https://www.ajsnetworking.com/70-742-active-directory/
70-742 Additional Notes – Default Windows Server Security Groups