;
; Standard Security Descriptor
;
[Standard]
; Modify User Attributes <-> Personal Information
#MODIFY_USER_ATT#77b5b886-944a-11d1-ae-bd-00-00-f8-03-67-c1#EQUAL#KEEP#AND#TRUE

; This rule nulls the above one for Groups
; Groups don't support "Personal Information", so set this as nop
#MODIFY_USER_ATT#77b5b886-944a-11d1-ae-bd-00-00-f8-03-67-c1#nop#KEEP#nop#false#group$top##

; Modify User Attributes <-> Write Member (only for Groups/DLs)
#MODIFY_USER_ATT#bf9679c0-0de6-11d0-a2-85-00-aa-00-30-49-e2#EQUAL#KEEP#AND#TRUE#group$top#groupofnames$person$top#


;
; Mailbox Security Descriptor
;
[Mailbox]
; For Mailbox/CR/DL <==> 'nt objects' (User or Contact or Group)
#SEND_AS#0x00000002#EQUAL#KEEP#AND#TRUE#

; For Mailbox <==> User
#RECEIVE_AS#0x00000001#EQUAL#KEEP#AND#TRUE#user$organizationalperson$person$top#organizationalPerson$person$top#