjectaltrequireupn": false,
+        "ekus": ["1.3.6.1.4.1.311.20.2.1"],
+        "certificateapplicationpolicy": [],
+        "authorizedsignatures": 0,
+        "applicationpolicies": [],
+        "issuancepolicies": [],
+        "effectiveekus": ["1.3.6.1.4.1.311.20.2.1"],
+        "authenticationenabled": false
+      },
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "43616DDD-A336-439F-8A08-088CC0AA85C1",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": {
+        "ObjectIdentifier": "95D1A36E-7782-4CC5-823C-F5994359DDC0",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "MACHINEENROLLMENTAGENT@ESC1.LOCAL",
+        "distinguishedname": "CN=MACHINEENROLLMENTAGENT,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "description": null,
+        "whencreated": 1664426237,
+        "validityperiod": "2 years",
+        "renewalperiod": "6 weeks",
+        "schemaversion": 1,
+        "displayname": "Enrollment Agent (Computer)",
+        "oid": "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.13",
+        "enrollmentflag": "AUTO_ENROLLMENT",
+        "requiresmanagerapproval": false,
+        "nosecurityextension": false,
+        "certificatenameflag": "SUBJECT_ALT_REQUIRE_DNS, SUBJECT_REQUIRE_DNS_AS_CN",
+        "enrolleesuppliessubject": false,
+        "subjectaltrequireupn": false,
+        "ekus": ["1.3.6.1.4.1.311.20.2.1"],
+        "certificateapplicationpolicy": [],
+        "authorizedsignatures": 0,
+        "applicationpolicies": [],
+        "issuancepolicies": [],
+        "effectiveekus": ["1.3.6.1.4.1.311.20.2.1"],
+        "authenticationenabled": false
+      },
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "39E1A53E-3D9E-4341-A3E8-8F297FEB34CD",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": {
+        "ObjectIdentifier": "95D1A36E-7782-4CC5-823C-F5994359DDC0",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "MACHINE@ESC1.LOCAL",
+        "distinguishedname": "CN=MACHINE,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "description": null,
+        "whencreated": 1664426237,
+        "validityperiod": "1 year",
+        "renewalperiod": "6 weeks",
+        "schemaversion": 1,
+        "displayname": "Computer",
+        "oid": "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.14",
+        "enrollmentflag": "AUTO_ENROLLMENT",
+        "requiresmanagerapproval": false,
+        "nosecurityextension": false,
+        "certificatenameflag": "SUBJECT_ALT_REQUIRE_DNS, SUBJECT_REQUIRE_DNS_AS_CN",
+        "enrolleesuppliessubject": false,
+        "subjectaltrequireupn": false,
+        "ekus": ["1.3.6.1.5.5.7.3.2", "1.3.6.1.5.5.7.3.1"],
+        "certificateapplicationpolicy": [],
+        "authorizedsignatures": 0,
+        "applicationpolicies": [],
+        "issuancepolicies": [],
+        "effectiveekus": ["1.3.6.1.5.5.7.3.2", "1.3.6.1.5.5.7.3.1"],
+        "authenticationenabled": true
+      },
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-515",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "C6DC9FD9-2A52-4064-9D8E-ED9BBA52FD51",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": {
+        "ObjectIdentifier": "95D1A36E-7782-4CC5-823C-F5994359DDC0",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "DOMAINCONTROLLER@ESC1.LOCAL",
+        "distinguishedname": "CN=DOMAINCONTROLLER,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "description": null,
+        "whencreated": 1664426237,
+        "validityperiod": "1 year",
+        "renewalperiod": "6 weeks",
+        "schemaversion": 1,
+        "displayname": "Domain Controller",
+        "oid": "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.15",
+        "enrollmentflag": "INCLUDE_SYMMETRIC_ALGORITHMS, PUBLISH_TO_DS, AUTO_ENROLLMENT",
+        "requiresmanagerapproval": false,
+        "nosecurityextension": false,
+        "certificatenameflag": "SUBJECT_ALT_REQUIRE_DIRECTORY_GUID, SUBJECT_ALT_REQUIRE_DNS, SUBJECT_REQUIRE_DNS_AS_CN",
+        "enrolleesuppliessubject": false,
+        "subjectaltrequireupn": false,
+        "ekus": ["1.3.6.1.5.5.7.3.2", "1.3.6.1.5.5.7.3.1"],
+        "certificateapplicationpolicy": [],
+        "authorizedsignatures": 0,
+        "applicationpolicies": [],
+        "issuancepolicies": [],
+        "effectiveekus": ["1.3.6.1.5.5.7.3.2", "1.3.6.1.5.5.7.3.1"],
+        "authenticationenabled": true
+      },
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-9",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-498",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-516",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "63FB126D-499F-48DA-A707-A134B92764BD",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": {
+        "ObjectIdentifier": "95D1A36E-7782-4CC5-823C-F5994359DDC0",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "CA@ESC1.LOCAL",
+        "distinguishedname": "CN=CA,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "description": null,
+        "whencreated": 1664426237,
+        "validityperiod": "5 years",
+        "renewalperiod": "6 weeks",
+        "schemaversion": 1,
+        "displayname": "Root Certification Authority",
+        "oid": "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.17",
+        "enrollmentflag": "NONE",
+        "requiresmanagerapproval": false,
+        "nosecurityextension": false,
+        "certificatenameflag": "ENROLLEE_SUPPLIES_SUBJECT",
+        "enrolleesuppliessubject": true,
+        "subjectaltrequireupn": false,
+        "ekus": [],
+        "certificateapplicationpolicy": [],
+        "authorizedsignatures": 0,
+        "applicationpolicies": [],
+        "issuancepolicies": [],
+        "effectiveekus": [],
+        "authenticationenabled": true
+      },
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "091BE19E-A0D3-4920-A967-5673A2214268",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": {
+        "ObjectIdentifier": "95D1A36E-7782-4CC5-823C-F5994359DDC0",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "SUBCA@ESC1.LOCAL",
+        "distinguishedname": "CN=SUBCA,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "description": null,
+        "whencreated": 1664426237,
+        "validityperiod": "5 years",
+        "renewalperiod": "6 weeks",
+        "schemaversion": 1,
+        "displayname": "Subordinate Certification Authority",
+        "oid": "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.18",
+        "enrollmentflag": "NONE",
+        "requiresmanagerapproval": false,
+        "nosecurityextension": false,
+        "certificatenameflag": "ENROLLEE_SUPPLIES_SUBJECT",
+        "enrolleesuppliessubject": true,
+        "subjectaltrequireupn": false,
+        "ekus": [],
+        "certificateapplicationpolicy": [],
+        "authorizedsignatures": 0,
+        "applicationpolicies": [],
+        "issuancepolicies": [],
+        "effectiveekus": [],
+        "authenticationenabled": true
+      },
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "441D7EAE-CF79-4B97-83A2-B770C231E4DA",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": {
+        "ObjectIdentifier": "95D1A36E-7782-4CC5-823C-F5994359DDC0",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "IPSECINTERMEDIATEONLINE@ESC1.LOCAL",
+        "distinguishedname": "CN=IPSECINTERMEDIATEONLINE,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "description": null,
+        "whencreated": 1664426237,
+        "validityperiod": "2 years",
+        "renewalperiod": "6 weeks",
+        "schemaversion": 1,
+        "displayname": "IPSec",
+        "oid": "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.19",
+        "enrollmentflag": "AUTO_ENROLLMENT",
+        "requiresmanagerapproval": false,
+        "nosecurityextension": false,
+        "certificatenameflag": "SUBJECT_ALT_REQUIRE_DNS, SUBJECT_REQUIRE_DNS_AS_CN",
+        "enrolleesuppliessubject": false,
+        "subjectaltrequireupn": false,
+        "ekus": ["1.3.6.1.5.5.8.2.2"],
+        "certificateapplicationpolicy": [],
+        "authorizedsignatures": 0,
+        "applicationpolicies": [],
+        "issuancepolicies": [],
+        "effectiveekus": ["1.3.6.1.5.5.8.2.2"],
+        "authenticationenabled": false
+      },
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-515",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-516",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "AACF5D02-3165-4AC7-9AA9-BD604F95011F",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": {
+        "ObjectIdentifier": "95D1A36E-7782-4CC5-823C-F5994359DDC0",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "IPSECINTERMEDIATEOFFLINE@ESC1.LOCAL",
+        "distinguishedname": "CN=IPSECINTERMEDIATEOFFLINE,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "description": null,
+        "whencreated": 1664426237,
+        "validityperiod": "2 years",
+        "renewalperiod": "6 weeks",
+        "schemaversion": 1,
+        "displayname": "IPSec (Offline request)",
+        "oid": "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.20",
+        "enrollmentflag": "NONE",
+        "requiresmanagerapproval": false,
+        "nosecurityextension": false,
+        "certificatenameflag": "ENROLLEE_SUPPLIES_SUBJECT",
+        "enrolleesuppliessubject": true,
+        "subjectaltrequireupn": false,
+        "ekus": ["1.3.6.1.5.5.8.2.2"],
+        "certificateapplicationpolicy": [],
+        "authorizedsignatures": 0,
+        "applicationpolicies": [],
+        "issuancepolicies": [],
+        "effectiveekus": ["1.3.6.1.5.5.8.2.2"],
+        "authenticationenabled": false
+      },
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "4DC38500-E84C-4A92-9354-AE4665CCC80A",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": {
+        "ObjectIdentifier": "95D1A36E-7782-4CC5-823C-F5994359DDC0",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "OFFLINEROUTER@ESC1.LOCAL",
+        "distinguishedname": "CN=OFFLINEROUTER,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "description": null,
+        "whencreated": 1664426237,
+        "validityperiod": "2 years",
+        "renewalperiod": "6 weeks",
+        "schemaversion": 1,
+        "displayname": "Router (Offline request)",
+        "oid": "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.21",
+        "enrollmentflag": "NONE",
+        "requiresmanagerapproval": false,
+        "nosecurityextension": false,
+        "certificatenameflag": "ENROLLEE_SUPPLIES_SUBJECT",
+        "enrolleesuppliessubject": true,
+        "subjectaltrequireupn": false,
+        "ekus": ["1.3.6.1.5.5.7.3.2"],
+        "certificateapplicationpolicy": [],
+        "authorizedsignatures": 0,
+        "applicationpolicies": [],
+        "issuancepolicies": [],
+        "effectiveekus": ["1.3.6.1.5.5.7.3.2"],
+        "authenticationenabled": true
+      },
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "99679751-132B-4732-89EE-E21F0A1B1B30",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": {
+        "ObjectIdentifier": "95D1A36E-7782-4CC5-823C-F5994359DDC0",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "USERSIGNATURE@ESC1.LOCAL",
+        "distinguishedname": "CN=USERSIGNATURE,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "description": null,
+        "whencreated": 1664426237,
+        "validityperiod": "1 year",
+        "renewalperiod": "6 weeks",
+        "schemaversion": 1,
+        "displayname": "User Signature Only",
+        "oid": "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.2",
+        "enrollmentflag": "AUTO_ENROLLMENT",
+        "requiresmanagerapproval": false,
+        "nosecurityextension": false,
+        "certificatenameflag": "SUBJECT_ALT_REQUIRE_UPN, SUBJECT_ALT_REQUIRE_EMAIL, SUBJECT_REQUIRE_EMAIL, SUBJECT_REQUIRE_DIRECTORY_PATH",
+        "enrolleesuppliessubject": false,
+        "subjectaltrequireupn": true,
+        "ekus": ["1.3.6.1.5.5.7.3.4", "1.3.6.1.5.5.7.3.2"],
+        "certificateapplicationpolicy": [],
+        "authorizedsignatures": 0,
+        "applicationpolicies": [],
+        "issuancepolicies": [],
+        "effectiveekus": ["1.3.6.1.5.5.7.3.4", "1.3.6.1.5.5.7.3.2"],
+        "authenticationenabled": true
+      },
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-513",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "176D3356-0094-4E80-868A-00E74B651CC0",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": {
+        "ObjectIdentifier": "95D1A36E-7782-4CC5-823C-F5994359DDC0",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "KEYRECOVERYAGENT@ESC1.LOCAL",
+        "distinguishedname": "CN=KEYRECOVERYAGENT,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "description": null,
+        "whencreated": 1664426237,
+        "validityperiod": "2 years",
+        "renewalperiod": "6 weeks",
+        "schemaversion": 2,
+        "displayname": "Key Recovery Agent",
+        "oid": "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.27",
+        "enrollmentflag": "INCLUDE_SYMMETRIC_ALGORITHMS, PEND_ALL_REQUESTS, PUBLISH_TO_KRA_CONTAINER, AUTO_ENROLLMENT",
+        "requiresmanagerapproval": true,
+        "nosecurityextension": false,
+        "certificatenameflag": "SUBJECT_ALT_REQUIRE_UPN, SUBJECT_REQUIRE_DIRECTORY_PATH",
+        "enrolleesuppliessubject": false,
+        "subjectaltrequireupn": true,
+        "ekus": ["1.3.6.1.4.1.311.21.6"],
+        "certificateapplicationpolicy": ["1.3.6.1.4.1.311.21.6"],
+        "authorizedsignatures": 0,
+        "applicationpolicies": [],
+        "issuancepolicies": [],
+        "effectiveekus": ["1.3.6.1.4.1.311.21.6"],
+        "authenticationenabled": false
+      },
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "1467B8A3-2ACD-4A8B-9CF1-E9333110A00C",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": {
+        "ObjectIdentifier": "95D1A36E-7782-4CC5-823C-F5994359DDC0",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "DOMAINCONTROLLERAUTHENTICATION@ESC1.LOCAL",
+        "distinguishedname": "CN=DOMAINCONTROLLERAUTHENTICATION,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "description": null,
+        "whencreated": 1664426237,
+        "validityperiod": "1 year",
+        "renewalperiod": "6 weeks",
+        "schemaversion": 2,
+        "displayname": "Domain Controller Authentication",
+        "oid": "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.28",
+        "enrollmentflag": "NONE",
+        "requiresmanagerapproval": false,
+        "nosecurityextension": false,
+        "certificatenameflag": "ENROLLEE_SUPPLIES_SUBJECT",
+        "enrolleesuppliessubject": true,
+        "subjectaltrequireupn": false,
+        "ekus": [
+          "1.3.6.1.5.5.7.3.2",
+          "1.3.6.1.5.5.7.3.1",
+          "1.3.6.1.4.1.311.20.2.2"
+        ],
+        "certificateapplicationpolicy": [
+          "1.3.6.1.5.5.7.3.2",
+          "1.3.6.1.5.5.7.3.1",
+          "1.3.6.1.4.1.311.20.2.2"
+        ],
+        "authorizedsignatures": 0,
+        "applicationpolicies": [],
+        "issuancepolicies": [],
+        "effectiveekus": [
+          "1.3.6.1.5.5.7.3.2",
+          "1.3.6.1.5.5.7.3.1",
+          "1.3.6.1.4.1.311.20.2.2"
+        ],
+        "authenticationenabled": true
+      },
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-9",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-498",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-516",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-1105",
+          "PrincipalType": "User",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-1106",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-1110",
+          "PrincipalType": "User",
+          "RightName": "Enroll",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "75957C42-9FFB-4D75-A297-7CDB8B11D74F",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": {
+        "ObjectIdentifier": "95D1A36E-7782-4CC5-823C-F5994359DDC0",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "EXCHANGEUSERSIGNATURE@ESC1.LOCAL",
+        "distinguishedname": "CN=EXCHANGEUSERSIGNATURE,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "description": null,
+        "whencreated": 1664426237,
+        "validityperiod": "1 year",
+        "renewalperiod": "6 weeks",
+        "schemaversion": 1,
+        "displayname": "Exchange Signature Only",
+        "oid": "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.24",
+        "enrollmentflag": "NONE",
+        "requiresmanagerapproval": false,
+        "nosecurityextension": false,
+        "certificatenameflag": "ENROLLEE_SUPPLIES_SUBJECT",
+        "enrolleesuppliessubject": true,
+        "subjectaltrequireupn": false,
+        "ekus": ["1.3.6.1.5.5.7.3.4"],
+        "certificateapplicationpolicy": [],
+        "authorizedsignatures": 0,
+        "applicationpolicies": [],
+        "issuancepolicies": [],
+        "effectiveekus": ["1.3.6.1.5.5.7.3.4"],
+        "authenticationenabled": false
+      },
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "A938AA1C-1A2E-4636-9926-43EE00945106",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": {
+        "ObjectIdentifier": "95D1A36E-7782-4CC5-823C-F5994359DDC0",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "DIRECTORYEMAILREPLICATION@ESC1.LOCAL",
+        "distinguishedname": "CN=DIRECTORYEMAILREPLICATION,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "description": null,
+        "whencreated": 1664426237,
+        "validityperiod": "1 year",
+        "renewalperiod": "6 weeks",
+        "schemaversion": 2,
+        "displayname": "Directory Email Replication",
+        "oid": "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.29",
+        "enrollmentflag": "INCLUDE_SYMMETRIC_ALGORITHMS, PUBLISH_TO_DS, AUTO_ENROLLMENT",
+        "requiresmanagerapproval": false,
+        "nosecurityextension": false,
+        "certificatenameflag": "SUBJECT_ALT_REQUIRE_DIRECTORY_GUID, SUBJECT_ALT_REQUIRE_DNS",
+        "enrolleesuppliessubject": false,
+        "subjectaltrequireupn": false,
+        "ekus": ["1.3.6.1.4.1.311.21.19"],
+        "certificateapplicationpolicy": ["1.3.6.1.4.1.311.21.19"],
+        "authorizedsignatures": 0,
+        "applicationpolicies": [],
+        "issuancepolicies": [],
+        "effectiveekus": ["1.3.6.1.4.1.311.21.19"],
+        "authenticationenabled": false
+      },
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-9",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-498",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-516",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "55BCF264-BBB0-4D50-ACC0-69235586DFC9",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": {
+        "ObjectIdentifier": "95D1A36E-7782-4CC5-823C-F5994359DDC0",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "WORKSTATION@ESC1.LOCAL",
+        "distinguishedname": "CN=WORKSTATION,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "description": null,
+        "whencreated": 1664426237,
+        "validityperiod": "1 year",
+        "renewalperiod": "6 weeks",
+        "schemaversion": 2,
+        "displayname": "Workstation Authentication",
+        "oid": "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.30",
+        "enrollmentflag": "AUTO_ENROLLMENT",
+        "requiresmanagerapproval": false,
+        "nosecurityextension": false,
+        "certificatenameflag": "SUBJECT_ALT_REQUIRE_DNS",
+        "enrolleesuppliessubject": false,
+        "subjectaltrequireupn": false,
+        "ekus": ["1.3.6.1.5.5.7.3.2"],
+        "certificateapplicationpolicy": ["1.3.6.1.5.5.7.3.2"],
+        "authorizedsignatures": 0,
+        "applicationpolicies": [],
+        "issuancepolicies": [],
+        "effectiveekus": ["1.3.6.1.5.5.7.3.2"],
+        "authenticationenabled": true
+      },
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-515",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "3C412345-7109-47BC-B33E-D765B14BBE99",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": {
+        "ObjectIdentifier": "95D1A36E-7782-4CC5-823C-F5994359DDC0",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "RASANDIASSERVER@ESC1.LOCAL",
+        "distinguishedname": "CN=RASANDIASSERVER,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "description": null,
+        "whencreated": 1664426237,
+        "validityperiod": "1 year",
+        "renewalperiod": "6 weeks",
+        "schemaversion": 2,
+        "displayname": "RAS and IAS Server",
+        "oid": "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.31",
+        "enrollmentflag": "AUTO_ENROLLMENT",
+        "requiresmanagerapproval": false,
+        "nosecurityextension": false,
+        "certificatenameflag": "SUBJECT_ALT_REQUIRE_DNS, SUBJECT_REQUIRE_COMMON_NAME",
+        "enrolleesuppliessubject": false,
+        "subjectaltrequireupn": false,
+        "ekus": ["1.3.6.1.5.5.7.3.2", "1.3.6.1.5.5.7.3.1"],
+        "certificateapplicationpolicy": [
+          "1.3.6.1.5.5.7.3.2",
+          "1.3.6.1.5.5.7.3.1"
+        ],
+        "authorizedsignatures": 0,
+        "applicationpolicies": [],
+        "issuancepolicies": [],
+        "effectiveekus": ["1.3.6.1.5.5.7.3.2", "1.3.6.1.5.5.7.3.1"],
+        "authenticationenabled": true
+      },
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-553",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "8426B1B2-6678-4223-BB03-0EBA065D8976",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": {
+        "ObjectIdentifier": "95D1A36E-7782-4CC5-823C-F5994359DDC0",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "OCSPRESPONSESIGNING@ESC1.LOCAL",
+        "distinguishedname": "CN=OCSPRESPONSESIGNING,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "description": null,
+        "whencreated": 1664426237,
+        "validityperiod": "2 weeks",
+        "renewalperiod": "2 days",
+        "schemaversion": 3,
+        "displayname": "OCSP Response Signing",
+        "oid": "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.32",
+        "enrollmentflag": "ADD_OCSP_NOCHECK, NOREVOCATIONINFOINISSUEDCERTS",
+        "requiresmanagerapproval": false,
+        "nosecurityextension": false,
+        "certificatenameflag": "SUBJECT_ALT_REQUIRE_DNS, SUBJECT_REQUIRE_DNS_AS_CN",
+        "enrolleesuppliessubject": false,
+        "subjectaltrequireupn": false,
+        "ekus": ["1.3.6.1.5.5.7.3.9"],
+        "certificateapplicationpolicy": ["1.3.6.1.5.5.7.3.9"],
+        "authorizedsignatures": 0,
+        "applicationpolicies": [
+          "msPKI-Asymmetric-Algorithm`PZPWSTR`RSA`msPKI-Hash-Algorithm`PZPWSTR`SHA1`msPKI-Key-Security-Descriptor`PZPWSTR`D:P(A;;FA;;;BA)(A;;FA;;;SY)(A;;GR;;;S-1-5-80-3804348527-3718992918-2141599610-3686422417-2726379419)`msPKI-Key-Usage`DWORD`2`"
+        ],
+        "issuancepolicies": [],
+        "effectiveekus": ["1.3.6.1.5.5.7.3.9"],
+        "authenticationenabled": false
+      },
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "9F29EC9F-1DF5-4505-82FB-3DB8B952FDE3",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": {
+        "ObjectIdentifier": "95D1A36E-7782-4CC5-823C-F5994359DDC0",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "KERBEROSAUTHENTICATION@ESC1.LOCAL",
+        "distinguishedname": "CN=KERBEROSAUTHENTICATION,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "description": null,
+        "whencreated": 1664426237,
+        "validityperiod": "1 year",
+        "renewalperiod": "6 weeks",
+        "schemaversion": 2,
+        "displayname": "Kerberos Authentication",
+        "oid": "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.33",
+        "enrollmentflag": "AUTO_ENROLLMENT",
+        "requiresmanagerapproval": false,
+        "nosecurityextension": false,
+        "certificatenameflag": "SUBJECT_ALT_REQUIRE_DOMAIN_DNS, SUBJECT_ALT_REQUIRE_DNS",
+        "enrolleesuppliessubject": false,
+        "subjectaltrequireupn": false,
+        "ekus": [
+          "1.3.6.1.5.5.7.3.2",
+          "1.3.6.1.5.5.7.3.1",
+          "1.3.6.1.4.1.311.20.2.2",
+          "1.3.6.1.5.2.3.5"
+        ],
+        "certificateapplicationpolicy": [
+          "1.3.6.1.5.5.7.3.2",
+          "1.3.6.1.5.5.7.3.1",
+          "1.3.6.1.4.1.311.20.2.2",
+          "1.3.6.1.5.2.3.5"
+        ],
+        "authorizedsignatures": 0,
+        "applicationpolicies": [],
+        "issuancepolicies": [],
+        "effectiveekus": [
+          "1.3.6.1.5.5.7.3.2",
+          "1.3.6.1.5.5.7.3.1",
+          "1.3.6.1.4.1.311.20.2.2",
+          "1.3.6.1.5.2.3.5"
+        ],
+        "authenticationenabled": true
+      },
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-9",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-498",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-516",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "64AC5BD1-1DE3-46D4-9796-5C9D98E4B0F7",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": {
+        "ObjectIdentifier": "95D1A36E-7782-4CC5-823C-F5994359DDC0",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "ESC1@ESC1.LOCAL",
+        "distinguishedname": "CN=ESC1,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "description": null,
+        "whencreated": 1665175875,
+        "validityperiod": "1 year",
+        "renewalperiod": "6 weeks",
+        "schemaversion": 2,
+        "displayname": "ESC1",
+        "oid": "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.13327915.10315889",
+        "enrollmentflag": "INCLUDE_SYMMETRIC_ALGORITHMS, PUBLISH_TO_DS",
+        "requiresmanagerapproval": false,
+        "nosecurityextension": false,
+        "certificatenameflag": "ENROLLEE_SUPPLIES_SUBJECT",
+        "enrolleesuppliessubject": true,
+        "subjectaltrequireupn": false,
+        "ekus": [
+          "1.3.6.1.5.5.7.3.2",
+          "1.3.6.1.5.5.7.3.4",
+          "1.3.6.1.4.1.311.10.3.4"
+        ],
+        "certificateapplicationpolicy": [
+          "1.3.6.1.5.5.7.3.2",
+          "1.3.6.1.5.5.7.3.4",
+          "1.3.6.1.4.1.311.10.3.4"
+        ],
+        "authorizedsignatures": 0,
+        "applicationpolicies": [],
+        "issuancepolicies": [],
+        "effectiveekus": [
+          "1.3.6.1.5.5.7.3.2",
+          "1.3.6.1.5.5.7.3.4",
+          "1.3.6.1.4.1.311.10.3.4"
+        ],
+        "authenticationenabled": true
+      },
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-500",
+          "PrincipalType": "User",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-500",
+          "PrincipalType": "User",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-500",
+          "PrincipalType": "User",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-1105",
+          "PrincipalType": "User",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-1106",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-1110",
+          "PrincipalType": "User",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-1112",
+          "PrincipalType": "User",
+          "RightName": "Enroll",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "DEBC8BEB-40AF-48B5-940F-AAFAFE961B26",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": {
+        "ObjectIdentifier": "95D1A36E-7782-4CC5-823C-F5994359DDC0",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "CLIENTAUTH@ESC1.LOCAL",
+        "distinguishedname": "CN=CLIENTAUTH,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "description": null,
+        "whencreated": 1664426237,
+        "validityperiod": "1 year",
+        "renewalperiod": "6 weeks",
+        "schemaversion": 1,
+        "displayname": "Authenticated Session",
+        "oid": "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.4",
+        "enrollmentflag": "AUTO_ENROLLMENT",
+        "requiresmanagerapproval": false,
+        "nosecurityextension": false,
+        "certificatenameflag": "SUBJECT_ALT_REQUIRE_UPN, SUBJECT_REQUIRE_DIRECTORY_PATH",
+        "enrolleesuppliessubject": false,
+        "subjectaltrequireupn": true,
+        "ekus": ["1.3.6.1.5.5.7.3.2"],
+        "certificateapplicationpolicy": [],
+        "authorizedsignatures": 0,
+        "applicationpolicies": [],
+        "issuancepolicies": [],
+        "effectiveekus": ["1.3.6.1.5.5.7.3.2"],
+        "authenticationenabled": true
+      },
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-513",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "67CE0FEC-166C-4E5E-BF87-6FBAF0E9C8A8",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": {
+        "ObjectIdentifier": "95D1A36E-7782-4CC5-823C-F5994359DDC0",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "SMARTCARDUSER@ESC1.LOCAL",
+        "distinguishedname": "CN=SMARTCARDUSER,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "description": null,
+        "whencreated": 1664426237,
+        "validityperiod": "1 year",
+        "renewalperiod": "6 weeks",
+        "schemaversion": 1,
+        "displayname": "Smartcard User",
+        "oid": "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.3",
+        "enrollmentflag": "INCLUDE_SYMMETRIC_ALGORITHMS, PUBLISH_TO_DS",
+        "requiresmanagerapproval": false,
+        "nosecurityextension": false,
+        "certificatenameflag": "SUBJECT_ALT_REQUIRE_UPN, SUBJECT_ALT_REQUIRE_EMAIL, SUBJECT_REQUIRE_EMAIL, SUBJECT_REQUIRE_DIRECTORY_PATH",
+        "enrolleesuppliessubject": false,
+        "subjectaltrequireupn": true,
+        "ekus": [
+          "1.3.6.1.5.5.7.3.4",
+          "1.3.6.1.5.5.7.3.2",
+          "1.3.6.1.4.1.311.20.2.2"
+        ],
+        "certificateapplicationpolicy": [],
+        "authorizedsignatures": 0,
+        "applicationpolicies": [],
+        "issuancepolicies": [],
+        "effectiveekus": [
+          "1.3.6.1.5.5.7.3.4",
+          "1.3.6.1.5.5.7.3.2",
+          "1.3.6.1.4.1.311.20.2.2"
+        ],
+        "authenticationenabled": true
+      },
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "4376BA2D-B316-41E1-96DF-A0CB1EA0667F",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": {
+        "ObjectIdentifier": "95D1A36E-7782-4CC5-823C-F5994359DDC0",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "CAEXCHANGE@ESC1.LOCAL",
+        "distinguishedname": "CN=CAEXCHANGE,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "description": null,
+        "whencreated": 1664426237,
+        "validityperiod": "1 week",
+        "renewalperiod": "1 day",
+        "schemaversion": 2,
+        "displayname": "CA Exchange",
+        "oid": "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.26",
+        "enrollmentflag": "INCLUDE_SYMMETRIC_ALGORITHMS",
+        "requiresmanagerapproval": false,
+        "nosecurityextension": false,
+        "certificatenameflag": "ENROLLEE_SUPPLIES_SUBJECT",
+        "enrolleesuppliessubject": true,
+        "subjectaltrequireupn": false,
+        "ekus": ["1.3.6.1.4.1.311.21.5"],
+        "certificateapplicationpolicy": ["1.3.6.1.4.1.311.21.5"],
+        "authorizedsignatures": 0,
+        "applicationpolicies": [],
+        "issuancepolicies": [],
+        "effectiveekus": ["1.3.6.1.4.1.311.21.5"],
+        "authenticationenabled": false
+      },
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "2D3B649A-50E0-485B-AEF3-6C8ED9DB0A2A",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": {
+        "ObjectIdentifier": "95D1A36E-7782-4CC5-823C-F5994359DDC0",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "CROSSCA@ESC1.LOCAL",
+        "distinguishedname": "CN=CROSSCA,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "description": null,
+        "whencreated": 1664426237,
+        "validityperiod": "5 years",
+        "renewalperiod": "6 weeks",
+        "schemaversion": 2,
+        "displayname": "Cross Certification Authority",
+        "oid": "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.25",
+        "enrollmentflag": "PUBLISH_TO_DS",
+        "requiresmanagerapproval": false,
+        "nosecurityextension": false,
+        "certificatenameflag": "ENROLLEE_SUPPLIES_SUBJECT",
+        "enrolleesuppliessubject": true,
+        "subjectaltrequireupn": false,
+        "ekus": [],
+        "certificateapplicationpolicy": [],
+        "authorizedsignatures": 1,
+        "applicationpolicies": ["1.3.6.1.4.1.311.10.3.10"],
+        "issuancepolicies": [],
+        "effectiveekus": [],
+        "authenticationenabled": true
+      },
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "08FA76AA-B3B1-480E-81E2-48CC2AF009B5",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": {
+        "ObjectIdentifier": "95D1A36E-7782-4CC5-823C-F5994359DDC0",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "CEPENCRYPTION@ESC1.LOCAL",
+        "distinguishedname": "CN=CEPENCRYPTION,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "description": null,
+        "whencreated": 1664426237,
+        "validityperiod": "2 years",
+        "renewalperiod": "6 weeks",
+        "schemaversion": 1,
+        "displayname": "CEP Encryption",
+        "oid": "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.22",
+        "enrollmentflag": "NONE",
+        "requiresmanagerapproval": false,
+        "nosecurityextension": false,
+        "certificatenameflag": "ENROLLEE_SUPPLIES_SUBJECT",
+        "enrolleesuppliessubject": true,
+        "subjectaltrequireupn": false,
+        "ekus": ["1.3.6.1.4.1.311.20.2.1"],
+        "certificateapplicationpolicy": [],
+        "authorizedsignatures": 0,
+        "applicationpolicies": [],
+        "issuancepolicies": [],
+        "effectiveekus": ["1.3.6.1.4.1.311.20.2.1"],
+        "authenticationenabled": false
+      },
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "89486D6B-D221-4435-9544-9CDC8B4E6933",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": {
+        "ObjectIdentifier": "95D1A36E-7782-4CC5-823C-F5994359DDC0",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "WEBSERVER@ESC1.LOCAL",
+        "distinguishedname": "CN=WEBSERVER,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "description": null,
+        "whencreated": 1664426237,
+        "validityperiod": "2 years",
+        "renewalperiod": "6 weeks",
+        "schemaversion": 1,
+        "displayname": "Web Server",
+        "oid": "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.16",
+        "enrollmentflag": "NONE",
+        "requiresmanagerapproval": false,
+        "nosecurityextension": false,
+        "certificatenameflag": "ENROLLEE_SUPPLIES_SUBJECT",
+        "enrolleesuppliessubject": true,
+        "subjectaltrequireupn": false,
+        "ekus": ["1.3.6.1.5.5.7.3.1"],
+        "certificateapplicationpolicy": [],
+        "authorizedsignatures": 0,
+        "applicationpolicies": [],
+        "issuancepolicies": [],
+        "effectiveekus": ["1.3.6.1.5.5.7.3.1"],
+        "authenticationenabled": false
+      },
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "621424AD-1DD5-487C-B38D-12D094A38153",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": {
+        "ObjectIdentifier": "95D1A36E-7782-4CC5-823C-F5994359DDC0",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "CTLSIGNING@ESC1.LOCAL",
+        "distinguishedname": "CN=CTLSIGNING,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "description": null,
+        "whencreated": 1664426237,
+        "validityperiod": "1 year",
+        "renewalperiod": "6 weeks",
+        "schemaversion": 1,
+        "displayname": "Trust List Signing",
+        "oid": "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.10",
+        "enrollmentflag": "AUTO_ENROLLMENT",
+        "requiresmanagerapproval": false,
+        "nosecurityextension": false,
+        "certificatenameflag": "SUBJECT_ALT_REQUIRE_UPN, SUBJECT_REQUIRE_DIRECTORY_PATH",
+        "enrolleesuppliessubject": false,
+        "subjectaltrequireupn": true,
+        "ekus": ["1.3.6.1.4.1.311.10.3.1"],
+        "certificateapplicationpolicy": [],
+        "authorizedsignatures": 0,
+        "applicationpolicies": [],
+        "issuancepolicies": [],
+        "effectiveekus": ["1.3.6.1.4.1.311.10.3.1"],
+        "authenticationenabled": false
+      },
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "F951BBAA-F10A-4A70-9507-BCD8F188D70B",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": {
+        "ObjectIdentifier": "95D1A36E-7782-4CC5-823C-F5994359DDC0",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "EXCHANGEUSER@ESC1.LOCAL",
+        "distinguishedname": "CN=EXCHANGEUSER,CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "description": null,
+        "whencreated": 1664426237,
+        "validityperiod": "1 year",
+        "renewalperiod": "6 weeks",
+        "schemaversion": 1,
+        "displayname": "Exchange User",
+        "oid": "1.3.6.1.4.1.311.21.8.12059088.7148202.5130407.12905872.6174753.77.1.23",
+        "enrollmentflag": "INCLUDE_SYMMETRIC_ALGORITHMS",
+        "requiresmanagerapproval": false,
+        "nosecurityextension": false,
+        "certificatenameflag": "ENROLLEE_SUPPLIES_SUBJECT",
+        "enrolleesuppliessubject": true,
+        "subjectaltrequireupn": false,
+        "ekus": ["1.3.6.1.5.5.7.3.4"],
+        "certificateapplicationpolicy": [],
+        "authorizedsignatures": 0,
+        "applicationpolicies": [],
+        "issuancepolicies": [],
+        "effectiveekus": ["1.3.6.1.5.5.7.3.4"],
+        "authenticationenabled": false
+      },
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "3F2F49C7-53C2-4AFB-8DA2-306C2CD1DDCA",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": {
+        "ObjectIdentifier": "95D1A36E-7782-4CC5-823C-F5994359DDC0",
+        "ObjectType": "Container"
+      }
+    }
+  ],
+  "meta": {
+    "methods": 521215,
+    "type": "certtemplates",
+    "count": 34,
+    "version": 6
+  }
+}
diff --git a/cmd/api/src/test/fixtures/fixtures/v6/all/computers.json b/cmd/api/src/test/fixtures/fixtures/v6/all/computers.json
new file mode 100644
index 0000000000..4f5e37a152
--- /dev/null
+++ b/cmd/api/src/test/fixtures/fixtures/v6/all/computers.json
@@ -0,0 +1,549 @@
+{
+  "data": [
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "ESC1-DC.ESC1.LOCAL",
+        "distinguishedname": "CN=ESC1-DC,OU=DOMAIN CONTROLLERS,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "ESC1-DC$",
+        "haslaps": false,
+        "description": null,
+        "whencreated": 1664419087,
+        "enabled": true,
+        "unconstraineddelegation": true,
+        "trustedtoauth": false,
+        "lastlogon": 1701804392,
+        "lastlogontimestamp": 1701111309,
+        "pwdlastset": 1701438050,
+        "serviceprincipalnames": [
+          "Dfsr-12F9A27C-BF97-4787-9364-D31B6C55EB04/ESC1-DC.ESC1.LOCAL",
+          "TERMSRV/ESC1-DC",
+          "TERMSRV/ESC1-DC.ESC1.LOCAL",
+          "ldap/ESC1-DC.ESC1.LOCAL/ForestDnsZones.ESC1.LOCAL",
+          "ldap/ESC1-DC.ESC1.LOCAL/DomainDnsZones.ESC1.LOCAL",
+          "DNS/ESC1-DC.ESC1.LOCAL",
+          "GC/ESC1-DC.ESC1.LOCAL/ESC1.LOCAL",
+          "RestrictedKrbHost/ESC1-DC.ESC1.LOCAL",
+          "RestrictedKrbHost/ESC1-DC",
+          "RPC/35bb9077-84f8-4114-93d5-0898f3c1eb61._msdcs.ESC1.LOCAL",
+          "HOST/ESC1-DC/ESC1",
+          "HOST/ESC1-DC.ESC1.LOCAL/ESC1",
+          "HOST/ESC1-DC",
+          "HOST/ESC1-DC.ESC1.LOCAL",
+          "HOST/ESC1-DC.ESC1.LOCAL/ESC1.LOCAL",
+          "E3514235-4B06-11D1-AB04-00C04FC2DCD2/35bb9077-84f8-4114-93d5-0898f3c1eb61/ESC1.LOCAL",
+          "ldap/ESC1-DC/ESC1",
+          "ldap/35bb9077-84f8-4114-93d5-0898f3c1eb61._msdcs.ESC1.LOCAL",
+          "ldap/ESC1-DC.ESC1.LOCAL/ESC1",
+          "ldap/ESC1-DC",
+          "ldap/ESC1-DC.ESC1.LOCAL",
+          "ldap/ESC1-DC.ESC1.LOCAL/ESC1.LOCAL"
+        ],
+        "operatingsystem": "Windows Server 2022 Datacenter Azure Edition",
+        "sidhistory": []
+      },
+      "PrimaryGroupSID": "S-1-5-21-909015691-3030120388-2582151266-516",
+      "AllowedToDelegate": [],
+      "AllowedToAct": [],
+      "HasSIDHistory": [],
+      "DumpSMSAPassword": [],
+      "Sessions": { "Results": [], "Collected": true, "FailureReason": null },
+      "PrivilegedSessions": {
+        "Results": [
+          {
+            "UserSID": "S-1-5-21-909015691-3030120388-2582151266-500",
+            "ComputerSID": "S-1-5-21-909015691-3030120388-2582151266-1000"
+          }
+        ],
+        "Collected": true,
+        "FailureReason": null
+      },
+      "RegistrySessions": {
+        "Results": [
+          {
+            "UserSID": "S-1-5-21-909015691-3030120388-2582151266-500",
+            "ComputerSID": "S-1-5-21-909015691-3030120388-2582151266-1000"
+          }
+        ],
+        "Collected": true,
+        "FailureReason": null
+      },
+      "LocalGroups": [
+        {
+          "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-549",
+          "Name": "IGNOREME",
+          "Results": [],
+          "LocalNames": [],
+          "Collected": true,
+          "FailureReason": null
+        },
+        {
+          "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-548",
+          "Name": "IGNOREME",
+          "Results": [],
+          "LocalNames": [],
+          "Collected": true,
+          "FailureReason": null
+        },
+        {
+          "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-554",
+          "Name": "IGNOREME",
+          "Results": [
+            {
+              "ObjectIdentifier": "ESC1.LOCAL-S-1-5-11",
+              "ObjectType": "Group"
+            },
+            {
+              "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-1000",
+              "ObjectType": "Computer"
+            }
+          ],
+          "LocalNames": [],
+          "Collected": true,
+          "FailureReason": null
+        },
+        {
+          "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-557",
+          "Name": "IGNOREME",
+          "Results": [],
+          "LocalNames": [],
+          "Collected": true,
+          "FailureReason": null
+        },
+        {
+          "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-560",
+          "Name": "IGNOREME",
+          "Results": [
+            { "ObjectIdentifier": "ESC1.LOCAL-S-1-5-9", "ObjectType": "Group" }
+          ],
+          "LocalNames": [],
+          "Collected": true,
+          "FailureReason": null
+        },
+        {
+          "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-561",
+          "Name": "IGNOREME",
+          "Results": [],
+          "LocalNames": [],
+          "Collected": true,
+          "FailureReason": null
+        },
+        {
+          "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-544",
+          "Name": "IGNOREME",
+          "Results": [
+            {
+              "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-500",
+              "ObjectType": "User"
+            },
+            {
+              "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-519",
+              "ObjectType": "Group"
+            },
+            {
+              "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-512",
+              "ObjectType": "Group"
+            }
+          ],
+          "LocalNames": [],
+          "Collected": true,
+          "FailureReason": null
+        },
+        {
+          "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-545",
+          "Name": "IGNOREME",
+          "Results": [
+            {
+              "ObjectIdentifier": "ESC1.LOCAL-S-1-5-11",
+              "ObjectType": "Group"
+            },
+            {
+              "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-513",
+              "ObjectType": "Group"
+            }
+          ],
+          "LocalNames": [],
+          "Collected": true,
+          "FailureReason": null
+        },
+        {
+          "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-546",
+          "Name": "IGNOREME",
+          "Results": [
+            {
+              "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-501",
+              "ObjectType": "User"
+            },
+            {
+              "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-514",
+              "ObjectType": "Group"
+            }
+          ],
+          "LocalNames": [],
+          "Collected": true,
+          "FailureReason": null
+        },
+        {
+          "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-550",
+          "Name": "IGNOREME",
+          "Results": [],
+          "LocalNames": [],
+          "Collected": true,
+          "FailureReason": null
+        },
+        {
+          "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-551",
+          "Name": "IGNOREME",
+          "Results": [],
+          "LocalNames": [],
+          "Collected": true,
+          "FailureReason": null
+        },
+        {
+          "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-552",
+          "Name": "IGNOREME",
+          "Results": [],
+          "LocalNames": [],
+          "Collected": true,
+          "FailureReason": null
+        },
+        {
+          "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-555",
+          "Name": "IGNOREME",
+          "Results": [],
+          "LocalNames": [],
+          "Collected": true,
+          "FailureReason": null
+        },
+        {
+          "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-556",
+          "Name": "IGNOREME",
+          "Results": [],
+          "LocalNames": [],
+          "Collected": true,
+          "FailureReason": null
+        },
+        {
+          "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-558",
+          "Name": "IGNOREME",
+          "Results": [],
+          "LocalNames": [],
+          "Collected": true,
+          "FailureReason": null
+        },
+        {
+          "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-559",
+          "Name": "IGNOREME",
+          "Results": [],
+          "LocalNames": [],
+          "Collected": true,
+          "FailureReason": null
+        },
+        {
+          "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-562",
+          "Name": "IGNOREME",
+          "Results": [],
+          "LocalNames": [],
+          "Collected": true,
+          "FailureReason": null
+        },
+        {
+          "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-568",
+          "Name": "IGNOREME",
+          "Results": [
+            { "ObjectIdentifier": "ESC1.LOCAL-S-1-5-17", "ObjectType": "Group" }
+          ],
+          "LocalNames": [],
+          "Collected": true,
+          "FailureReason": null
+        },
+        {
+          "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-569",
+          "Name": "IGNOREME",
+          "Results": [],
+          "LocalNames": [],
+          "Collected": true,
+          "FailureReason": null
+        },
+        {
+          "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-573",
+          "Name": "IGNOREME",
+          "Results": [],
+          "LocalNames": [],
+          "Collected": true,
+          "FailureReason": null
+        },
+        {
+          "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-574",
+          "Name": "IGNOREME",
+          "Results": [
+            { "ObjectIdentifier": "ESC1.LOCAL-S-1-5-11", "ObjectType": "Group" }
+          ],
+          "LocalNames": [],
+          "Collected": true,
+          "FailureReason": null
+        },
+        {
+          "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-575",
+          "Name": "IGNOREME",
+          "Results": [],
+          "LocalNames": [],
+          "Collected": true,
+          "FailureReason": null
+        },
+        {
+          "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-576",
+          "Name": "IGNOREME",
+          "Results": [],
+          "LocalNames": [],
+          "Collected": true,
+          "FailureReason": null
+        },
+        {
+          "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-577",
+          "Name": "IGNOREME",
+          "Results": [],
+          "LocalNames": [],
+          "Collected": true,
+          "FailureReason": null
+        },
+        {
+          "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-578",
+          "Name": "IGNOREME",
+          "Results": [],
+          "LocalNames": [],
+          "Collected": true,
+          "FailureReason": null
+        },
+        {
+          "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-579",
+          "Name": "IGNOREME",
+          "Results": [],
+          "LocalNames": [],
+          "Collected": true,
+          "FailureReason": null
+        },
+        {
+          "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-580",
+          "Name": "IGNOREME",
+          "Results": [],
+          "LocalNames": [],
+          "Collected": true,
+          "FailureReason": null
+        },
+        {
+          "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-582",
+          "Name": "IGNOREME",
+          "Results": [],
+          "LocalNames": [],
+          "Collected": true,
+          "FailureReason": null
+        }
+      ],
+      "UserRights": [
+        {
+          "Privilege": "SeRemoteInteractiveLogonRight",
+          "Results": [
+            {
+              "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-544",
+              "ObjectType": "Group"
+            }
+          ],
+          "LocalNames": [],
+          "Collected": true,
+          "FailureReason": null
+        }
+      ],
+      "DCRegistryData": {
+        "CertificateMappingMethods": {
+          "Value": -1,
+          "Collected": true,
+          "FailureReason": null
+        },
+        "StrongCertificateBindingEnforcement": {
+          "Value": 2,
+          "Collected": true,
+          "FailureReason": null
+        }
+      },
+      "Status": null,
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-526",
+          "PrincipalType": "Group",
+          "RightName": "AddKeyCredentialLink",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-527",
+          "PrincipalType": "Group",
+          "RightName": "AddKeyCredentialLink",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-1000",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "1AEEE963-F4C8-49DA-BBE6-A6107F42CAF0",
+        "ObjectType": "OU"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "ESC1-SERVER.ESC1.LOCAL",
+        "distinguishedname": "CN=ESC1-SERVER,CN=COMPUTERS,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "ESC1-SERVER$",
+        "haslaps": false,
+        "description": null,
+        "whencreated": 1664424043,
+        "enabled": true,
+        "unconstraineddelegation": false,
+        "trustedtoauth": false,
+        "lastlogon": 1701807130,
+        "lastlogontimestamp": 1701589065,
+        "pwdlastset": 1701456467,
+        "serviceprincipalnames": [
+          "WSMAN/ESC1-Server",
+          "WSMAN/ESC1-Server.ESC1.LOCAL",
+          "TERMSRV/ESC1-SERVER",
+          "TERMSRV/ESC1-Server.ESC1.LOCAL",
+          "RestrictedKrbHost/ESC1-Server",
+          "HOST/ESC1-Server",
+          "RestrictedKrbHost/ESC1-Server.ESC1.LOCAL",
+          "HOST/ESC1-Server.ESC1.LOCAL"
+        ],
+        "operatingsystem": "Windows Server 2022 Datacenter Azure Edition",
+        "sidhistory": []
+      },
+      "PrimaryGroupSID": "S-1-5-21-909015691-3030120388-2582151266-515",
+      "AllowedToDelegate": [],
+      "AllowedToAct": [],
+      "HasSIDHistory": [],
+      "DumpSMSAPassword": [],
+      "Sessions": { "Results": [], "Collected": false, "FailureReason": null },
+      "PrivilegedSessions": {
+        "Results": [],
+        "Collected": false,
+        "FailureReason": null
+      },
+      "RegistrySessions": {
+        "Results": [],
+        "Collected": false,
+        "FailureReason": null
+      },
+      "LocalGroups": [],
+      "UserRights": [],
+      "DCRegistryData": {
+        "CertificateMappingMethods": null,
+        "StrongCertificateBindingEnforcement": null
+      },
+      "Status": null,
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-548",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-526",
+          "PrincipalType": "Group",
+          "RightName": "AddKeyCredentialLink",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-527",
+          "PrincipalType": "Group",
+          "RightName": "AddKeyCredentialLink",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-1103",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "CC7D845D-04FF-470C-8E6B-8C810AB1B4FB",
+        "ObjectType": "Container"
+      }
+    }
+  ],
+  "meta": { "methods": 521215, "type": "computers", "count": 2, "version": 6 }
+}
diff --git a/cmd/api/src/test/fixtures/fixtures/v6/all/containers.json b/cmd/api/src/test/fixtures/fixtures/v6/all/containers.json
new file mode 100644
index 0000000000..7d34fc762b
--- /dev/null
+++ b/cmd/api/src/test/fixtures/fixtures/v6/all/containers.json
@@ -0,0 +1,11353 @@
+{
+  "data": [
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "WMIGPO@ESC1.LOCAL",
+        "distinguishedname": "CN=WMIGPO,CN=WMIPOLICY,CN=SYSTEM,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "A5D9E8D6-B84F-4529-B298-29CB9B79B35B",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "A9BC3C87-81FB-474A-AE99-FF9A72129795",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "SOM@ESC1.LOCAL",
+        "distinguishedname": "CN=SOM,CN=WMIPOLICY,CN=SYSTEM,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "BED91F0A-E04B-4F51-8CF0-B5CF80AD1DC8",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": {
+        "ObjectIdentifier": "A9BC3C87-81FB-474A-AE99-FF9A72129795",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "FOREIGNSECURITYPRINCIPALS@ESC1.LOCAL",
+        "distinguishedname": "CN=FOREIGNSECURITYPRINCIPALS,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "9413F258-A93E-4EF1-A3D6-1E71062C6F89",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266",
+        "ObjectType": "Domain"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "WINSOCKSERVICES@ESC1.LOCAL",
+        "distinguishedname": "CN=WINSOCKSERVICES,CN=SYSTEM,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "78E7CD15-E43E-42F3-8C7D-815EDAED68C2",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "06DFC885-9516-4384-9A79-B3748932022D",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "RPCSERVICES@ESC1.LOCAL",
+        "distinguishedname": "CN=RPCSERVICES,CN=SYSTEM,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "888E986C-1C99-4699-85EC-64D4B791D8C7",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "06DFC885-9516-4384-9A79-B3748932022D",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "RAS AND IAS SERVERS ACCESS CHECK@ESC1.LOCAL",
+        "distinguishedname": "CN=RAS AND IAS SERVERS ACCESS CHECK,CN=SYSTEM,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-553",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-553",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "01AF4412-BEFB-489F-81F8-1D705E8E1322",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "06DFC885-9516-4384-9A79-B3748932022D",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "COMPUTERS@ESC1.LOCAL",
+        "distinguishedname": "CN=COMPUTERS,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "CC7D845D-04FF-470C-8E6B-8C810AB1B4FB",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266",
+        "ObjectType": "Domain"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "USERS@ESC1.LOCAL",
+        "distinguishedname": "CN=USERS,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "B328621C-8721-4ED4-8BF1-0A0EEEB93BA3",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266",
+        "ObjectType": "Domain"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "SYSTEM@ESC1.LOCAL",
+        "distinguishedname": "CN=SYSTEM,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "06DFC885-9516-4384-9A79-B3748932022D",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266",
+        "ObjectType": "Domain"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "POLICIES@ESC1.LOCAL",
+        "distinguishedname": "CN=POLICIES,CN=SYSTEM,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "9F053993-1C95-4856-BD04-D67DCACA29C3",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "06DFC885-9516-4384-9A79-B3748932022D",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "PROGRAM DATA@ESC1.LOCAL",
+        "distinguishedname": "CN=PROGRAM DATA,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "3ACAACFF-DEE7-42B4-99EC-C00E44B65543",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266",
+        "ObjectType": "Domain"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "POLICYTYPE@ESC1.LOCAL",
+        "distinguishedname": "CN=POLICYTYPE,CN=WMIPOLICY,CN=SYSTEM,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "A002A042-F0D2-4512-BE0B-8C482CFF867C",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "A9BC3C87-81FB-474A-AE99-FF9A72129795",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "MICROSOFT@ESC1.LOCAL",
+        "distinguishedname": "CN=MICROSOFT,CN=PROGRAM DATA,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "B1D465F2-B5EF-40C0-BCF1-A0EC35B775D7",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "3ACAACFF-DEE7-42B4-99EC-C00E44B65543",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "MANAGED SERVICE ACCOUNTS@ESC1.LOCAL",
+        "distinguishedname": "CN=MANAGED SERVICE ACCOUNTS,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "095AF198-92F7-4D86-8346-C488B799CA5D",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266",
+        "ObjectType": "Domain"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "IP SECURITY@ESC1.LOCAL",
+        "distinguishedname": "CN=IP SECURITY,CN=SYSTEM,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "070A3BFC-C75C-4000-AF2F-F2E3579A4F42",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "06DFC885-9516-4384-9A79-B3748932022D",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "ADMINSDHOLDER@ESC1.LOCAL",
+        "distinguishedname": "CN=ADMINSDHOLDER,CN=SYSTEM,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "C22485B1-75BB-4534-972C-3EE598F6D14F",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": {
+        "ObjectIdentifier": "06DFC885-9516-4384-9A79-B3748932022D",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "MEETINGS@ESC1.LOCAL",
+        "distinguishedname": "CN=MEETINGS,CN=SYSTEM,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "0F9F95E2-59EC-413A-AB1A-0F4DC0D0E5FE",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "06DFC885-9516-4384-9A79-B3748932022D",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "PSPS@ESC1.LOCAL",
+        "distinguishedname": "CN=PSPS,CN=SYSTEM,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "1B616158-B04B-4692-BE2A-6A9A7DDA60AB",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "06DFC885-9516-4384-9A79-B3748932022D",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "KEYS@ESC1.LOCAL",
+        "distinguishedname": "CN=KEYS,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-9",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-516",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-526",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-527",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "15F265FE-ABBC-4B09-B5E6-A333424B1A96",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": {
+        "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266",
+        "ObjectType": "Domain"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "COMPARTITIONSETS@ESC1.LOCAL",
+        "distinguishedname": "CN=COMPARTITIONSETS,CN=SYSTEM,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "EA3AE956-515D-488A-9D4E-E06D42882B74",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "06DFC885-9516-4384-9A79-B3748932022D",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "MICROSOFTDNS@ESC1.LOCAL",
+        "distinguishedname": "CN=MICROSOFTDNS,CN=SYSTEM,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-9",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-9",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-1101",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-1101",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "176C987F-1D67-4298-A5D7-3557BB825940",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "06DFC885-9516-4384-9A79-B3748932022D",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "COMPARTITIONS@ESC1.LOCAL",
+        "distinguishedname": "CN=COMPARTITIONS,CN=SYSTEM,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "7EDFF422-BEAE-4354-B39D-0A026B679C33",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "06DFC885-9516-4384-9A79-B3748932022D",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "MASTER ROOT KEYS@ESC1.LOCAL",
+        "distinguishedname": "CN=MASTER ROOT KEYS,CN=GROUP KEY DISTRIBUTION SERVICE,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "C30F1E27-8171-46A7-88CE-6AD797734F47",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "D070702A-ED7B-448D-94BC-7804FF55A57F",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "SERVER CONFIGURATION@ESC1.LOCAL",
+        "distinguishedname": "CN=SERVER CONFIGURATION,CN=GROUP KEY DISTRIBUTION SERVICE,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "1A762D4F-36DB-4CA7-8728-C7D5CEDD34E4",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "D070702A-ED7B-448D-94BC-7804FF55A57F",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "ENROLLMENT SERVICES@ESC1.LOCAL",
+        "distinguishedname": "CN=ENROLLMENT SERVICES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "22F8BB5D-B81E-4856-96A9-A6448386EB23",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "A18A3A99-3E4C-46DD-9C90-E5542FA4EC84",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "KRA@ESC1.LOCAL",
+        "distinguishedname": "CN=KRA,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "8AC01557-DA9A-4BCE-8224-520C77C387E6",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "A18A3A99-3E4C-46DD-9C90-E5542FA4EC84",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "VALUE TYPES@ESC1.LOCAL",
+        "distinguishedname": "CN=VALUE TYPES,CN=CLAIMS CONFIGURATION,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "013667E4-97EF-4148-90DA-9520805EEC07",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "D5E14FCB-8D0D-417B-BD01-452EF1CA02F3",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "CLAIMS CONFIGURATION@ESC1.LOCAL",
+        "distinguishedname": "CN=CLAIMS CONFIGURATION,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "D5E14FCB-8D0D-417B-BD01-452EF1CA02F3",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "778E7398-3790-4053-8B08-0D480C5FB730",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "RESOURCE PROPERTY LISTS@ESC1.LOCAL",
+        "distinguishedname": "CN=RESOURCE PROPERTY LISTS,CN=CLAIMS CONFIGURATION,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "9456C094-D444-46B5-ACF9-01389E6606CB",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "D5E14FCB-8D0D-417B-BD01-452EF1CA02F3",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "MICROSOFT SPP@ESC1.LOCAL",
+        "distinguishedname": "CN=MICROSOFT SPP,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "7FC0F738-39A2-4C3F-9FA7-9C7E0AA57F97",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "778E7398-3790-4053-8B08-0D480C5FB730",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "406@ESC1.LOCAL",
+        "distinguishedname": "CN=406,CN=DISPLAYSPECIFIERS,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "4E302C46-D538-45AC-A89B-D43B100E253D",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "64FA4E1B-4E4F-4029-9CC7-7F5C17153B4D",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "412@ESC1.LOCAL",
+        "distinguishedname": "CN=412,CN=DISPLAYSPECIFIERS,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "C26361C2-E7CC-4154-8F5C-8186F85EC92B",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "64FA4E1B-4E4F-4029-9CC7-7F5C17153B4D",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "414@ESC1.LOCAL",
+        "distinguishedname": "CN=414,CN=DISPLAYSPECIFIERS,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "34CBC66D-F7FE-4E71-998B-5312FB0E0182",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "64FA4E1B-4E4F-4029-9CC7-7F5C17153B4D",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "413@ESC1.LOCAL",
+        "distinguishedname": "CN=413,CN=DISPLAYSPECIFIERS,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "B5DE5CBF-B950-4D57-8B5B-79320A851C86",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "64FA4E1B-4E4F-4029-9CC7-7F5C17153B4D",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "415@ESC1.LOCAL",
+        "distinguishedname": "CN=415,CN=DISPLAYSPECIFIERS,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "DD36ACA0-5A6E-4DC7-886E-9D65E5EB95F2",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "64FA4E1B-4E4F-4029-9CC7-7F5C17153B4D",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "416@ESC1.LOCAL",
+        "distinguishedname": "CN=416,CN=DISPLAYSPECIFIERS,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "175716FE-AC59-4790-B8E9-72924089B6A6",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "64FA4E1B-4E4F-4029-9CC7-7F5C17153B4D",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "816@ESC1.LOCAL",
+        "distinguishedname": "CN=816,CN=DISPLAYSPECIFIERS,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "C287977B-F169-4549-A3D5-EFE11A7B0996",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "64FA4E1B-4E4F-4029-9CC7-7F5C17153B4D",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "419@ESC1.LOCAL",
+        "distinguishedname": "CN=419,CN=DISPLAYSPECIFIERS,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "5CB16F9D-3C51-49F8-B2ED-11B3447F1B96",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "64FA4E1B-4E4F-4029-9CC7-7F5C17153B4D",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "41D@ESC1.LOCAL",
+        "distinguishedname": "CN=41D,CN=DISPLAYSPECIFIERS,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "AB1084BA-DB40-4FF7-8031-5C6617D9C28C",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "64FA4E1B-4E4F-4029-9CC7-7F5C17153B4D",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "41F@ESC1.LOCAL",
+        "distinguishedname": "CN=41F,CN=DISPLAYSPECIFIERS,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "FA8355F9-D1C1-44F2-91B0-88618FDB17DE",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "64FA4E1B-4E4F-4029-9CC7-7F5C17153B4D",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "804@ESC1.LOCAL",
+        "distinguishedname": "CN=804,CN=DISPLAYSPECIFIERS,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "D5813BB4-4962-4E04-B492-B2EE1C5B2D4D",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "64FA4E1B-4E4F-4029-9CC7-7F5C17153B4D",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "404@ESC1.LOCAL",
+        "distinguishedname": "CN=404,CN=DISPLAYSPECIFIERS,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "E54F4892-903A-4A4F-80CC-FFCD32C74143",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "64FA4E1B-4E4F-4029-9CC7-7F5C17153B4D",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "409@ESC1.LOCAL",
+        "distinguishedname": "CN=409,CN=DISPLAYSPECIFIERS,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "A6DFDE3E-F07F-4599-B1FC-4E48A9FE8B18",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "64FA4E1B-4E4F-4029-9CC7-7F5C17153B4D",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "CERTIFICATION AUTHORITIES@ESC1.LOCAL",
+        "distinguishedname": "CN=CERTIFICATION AUTHORITIES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "242AB0E0-13D1-4517-BEB0-07E504802B6B",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "A18A3A99-3E4C-46DD-9C90-E5542FA4EC84",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "RRAS@ESC1.LOCAL",
+        "distinguishedname": "CN=RRAS,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "227DDE50-4CD3-4C13-9F4F-E62A77AD89A8",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "778E7398-3790-4053-8B08-0D480C5FB730",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "PUBLIC KEY SERVICES@ESC1.LOCAL",
+        "distinguishedname": "CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "A18A3A99-3E4C-46DD-9C90-E5542FA4EC84",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "778E7398-3790-4053-8B08-0D480C5FB730",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "WINDOWS NT@ESC1.LOCAL",
+        "distinguishedname": "CN=WINDOWS NT,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "F88B5522-A331-49D8-865C-505BA84E1AC8",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "778E7398-3790-4053-8B08-0D480C5FB730",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "CDP@ESC1.LOCAL",
+        "distinguishedname": "CN=CDP,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "25D383A5-6387-47AE-8577-7A1609472846",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "A18A3A99-3E4C-46DD-9C90-E5542FA4EC84",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "CERTIFICATE TEMPLATES@ESC1.LOCAL",
+        "distinguishedname": "CN=CERTIFICATE TEMPLATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "95D1A36E-7782-4CC5-823C-F5994359DDC0",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "A18A3A99-3E4C-46DD-9C90-E5542FA4EC84",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "NETSERVICES@ESC1.LOCAL",
+        "distinguishedname": "CN=NETSERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "1E8E5AD0-4618-4CEC-9DE6-EFB46B4244BB",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "778E7398-3790-4053-8B08-0D480C5FB730",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "OPERATIONS@ESC1.LOCAL",
+        "distinguishedname": "CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "9A591D9E-0883-42F8-9928-DF0A84176EE3",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "AD3C7909-B154-4C16-8BF7-2C3A7870BB3D@ESC1.LOCAL",
+        "distinguishedname": "CN=AD3C7909-B154-4C16-8BF7-2C3A7870BB3D,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "08BC9B30-A3E7-40F4-92AE-A0F5B417E2A8",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "AIA@ESC1.LOCAL",
+        "distinguishedname": "CN=AIA,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-517",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "D44AC8AF-C24E-489B-B0BB-E832A5E3C91A",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "A18A3A99-3E4C-46DD-9C90-E5542FA4EC84",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "4444C516-F43A-4C12-9C4B-B5C064941D61@ESC1.LOCAL",
+        "distinguishedname": "CN=4444C516-F43A-4C12-9C4B-B5C064941D61,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "D5662AEE-1DDB-4A98-AB07-0E6796DB9E84",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "26AD2EBF-F8F5-44A4-B97C-A616C8B9D09A@ESC1.LOCAL",
+        "distinguishedname": "CN=26AD2EBF-F8F5-44A4-B97C-A616C8B9D09A,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "FC7D6B04-131A-47A7-8E4E-5B793F61697A",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "B2B7FB45-F50D-41BC-A73B-8F580F3B636A@ESC1.LOCAL",
+        "distinguishedname": "CN=B2B7FB45-F50D-41BC-A73B-8F580F3B636A,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "B7E8DD9E-2ED4-4B02-984F-7E5BE4670BC7",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "436A1A4B-F41A-46E6-AC86-427720EF29F3@ESC1.LOCAL",
+        "distinguishedname": "CN=436A1A4B-F41A-46E6-AC86-427720EF29F3,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "83794539-74A9-4D81-B085-1008BEA941B3",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "63C0F51A-067C-4640-8A4F-044FB33F1049@ESC1.LOCAL",
+        "distinguishedname": "CN=63C0F51A-067C-4640-8A4F-044FB33F1049,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "AE24506B-BA5A-4B3D-BC60-15E2752B0AA1",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "1BDF6366-C3DB-4D0B-B8CB-F99BA9BCE20F@ESC1.LOCAL",
+        "distinguishedname": "CN=1BDF6366-C3DB-4D0B-B8CB-F99BA9BCE20F,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "F498325D-C755-4EAE-91CE-94D3B261ABAF",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "7DD09CA6-F0D6-43BF-B7F8-EF348F435617@ESC1.LOCAL",
+        "distinguishedname": "CN=7DD09CA6-F0D6-43BF-B7F8-EF348F435617,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "E54E5030-659A-49D1-B471-54EC5C81976B",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "DAE441C0-366E-482E-98D9-60A99A1898CC@ESC1.LOCAL",
+        "distinguishedname": "CN=DAE441C0-366E-482E-98D9-60A99A1898CC,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "E861DA5E-CAB2-4837-838A-79DE0DAE95F9",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "DD07182C-3174-4C95-902A-D64FEE285BBF@ESC1.LOCAL",
+        "distinguishedname": "CN=DD07182C-3174-4C95-902A-D64FEE285BBF,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "7445E34A-65F4-4C12-B76D-218DEAF6B67B",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "FFA5EE3C-1405-476D-B344-7AD37D69CC25@ESC1.LOCAL",
+        "distinguishedname": "CN=FFA5EE3C-1405-476D-B344-7AD37D69CC25,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "5947753B-447C-4BD6-8FE7-3BF9E4E99CEE",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "94FDEBC6-8EEB-4640-80DE-EC52B9CA17FA@ESC1.LOCAL",
+        "distinguishedname": "CN=94FDEBC6-8EEB-4640-80DE-EC52B9CA17FA,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "0806E6D9-BF70-4D9E-AE8B-6FEDE618BE40",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "1A3F6B15-55F2-4752-BA27-3D38A8232C4D@ESC1.LOCAL",
+        "distinguishedname": "CN=1A3F6B15-55F2-4752-BA27-3D38A8232C4D,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "5813FF06-35CF-4250-8CD1-F0A4F7242582",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "DEE21A17-4E8E-4F40-A58C-C0C009B685A7@ESC1.LOCAL",
+        "distinguishedname": "CN=DEE21A17-4E8E-4F40-A58C-C0C009B685A7,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "12CC73CD-5273-4D06-A2EC-02AD9479F918",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "9BD98BB4-4047-4DE5-BF4C-7BD1D0F6D21D@ESC1.LOCAL",
+        "distinguishedname": "CN=9BD98BB4-4047-4DE5-BF4C-7BD1D0F6D21D,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "41C44D86-5D4B-444A-A7C8-AC7301114C01",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "3FE80FBF-BF39-4773-B5BD-3E5767A30D2D@ESC1.LOCAL",
+        "distinguishedname": "CN=3FE80FBF-BF39-4773-B5BD-3E5767A30D2D,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "D51AFCF5-897C-4F22-96DD-8F2F960D55E6",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "F02915E2-9141-4F73-B8E7-2804662782DA@ESC1.LOCAL",
+        "distinguishedname": "CN=F02915E2-9141-4F73-B8E7-2804662782DA,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "449AD26C-BD47-4391-9A0D-068385973E98",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "39902C52-EF24-4B4B-8033-2C9DFDD173A2@ESC1.LOCAL",
+        "distinguishedname": "CN=39902C52-EF24-4B4B-8033-2C9DFDD173A2,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "2C86BED5-8EEE-4749-890A-E34D4E2DEF5F",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "20BF09B4-6D0B-4CD1-9C09-4231EDF1209B@ESC1.LOCAL",
+        "distinguishedname": "CN=20BF09B4-6D0B-4CD1-9C09-4231EDF1209B,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "4BC7463C-78B3-4E48-AA2C-044B986BF699",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "94F238BB-831C-11D6-977B-00C04F613221@ESC1.LOCAL",
+        "distinguishedname": "CN=94F238BB-831C-11D6-977B-00C04F613221,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "E55238C2-48E1-4485-B2F5-4533E7C30D15",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "94F238BC-831C-11D6-977B-00C04F613221@ESC1.LOCAL",
+        "distinguishedname": "CN=94F238BC-831C-11D6-977B-00C04F613221,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "D6631EAB-B512-4D83-A4A0-BFB93E731C02",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "94F238BD-831C-11D6-977B-00C04F613221@ESC1.LOCAL",
+        "distinguishedname": "CN=94F238BD-831C-11D6-977B-00C04F613221,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "DE714631-041C-4CC1-AD20-53A8E6AA4A07",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "94F238BE-831C-11D6-977B-00C04F613221@ESC1.LOCAL",
+        "distinguishedname": "CN=94F238BE-831C-11D6-977B-00C04F613221,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "326D0E1B-BEF6-4874-B3BC-E92C24ADAE92",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "3467DAE5-DEDD-4648-9066-F48AC186B20A@ESC1.LOCAL",
+        "distinguishedname": "CN=3467DAE5-DEDD-4648-9066-F48AC186B20A,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "E72C1548-3722-43A2-9E59-2E8441D75107",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "94F238BF-831C-11D6-977B-00C04F613221@ESC1.LOCAL",
+        "distinguishedname": "CN=94F238BF-831C-11D6-977B-00C04F613221,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "E596A685-BF1D-485C-9E7A-9D6E84C5328C",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "94F238C0-831C-11D6-977B-00C04F613221@ESC1.LOCAL",
+        "distinguishedname": "CN=94F238C0-831C-11D6-977B-00C04F613221,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "0C7A930F-BAD6-4DB5-AB36-87CC17B87478",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "EDA27B48-E610-11D6-9793-00C04F613221@ESC1.LOCAL",
+        "distinguishedname": "CN=EDA27B48-E610-11D6-9793-00C04F613221,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "F764194A-6E0B-41BE-B175-A7F1039FC309",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "EDA27B49-E610-11D6-9793-00C04F613221@ESC1.LOCAL",
+        "distinguishedname": "CN=EDA27B49-E610-11D6-9793-00C04F613221,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "7CE1911F-4435-4BAC-A0FE-74E6D46780AD",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "EDA27B4A-E610-11D6-9793-00C04F613221@ESC1.LOCAL",
+        "distinguishedname": "CN=EDA27B4A-E610-11D6-9793-00C04F613221,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "3C533D79-B867-4AFD-9056-61054BB12855",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "26D9C510-E61A-11D6-9793-00C04F613221@ESC1.LOCAL",
+        "distinguishedname": "CN=26D9C510-E61A-11D6-9793-00C04F613221,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "00155476-889A-44F4-A92C-76558ECC8869",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "26D9C511-E61A-11D6-9793-00C04F613221@ESC1.LOCAL",
+        "distinguishedname": "CN=26D9C511-E61A-11D6-9793-00C04F613221,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "EE78A8BC-508F-46B0-8DA1-55465B48F35D",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "EA08C04C-F474-4212-B19E-5E754F9210D4@ESC1.LOCAL",
+        "distinguishedname": "CN=EA08C04C-F474-4212-B19E-5E754F9210D4,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "A913224F-3B47-44FF-B3FB-8E6C12E9036E",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "4C0672A2-437C-4944-B953-5DB8F111D665@ESC1.LOCAL",
+        "distinguishedname": "CN=4C0672A2-437C-4944-B953-5DB8F111D665,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "11741C9E-4A9B-4CFB-A2FA-558BD5851B59",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "099F1587-AF70-49C6-AB6C-7B3E82BE0FE2@ESC1.LOCAL",
+        "distinguishedname": "CN=099F1587-AF70-49C6-AB6C-7B3E82BE0FE2,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "F82AFC7F-70EA-403F-8467-FD488C3F3EB0",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "4C022FD1-ADAB-4D84-A7F1-9580F03DA856@ESC1.LOCAL",
+        "distinguishedname": "CN=4C022FD1-ADAB-4D84-A7F1-9580F03DA856,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "63D7FE1A-F414-4355-92B4-6CFEC23205D6",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "WELLKNOWN SECURITY PRINCIPALS@ESC1.LOCAL",
+        "distinguishedname": "CN=WELLKNOWN SECURITY PRINCIPALS,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "EAD1F14D-97F6-4AC1-B2B8-1D311C2465F0",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "AB1E2DDD-D79C-4E0E-B25F-A8C9D79F180C",
+        "ObjectType": "Configuration"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "405@ESC1.LOCAL",
+        "distinguishedname": "CN=405,CN=DISPLAYSPECIFIERS,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "BC991ACC-AA9D-4A6F-A2E3-E546825A74E9",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "64FA4E1B-4E4F-4029-9CC7-7F5C17153B4D",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "560CF82D-9572-48A3-9024-6F2B56F1F866@ESC1.LOCAL",
+        "distinguishedname": "CN=560CF82D-9572-48A3-9024-6F2B56F1F866,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "621144C2-2ED6-4A9F-832F-DBBFCA73A81D",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "EXTENDED-RIGHTS@ESC1.LOCAL",
+        "distinguishedname": "CN=EXTENDED-RIGHTS,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "463ED547-C8CB-4CBC-8A82-6337C8217735",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "AB1E2DDD-D79C-4E0E-B25F-A8C9D79F180C",
+        "ObjectType": "Configuration"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "D668AD1F-CEDD-4565-AB02-9385926CE4F5@ESC1.LOCAL",
+        "distinguishedname": "CN=D668AD1F-CEDD-4565-AB02-9385926CE4F5,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "11CC061F-B555-441F-98CA-60E99F131F09",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "SHADOW PRINCIPAL CONFIGURATION@ESC1.LOCAL",
+        "distinguishedname": "CN=SHADOW PRINCIPAL CONFIGURATION,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "3D9DA954-372F-4E90-A752-1C4624E371A7",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "778E7398-3790-4053-8B08-0D480C5FB730",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "33B7EE33-1386-47CF-BAA1-B03E06473253@ESC1.LOCAL",
+        "distinguishedname": "CN=33B7EE33-1386-47CF-BAA1-B03E06473253,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "E7D243BB-4C60-400F-BE7B-4FBF6E56F8E1",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "9FEA28FF-387F-4D57-866D-3893C50F373F@ESC1.LOCAL",
+        "distinguishedname": "CN=9FEA28FF-387F-4D57-866D-3893C50F373F,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "59AE3CCC-AB1A-4651-AB4F-56D12142CBE2",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "002FB291-0D00-4B0C-8C00-FE7F50CE6F8D@ESC1.LOCAL",
+        "distinguishedname": "CN=002FB291-0D00-4B0C-8C00-FE7F50CE6F8D,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "751210EF-8BBF-4544-80A4-D55A0C9FEAEB",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "DCB3C95D-DEB7-4C51-AD13-43A7D5D06FC7@ESC1.LOCAL",
+        "distinguishedname": "CN=DCB3C95D-DEB7-4C51-AD13-43A7D5D06FC7,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "440058F2-054A-4F53-8FC8-03C0A5D16CA9",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "FORESTUPDATES@ESC1.LOCAL",
+        "distinguishedname": "CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "9A591D9E-0883-42F8-9928-DF0A84176EE3",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "AB1E2DDD-D79C-4E0E-B25F-A8C9D79F180C",
+        "ObjectType": "Configuration"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "CCFAE63A-7FB5-454C-83AB-0E8E1214974E@ESC1.LOCAL",
+        "distinguishedname": "CN=CCFAE63A-7FB5-454C-83AB-0E8E1214974E,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "CB469609-31AA-4CBB-9232-252DDAF158B0",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "BD3413C0-9559-469B-9F3D-51D7FAABD81A@ESC1.LOCAL",
+        "distinguishedname": "CN=BD3413C0-9559-469B-9F3D-51D7FAABD81A,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "61916FD1-CDE0-4499-BA69-E6243BC5D9B7",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "07E57D28-AD40-44FC-8334-8A0DC119B3F4@ESC1.LOCAL",
+        "distinguishedname": "CN=07E57D28-AD40-44FC-8334-8A0DC119B3F4,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "A2D6914F-1414-47B3-A426-D643A39BFACC",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "6FD48655-1698-497A-AC8D-8267CE01C80B@ESC1.LOCAL",
+        "distinguishedname": "CN=6FD48655-1698-497A-AC8D-8267CE01C80B,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "030C0462-7377-4B1E-A770-D8057F21B22D",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "10338D31-2423-4DFF-B4B5-EF025144B01F@ESC1.LOCAL",
+        "distinguishedname": "CN=10338D31-2423-4DFF-B4B5-EF025144B01F,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "35D60389-20B0-45F8-9607-D67953BA10CA",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "A96E2ED5-7A7C-4D5C-9D5D-965ECA0051DA@ESC1.LOCAL",
+        "distinguishedname": "CN=A96E2ED5-7A7C-4D5C-9D5D-965ECA0051DA,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "011C0AAD-EEC9-44C5-ADB8-52F69ADC004C",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "613BD063-E8E9-4A62-8F4C-CDA566F7EB6F@ESC1.LOCAL",
+        "distinguishedname": "CN=613BD063-E8E9-4A62-8F4C-CDA566F7EB6F,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "61074A9B-7BD4-46F1-B4ED-7A41F01C2E63",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "2A858903-5696-4364-B4E5-4CAC027CA7A6@ESC1.LOCAL",
+        "distinguishedname": "CN=2A858903-5696-4364-B4E5-4CAC027CA7A6,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "06BFC7FA-4AD3-408D-808F-889B592A5F0A",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "0FC5A978-0059-4B0A-9DC2-9896E8E389A1@ESC1.LOCAL",
+        "distinguishedname": "CN=0FC5A978-0059-4B0A-9DC2-9896E8E389A1,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "D796D46D-9F10-476E-B585-C586FF31C9EC",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "4D753A29-26AC-4D1A-BC80-311F947E4F0A@ESC1.LOCAL",
+        "distinguishedname": "CN=4D753A29-26AC-4D1A-BC80-311F947E4F0A,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "8CC9E523-F7A8-4769-BB17-7847E3114A4C",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "3B3ADBDB-4485-4559-AED8-9811C4BF90E4@ESC1.LOCAL",
+        "distinguishedname": "CN=3B3ADBDB-4485-4559-AED8-9811C4BF90E4,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "B75F1D6D-EFEB-4C27-BD83-A2A3B9B682AA",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "56040C71-FE93-4037-8FE9-1A4D1A283009@ESC1.LOCAL",
+        "distinguishedname": "CN=56040C71-FE93-4037-8FE9-1A4D1A283009,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "33C7B83E-8955-4DC8-AF0A-C9AF867834AC",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "CAA2BFAD-0CCA-483B-8D00-347F943292A8@ESC1.LOCAL",
+        "distinguishedname": "CN=CAA2BFAD-0CCA-483B-8D00-347F943292A8,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "86FBE4A1-80F3-486C-A379-351B0FF1CE82",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "2B9E0609-6D75-498A-9727-C9FCC93F0E42@ESC1.LOCAL",
+        "distinguishedname": "CN=2B9E0609-6D75-498A-9727-C9FCC93F0E42,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "31E92BE1-0220-440A-936A-AFB1B8603155",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "96541A16-910A-4B66-ACDE-720A0DFF03C7@ESC1.LOCAL",
+        "distinguishedname": "CN=96541A16-910A-4B66-ACDE-720A0DFF03C7,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "BAAA61B1-4ADA-498E-A4A1-24D13BBF3BD9",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "429A6334-1A00-4515-BF48-676DEB55954A@ESC1.LOCAL",
+        "distinguishedname": "CN=429A6334-1A00-4515-BF48-676DEB55954A,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "58950E57-AAC5-4E47-A716-EFD42A3B6286",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "21AE657C-6649-43C4-BBB3-7F184FDF58C1@ESC1.LOCAL",
+        "distinguishedname": "CN=21AE657C-6649-43C4-BBB3-7F184FDF58C1,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "E7A091B5-F761-4DB1-8233-3D3D10D8121B",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "DCA8F425-BAAE-47CD-B424-E3F6C76ED08B@ESC1.LOCAL",
+        "distinguishedname": "CN=DCA8F425-BAAE-47CD-B424-E3F6C76ED08B,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "B536281E-7232-4AD9-A369-5DB260D41E4F",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "C03B1F37-C240-4910-93C8-1544A452B4B5@ESC1.LOCAL",
+        "distinguishedname": "CN=C03B1F37-C240-4910-93C8-1544A452B4B5,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "21C88C4A-916E-438A-83AC-8842FA1C1D1B",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "A662B036-DBBE-4166-B4BA-21ABEA17F9CC@ESC1.LOCAL",
+        "distinguishedname": "CN=A662B036-DBBE-4166-B4BA-21ABEA17F9CC,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "9FCC4382-A93E-4E41-A5B3-8DFCC7BB9F69",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "134428A8-0043-48A6-BCDA-63310D9EC4DD@ESC1.LOCAL",
+        "distinguishedname": "CN=134428A8-0043-48A6-BCDA-63310D9EC4DD,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "F1D59D3F-8EB2-482B-B791-6490376F9449",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "11C39BED-4BEE-45F5-B195-8DA0E05B573A@ESC1.LOCAL",
+        "distinguishedname": "CN=11C39BED-4BEE-45F5-B195-8DA0E05B573A,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "13470053-A907-4A9C-AF84-93E53423A9D7",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "4664E973-CB20-4DEF-B3D5-559D6FE123E0@ESC1.LOCAL",
+        "distinguishedname": "CN=4664E973-CB20-4DEF-B3D5-559D6FE123E0,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "4C0122C6-0AFC-46D6-B7F8-94A783FBDEA6",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "2972D92D-A07A-44AC-9CB0-BF243356F345@ESC1.LOCAL",
+        "distinguishedname": "CN=2972D92D-A07A-44AC-9CB0-BF243356F345,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "D4633A16-AA86-48B7-8247-4D91A3A3BE56",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "8F86B825-C322-4101-ADC4-579F12D445DB@ESC1.LOCAL",
+        "distinguishedname": "CN=8F86B825-C322-4101-ADC4-579F12D445DB,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "C6ED17AD-5B88-47B1-93C7-1A35675AF24B",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "77283E65-CE02-4DC3-8C1E-BF99B22527C2@ESC1.LOCAL",
+        "distinguishedname": "CN=77283E65-CE02-4DC3-8C1E-BF99B22527C2,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "0D68926B-4445-4472-87C7-48A3F185967E",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "0AFB7F53-96BD-404B-A659-89E65C269420@ESC1.LOCAL",
+        "distinguishedname": "CN=0AFB7F53-96BD-404B-A659-89E65C269420,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "5A47A099-AF6A-40BE-8C5A-797AC5B92608",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "C7F717EF-FDBE-4B4B-8DFC-FA8B839FBCFA@ESC1.LOCAL",
+        "distinguishedname": "CN=C7F717EF-FDBE-4B4B-8DFC-FA8B839FBCFA,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "8B19917E-39E0-4FA4-AF83-B7175A9F8AD0",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "EF010A1E-BD88-48C8-A7AF-2AFFD250D77D@ESC1.LOCAL",
+        "distinguishedname": "CN=EF010A1E-BD88-48C8-A7AF-2AFFD250D77D,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "6AC0ED7F-2DFF-4982-9894-7B5BCEB20CCE",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "73A9515B-511C-44D2-822B-444A33D3BD33@ESC1.LOCAL",
+        "distinguishedname": "CN=73A9515B-511C-44D2-822B-444A33D3BD33,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "5B765434-D1D6-4674-8E38-C2CE49913ED4",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "E0C60003-2ED7-4FD3-8659-7655A7E79397@ESC1.LOCAL",
+        "distinguishedname": "CN=E0C60003-2ED7-4FD3-8659-7655A7E79397,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "D74B80EB-A337-4008-9DAE-2616A38820B7",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "ED0C8CCA-80AB-4B6B-AC5A-59B1D317E11F@ESC1.LOCAL",
+        "distinguishedname": "CN=ED0C8CCA-80AB-4B6B-AC5A-59B1D317E11F,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "2AF66AAC-9BBB-467C-9A44-25C426327686",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "B6A6C19A-AFC9-476B-8994-61F5B14B3F05@ESC1.LOCAL",
+        "distinguishedname": "CN=B6A6C19A-AFC9-476B-8994-61F5B14B3F05,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "ECE7124B-649B-4315-9519-2ABE2CB05C0D",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "DEFC28CD-6CB6-4479-8BCB-AABFB41E9713@ESC1.LOCAL",
+        "distinguishedname": "CN=DEFC28CD-6CB6-4479-8BCB-AABFB41E9713,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "CD1F7004-A1D0-4C78-A85B-63AFB7EB9E11",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "D6BD96D4-E66B-4A38-9C6B-E976FF58C56D@ESC1.LOCAL",
+        "distinguishedname": "CN=D6BD96D4-E66B-4A38-9C6B-E976FF58C56D,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "70D5DE48-65FC-4A1F-B66C-C6AB454FF252",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "BB8EFC40-3090-4FA2-8A3F-7CD1D380E695@ESC1.LOCAL",
+        "distinguishedname": "CN=BB8EFC40-3090-4FA2-8A3F-7CD1D380E695,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "DEB724AD-2CA2-4B71-A32B-1A258BF06E08",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "2D6ABE1B-4326-489E-920C-76D5337D2DC5@ESC1.LOCAL",
+        "distinguishedname": "CN=2D6ABE1B-4326-489E-920C-76D5337D2DC5,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "C62216B1-00CD-4DE7-BFC4-B75DA6770672",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "6B13DFB5-CECC-4FB8-B28D-0505CEA24175@ESC1.LOCAL",
+        "distinguishedname": "CN=6B13DFB5-CECC-4FB8-B28D-0505CEA24175,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "33BB5171-9E19-4F76-BA9F-C852A8F1B87D",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "92E73422-C68B-46C9-B0D5-B55F9C741410@ESC1.LOCAL",
+        "distinguishedname": "CN=92E73422-C68B-46C9-B0D5-B55F9C741410,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "1ECE7756-F8ED-433A-B106-6543FDFB26F6",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "992FE1D0-6591-4F24-A163-C820FCB7F308@ESC1.LOCAL",
+        "distinguishedname": "CN=992FE1D0-6591-4F24-A163-C820FCB7F308,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "4186B97E-3237-471C-A411-74B5194F1CA2",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "EDE85F96-7061-47BF-B11B-0C0D999595B5@ESC1.LOCAL",
+        "distinguishedname": "CN=EDE85F96-7061-47BF-B11B-0C0D999595B5,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "02FD8728-4068-4A50-BB2A-51109D8CE9A7",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "EE0F3271-EB51-414A-BDAC-8F9BA6397A39@ESC1.LOCAL",
+        "distinguishedname": "CN=EE0F3271-EB51-414A-BDAC-8F9BA6397A39,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "EBFE4B25-249E-495B-8C3F-3F708169E6BD",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "587D52E0-507E-440E-9D67-E6129F33BB68@ESC1.LOCAL",
+        "distinguishedname": "CN=587D52E0-507E-440E-9D67-E6129F33BB68,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "82FC5B26-285F-4F35-B063-010233CCA1BF",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "CE24F0F6-237E-43D6-AC04-1E918AB04AAC@ESC1.LOCAL",
+        "distinguishedname": "CN=CE24F0F6-237E-43D6-AC04-1E918AB04AAC,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "69D18F55-C47A-4222-840A-C7EB8E988D33",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "7F77D431-DD6A-434F-AE4D-CE82928E498F@ESC1.LOCAL",
+        "distinguishedname": "CN=7F77D431-DD6A-434F-AE4D-CE82928E498F,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "C710B8C2-9910-4C02-93CA-DB5FA6A69B2B",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "BA14E1F6-7CD1-4739-804F-57D0EA74EDF4@ESC1.LOCAL",
+        "distinguishedname": "CN=BA14E1F6-7CD1-4739-804F-57D0EA74EDF4,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "0B926085-0CB9-458C-B293-CE124A97506D",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "156FFA2A-E07C-46FB-A5C4-FBD84A4E5CCE@ESC1.LOCAL",
+        "distinguishedname": "CN=156FFA2A-E07C-46FB-A5C4-FBD84A4E5CCE,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "0AA73C7F-9F03-4896-825A-E2BEB58DD534",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "C0AD80B4-8E84-4CC4-9163-2F84649BCC42@ESC1.LOCAL",
+        "distinguishedname": "CN=C0AD80B4-8E84-4CC4-9163-2F84649BCC42,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "94750DC1-31FE-4F14-AD87-FFEB34417B3A",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "7771D7DD-2231-4470-AA74-84A6F56FC3B6@ESC1.LOCAL",
+        "distinguishedname": "CN=7771D7DD-2231-4470-AA74-84A6F56FC3B6,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "D657A3E5-9558-47F6-A878-20B405BDD841",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "49B2AE86-839A-4EA0-81FE-9171C1B98E83@ESC1.LOCAL",
+        "distinguishedname": "CN=49B2AE86-839A-4EA0-81FE-9171C1B98E83,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "A214D33A-6328-4110-AB2D-536CC9625689",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "1B1DE989-57EC-4E96-B933-8279A8119DA4@ESC1.LOCAL",
+        "distinguishedname": "CN=1B1DE989-57EC-4E96-B933-8279A8119DA4,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "E3671927-7A0F-4DD3-A679-EB0AED2083F1",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "281C63F0-2C9A-4CCE-9256-A238C23C0DB9@ESC1.LOCAL",
+        "distinguishedname": "CN=281C63F0-2C9A-4CCE-9256-A238C23C0DB9,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "D3B08B2E-73A7-4D0C-8619-F19B8F042558",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "4C47881A-F15A-4F6C-9F49-2742F7A11F4B@ESC1.LOCAL",
+        "distinguishedname": "CN=4C47881A-F15A-4F6C-9F49-2742F7A11F4B,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "D3BFB346-06BE-4BEE-BA4A-54103BA5542B",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "2AEA2DC6-D1D3-4F0C-9994-66C1DA21DE0F@ESC1.LOCAL",
+        "distinguishedname": "CN=2AEA2DC6-D1D3-4F0C-9994-66C1DA21DE0F,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "BDC5B655-A837-4B99-B1ED-37F8FFA4FD93",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "AE78240C-43B9-499E-AE65-2B6E0F0E202A@ESC1.LOCAL",
+        "distinguishedname": "CN=AE78240C-43B9-499E-AE65-2B6E0F0E202A,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "D219109F-705A-4F60-B29C-108ADA88B78D",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "261B5BBA-3438-4D5C-A3E9-7B871E5F57F0@ESC1.LOCAL",
+        "distinguishedname": "CN=261B5BBA-3438-4D5C-A3E9-7B871E5F57F0,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "B60FC6F1-8BFD-43EB-8982-6340E980BADC",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "3FB79C05-8EA1-438C-8C7A-81F213AA61C2@ESC1.LOCAL",
+        "distinguishedname": "CN=3FB79C05-8EA1-438C-8C7A-81F213AA61C2,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "FD8A49AD-F444-44DE-AEA1-717940087539",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "0B2BE39A-D463-4C23-8290-32186759D3B1@ESC1.LOCAL",
+        "distinguishedname": "CN=0B2BE39A-D463-4C23-8290-32186759D3B1,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "A306DEDC-2AE7-47E4-B4B1-D2C1A03BDDE7",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "F0842B44-BC03-46A1-A860-006E8527FCCD@ESC1.LOCAL",
+        "distinguishedname": "CN=F0842B44-BC03-46A1-A860-006E8527FCCD,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "CA6623D4-B909-4745-8BF1-CC02A9817AC7",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "93EFEC15-4DD9-4850-BC86-A1F2C8E2EBB9@ESC1.LOCAL",
+        "distinguishedname": "CN=93EFEC15-4DD9-4850-BC86-A1F2C8E2EBB9,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "5DC00500-1DEB-480D-AA3E-A4CC53722959",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "9E108D96-672F-40F0-B6BD-69EE1F0B7AC4@ESC1.LOCAL",
+        "distinguishedname": "CN=9E108D96-672F-40F0-B6BD-69EE1F0B7AC4,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "696B9230-B952-45D4-8200-845327AC0C85",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "1E269508-F862-4C4A-B01F-420D26C4FF8C@ESC1.LOCAL",
+        "distinguishedname": "CN=1E269508-F862-4C4A-B01F-420D26C4FF8C,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "7B5D46EF-7B02-4BD4-B990-2F10FF5BE3F9",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "E1AB17ED-5EFB-4691-AD2D-0424592C5755@ESC1.LOCAL",
+        "distinguishedname": "CN=E1AB17ED-5EFB-4691-AD2D-0424592C5755,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "DA6A9588-C0F7-4049-8BF3-0D6C613680B5",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "0E848BD4-7C70-48F2-B8FC-00FBAA82E360@ESC1.LOCAL",
+        "distinguishedname": "CN=0E848BD4-7C70-48F2-B8FC-00FBAA82E360,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "CE44F33A-C45D-4735-85D8-F7A4DE0A1E2A",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "016F23F7-077D-41FA-A356-DE7CFDB01797@ESC1.LOCAL",
+        "distinguishedname": "CN=016F23F7-077D-41FA-A356-DE7CFDB01797,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "3C131F8B-589D-48FE-9B6B-1542765EB2A5",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "49C140DB-2DE3-44C2-A99A-BAB2E6D2BA81@ESC1.LOCAL",
+        "distinguishedname": "CN=49C140DB-2DE3-44C2-A99A-BAB2E6D2BA81,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "9EF32026-D159-474C-A691-D573AA94FE12",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "B83818C1-01A6-4F39-91B7-A3BB581C3AE3@ESC1.LOCAL",
+        "distinguishedname": "CN=B83818C1-01A6-4F39-91B7-A3BB581C3AE3,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "AC6C61F3-99DA-4C0F-9F18-CBF2E31FFF64",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "BBBB9DB0-4009-4368-8C40-6674E980D3C3@ESC1.LOCAL",
+        "distinguishedname": "CN=BBBB9DB0-4009-4368-8C40-6674E980D3C3,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "238D717C-1BFD-4458-979C-647E01B386D6",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "F754861C-3692-4A7B-B2C2-D0FA28ED0B0B@ESC1.LOCAL",
+        "distinguishedname": "CN=F754861C-3692-4A7B-B2C2-D0FA28ED0B0B,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "7BA43246-BD99-403D-A7A5-576BA3306494",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "D32F499F-3026-4AF0-A5BD-13FE5A331BD2@ESC1.LOCAL",
+        "distinguishedname": "CN=D32F499F-3026-4AF0-A5BD-13FE5A331BD2,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "8EF80F6D-2067-4073-BCD7-98257276C376",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "38618886-98EE-4E42-8CF1-D9A2CD9EDF8B@ESC1.LOCAL",
+        "distinguishedname": "CN=38618886-98EE-4E42-8CF1-D9A2CD9EDF8B,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "4F366676-B386-492F-8B65-D69823DEE70F",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "328092FB-16E7-4453-9AB8-7592DB56E9C4@ESC1.LOCAL",
+        "distinguishedname": "CN=328092FB-16E7-4453-9AB8-7592DB56E9C4,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "4619EDBF-9704-49AA-BBA4-933A4DD2701B",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "3A1C887F-DF0A-489F-B3F2-2D0409095F6E@ESC1.LOCAL",
+        "distinguishedname": "CN=3A1C887F-DF0A-489F-B3F2-2D0409095F6E,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "F41BF43F-645D-4894-B943-580BC6085A22",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "232E831F-F988-4444-8E3E-8A352E2FD411@ESC1.LOCAL",
+        "distinguishedname": "CN=232E831F-F988-4444-8E3E-8A352E2FD411,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "68C01C1D-4A47-4F97-9566-5EC39E6DF223",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "DDDDCF0C-BEC9-4A5A-AE86-3CFE6CC6E110@ESC1.LOCAL",
+        "distinguishedname": "CN=DDDDCF0C-BEC9-4A5A-AE86-3CFE6CC6E110,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "198E1A78-147A-4C5C-9BE9-633203335C2B",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "A0A45AAC-5550-42DF-BB6A-3CC5C46B52F2@ESC1.LOCAL",
+        "distinguishedname": "CN=A0A45AAC-5550-42DF-BB6A-3CC5C46B52F2,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "35011040-7104-40BE-9665-75409573C4FE",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "3E7645F3-3EA5-4567-B35A-87630449C70C@ESC1.LOCAL",
+        "distinguishedname": "CN=3E7645F3-3EA5-4567-B35A-87630449C70C,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "010820D6-FBF0-472C-A66A-2BB994245FB6",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "E634067B-E2C4-4D79-B6E8-73C619324D5E@ESC1.LOCAL",
+        "distinguishedname": "CN=E634067B-E2C4-4D79-B6E8-73C619324D5E,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "271208D6-D822-4F9F-9B9E-3C4F6E7C6AB6",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "WINDOWS2003UPDATE@ESC1.LOCAL",
+        "distinguishedname": "CN=WINDOWS2003UPDATE,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "93FD5488-01CA-4970-8967-3A89524B72BC",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "9A591D9E-0883-42F8-9928-DF0A84176EE3",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "ACTIVEDIRECTORYUPDATE@ESC1.LOCAL",
+        "distinguishedname": "CN=ACTIVEDIRECTORYUPDATE,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "6A776205-7090-4E42-A2BE-B3D4D56858C0",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "9A591D9E-0883-42F8-9928-DF0A84176EE3",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "ACTIVEDIRECTORYRODCUPDATE@ESC1.LOCAL",
+        "distinguishedname": "CN=ACTIVEDIRECTORYRODCUPDATE,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "800CCDCC-58CF-4D04-BE46-4755249ADDD9",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "9A591D9E-0883-42F8-9928-DF0A84176EE3",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "ESC1-DC@ESC1.LOCAL",
+        "distinguishedname": "CN=ESC1-DC,CN=CDP,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-517",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "CCAC146A-7B08-4303-A69C-1EBC4F63D14C",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "25D383A5-6387-47AE-8577-7A1609472846",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "6EB8EAF9-3403-4BA5-8B4B-CE349A4680AD@ESC1.LOCAL",
+        "distinguishedname": "CN=6EB8EAF9-3403-4BA5-8B4B-CE349A4680AD,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "AB0D196A-0220-425E-821C-10A8D40B1F1C",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "EDA27B47-E610-11D6-9793-00C04F613221@ESC1.LOCAL",
+        "distinguishedname": "CN=EDA27B47-E610-11D6-9793-00C04F613221,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "4A608AC3-F29B-4327-AD73-72BE15D0BDC5",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "9D17B863-18C3-497D-9BDE-45DDB95FCB65@ESC1.LOCAL",
+        "distinguishedname": "CN=9D17B863-18C3-497D-9BDE-45DDB95FCB65,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "B95CC670-5FE2-4208-8710-914FF42FB201",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "ABD97102-88DD-4013-A009-0E2C2F967FF6@ESC1.LOCAL",
+        "distinguishedname": "CN=ABD97102-88DD-4013-A009-0E2C2F967FF6,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "B5E2129E-5931-47A1-B1B7-FA4E6C23C989",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "09A49CB3-6C54-4B83-AB20-8370838BA149@ESC1.LOCAL",
+        "distinguishedname": "CN=09A49CB3-6C54-4B83-AB20-8370838BA149,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "DC38CDB6-A42C-4DC8-BEDB-142BB74C3898",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "00232167-F3A4-43C6-B503-9ACB7A81B01C@ESC1.LOCAL",
+        "distinguishedname": "CN=00232167-F3A4-43C6-B503-9ACB7A81B01C,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "F248E3EB-EBF7-43ED-AEA1-9FA73854D869",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "782370CE-3D38-438D-8B0C-464220A3039D@ESC1.LOCAL",
+        "distinguishedname": "CN=782370CE-3D38-438D-8B0C-464220A3039D,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "EEE30E43-4670-4C5B-8465-0E23FF450C47",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "F814097B-3E3D-49BA-8A3A-092C25085F06@ESC1.LOCAL",
+        "distinguishedname": "CN=F814097B-3E3D-49BA-8A3A-092C25085F06,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "49E80667-0CFD-42A8-A92A-FFAD2D9F8093",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "CONFIGURATION@ESC1.LOCAL",
+        "distinguishedname": "CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "AB1E2DDD-D79C-4E0E-B25F-A8C9D79F180C",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266",
+        "ObjectType": "Domain"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "6B800A81-AFFE-4A15-8E41-6EA0C7AA89E4@ESC1.LOCAL",
+        "distinguishedname": "CN=6B800A81-AFFE-4A15-8E41-6EA0C7AA89E4,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "7C4A1FF7-C542-4E8D-AB79-3B77B138C4A8",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "POLICYTEMPLATE@ESC1.LOCAL",
+        "distinguishedname": "CN=POLICYTEMPLATE,CN=WMIPOLICY,CN=SYSTEM,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "EDE88AA3-003B-4493-84F4-8168F42D05C1",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "A9BC3C87-81FB-474A-AE99-FF9A72129795",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "WMIPOLICY@ESC1.LOCAL",
+        "distinguishedname": "CN=WMIPOLICY,CN=SYSTEM,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "A9BC3C87-81FB-474A-AE99-FF9A72129795",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": {
+        "ObjectIdentifier": "06DFC885-9516-4384-9A79-B3748932022D",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "GROUP KEY DISTRIBUTION SERVICE@ESC1.LOCAL",
+        "distinguishedname": "CN=GROUP KEY DISTRIBUTION SERVICE,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "D070702A-ED7B-448D-94BC-7804FF55A57F",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "778E7398-3790-4053-8B08-0D480C5FB730",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "AUTHN POLICY CONFIGURATION@ESC1.LOCAL",
+        "distinguishedname": "CN=AUTHN POLICY CONFIGURATION,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "008C5A55-B984-4837-9EB7-46E1A5C59958",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "778E7398-3790-4053-8B08-0D480C5FB730",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "407@ESC1.LOCAL",
+        "distinguishedname": "CN=407,CN=DISPLAYSPECIFIERS,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "1BAFC37D-34A5-4D8D-A6F4-BCE1BF83BD4F",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "64FA4E1B-4E4F-4029-9CC7-7F5C17153B4D",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "408@ESC1.LOCAL",
+        "distinguishedname": "CN=408,CN=DISPLAYSPECIFIERS,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "333DD0EC-25F9-4EF4-9BD4-BC8EED1AB3D1",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "64FA4E1B-4E4F-4029-9CC7-7F5C17153B4D",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "C0A@ESC1.LOCAL",
+        "distinguishedname": "CN=C0A,CN=DISPLAYSPECIFIERS,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "B34427B7-2C34-4457-825B-A4460605B32E",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "64FA4E1B-4E4F-4029-9CC7-7F5C17153B4D",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "40B@ESC1.LOCAL",
+        "distinguishedname": "CN=40B,CN=DISPLAYSPECIFIERS,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "BA3898F9-659D-4A5F-AF3D-544E78C97050",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "64FA4E1B-4E4F-4029-9CC7-7F5C17153B4D",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "40C@ESC1.LOCAL",
+        "distinguishedname": "CN=40C,CN=DISPLAYSPECIFIERS,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "BF099842-018D-49D7-9A55-45922F1F59DC",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "64FA4E1B-4E4F-4029-9CC7-7F5C17153B4D",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "40E@ESC1.LOCAL",
+        "distinguishedname": "CN=40E,CN=DISPLAYSPECIFIERS,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "BD583409-0F45-45FE-A6B3-9D9DF6669917",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "64FA4E1B-4E4F-4029-9CC7-7F5C17153B4D",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "410@ESC1.LOCAL",
+        "distinguishedname": "CN=410,CN=DISPLAYSPECIFIERS,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "699A435F-6904-41FF-9A4F-717F10314F4E",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "64FA4E1B-4E4F-4029-9CC7-7F5C17153B4D",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "411@ESC1.LOCAL",
+        "distinguishedname": "CN=411,CN=DISPLAYSPECIFIERS,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "BAF53F85-5EB6-4E43-AC41-D4282F6A6374",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "64FA4E1B-4E4F-4029-9CC7-7F5C17153B4D",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "DISPLAYSPECIFIERS@ESC1.LOCAL",
+        "distinguishedname": "CN=DISPLAYSPECIFIERS,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "64FA4E1B-4E4F-4029-9CC7-7F5C17153B4D",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "AB1E2DDD-D79C-4E0E-B25F-A8C9D79F180C",
+        "ObjectType": "Configuration"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "SERVICES@ESC1.LOCAL",
+        "distinguishedname": "CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "778E7398-3790-4053-8B08-0D480C5FB730",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "AB1E2DDD-D79C-4E0E-B25F-A8C9D79F180C",
+        "ObjectType": "Configuration"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "QUERY-POLICIES@ESC1.LOCAL",
+        "distinguishedname": "CN=QUERY-POLICIES,CN=DIRECTORY SERVICE,CN=WINDOWS NT,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "0D823D39-C026-4A31-A745-90190993B121",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "04712730-C2BE-4B39-9634-D65B2614415C",
+        "ObjectType": "Base"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "OPTIONAL FEATURES@ESC1.LOCAL",
+        "distinguishedname": "CN=OPTIONAL FEATURES,CN=DIRECTORY SERVICE,CN=WINDOWS NT,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "CC11ECD0-8B76-4681-92B6-E4891EC57216",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "04712730-C2BE-4B39-9634-D65B2614415C",
+        "ObjectType": "Base"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "E9EE8D55-C2FB-4723-A333-C80FF4DFBF45@ESC1.LOCAL",
+        "distinguishedname": "CN=E9EE8D55-C2FB-4723-A333-C80FF4DFBF45,CN=OPERATIONS,CN=FORESTUPDATES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false
+      },
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "E3DAD1FE-69BA-42C0-AB86-A1BBDA3A5116",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "C12475D9-3542-4BBD-ADCD-C56992F5458C",
+        "ObjectType": "Container"
+      }
+    }
+  ],
+  "meta": {
+    "methods": 521215,
+    "type": "containers",
+    "count": 207,
+    "version": 6
+  }
+}
diff --git a/cmd/api/src/test/fixtures/fixtures/v6/all/domains.json b/cmd/api/src/test/fixtures/fixtures/v6/all/domains.json
new file mode 100644
index 0000000000..0454f7a4fa
--- /dev/null
+++ b/cmd/api/src/test/fixtures/fixtures/v6/all/domains.json
@@ -0,0 +1,152 @@
+{
+  "data": [
+    {
+      "GPOChanges": {
+        "LocalAdmins": [],
+        "RemoteDesktopUsers": [],
+        "DcomUsers": [],
+        "PSRemoteUsers": [],
+        "AffectedComputers": []
+      },
+      "Properties": { "collected": true },
+      "ChildObjects": [],
+      "Trusts": [],
+      "Links": [],
+      "Aces": [],
+      "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": null
+    },
+    {
+      "GPOChanges": {
+        "LocalAdmins": [],
+        "RemoteDesktopUsers": [],
+        "DcomUsers": [],
+        "PSRemoteUsers": [],
+        "AffectedComputers": [
+          {
+            "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-1000",
+            "ObjectType": "Computer"
+          },
+          {
+            "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-1103",
+            "ObjectType": "Computer"
+          }
+        ]
+      },
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "ESC1.LOCAL",
+        "distinguishedname": "DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": true,
+        "description": null,
+        "whencreated": 1664419044,
+        "functionallevel": "2016"
+      },
+      "ChildObjects": [],
+      "Trusts": [],
+      "Links": [
+        { "IsEnforced": false, "GUID": "C8C7B7E0-C0F7-4FAC-8CCB-4B7C1CD03996" }
+      ],
+      "Aces": [
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "AllExtendedRights",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "AllExtendedRights",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-9",
+          "PrincipalType": "Group",
+          "RightName": "GetChanges",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-9",
+          "PrincipalType": "Group",
+          "RightName": "GetChangesInFilteredSet",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GetChangesAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GetChanges",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GetChangesInFilteredSet",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-498",
+          "PrincipalType": "Group",
+          "RightName": "GetChanges",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-516",
+          "PrincipalType": "Group",
+          "RightName": "GetChangesAll",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": null
+    }
+  ],
+  "meta": { "methods": 521215, "type": "domains", "count": 2, "version": 6 }
+}
diff --git a/cmd/api/src/test/fixtures/fixtures/v6/all/enterprisecas.json b/cmd/api/src/test/fixtures/fixtures/v6/all/enterprisecas.json
new file mode 100644
index 0000000000..916ae388f2
--- /dev/null
+++ b/cmd/api/src/test/fixtures/fixtures/v6/all/enterprisecas.json
@@ -0,0 +1,348 @@
+{
+  "data": [
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "ESC1-ESC1-DC-CA@ESC1.LOCAL",
+        "distinguishedname": "CN=ESC1-ESC1-DC-CA,CN=ENROLLMENT SERVICES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "description": null,
+        "whencreated": 1664426237,
+        "flags": "SUPPORTS_NT_AUTHENTICATION, CA_SERVERTYPE_ADVANCED",
+        "caname": "ESC1-ESC1-DC-CA",
+        "dnshostname": "ESC1-DC.ESC1.LOCAL",
+        "certthumbprint": "5F0143662A7EA16E8DB90E44D0F1F1FC87B1E703",
+        "certname": "5F0143662A7EA16E8DB90E44D0F1F1FC87B1E703",
+        "certchain": ["5F0143662A7EA16E8DB90E44D0F1F1FC87B1E703"],
+        "hasbasicconstraints": false,
+        "basicconstraintpathlength": 0,
+        "casecuritycollected": true,
+        "enrollmentagentrestrictionscollected": true,
+        "isuserspecifiessanenabledcollected": true
+      },
+      "HostingComputer": "S-1-5-21-909015691-3030120388-2582151266-1000",
+      "CARegistryData": {
+        "CASecurity": {
+          "Data": [
+            {
+              "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+              "PrincipalType": "Group",
+              "RightName": "Owns",
+              "IsInherited": false
+            },
+            {
+              "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+              "PrincipalType": "Group",
+              "RightName": "ManageCA",
+              "IsInherited": false
+            },
+            {
+              "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+              "PrincipalType": "Group",
+              "RightName": "ManageCertificates",
+              "IsInherited": false
+            },
+            {
+              "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+              "PrincipalType": "Group",
+              "RightName": "ManageCA",
+              "IsInherited": false
+            },
+            {
+              "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+              "PrincipalType": "Group",
+              "RightName": "ManageCertificates",
+              "IsInherited": false
+            },
+            {
+              "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+              "PrincipalType": "Group",
+              "RightName": "ManageCA",
+              "IsInherited": false
+            },
+            {
+              "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+              "PrincipalType": "Group",
+              "RightName": "ManageCertificates",
+              "IsInherited": false
+            },
+            {
+              "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-1105",
+              "PrincipalType": "User",
+              "RightName": "Enroll",
+              "IsInherited": false
+            },
+            {
+              "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-1108",
+              "PrincipalType": "Group",
+              "RightName": "Enroll",
+              "IsInherited": false
+            },
+            {
+              "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-1111",
+              "PrincipalType": "User",
+              "RightName": "Enroll",
+              "IsInherited": false
+            },
+            {
+              "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-1113",
+              "PrincipalType": "User",
+              "RightName": "Enroll",
+              "IsInherited": false
+            }
+          ],
+          "Collected": true,
+          "FailureReason": null
+        },
+        "EnrollmentAgentRestrictions": {
+          "Restrictions": [
+            {
+              "AccessType": "AccessDeniedCallback",
+              "Agent": {
+                "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-513",
+                "ObjectType": "Group"
+              },
+              "Targets": [
+                {
+                  "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-513",
+                  "ObjectType": "Group"
+                }
+              ],
+              "Template": {
+                "ObjectIdentifier": "DEBC8BEB-40AF-48B5-940F-AAFAFE961B26",
+                "ObjectType": "CertTemplate"
+              },
+              "AllTemplates": false
+            },
+            {
+              "AccessType": "AccessAllowedCallback",
+              "Agent": {
+                "ObjectIdentifier": "ESC1.LOCAL-S-1-1-0",
+                "ObjectType": "Group"
+              },
+              "Targets": [
+                {
+                  "ObjectIdentifier": "ESC1.LOCAL-S-1-1-0",
+                  "ObjectType": "Group"
+                }
+              ],
+              "Template": null,
+              "AllTemplates": true
+            },
+            {
+              "AccessType": "AccessAllowedCallback",
+              "Agent": {
+                "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-513",
+                "ObjectType": "Group"
+              },
+              "Targets": [
+                {
+                  "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-513",
+                  "ObjectType": "Group"
+                }
+              ],
+              "Template": null,
+              "AllTemplates": true
+            },
+            {
+              "AccessType": "AccessAllowedCallback",
+              "Agent": {
+                "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-513",
+                "ObjectType": "Group"
+              },
+              "Targets": [
+                {
+                  "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-513",
+                  "ObjectType": "Group"
+                },
+                {
+                  "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-513",
+                  "ObjectType": "Group"
+                }
+              ],
+              "Template": {
+                "ObjectIdentifier": "DEBC8BEB-40AF-48B5-940F-AAFAFE961B26",
+                "ObjectType": "CertTemplate"
+              },
+              "AllTemplates": false
+            }
+          ],
+          "Collected": true,
+          "FailureReason": null
+        },
+        "IsUserSpecifiesSanEnabled": {
+          "Value": false,
+          "Collected": true,
+          "FailureReason": null
+        }
+      },
+      "EnabledCertTemplates": [
+        {
+          "ObjectIdentifier": "DEBC8BEB-40AF-48B5-940F-AAFAFE961B26",
+          "ObjectType": "CertTemplate"
+        },
+        {
+          "ObjectIdentifier": "55BCF264-BBB0-4D50-ACC0-69235586DFC9",
+          "ObjectType": "CertTemplate"
+        },
+        {
+          "ObjectIdentifier": "75957C42-9FFB-4D75-A297-7CDB8B11D74F",
+          "ObjectType": "CertTemplate"
+        },
+        {
+          "ObjectIdentifier": "64AC5BD1-1DE3-46D4-9796-5C9D98E4B0F7",
+          "ObjectType": "CertTemplate"
+        },
+        {
+          "ObjectIdentifier": "E249A350-93EA-4290-9E28-CFC9A5718C86",
+          "ObjectType": "CertTemplate"
+        },
+        {
+          "ObjectIdentifier": "EDB16956-50D9-4E16-B448-441EFC1D1FB8",
+          "ObjectType": "CertTemplate"
+        },
+        {
+          "ObjectIdentifier": "63FB126D-499F-48DA-A707-A134B92764BD",
+          "ObjectType": "CertTemplate"
+        },
+        {
+          "ObjectIdentifier": "621424AD-1DD5-487C-B38D-12D094A38153",
+          "ObjectType": "CertTemplate"
+        },
+        {
+          "ObjectIdentifier": "C6DC9FD9-2A52-4064-9D8E-ED9BBA52FD51",
+          "ObjectType": "CertTemplate"
+        },
+        {
+          "ObjectIdentifier": "72F15D5F-C7B4-4FD9-ADCE-302F0D3DC91A",
+          "ObjectType": "CertTemplate"
+        },
+        {
+          "ObjectIdentifier": "441D7EAE-CF79-4B97-83A2-B770C231E4DA",
+          "ObjectType": "CertTemplate"
+        },
+        {
+          "ObjectIdentifier": "251BB763-E8FE-4B7A-9E61-1EDE247847E1",
+          "ObjectType": "CertTemplate"
+        }
+      ],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "ManageCA",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "ManageCertificates",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-1000",
+          "PrincipalType": "Computer",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-1000",
+          "PrincipalType": "Computer",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-1000",
+          "PrincipalType": "Computer",
+          "RightName": "ManageCA",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-1000",
+          "PrincipalType": "Computer",
+          "RightName": "ManageCertificates",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-1105",
+          "PrincipalType": "User",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-1108",
+          "PrincipalType": "Group",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-1111",
+          "PrincipalType": "User",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-1113",
+          "PrincipalType": "User",
+          "RightName": "Enroll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "ManageCA",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "14CEE53E-4D95-4DDD-A244-BF15C73DC06A",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "22F8BB5D-B81E-4856-96A9-A6448386EB23",
+        "ObjectType": "Container"
+      }
+    }
+  ],
+  "meta": {
+    "methods": 521215,
+    "type": "enterprisecas",
+    "count": 1,
+    "version": 6
+  }
+}
diff --git a/cmd/api/src/test/fixtures/fixtures/v6/all/gpos.json b/cmd/api/src/test/fixtures/fixtures/v6/all/gpos.json
new file mode 100644
index 0000000000..b2c5264903
--- /dev/null
+++ b/cmd/api/src/test/fixtures/fixtures/v6/all/gpos.json
@@ -0,0 +1,161 @@
+{
+  "data": [
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "DEFAULT DOMAIN CONTROLLERS POLICY@ESC1.LOCAL",
+        "distinguishedname": "CN={6AC1786C-016F-11D2-945F-00C04FB984F9},CN=POLICIES,CN=SYSTEM,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "description": null,
+        "whencreated": 1664419050,
+        "gpcpath": "\\\\ESC1.LOCAL\\SYSVOL\\ESC1.LOCAL\\POLICIES\\{6AC1786C-016F-11D2-945F-00C04FB984F9}"
+      },
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "1A8AA814-033D-45F2-96C2-3D2A1363F078",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": null
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "DEFAULT DOMAIN POLICY@ESC1.LOCAL",
+        "distinguishedname": "CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=POLICIES,CN=SYSTEM,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "description": null,
+        "whencreated": 1664419050,
+        "gpcpath": "\\\\ESC1.LOCAL\\SYSVOL\\ESC1.LOCAL\\POLICIES\\{31B2F340-016D-11D2-945F-00C04FB984F9}"
+      },
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "C8C7B7E0-C0F7-4FAC-8CCB-4B7C1CD03996",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": null
+    }
+  ],
+  "meta": { "methods": 521215, "type": "gpos", "count": 2, "version": 6 }
+}
diff --git a/cmd/api/src/test/fixtures/fixtures/v6/all/groups.json b/cmd/api/src/test/fixtures/fixtures/v6/all/groups.json
new file mode 100644
index 0000000000..4dd6daf91c
--- /dev/null
+++ b/cmd/api/src/test/fixtures/fixtures/v6/all/groups.json
@@ -0,0 +1,4097 @@
+{
+  "data": [
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "INCOMING FOREST TRUST BUILDERS@ESC1.LOCAL",
+        "distinguishedname": "CN=INCOMING FOREST TRUST BUILDERS,CN=BUILTIN,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "Incoming Forest Trust Builders",
+        "description": "Members of this group can create incoming, one-way trusts to this forest",
+        "whencreated": 1664419087,
+        "admincount": false
+      },
+      "Members": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-548",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-557",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": { "ObjectIdentifier": "S-1-5-32", "ObjectType": "Base" }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "CERT PUBLISHERS@ESC1.LOCAL",
+        "distinguishedname": "CN=CERT PUBLISHERS,CN=USERS,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "Cert Publishers",
+        "description": "Members of this group are permitted to publish certificates to the directory",
+        "whencreated": 1664419087,
+        "admincount": false
+      },
+      "Members": [
+        {
+          "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-1000",
+          "ObjectType": "Computer"
+        }
+      ],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-548",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-517",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "B328621C-8721-4ED4-8BF1-0A0EEEB93BA3",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "PRE-WINDOWS 2000 COMPATIBLE ACCESS@ESC1.LOCAL",
+        "distinguishedname": "CN=PRE-WINDOWS 2000 COMPATIBLE ACCESS,CN=BUILTIN,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "Pre-Windows 2000 Compatible Access",
+        "description": "A backward compatibility group which allows read access on all users and groups in the domain",
+        "whencreated": 1664419087,
+        "admincount": false
+      },
+      "Members": [
+        {
+          "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-1000",
+          "ObjectType": "Computer"
+        },
+        { "ObjectIdentifier": "ESC1.LOCAL-S-1-5-11", "ObjectType": "Group" }
+      ],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-548",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-554",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": { "ObjectIdentifier": "S-1-5-32", "ObjectType": "Base" }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "DNSADMINS@ESC1.LOCAL",
+        "distinguishedname": "CN=DNSADMINS,CN=USERS,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "DnsAdmins",
+        "description": "DNS Administrators Group",
+        "whencreated": 1664419130,
+        "admincount": false
+      },
+      "Members": [],
+      "Aces": [
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-548",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-1101",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "B328621C-8721-4ED4-8BF1-0A0EEEB93BA3",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "DOMAIN COMPUTERS@ESC1.LOCAL",
+        "distinguishedname": "CN=DOMAIN COMPUTERS,CN=USERS,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "Domain Computers",
+        "description": "All workstations and servers joined to the domain",
+        "whencreated": 1664419087,
+        "admincount": false
+      },
+      "Members": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-548",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-515",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "B328621C-8721-4ED4-8BF1-0A0EEEB93BA3",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "DOMAIN CONTROLLERS@ESC1.LOCAL",
+        "distinguishedname": "CN=DOMAIN CONTROLLERS,CN=USERS,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": true,
+        "samaccountname": "Domain Controllers",
+        "description": "All domain controllers in the domain",
+        "whencreated": 1664419087,
+        "admincount": true
+      },
+      "Members": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-516",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": {
+        "ObjectIdentifier": "B328621C-8721-4ED4-8BF1-0A0EEEB93BA3",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "PERFORMANCE LOG USERS@ESC1.LOCAL",
+        "distinguishedname": "CN=PERFORMANCE LOG USERS,CN=BUILTIN,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "Performance Log Users",
+        "description": "Members of this group may schedule logging of performance counters, enable trace providers, and collect event traces both locally and via remote access to this computer",
+        "whencreated": 1664419051,
+        "admincount": false
+      },
+      "Members": [],
+      "Aces": [
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-548",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-559",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": { "ObjectIdentifier": "S-1-5-32", "ObjectType": "Base" }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "SERVER OPERATORS@ESC1.LOCAL",
+        "distinguishedname": "CN=SERVER OPERATORS,CN=BUILTIN,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": true,
+        "samaccountname": "Server Operators",
+        "description": "Members can administer domain servers",
+        "whencreated": 1664419087,
+        "admincount": true
+      },
+      "Members": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-549",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": { "ObjectIdentifier": "S-1-5-32", "ObjectType": "Base" }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "ENTERPRISE KEY ADMINS@ESC1.LOCAL",
+        "distinguishedname": "CN=ENTERPRISE KEY ADMINS,CN=USERS,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "Enterprise Key Admins",
+        "description": "Members of this group can perform administrative actions on key objects within the forest.",
+        "whencreated": 1664419087,
+        "admincount": true
+      },
+      "Members": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-527",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": {
+        "ObjectIdentifier": "B328621C-8721-4ED4-8BF1-0A0EEEB93BA3",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "GROUP 2@ESC1.LOCAL",
+        "distinguishedname": "CN=GROUP 2,CN=USERS,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "Group 2",
+        "description": null,
+        "whencreated": 1664489990,
+        "admincount": false
+      },
+      "Members": [
+        {
+          "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-1115",
+          "ObjectType": "User"
+        }
+      ],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-548",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-1107",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "B328621C-8721-4ED4-8BF1-0A0EEEB93BA3",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "DENIED RODC PASSWORD REPLICATION GROUP@ESC1.LOCAL",
+        "distinguishedname": "CN=DENIED RODC PASSWORD REPLICATION GROUP,CN=USERS,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "Denied RODC Password Replication Group",
+        "description": "Members in this group cannot have their passwords replicated to any read-only domain controllers in the domain",
+        "whencreated": 1664419087,
+        "admincount": false
+      },
+      "Members": [
+        {
+          "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-521",
+          "ObjectType": "Group"
+        },
+        {
+          "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-520",
+          "ObjectType": "Group"
+        },
+        {
+          "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "ObjectType": "Group"
+        },
+        {
+          "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-517",
+          "ObjectType": "Group"
+        },
+        {
+          "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "ObjectType": "Group"
+        },
+        {
+          "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-518",
+          "ObjectType": "Group"
+        },
+        {
+          "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-516",
+          "ObjectType": "Group"
+        },
+        {
+          "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-502",
+          "ObjectType": "User"
+        }
+      ],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-548",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-572",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "B328621C-8721-4ED4-8BF1-0A0EEEB93BA3",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "ENTERPRISE READ-ONLY DOMAIN CONTROLLERS@ESC1.LOCAL",
+        "distinguishedname": "CN=ENTERPRISE READ-ONLY DOMAIN CONTROLLERS,CN=USERS,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "Enterprise Read-only Domain Controllers",
+        "description": "Members of this group are Read-Only Domain Controllers in the enterprise",
+        "whencreated": 1664419087,
+        "admincount": false
+      },
+      "Members": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-548",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-498",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "B328621C-8721-4ED4-8BF1-0A0EEEB93BA3",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "DOMAIN ADMINS@ESC1.LOCAL",
+        "distinguishedname": "CN=DOMAIN ADMINS,CN=USERS,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": true,
+        "samaccountname": "Domain Admins",
+        "description": "Designated administrators of the domain",
+        "whencreated": 1664419087,
+        "admincount": true
+      },
+      "Members": [
+        {
+          "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-500",
+          "ObjectType": "User"
+        }
+      ],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-512",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": {
+        "ObjectIdentifier": "B328621C-8721-4ED4-8BF1-0A0EEEB93BA3",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "SCHEMA ADMINS@ESC1.LOCAL",
+        "distinguishedname": "CN=SCHEMA ADMINS,CN=USERS,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "Schema Admins",
+        "description": "Designated administrators of the schema",
+        "whencreated": 1664419087,
+        "admincount": true
+      },
+      "Members": [
+        {
+          "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-500",
+          "ObjectType": "User"
+        }
+      ],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-518",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": {
+        "ObjectIdentifier": "B328621C-8721-4ED4-8BF1-0A0EEEB93BA3",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "DOMAIN USERS@ESC1.LOCAL",
+        "distinguishedname": "CN=DOMAIN USERS,CN=USERS,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "Domain Users",
+        "description": "All domain users",
+        "whencreated": 1664419087,
+        "admincount": false
+      },
+      "Members": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-548",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-513",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "B328621C-8721-4ED4-8BF1-0A0EEEB93BA3",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "WINDOWS AUTHORIZATION ACCESS GROUP@ESC1.LOCAL",
+        "distinguishedname": "CN=WINDOWS AUTHORIZATION ACCESS GROUP,CN=BUILTIN,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "Windows Authorization Access Group",
+        "description": "Members of this group have access to the computed tokenGroupsGlobalAndUniversal attribute on User objects",
+        "whencreated": 1664419087,
+        "admincount": false
+      },
+      "Members": [
+        { "ObjectIdentifier": "ESC1.LOCAL-S-1-5-9", "ObjectType": "Group" }
+      ],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-548",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-560",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": { "ObjectIdentifier": "S-1-5-32", "ObjectType": "Base" }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "TERMINAL SERVER LICENSE SERVERS@ESC1.LOCAL",
+        "distinguishedname": "CN=TERMINAL SERVER LICENSE SERVERS,CN=BUILTIN,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "Terminal Server License Servers",
+        "description": "Members of this group can update user accounts in Active Directory with information about license issuance, for the purpose of tracking and reporting TS Per User CAL usage",
+        "whencreated": 1664419087,
+        "admincount": false
+      },
+      "Members": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-548",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-561",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": { "ObjectIdentifier": "S-1-5-32", "ObjectType": "Base" }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "READ-ONLY DOMAIN CONTROLLERS@ESC1.LOCAL",
+        "distinguishedname": "CN=READ-ONLY DOMAIN CONTROLLERS,CN=USERS,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "Read-only Domain Controllers",
+        "description": "Members of this group are Read-Only Domain Controllers in the domain",
+        "whencreated": 1664419087,
+        "admincount": true
+      },
+      "Members": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-521",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": {
+        "ObjectIdentifier": "B328621C-8721-4ED4-8BF1-0A0EEEB93BA3",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "ALLOWED RODC PASSWORD REPLICATION GROUP@ESC1.LOCAL",
+        "distinguishedname": "CN=ALLOWED RODC PASSWORD REPLICATION GROUP,CN=USERS,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "Allowed RODC Password Replication Group",
+        "description": "Members in this group can have their passwords replicated to all read-only domain controllers in the domain",
+        "whencreated": 1664419087,
+        "admincount": false
+      },
+      "Members": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-548",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-571",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "B328621C-8721-4ED4-8BF1-0A0EEEB93BA3",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "BACKUP OPERATORS@ESC1.LOCAL",
+        "distinguishedname": "CN=BACKUP OPERATORS,CN=BUILTIN,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": true,
+        "samaccountname": "Backup Operators",
+        "description": "Backup Operators can override security restrictions for the sole purpose of backing up or restoring files",
+        "whencreated": 1664419051,
+        "admincount": true
+      },
+      "Members": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-551",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": { "ObjectIdentifier": "S-1-5-32", "ObjectType": "Base" }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "GROUP POLICY CREATOR OWNERS@ESC1.LOCAL",
+        "distinguishedname": "CN=GROUP POLICY CREATOR OWNERS,CN=USERS,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "Group Policy Creator Owners",
+        "description": "Members in this group can modify group policy for the domain",
+        "whencreated": 1664419087,
+        "admincount": false
+      },
+      "Members": [
+        {
+          "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-500",
+          "ObjectType": "User"
+        }
+      ],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-548",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-520",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "B328621C-8721-4ED4-8BF1-0A0EEEB93BA3",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "IIS_IUSRS@ESC1.LOCAL",
+        "distinguishedname": "CN=IIS_IUSRS,CN=BUILTIN,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "IIS_IUSRS",
+        "description": "Built-in group used by Internet Information Services.",
+        "whencreated": 1664419051,
+        "admincount": false
+      },
+      "Members": [
+        { "ObjectIdentifier": "ESC1.LOCAL-S-1-5-17", "ObjectType": "Group" }
+      ],
+      "Aces": [
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-548",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-568",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": { "ObjectIdentifier": "S-1-5-32", "ObjectType": "Base" }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "ACCOUNT OPERATORS@ESC1.LOCAL",
+        "distinguishedname": "CN=ACCOUNT OPERATORS,CN=BUILTIN,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": true,
+        "samaccountname": "Account Operators",
+        "description": "Members can administer domain user and group accounts",
+        "whencreated": 1664419087,
+        "admincount": true
+      },
+      "Members": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-548",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": { "ObjectIdentifier": "S-1-5-32", "ObjectType": "Base" }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "DNSUPDATEPROXY@ESC1.LOCAL",
+        "distinguishedname": "CN=DNSUPDATEPROXY,CN=USERS,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "DnsUpdateProxy",
+        "description": "DNS clients who are permitted to perform dynamic updates on behalf of some other clients (such as DHCP servers).",
+        "whencreated": 1664419130,
+        "admincount": false
+      },
+      "Members": [],
+      "Aces": [
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-548",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-1102",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "B328621C-8721-4ED4-8BF1-0A0EEEB93BA3",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "GROUP 3@ESC1.LOCAL",
+        "distinguishedname": "CN=GROUP 3,CN=USERS,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "Group 3",
+        "description": null,
+        "whencreated": 1664490001,
+        "admincount": false
+      },
+      "Members": [
+        {
+          "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-1110",
+          "ObjectType": "User"
+        },
+        {
+          "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-1109",
+          "ObjectType": "Group"
+        }
+      ],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-548",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-1108",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "B328621C-8721-4ED4-8BF1-0A0EEEB93BA3",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "ADMINISTRATORS@ESC1.LOCAL",
+        "distinguishedname": "CN=ADMINISTRATORS,CN=BUILTIN,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": true,
+        "samaccountname": "Administrators",
+        "description": "Administrators have complete and unrestricted access to the computer/domain",
+        "whencreated": 1664419051,
+        "admincount": true
+      },
+      "Members": [
+        {
+          "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "ObjectType": "Group"
+        },
+        {
+          "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "ObjectType": "Group"
+        },
+        {
+          "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-500",
+          "ObjectType": "User"
+        }
+      ],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-544",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": { "ObjectIdentifier": "S-1-5-32", "ObjectType": "Base" }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "GUESTS@ESC1.LOCAL",
+        "distinguishedname": "CN=GUESTS,CN=BUILTIN,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "Guests",
+        "description": "Guests have the same access as members of the Users group by default, except for the Guest account which is further restricted",
+        "whencreated": 1664419051,
+        "admincount": false
+      },
+      "Members": [
+        {
+          "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-514",
+          "ObjectType": "Group"
+        },
+        {
+          "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-501",
+          "ObjectType": "User"
+        }
+      ],
+      "Aces": [
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-548",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-546",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": { "ObjectIdentifier": "S-1-5-32", "ObjectType": "Base" }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "CRYPTOGRAPHIC OPERATORS@ESC1.LOCAL",
+        "distinguishedname": "CN=CRYPTOGRAPHIC OPERATORS,CN=BUILTIN,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "Cryptographic Operators",
+        "description": "Members are authorized to perform cryptographic operations.",
+        "whencreated": 1664419051,
+        "admincount": false
+      },
+      "Members": [],
+      "Aces": [
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-548",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-569",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": { "ObjectIdentifier": "S-1-5-32", "ObjectType": "Base" }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "EVENT LOG READERS@ESC1.LOCAL",
+        "distinguishedname": "CN=EVENT LOG READERS,CN=BUILTIN,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "Event Log Readers",
+        "description": "Members of this group can read event logs from local machine",
+        "whencreated": 1664419051,
+        "admincount": false
+      },
+      "Members": [],
+      "Aces": [
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-548",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-573",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": { "ObjectIdentifier": "S-1-5-32", "ObjectType": "Base" }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "HYPER-V ADMINISTRATORS@ESC1.LOCAL",
+        "distinguishedname": "CN=HYPER-V ADMINISTRATORS,CN=BUILTIN,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "Hyper-V Administrators",
+        "description": "Members of this group have complete and unrestricted access to all features of Hyper-V.",
+        "whencreated": 1664419051,
+        "admincount": false
+      },
+      "Members": [],
+      "Aces": [
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-548",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-578",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": { "ObjectIdentifier": "S-1-5-32", "ObjectType": "Base" }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "ENTERPRISE ADMINS@ESC1.LOCAL",
+        "distinguishedname": "CN=ENTERPRISE ADMINS,CN=USERS,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": true,
+        "samaccountname": "Enterprise Admins",
+        "description": "Designated administrators of the enterprise",
+        "whencreated": 1664419087,
+        "admincount": true
+      },
+      "Members": [
+        {
+          "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-500",
+          "ObjectType": "User"
+        }
+      ],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-519",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": {
+        "ObjectIdentifier": "B328621C-8721-4ED4-8BF1-0A0EEEB93BA3",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "ACCESS CONTROL ASSISTANCE OPERATORS@ESC1.LOCAL",
+        "distinguishedname": "CN=ACCESS CONTROL ASSISTANCE OPERATORS,CN=BUILTIN,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "Access Control Assistance Operators",
+        "description": "Members of this group can remotely query authorization attributes and permissions for resources on this computer.",
+        "whencreated": 1664419051,
+        "admincount": false
+      },
+      "Members": [],
+      "Aces": [
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-548",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-579",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": { "ObjectIdentifier": "S-1-5-32", "ObjectType": "Base" }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "RAS AND IAS SERVERS@ESC1.LOCAL",
+        "distinguishedname": "CN=RAS AND IAS SERVERS,CN=USERS,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "RAS and IAS Servers",
+        "description": "Servers in this group can access remote access properties of users",
+        "whencreated": 1664419087,
+        "admincount": false
+      },
+      "Members": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-548",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-553",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "B328621C-8721-4ED4-8BF1-0A0EEEB93BA3",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "DOMAIN GUESTS@ESC1.LOCAL",
+        "distinguishedname": "CN=DOMAIN GUESTS,CN=USERS,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "Domain Guests",
+        "description": "All domain guests",
+        "whencreated": 1664419087,
+        "admincount": false
+      },
+      "Members": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-548",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-514",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "B328621C-8721-4ED4-8BF1-0A0EEEB93BA3",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "GROUP 4@ESC1.LOCAL",
+        "distinguishedname": "CN=GROUP 4,CN=USERS,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "Group 4",
+        "description": null,
+        "whencreated": 1664490004,
+        "admincount": false
+      },
+      "Members": [
+        {
+          "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-1114",
+          "ObjectType": "User"
+        }
+      ],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-548",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-1109",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "B328621C-8721-4ED4-8BF1-0A0EEEB93BA3",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "PRINT OPERATORS@ESC1.LOCAL",
+        "distinguishedname": "CN=PRINT OPERATORS,CN=BUILTIN,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": true,
+        "samaccountname": "Print Operators",
+        "description": "Members can administer printers installed on domain controllers",
+        "whencreated": 1664419051,
+        "admincount": true
+      },
+      "Members": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-550",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": { "ObjectIdentifier": "S-1-5-32", "ObjectType": "Base" }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "NETWORK CONFIGURATION OPERATORS@ESC1.LOCAL",
+        "distinguishedname": "CN=NETWORK CONFIGURATION OPERATORS,CN=BUILTIN,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "Network Configuration Operators",
+        "description": "Members in this group can have some administrative privileges to manage configuration of networking features",
+        "whencreated": 1664419051,
+        "admincount": false
+      },
+      "Members": [],
+      "Aces": [
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-548",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-556",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": { "ObjectIdentifier": "S-1-5-32", "ObjectType": "Base" }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "GROUP 1@ESC1.LOCAL",
+        "distinguishedname": "CN=GROUP 1,CN=USERS,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "Group 1",
+        "description": null,
+        "whencreated": 1664489973,
+        "admincount": false
+      },
+      "Members": [
+        {
+          "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-1113",
+          "ObjectType": "User"
+        },
+        {
+          "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-1107",
+          "ObjectType": "Group"
+        }
+      ],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-548",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-1106",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "B328621C-8721-4ED4-8BF1-0A0EEEB93BA3",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "CERTIFICATE SERVICE DCOM ACCESS@ESC1.LOCAL",
+        "distinguishedname": "CN=CERTIFICATE SERVICE DCOM ACCESS,CN=BUILTIN,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "Certificate Service DCOM Access",
+        "description": "Members of this group are allowed to connect to Certification Authorities in the enterprise",
+        "whencreated": 1664419051,
+        "admincount": false
+      },
+      "Members": [
+        { "ObjectIdentifier": "ESC1.LOCAL-S-1-5-11", "ObjectType": "Group" }
+      ],
+      "Aces": [
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-548",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-574",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": { "ObjectIdentifier": "S-1-5-32", "ObjectType": "Base" }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "KEY ADMINS@ESC1.LOCAL",
+        "distinguishedname": "CN=KEY ADMINS,CN=USERS,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "Key Admins",
+        "description": "Members of this group can perform administrative actions on key objects within the domain.",
+        "whencreated": 1664419087,
+        "admincount": true
+      },
+      "Members": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-526",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": {
+        "ObjectIdentifier": "B328621C-8721-4ED4-8BF1-0A0EEEB93BA3",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "PROTECTED USERS@ESC1.LOCAL",
+        "distinguishedname": "CN=PROTECTED USERS,CN=USERS,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "Protected Users",
+        "description": "Members of this group are afforded additional protections against authentication security threats. See http://go.microsoft.com/fwlink/?LinkId=298939 for more information.",
+        "whencreated": 1664419087,
+        "admincount": false
+      },
+      "Members": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-548",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-525",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "B328621C-8721-4ED4-8BF1-0A0EEEB93BA3",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "CLONEABLE DOMAIN CONTROLLERS@ESC1.LOCAL",
+        "distinguishedname": "CN=CLONEABLE DOMAIN CONTROLLERS,CN=USERS,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "Cloneable Domain Controllers",
+        "description": "Members of this group that are domain controllers may be cloned.",
+        "whencreated": 1664419087,
+        "admincount": false
+      },
+      "Members": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-548",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-522",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "B328621C-8721-4ED4-8BF1-0A0EEEB93BA3",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "STORAGE REPLICA ADMINISTRATORS@ESC1.LOCAL",
+        "distinguishedname": "CN=STORAGE REPLICA ADMINISTRATORS,CN=BUILTIN,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "Storage Replica Administrators",
+        "description": "Members of this group have complete and unrestricted access to all features of Storage Replica.",
+        "whencreated": 1664419051,
+        "admincount": false
+      },
+      "Members": [],
+      "Aces": [
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-548",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-582",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": { "ObjectIdentifier": "S-1-5-32", "ObjectType": "Base" }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "REPLICATORS@ESC1.LOCAL",
+        "distinguishedname": "CN=REPLICATOR,CN=BUILTIN,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "Replicator",
+        "description": "Supports file replication in a domain",
+        "whencreated": 1664419051,
+        "admincount": true
+      },
+      "Members": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-552",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": { "ObjectIdentifier": "S-1-5-32", "ObjectType": "Base" }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "REMOTE DESKTOP USERS@ESC1.LOCAL",
+        "distinguishedname": "CN=REMOTE DESKTOP USERS,CN=BUILTIN,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "Remote Desktop Users",
+        "description": "Members in this group are granted the right to logon remotely",
+        "whencreated": 1664419051,
+        "admincount": false
+      },
+      "Members": [],
+      "Aces": [
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-548",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-555",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": { "ObjectIdentifier": "S-1-5-32", "ObjectType": "Base" }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "RDS MANAGEMENT SERVERS@ESC1.LOCAL",
+        "distinguishedname": "CN=RDS MANAGEMENT SERVERS,CN=BUILTIN,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "RDS Management Servers",
+        "description": "Servers in this group can perform routine administrative actions on servers running Remote Desktop Services. This group needs to be populated on all servers in a Remote Desktop Services deployment. The servers running the RDS Central Management service must be included in this group.",
+        "whencreated": 1664419051,
+        "admincount": false
+      },
+      "Members": [],
+      "Aces": [
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-548",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-577",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": { "ObjectIdentifier": "S-1-5-32", "ObjectType": "Base" }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "PERFORMANCE MONITOR USERS@ESC1.LOCAL",
+        "distinguishedname": "CN=PERFORMANCE MONITOR USERS,CN=BUILTIN,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "Performance Monitor Users",
+        "description": "Members of this group can access performance counter data locally and remotely",
+        "whencreated": 1664419051,
+        "admincount": false
+      },
+      "Members": [],
+      "Aces": [
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-548",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-558",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": { "ObjectIdentifier": "S-1-5-32", "ObjectType": "Base" }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "DISTRIBUTED COM USERS@ESC1.LOCAL",
+        "distinguishedname": "CN=DISTRIBUTED COM USERS,CN=BUILTIN,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "Distributed COM Users",
+        "description": "Members are allowed to launch, activate and use Distributed COM objects on this machine.",
+        "whencreated": 1664419051,
+        "admincount": false
+      },
+      "Members": [],
+      "Aces": [
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-548",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-562",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": { "ObjectIdentifier": "S-1-5-32", "ObjectType": "Base" }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "RDS ENDPOINT SERVERS@ESC1.LOCAL",
+        "distinguishedname": "CN=RDS ENDPOINT SERVERS,CN=BUILTIN,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "RDS Endpoint Servers",
+        "description": "Servers in this group run virtual machines and host sessions where users RemoteApp programs and personal virtual desktops run. This group needs to be populated on servers running RD Connection Broker. RD Session Host servers and RD Virtualization Host servers used in the deployment need to be in this group.",
+        "whencreated": 1664419051,
+        "admincount": false
+      },
+      "Members": [],
+      "Aces": [
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-548",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-576",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": { "ObjectIdentifier": "S-1-5-32", "ObjectType": "Base" }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "USERS@ESC1.LOCAL",
+        "distinguishedname": "CN=USERS,CN=BUILTIN,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "Users",
+        "description": "Users are prevented from making accidental or intentional system-wide changes and can run most applications",
+        "whencreated": 1664419051,
+        "admincount": false
+      },
+      "Members": [
+        {
+          "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-513",
+          "ObjectType": "Group"
+        },
+        { "ObjectIdentifier": "ESC1.LOCAL-S-1-5-11", "ObjectType": "Group" },
+        { "ObjectIdentifier": "ESC1.LOCAL-S-1-5-4", "ObjectType": "Group" }
+      ],
+      "Aces": [
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-548",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-545",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": { "ObjectIdentifier": "S-1-5-32", "ObjectType": "Base" }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "REMOTE MANAGEMENT USERS@ESC1.LOCAL",
+        "distinguishedname": "CN=REMOTE MANAGEMENT USERS,CN=BUILTIN,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "Remote Management Users",
+        "description": "Members of this group can access WMI resources over management protocols (such as WS-Management via the Windows Remote Management service). This applies only to WMI namespaces that grant access to the user.",
+        "whencreated": 1664419051,
+        "admincount": false
+      },
+      "Members": [],
+      "Aces": [
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-548",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-580",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": { "ObjectIdentifier": "S-1-5-32", "ObjectType": "Base" }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "RDS REMOTE ACCESS SERVERS@ESC1.LOCAL",
+        "distinguishedname": "CN=RDS REMOTE ACCESS SERVERS,CN=BUILTIN,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "RDS Remote Access Servers",
+        "description": "Servers in this group enable users of RemoteApp programs and personal virtual desktops access to these resources. In Internet-facing deployments, these servers are typically deployed in an edge network. This group needs to be populated on servers running RD Connection Broker. RD Gateway servers and RD Web Access servers used in the deployment need to be in this group.",
+        "whencreated": 1664419051,
+        "admincount": false
+      },
+      "Members": [],
+      "Aces": [
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-548",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-575",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": { "ObjectIdentifier": "S-1-5-32", "ObjectType": "Base" }
+    },
+    {
+      "Properties": {
+        "name": "PRE-WINDOWS 2000 COMPATIBLE ACCESS@ESC1.LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "domain": "ESC1.LOCAL"
+      },
+      "Members": [],
+      "Aces": [],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-554",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": null
+    },
+    {
+      "Properties": {
+        "name": "REMOTE MANAGEMENT USERS@ESC1.LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "domain": "ESC1.LOCAL"
+      },
+      "Members": [],
+      "Aces": [],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-580",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": null
+    },
+    {
+      "Properties": {
+        "name": "REMOTE DESKTOP USERS@ESC1.LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "domain": "ESC1.LOCAL"
+      },
+      "Members": [],
+      "Aces": [],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-555",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": null
+    },
+    {
+      "Properties": {
+        "name": "NETWORK CONFIGURATION OPERATORS@ESC1.LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "domain": "ESC1.LOCAL"
+      },
+      "Members": [],
+      "Aces": [],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-556",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": null
+    },
+    {
+      "Properties": {
+        "name": "STORAGE REPLICA ADMINISTRATORS@ESC1.LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "domain": "ESC1.LOCAL"
+      },
+      "Members": [],
+      "Aces": [],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-582",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": null
+    },
+    {
+      "Properties": {
+        "name": "INCOMING FOREST TRUST BUILDERS@ESC1.LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "domain": "ESC1.LOCAL"
+      },
+      "Members": [],
+      "Aces": [],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-557",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": null
+    },
+    {
+      "Properties": {
+        "name": "PRINT OPERATORS@ESC1.LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "domain": "ESC1.LOCAL"
+      },
+      "Members": [],
+      "Aces": [],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-550",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": null
+    },
+    {
+      "Properties": {
+        "name": "BACKUP OPERATORS@ESC1.LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "domain": "ESC1.LOCAL"
+      },
+      "Members": [],
+      "Aces": [],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-551",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": null
+    },
+    {
+      "Properties": {
+        "name": "REPLICATORS@ESC1.LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "domain": "ESC1.LOCAL"
+      },
+      "Members": [],
+      "Aces": [],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-552",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": null
+    },
+    {
+      "Properties": {
+        "name": "WINDOWS AUTHORIZATION ACCESS GROUP@ESC1.LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "domain": "ESC1.LOCAL"
+      },
+      "Members": [],
+      "Aces": [],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-560",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": null
+    },
+    {
+      "Properties": {
+        "name": "INTERACTIVE@ESC1.LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "domain": "ESC1.LOCAL"
+      },
+      "Members": [],
+      "Aces": [],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-4",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": null
+    },
+    {
+      "Properties": {
+        "name": "TERMINAL SERVER LICENSE SERVERS@ESC1.LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "domain": "ESC1.LOCAL"
+      },
+      "Members": [],
+      "Aces": [],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-561",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": null
+    },
+    {
+      "Properties": {
+        "name": "DISTRIBUTED COM USERS@ESC1.LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "domain": "ESC1.LOCAL"
+      },
+      "Members": [],
+      "Aces": [],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-562",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": null
+    },
+    {
+      "Properties": {
+        "name": "ENTERPRISE DOMAIN CONTROLLERS@ESC1.LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "domain": "ESC1.LOCAL"
+      },
+      "Members": [],
+      "Aces": [],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-9",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": null
+    },
+    {
+      "Properties": {
+        "name": "PERFORMANCE MONITOR USERS@ESC1.LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "domain": "ESC1.LOCAL"
+      },
+      "Members": [],
+      "Aces": [],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-558",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": null
+    },
+    {
+      "Properties": {
+        "name": "ADMINISTRATORS@ESC1.LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "domain": "ESC1.LOCAL"
+      },
+      "Members": [],
+      "Aces": [],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-544",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": null
+    },
+    {
+      "Properties": {
+        "name": "PERFORMANCE LOG USERS@ESC1.LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "domain": "ESC1.LOCAL"
+      },
+      "Members": [],
+      "Aces": [],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-559",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": null
+    },
+    {
+      "Properties": {
+        "name": "USERS@ESC1.LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "domain": "ESC1.LOCAL"
+      },
+      "Members": [],
+      "Aces": [],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-545",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": null
+    },
+    {
+      "Properties": {
+        "name": "GUESTS@ESC1.LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "domain": "ESC1.LOCAL"
+      },
+      "Members": [],
+      "Aces": [],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-546",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": null
+    },
+    {
+      "Properties": {
+        "name": "IIS_IUSRS@ESC1.LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "domain": "ESC1.LOCAL"
+      },
+      "Members": [],
+      "Aces": [],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-568",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": null
+    },
+    {
+      "Properties": {
+        "name": "CRYPTOGRAPHIC OPERATORS@ESC1.LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "domain": "ESC1.LOCAL"
+      },
+      "Members": [],
+      "Aces": [],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-569",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": null
+    },
+    {
+      "Properties": {
+        "name": "ACCOUNT OPERATORS@ESC1.LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "domain": "ESC1.LOCAL"
+      },
+      "Members": [],
+      "Aces": [],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-548",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": null
+    },
+    {
+      "Properties": {
+        "name": "SERVER OPERATORS@ESC1.LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "domain": "ESC1.LOCAL"
+      },
+      "Members": [],
+      "Aces": [],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-549",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": null
+    },
+    {
+      "Properties": {
+        "name": "CERTIFICATE SERVICE DCOM ACCESS@ESC1.LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "domain": "ESC1.LOCAL"
+      },
+      "Members": [],
+      "Aces": [],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-574",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": null
+    },
+    {
+      "Properties": {
+        "name": "EVERYONE@ESC1.LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "domain": "ESC1.LOCAL"
+      },
+      "Members": [],
+      "Aces": [],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-1-0",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": null
+    },
+    {
+      "Properties": {
+        "name": "RDS REMOTE ACCESS SERVERS@ESC1.LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "domain": "ESC1.LOCAL"
+      },
+      "Members": [],
+      "Aces": [],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-575",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": null
+    },
+    {
+      "Properties": {
+        "name": "AUTHENTICATED USERS@ESC1.LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "domain": "ESC1.LOCAL"
+      },
+      "Members": [],
+      "Aces": [],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-11",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": null
+    },
+    {
+      "Properties": {
+        "name": "RDS ENDPOINT SERVERS@ESC1.LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "domain": "ESC1.LOCAL"
+      },
+      "Members": [],
+      "Aces": [],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-576",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": null
+    },
+    {
+      "Properties": {
+        "name": "RDS MANAGEMENT SERVERS@ESC1.LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "domain": "ESC1.LOCAL"
+      },
+      "Members": [],
+      "Aces": [],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-577",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": null
+    },
+    {
+      "Properties": {
+        "name": "IUSR@ESC1.LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "domain": "ESC1.LOCAL"
+      },
+      "Members": [],
+      "Aces": [],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-17",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": null
+    },
+    {
+      "Properties": {
+        "name": "EVENT LOG READERS@ESC1.LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "domain": "ESC1.LOCAL"
+      },
+      "Members": [],
+      "Aces": [],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-573",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": null
+    },
+    {
+      "Properties": {
+        "name": "HYPER-V ADMINISTRATORS@ESC1.LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "domain": "ESC1.LOCAL"
+      },
+      "Members": [],
+      "Aces": [],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-578",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": null
+    },
+    {
+      "Properties": {
+        "name": "ACCESS CONTROL ASSISTANCE OPERATORS@ESC1.LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "domain": "ESC1.LOCAL"
+      },
+      "Members": [],
+      "Aces": [],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-32-579",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": null
+    },
+    {
+      "Properties": {
+        "name": "ENTERPRISE DOMAIN CONTROLLERS@ESC1.LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "domain": "ESC1.LOCAL"
+      },
+      "Members": [
+        {
+          "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-1000",
+          "ObjectType": "Computer"
+        }
+      ],
+      "Aces": [],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-9",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": null
+    }
+  ],
+  "meta": { "methods": 521215, "type": "groups", "count": 86, "version": 6 }
+}
diff --git a/cmd/api/src/test/fixtures/fixtures/v6/all/ntauthstores.json b/cmd/api/src/test/fixtures/fixtures/v6/all/ntauthstores.json
new file mode 100644
index 0000000000..229b621aaf
--- /dev/null
+++ b/cmd/api/src/test/fixtures/fixtures/v6/all/ntauthstores.json
@@ -0,0 +1,73 @@
+{
+  "data": [
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "NTAUTHCERTIFICATES@ESC1.LOCAL",
+        "distinguishedname": "CN=NTAUTHCERTIFICATES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "certthumbprints": ["5F0143662A7EA16E8DB90E44D0F1F1FC87B1E703"],
+        "description": null,
+        "whencreated": 1664426237
+      },
+      "DomainSID": "S-1-5-21-909015691-3030120388-2582151266",
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "722A8BB3-AEF5-49C7-9C8C-C1C97A219007",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "A18A3A99-3E4C-46DD-9C90-E5542FA4EC84",
+        "ObjectType": "Container"
+      }
+    }
+  ],
+  "meta": {
+    "methods": 521215,
+    "type": "ntauthstores",
+    "count": 1,
+    "version": 6
+  }
+}
diff --git a/cmd/api/src/test/fixtures/fixtures/v6/all/ous.json b/cmd/api/src/test/fixtures/fixtures/v6/all/ous.json
new file mode 100644
index 0000000000..6f48818432
--- /dev/null
+++ b/cmd/api/src/test/fixtures/fixtures/v6/all/ous.json
@@ -0,0 +1,78 @@
+{
+  "data": [
+    {
+      "GPOChanges": {
+        "LocalAdmins": [],
+        "RemoteDesktopUsers": [],
+        "DcomUsers": [],
+        "PSRemoteUsers": [],
+        "AffectedComputers": [
+          {
+            "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-1000",
+            "ObjectType": "Computer"
+          }
+        ]
+      },
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "DOMAIN CONTROLLERS@ESC1.LOCAL",
+        "distinguishedname": "OU=DOMAIN CONTROLLERS,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "description": "Default container for domain controllers",
+        "whencreated": 1664419051,
+        "blocksinheritance": false
+      },
+      "Links": [
+        { "IsEnforced": false, "GUID": "1A8AA814-033D-45F2-96C2-3D2A1363F078" }
+      ],
+      "ChildObjects": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "1AEEE963-F4C8-49DA-BBE6-A6107F42CAF0",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266",
+        "ObjectType": "Domain"
+      }
+    }
+  ],
+  "meta": { "methods": 521215, "type": "ous", "count": 1, "version": 6 }
+}
diff --git a/cmd/api/src/test/fixtures/fixtures/v6/all/rootcas.json b/cmd/api/src/test/fixtures/fixtures/v6/all/rootcas.json
new file mode 100644
index 0000000000..1ddc4e608a
--- /dev/null
+++ b/cmd/api/src/test/fixtures/fixtures/v6/all/rootcas.json
@@ -0,0 +1,78 @@
+{
+  "data": [
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "ESC1-ESC1-DC-CA@ESC1.LOCAL",
+        "distinguishedname": "CN=ESC1-ESC1-DC-CA,CN=CERTIFICATION AUTHORITIES,CN=PUBLIC KEY SERVICES,CN=SERVICES,CN=CONFIGURATION,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "description": null,
+        "whencreated": 1664426237,
+        "certthumbprint": "5F0143662A7EA16E8DB90E44D0F1F1FC87B1E703",
+        "certname": "5F0143662A7EA16E8DB90E44D0F1F1FC87B1E703",
+        "certchain": ["5F0143662A7EA16E8DB90E44D0F1F1FC87B1E703"],
+        "hasbasicconstraints": false,
+        "basicconstraintpathlength": 0
+      },
+      "DomainSID": "S-1-5-21-909015691-3030120388-2582151266",
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-517",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "4B5183E1-DB57-4A57-8159-3E9649F3B01C",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "242AB0E0-13D1-4517-BEB0-07E504802B6B",
+        "ObjectType": "Container"
+      }
+    }
+  ],
+  "meta": { "methods": 521215, "type": "rootcas", "count": 1, "version": 6 }
+}
diff --git a/cmd/api/src/test/fixtures/fixtures/v6/all/users.json b/cmd/api/src/test/fixtures/fixtures/v6/all/users.json
new file mode 100644
index 0000000000..50871ca507
--- /dev/null
+++ b/cmd/api/src/test/fixtures/fixtures/v6/all/users.json
@@ -0,0 +1,1461 @@
+{
+  "data": [
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "DAVIS@ESC1.LOCAL",
+        "distinguishedname": "CN=DAVIS,CN=USERS,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "Davis",
+        "description": null,
+        "whencreated": 1664490311,
+        "sensitive": false,
+        "dontreqpreauth": false,
+        "passwordnotreqd": false,
+        "unconstraineddelegation": false,
+        "pwdneverexpires": false,
+        "enabled": true,
+        "trustedtoauth": false,
+        "lastlogon": 0,
+        "lastlogontimestamp": -1,
+        "pwdlastset": 1664490311,
+        "serviceprincipalnames": [],
+        "hasspn": false,
+        "displayname": null,
+        "email": null,
+        "title": null,
+        "homedirectory": null,
+        "userpassword": null,
+        "unixpassword": null,
+        "unicodepassword": null,
+        "sfupassword": null,
+        "logonscript": null,
+        "admincount": false,
+        "sidhistory": []
+      },
+      "AllowedToDelegate": [],
+      "PrimaryGroupSID": "S-1-5-21-909015691-3030120388-2582151266-513",
+      "HasSIDHistory": [],
+      "SPNTargets": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-548",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-526",
+          "PrincipalType": "Group",
+          "RightName": "AddKeyCredentialLink",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-527",
+          "PrincipalType": "Group",
+          "RightName": "AddKeyCredentialLink",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "AllExtendedRights",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-1112",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "B328621C-8721-4ED4-8BF1-0A0EEEB93BA3",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "MARTINEZ@ESC1.LOCAL",
+        "distinguishedname": "CN=MARTINEZ,CN=USERS,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "Martinez",
+        "description": null,
+        "whencreated": 1664490345,
+        "sensitive": false,
+        "dontreqpreauth": false,
+        "passwordnotreqd": false,
+        "unconstraineddelegation": false,
+        "pwdneverexpires": false,
+        "enabled": true,
+        "trustedtoauth": false,
+        "lastlogon": 0,
+        "lastlogontimestamp": -1,
+        "pwdlastset": 1664490345,
+        "serviceprincipalnames": [],
+        "hasspn": false,
+        "displayname": null,
+        "email": null,
+        "title": null,
+        "homedirectory": null,
+        "userpassword": null,
+        "unixpassword": null,
+        "unicodepassword": null,
+        "sfupassword": null,
+        "logonscript": null,
+        "admincount": false,
+        "sidhistory": []
+      },
+      "AllowedToDelegate": [],
+      "PrimaryGroupSID": "S-1-5-21-909015691-3030120388-2582151266-513",
+      "HasSIDHistory": [],
+      "SPNTargets": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-548",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-526",
+          "PrincipalType": "Group",
+          "RightName": "AddKeyCredentialLink",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-527",
+          "PrincipalType": "Group",
+          "RightName": "AddKeyCredentialLink",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "AllExtendedRights",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-1115",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "B328621C-8721-4ED4-8BF1-0A0EEEB93BA3",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "ADMINISTRATOR@ESC1.LOCAL",
+        "distinguishedname": "CN=ADMINISTRATOR,CN=USERS,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "administrator",
+        "description": null,
+        "whencreated": 1665176283,
+        "sensitive": false,
+        "dontreqpreauth": false,
+        "passwordnotreqd": false,
+        "unconstraineddelegation": false,
+        "pwdneverexpires": false,
+        "enabled": true,
+        "trustedtoauth": false,
+        "lastlogon": 1668387049,
+        "lastlogontimestamp": 1668295788,
+        "pwdlastset": 1665176283,
+        "serviceprincipalnames": [],
+        "hasspn": false,
+        "displayname": null,
+        "email": null,
+        "title": null,
+        "homedirectory": null,
+        "userpassword": null,
+        "unixpassword": null,
+        "unicodepassword": null,
+        "sfupassword": null,
+        "logonscript": null,
+        "admincount": false,
+        "sidhistory": []
+      },
+      "AllowedToDelegate": [],
+      "PrimaryGroupSID": "S-1-5-21-909015691-3030120388-2582151266-513",
+      "HasSIDHistory": [],
+      "SPNTargets": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-548",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-526",
+          "PrincipalType": "Group",
+          "RightName": "AddKeyCredentialLink",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-527",
+          "PrincipalType": "Group",
+          "RightName": "AddKeyCredentialLink",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "AllExtendedRights",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-1116",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "B328621C-8721-4ED4-8BF1-0A0EEEB93BA3",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "VICTIM@ESC1.LOCAL",
+        "distinguishedname": "CN=VICTIM,CN=USERS,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "victim",
+        "description": null,
+        "whencreated": 1665521497,
+        "sensitive": false,
+        "dontreqpreauth": false,
+        "passwordnotreqd": false,
+        "unconstraineddelegation": false,
+        "pwdneverexpires": true,
+        "enabled": true,
+        "trustedtoauth": false,
+        "lastlogon": 1665526129,
+        "lastlogontimestamp": 1665521721,
+        "pwdlastset": 1665521497,
+        "serviceprincipalnames": [],
+        "hasspn": false,
+        "displayname": "victim",
+        "email": null,
+        "title": null,
+        "homedirectory": null,
+        "userpassword": null,
+        "unixpassword": null,
+        "unicodepassword": null,
+        "sfupassword": null,
+        "logonscript": null,
+        "admincount": false,
+        "sidhistory": []
+      },
+      "AllowedToDelegate": [],
+      "PrimaryGroupSID": "S-1-5-21-909015691-3030120388-2582151266-513",
+      "HasSIDHistory": [],
+      "SPNTargets": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-548",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-526",
+          "PrincipalType": "Group",
+          "RightName": "AddKeyCredentialLink",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-527",
+          "PrincipalType": "Group",
+          "RightName": "AddKeyCredentialLink",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "AllExtendedRights",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-1117",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "B328621C-8721-4ED4-8BF1-0A0EEEB93BA3",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "GUEST@ESC1.LOCAL",
+        "distinguishedname": "CN=GUEST,CN=USERS,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "Guest",
+        "description": "Built-in account for guest access to the computer/domain",
+        "whencreated": 1664419051,
+        "sensitive": false,
+        "dontreqpreauth": false,
+        "passwordnotreqd": true,
+        "unconstraineddelegation": false,
+        "pwdneverexpires": true,
+        "enabled": false,
+        "trustedtoauth": false,
+        "lastlogon": 0,
+        "lastlogontimestamp": -1,
+        "pwdlastset": 0,
+        "serviceprincipalnames": [],
+        "hasspn": false,
+        "displayname": null,
+        "email": null,
+        "title": null,
+        "homedirectory": null,
+        "userpassword": null,
+        "unixpassword": null,
+        "unicodepassword": null,
+        "sfupassword": null,
+        "logonscript": null,
+        "admincount": false,
+        "sidhistory": []
+      },
+      "AllowedToDelegate": [],
+      "PrimaryGroupSID": "S-1-5-21-909015691-3030120388-2582151266-514",
+      "HasSIDHistory": [],
+      "SPNTargets": [],
+      "Aces": [
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-548",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-526",
+          "PrincipalType": "Group",
+          "RightName": "AddKeyCredentialLink",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-527",
+          "PrincipalType": "Group",
+          "RightName": "AddKeyCredentialLink",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "AllExtendedRights",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-501",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "B328621C-8721-4ED4-8BF1-0A0EEEB93BA3",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "KRBTGT@ESC1.LOCAL",
+        "distinguishedname": "CN=KRBTGT,CN=USERS,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "krbtgt",
+        "description": "Key Distribution Center Service Account",
+        "whencreated": 1664419087,
+        "sensitive": false,
+        "dontreqpreauth": false,
+        "passwordnotreqd": false,
+        "unconstraineddelegation": false,
+        "pwdneverexpires": false,
+        "enabled": false,
+        "trustedtoauth": false,
+        "lastlogon": 0,
+        "lastlogontimestamp": -1,
+        "pwdlastset": 1664419087,
+        "serviceprincipalnames": ["kadmin/changepw"],
+        "hasspn": true,
+        "displayname": null,
+        "email": null,
+        "title": null,
+        "homedirectory": null,
+        "userpassword": null,
+        "unixpassword": null,
+        "unicodepassword": null,
+        "sfupassword": null,
+        "logonscript": null,
+        "admincount": true,
+        "sidhistory": []
+      },
+      "AllowedToDelegate": [],
+      "PrimaryGroupSID": "S-1-5-21-909015691-3030120388-2582151266-513",
+      "HasSIDHistory": [],
+      "SPNTargets": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "AllExtendedRights",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "AllExtendedRights",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "AllExtendedRights",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-502",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": {
+        "ObjectIdentifier": "B328621C-8721-4ED4-8BF1-0A0EEEB93BA3",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "SHARPHOUND@ESC1.LOCAL",
+        "distinguishedname": "CN=SHARPHOUND,CN=USERS,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "SharpHound",
+        "description": null,
+        "whencreated": 1664482876,
+        "sensitive": false,
+        "dontreqpreauth": false,
+        "passwordnotreqd": false,
+        "unconstraineddelegation": false,
+        "pwdneverexpires": false,
+        "enabled": true,
+        "trustedtoauth": false,
+        "lastlogon": 1668103432,
+        "lastlogontimestamp": 1668103429,
+        "pwdlastset": 1664482876,
+        "serviceprincipalnames": [],
+        "hasspn": false,
+        "displayname": null,
+        "email": null,
+        "title": null,
+        "homedirectory": null,
+        "userpassword": null,
+        "unixpassword": null,
+        "unicodepassword": null,
+        "sfupassword": null,
+        "logonscript": null,
+        "admincount": false,
+        "sidhistory": []
+      },
+      "AllowedToDelegate": [],
+      "PrimaryGroupSID": "S-1-5-21-909015691-3030120388-2582151266-513",
+      "HasSIDHistory": [],
+      "SPNTargets": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-548",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-526",
+          "PrincipalType": "Group",
+          "RightName": "AddKeyCredentialLink",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-527",
+          "PrincipalType": "Group",
+          "RightName": "AddKeyCredentialLink",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "AllExtendedRights",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-1104",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "B328621C-8721-4ED4-8BF1-0A0EEEB93BA3",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "JONES@ESC1.LOCAL",
+        "distinguishedname": "CN=JONES,CN=USERS,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "Jones",
+        "description": null,
+        "whencreated": 1664489940,
+        "sensitive": false,
+        "dontreqpreauth": false,
+        "passwordnotreqd": false,
+        "unconstraineddelegation": false,
+        "pwdneverexpires": false,
+        "enabled": true,
+        "trustedtoauth": false,
+        "lastlogon": 0,
+        "lastlogontimestamp": -1,
+        "pwdlastset": 1664489940,
+        "serviceprincipalnames": [],
+        "hasspn": false,
+        "displayname": null,
+        "email": null,
+        "title": null,
+        "homedirectory": null,
+        "userpassword": null,
+        "unixpassword": null,
+        "unicodepassword": null,
+        "sfupassword": null,
+        "logonscript": null,
+        "admincount": false,
+        "sidhistory": []
+      },
+      "AllowedToDelegate": [],
+      "PrimaryGroupSID": "S-1-5-21-909015691-3030120388-2582151266-513",
+      "HasSIDHistory": [],
+      "SPNTargets": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-548",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-526",
+          "PrincipalType": "Group",
+          "RightName": "AddKeyCredentialLink",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-527",
+          "PrincipalType": "Group",
+          "RightName": "AddKeyCredentialLink",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "AllExtendedRights",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-1105",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "B328621C-8721-4ED4-8BF1-0A0EEEB93BA3",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "SMITH@ESC1.LOCAL",
+        "distinguishedname": "CN=SMITH,CN=USERS,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "Smith",
+        "description": null,
+        "whencreated": 1664490260,
+        "sensitive": false,
+        "dontreqpreauth": false,
+        "passwordnotreqd": false,
+        "unconstraineddelegation": false,
+        "pwdneverexpires": false,
+        "enabled": true,
+        "trustedtoauth": false,
+        "lastlogon": 0,
+        "lastlogontimestamp": -1,
+        "pwdlastset": 1664490260,
+        "serviceprincipalnames": [],
+        "hasspn": false,
+        "displayname": null,
+        "email": null,
+        "title": null,
+        "homedirectory": null,
+        "userpassword": null,
+        "unixpassword": null,
+        "unicodepassword": null,
+        "sfupassword": null,
+        "logonscript": null,
+        "admincount": false,
+        "sidhistory": []
+      },
+      "AllowedToDelegate": [],
+      "PrimaryGroupSID": "S-1-5-21-909015691-3030120388-2582151266-513",
+      "HasSIDHistory": [],
+      "SPNTargets": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-548",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-526",
+          "PrincipalType": "Group",
+          "RightName": "AddKeyCredentialLink",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-527",
+          "PrincipalType": "Group",
+          "RightName": "AddKeyCredentialLink",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "AllExtendedRights",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-1110",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "B328621C-8721-4ED4-8BF1-0A0EEEB93BA3",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "MILLER@ESC1.LOCAL",
+        "distinguishedname": "CN=MILLER,CN=USERS,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "Miller",
+        "description": null,
+        "whencreated": 1664490303,
+        "sensitive": false,
+        "dontreqpreauth": false,
+        "passwordnotreqd": false,
+        "unconstraineddelegation": false,
+        "pwdneverexpires": false,
+        "enabled": true,
+        "trustedtoauth": false,
+        "lastlogon": 0,
+        "lastlogontimestamp": -1,
+        "pwdlastset": 1664490303,
+        "serviceprincipalnames": [],
+        "hasspn": false,
+        "displayname": null,
+        "email": null,
+        "title": null,
+        "homedirectory": null,
+        "userpassword": null,
+        "unixpassword": null,
+        "unicodepassword": null,
+        "sfupassword": null,
+        "logonscript": null,
+        "admincount": false,
+        "sidhistory": []
+      },
+      "AllowedToDelegate": [],
+      "PrimaryGroupSID": "S-1-5-21-909015691-3030120388-2582151266-513",
+      "HasSIDHistory": [],
+      "SPNTargets": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-548",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-526",
+          "PrincipalType": "Group",
+          "RightName": "AddKeyCredentialLink",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-527",
+          "PrincipalType": "Group",
+          "RightName": "AddKeyCredentialLink",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "AllExtendedRights",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-1111",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "B328621C-8721-4ED4-8BF1-0A0EEEB93BA3",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "RESEARCHER@ESC1.LOCAL",
+        "distinguishedname": "CN=RESEARCHER,CN=USERS,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "Researcher",
+        "description": "Built-in account for administering the computer/domain",
+        "whencreated": 1664419051,
+        "sensitive": false,
+        "dontreqpreauth": false,
+        "passwordnotreqd": false,
+        "unconstraineddelegation": false,
+        "pwdneverexpires": true,
+        "enabled": true,
+        "trustedtoauth": false,
+        "lastlogon": 1701806844,
+        "lastlogontimestamp": 1701284136,
+        "pwdlastset": 1668103669,
+        "serviceprincipalnames": [],
+        "hasspn": false,
+        "displayname": null,
+        "email": null,
+        "title": null,
+        "homedirectory": null,
+        "userpassword": null,
+        "unixpassword": null,
+        "unicodepassword": null,
+        "sfupassword": null,
+        "logonscript": null,
+        "admincount": true,
+        "sidhistory": []
+      },
+      "AllowedToDelegate": [],
+      "PrimaryGroupSID": "S-1-5-21-909015691-3030120388-2582151266-513",
+      "HasSIDHistory": [],
+      "SPNTargets": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "AllExtendedRights",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "AllExtendedRights",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "AllExtendedRights",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": false
+        }
+      ],
+      "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-500",
+      "IsDeleted": false,
+      "IsACLProtected": true,
+      "ContainedBy": {
+        "ObjectIdentifier": "B328621C-8721-4ED4-8BF1-0A0EEEB93BA3",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "GARCIA@ESC1.LOCAL",
+        "distinguishedname": "CN=GARCIA,CN=USERS,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "Garcia",
+        "description": null,
+        "whencreated": 1664490329,
+        "sensitive": false,
+        "dontreqpreauth": false,
+        "passwordnotreqd": false,
+        "unconstraineddelegation": false,
+        "pwdneverexpires": false,
+        "enabled": true,
+        "trustedtoauth": false,
+        "lastlogon": 0,
+        "lastlogontimestamp": -1,
+        "pwdlastset": 1664490329,
+        "serviceprincipalnames": [],
+        "hasspn": false,
+        "displayname": null,
+        "email": null,
+        "title": null,
+        "homedirectory": null,
+        "userpassword": null,
+        "unixpassword": null,
+        "unicodepassword": null,
+        "sfupassword": null,
+        "logonscript": null,
+        "admincount": false,
+        "sidhistory": []
+      },
+      "AllowedToDelegate": [],
+      "PrimaryGroupSID": "S-1-5-21-909015691-3030120388-2582151266-513",
+      "HasSIDHistory": [],
+      "SPNTargets": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-548",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-526",
+          "PrincipalType": "Group",
+          "RightName": "AddKeyCredentialLink",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-527",
+          "PrincipalType": "Group",
+          "RightName": "AddKeyCredentialLink",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "AllExtendedRights",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-1113",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "B328621C-8721-4ED4-8BF1-0A0EEEB93BA3",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "domain": "ESC1.LOCAL",
+        "name": "HERNANDEZ@ESC1.LOCAL",
+        "distinguishedname": "CN=HERNANDEZ,CN=USERS,DC=ESC1,DC=LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "highvalue": false,
+        "samaccountname": "Hernandez",
+        "description": null,
+        "whencreated": 1664490337,
+        "sensitive": false,
+        "dontreqpreauth": false,
+        "passwordnotreqd": false,
+        "unconstraineddelegation": false,
+        "pwdneverexpires": false,
+        "enabled": true,
+        "trustedtoauth": false,
+        "lastlogon": 0,
+        "lastlogontimestamp": -1,
+        "pwdlastset": 1664490337,
+        "serviceprincipalnames": [],
+        "hasspn": false,
+        "displayname": null,
+        "email": null,
+        "title": null,
+        "homedirectory": null,
+        "userpassword": null,
+        "unixpassword": null,
+        "unicodepassword": null,
+        "sfupassword": null,
+        "logonscript": null,
+        "admincount": false,
+        "sidhistory": []
+      },
+      "AllowedToDelegate": [],
+      "PrimaryGroupSID": "S-1-5-21-909015691-3030120388-2582151266-513",
+      "HasSIDHistory": [],
+      "SPNTargets": [],
+      "Aces": [
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "Owns",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-548",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-512",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": false
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-526",
+          "PrincipalType": "Group",
+          "RightName": "AddKeyCredentialLink",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-527",
+          "PrincipalType": "Group",
+          "RightName": "AddKeyCredentialLink",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "S-1-5-21-909015691-3030120388-2582151266-519",
+          "PrincipalType": "Group",
+          "RightName": "GenericAll",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteDacl",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "WriteOwner",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "AllExtendedRights",
+          "IsInherited": true
+        },
+        {
+          "PrincipalSID": "ESC1.LOCAL-S-1-5-32-544",
+          "PrincipalType": "Group",
+          "RightName": "GenericWrite",
+          "IsInherited": true
+        }
+      ],
+      "ObjectIdentifier": "S-1-5-21-909015691-3030120388-2582151266-1114",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": {
+        "ObjectIdentifier": "B328621C-8721-4ED4-8BF1-0A0EEEB93BA3",
+        "ObjectType": "Container"
+      }
+    },
+    {
+      "Properties": {
+        "name": "NETWORK SERVICE@ESC1.LOCAL",
+        "domainsid": "S-1-5-21-909015691-3030120388-2582151266",
+        "domain": "ESC1.LOCAL"
+      },
+      "AllowedToDelegate": [],
+      "PrimaryGroupSID": null,
+      "HasSIDHistory": [],
+      "SPNTargets": [],
+      "Aces": [],
+      "ObjectIdentifier": "ESC1.LOCAL-S-1-5-20",
+      "IsDeleted": false,
+      "IsACLProtected": false,
+      "ContainedBy": null
+    }
+  ],
+  "meta": { "methods": 521215, "type": "users", "count": 14, "version": 6 }
+}
diff --git a/cmd/ui/src/views/Explore/ExploreSearch/EdgeFilteringDialog.tsx b/cmd/ui/src/views/Explore/ExploreSearch/EdgeFilteringDialog.tsx
index 56ca4cb5e6..3150658fd1 100644
--- a/cmd/ui/src/views/Explore/ExploreSearch/EdgeFilteringDialog.tsx
+++ b/cmd/ui/src/views/Explore/ExploreSearch/EdgeFilteringDialog.tsx
@@ -171,7 +171,7 @@ const SubcategoryListItem = ({ subcategory, checked, setChecked }: SubcategoryLi
             setChecked={setChecked}
             collapsibleContent={
                 <List sx={{ pl: 4 }}>
-                    <ListItem sx={{ display: 'block'}}>
+                    <ListItem sx={{ display: 'block' }}>
                         <EdgesView edgeTypes={edgeTypes} checked={checked} setChecked={setChecked} />
                     </ListItem>
                 </List>
diff --git a/packages/cue/bh/ad/ad.cue b/packages/cue/bh/ad/ad.cue
index 810c3f0ac2..a6ab7a70ce 100644
--- a/packages/cue/bh/ad/ad.cue
+++ b/packages/cue/bh/ad/ad.cue
@@ -384,6 +384,13 @@ ApplicationPolicies: types.#StringEnum & {
 	representation: "applicationpolicies"
 }
 
+IssuancePolicies: types.#StringEnum & {
+	symbol: "IssuancePolicies"
+	schema: "ad"
+	name: "Issuance Policies"
+	representation: "issuancepolicies"
+}
+
 SchemaVersion: types.#StringEnum & {
 	symbol: "SchemaVersion"
 	schema: "ad"
@@ -440,6 +447,13 @@ EnrollmentFlag: types.#StringEnum & {
 	representation: "enrollmentflag"
 }
 
+Flags: types.#StringEnum & {
+	symbol: "Flags"
+	schema: "ad"
+	name: "Flags"
+	representation: "flags"
+}
+
 NoSecurityExtension: types.#StringEnum & {
 	symbol: "NoSecurityExtension"
 	schema: "ad"
@@ -520,6 +534,7 @@ Properties: [
 	SubjectAltRequireUPN,
 	AuthorizedSignatures,
 	ApplicationPolicies,
+	IssuancePolicies,
 	SchemaVersion,
 	RequiresManagerApproval,
 	AuthenticationEnabled,
@@ -528,6 +543,7 @@ Properties: [
 	CertificateNameFlag,
 	EffectiveEKUs,
 	EnrollmentFlag,
+	Flags,
 	NoSecurityExtension,
 	RenewalPeriod,
 	ValidityPeriod,
diff --git a/packages/go/graphschema/ad/ad.go b/packages/go/graphschema/ad/ad.go
index 806ebceae7..38e7b4d0ae 100644
--- a/packages/go/graphschema/ad/ad.go
+++ b/packages/go/graphschema/ad/ad.go
@@ -154,6 +154,7 @@ const (
 	SubjectAltRequireUPN                   Property = "subjectaltrequireupn"
 	AuthorizedSignatures                   Property = "authorizedsignatures"
 	ApplicationPolicies                    Property = "applicationpolicies"
+	IssuancePolicies                       Property = "issuancepolicies"
 	SchemaVersion                          Property = "schemaversion"
 	RequiresManagerApproval                Property = "requiresmanagerapproval"
 	AuthenticationEnabled                  Property = "authenticationenabled"
@@ -162,6 +163,7 @@ const (
 	CertificateNameFlag                    Property = "certificatenameflag"
 	EffectiveEKUs                          Property = "effectiveekus"
 	EnrollmentFlag                         Property = "enrollmentflag"
+	Flags                                  Property = "flags"
 	NoSecurityExtension                    Property = "nosecurityextension"
 	RenewalPeriod                          Property = "renewalperiod"
 	ValidityPeriod                         Property = "validityperiod"
@@ -169,7 +171,7 @@ const (
 )
 
 func AllProperties() []Property {
-	return []Property{AdminCount, CASecurityCollected, CAName, CertChain, CertName, CertThumbprint, CertThumbprints, HasEnrollmentAgentRestrictions, EnrollmentAgentRestrictionsCollected, IsUserSpecifiesSanEnabled, IsUserSpecifiesSanEnabledCollected, HasBasicConstraints, BasicConstraintPathLength, DNSHostname, CrossCertificatePair, DistinguishedName, DomainFQDN, DomainSID, Sensitive, HighValue, BlocksInheritance, IsACL, IsACLProtected, IsDeleted, Enforced, Department, HasCrossCertificatePair, HasSPN, UnconstrainedDelegation, LastLogon, LastLogonTimestamp, IsPrimaryGroup, HasLAPS, DontRequirePreAuth, LogonType, HasURA, PasswordNeverExpires, PasswordNotRequired, FunctionalLevel, TrustType, SidFiltering, TrustedToAuth, SamAccountName, CertificateMappingMethodsRaw, CertificateMappingMethods, StrongCertificateBindingEnforcementRaw, StrongCertificateBindingEnforcement, EKUs, SubjectAltRequireUPN, AuthorizedSignatures, ApplicationPolicies, SchemaVersion, RequiresManagerApproval, AuthenticationEnabled, EnrolleeSuppliesSubject, CertificateApplicationPolicy, CertificateNameFlag, EffectiveEKUs, EnrollmentFlag, NoSecurityExtension, RenewalPeriod, ValidityPeriod, OID}
+	return []Property{AdminCount, CASecurityCollected, CAName, CertChain, CertName, CertThumbprint, CertThumbprints, HasEnrollmentAgentRestrictions, EnrollmentAgentRestrictionsCollected, IsUserSpecifiesSanEnabled, IsUserSpecifiesSanEnabledCollected, HasBasicConstraints, BasicConstraintPathLength, DNSHostname, CrossCertificatePair, DistinguishedName, DomainFQDN, DomainSID, Sensitive, HighValue, BlocksInheritance, IsACL, IsACLProtected, IsDeleted, Enforced, Department, HasCrossCertificatePair, HasSPN, UnconstrainedDelegation, LastLogon, LastLogonTimestamp, IsPrimaryGroup, HasLAPS, DontRequirePreAuth, LogonType, HasURA, PasswordNeverExpires, PasswordNotRequired, FunctionalLevel, TrustType, SidFiltering, TrustedToAuth, SamAccountName, CertificateMappingMethodsRaw, CertificateMappingMethods, StrongCertificateBindingEnforcementRaw, StrongCertificateBindingEnforcement, EKUs, SubjectAltRequireUPN, AuthorizedSignatures, ApplicationPolicies, IssuancePolicies, SchemaVersion, RequiresManagerApproval, AuthenticationEnabled, EnrolleeSuppliesSubject, CertificateApplicationPolicy, CertificateNameFlag, EffectiveEKUs, EnrollmentFlag, Flags, NoSecurityExtension, RenewalPeriod, ValidityPeriod, OID}
 }
 func ParseProperty(source string) (Property, error) {
 	switch source {
@@ -275,6 +277,8 @@ func ParseProperty(source string) (Property, error) {
 		return AuthorizedSignatures, nil
 	case "applicationpolicies":
 		return ApplicationPolicies, nil
+	case "issuancepolicies":
+		return IssuancePolicies, nil
 	case "schemaversion":
 		return SchemaVersion, nil
 	case "requiresmanagerapproval":
@@ -291,6 +295,8 @@ func ParseProperty(source string) (Property, error) {
 		return EffectiveEKUs, nil
 	case "enrollmentflag":
 		return EnrollmentFlag, nil
+	case "flags":
+		return Flags, nil
 	case "nosecurityextension":
 		return NoSecurityExtension, nil
 	case "renewalperiod":
@@ -407,6 +413,8 @@ func (s Property) String() string {
 		return string(AuthorizedSignatures)
 	case ApplicationPolicies:
 		return string(ApplicationPolicies)
+	case IssuancePolicies:
+		return string(IssuancePolicies)
 	case SchemaVersion:
 		return string(SchemaVersion)
 	case RequiresManagerApproval:
@@ -423,6 +431,8 @@ func (s Property) String() string {
 		return string(EffectiveEKUs)
 	case EnrollmentFlag:
 		return string(EnrollmentFlag)
+	case Flags:
+		return string(Flags)
 	case NoSecurityExtension:
 		return string(NoSecurityExtension)
 	case RenewalPeriod:
@@ -539,6 +549,8 @@ func (s Property) Name() string {
 		return "Authorized Signatures Required"
 	case ApplicationPolicies:
 		return "Application Policies"
+	case IssuancePolicies:
+		return "Issuance Policies"
 	case SchemaVersion:
 		return "Schema Version"
 	case RequiresManagerApproval:
@@ -555,6 +567,8 @@ func (s Property) Name() string {
 		return "Effective EKUs"
 	case EnrollmentFlag:
 		return "Enrollment Flags"
+	case Flags:
+		return "Flags"
 	case NoSecurityExtension:
 		return "No Security Extension"
 	case RenewalPeriod:
diff --git a/packages/javascript/bh-shared-ui/src/graphSchema.ts b/packages/javascript/bh-shared-ui/src/graphSchema.ts
index f67bfa473d..ba3c406d29 100644
--- a/packages/javascript/bh-shared-ui/src/graphSchema.ts
+++ b/packages/javascript/bh-shared-ui/src/graphSchema.ts
@@ -302,6 +302,7 @@ export enum ActiveDirectoryKindProperties {
     SubjectAltRequireUPN = 'subjectaltrequireupn',
     AuthorizedSignatures = 'authorizedsignatures',
     ApplicationPolicies = 'applicationpolicies',
+    IssuancePolicies = 'issuancepolicies',
     SchemaVersion = 'schemaversion',
     RequiresManagerApproval = 'requiresmanagerapproval',
     AuthenticationEnabled = 'authenticationenabled',
@@ -310,6 +311,7 @@ export enum ActiveDirectoryKindProperties {
     CertificateNameFlag = 'certificatenameflag',
     EffectiveEKUs = 'effectiveekus',
     EnrollmentFlag = 'enrollmentflag',
+    Flags = 'flags',
     NoSecurityExtension = 'nosecurityextension',
     RenewalPeriod = 'renewalperiod',
     ValidityPeriod = 'validityperiod',
@@ -419,6 +421,8 @@ export function ActiveDirectoryKindPropertiesToDisplay(value: ActiveDirectoryKin
             return 'Authorized Signatures Required';
         case ActiveDirectoryKindProperties.ApplicationPolicies:
             return 'Application Policies';
+        case ActiveDirectoryKindProperties.IssuancePolicies:
+            return 'Issuance Policies';
         case ActiveDirectoryKindProperties.SchemaVersion:
             return 'Schema Version';
         case ActiveDirectoryKindProperties.RequiresManagerApproval:
@@ -435,6 +439,8 @@ export function ActiveDirectoryKindPropertiesToDisplay(value: ActiveDirectoryKin
             return 'Effective EKUs';
         case ActiveDirectoryKindProperties.EnrollmentFlag:
             return 'Enrollment Flags';
+        case ActiveDirectoryKindProperties.Flags:
+            return 'Flags';
         case ActiveDirectoryKindProperties.NoSecurityExtension:
             return 'No Security Extension';
         case ActiveDirectoryKindProperties.RenewalPeriod:
diff --git a/packages/javascript/bh-shared-ui/src/views/Explore/ExploreSearch/index.ts b/packages/javascript/bh-shared-ui/src/views/Explore/ExploreSearch/index.ts
index b346803b4c..2b8d8512bb 100644
--- a/packages/javascript/bh-shared-ui/src/views/Explore/ExploreSearch/index.ts
+++ b/packages/javascript/bh-shared-ui/src/views/Explore/ExploreSearch/index.ts
@@ -14,4 +14,4 @@
 //
 // SPDX-License-Identifier: Apache-2.0
 
-export * from './edgeTypes';
\ No newline at end of file
+export * from './edgeTypes';