| http://www.w3.org/ns/prov#value | - These are universal well-known SIDs"; they are the same for every machine and do not have the domain identifier component, therefore they cannot be associated with any particular domain. (If they did, joining a machine to a domain would break a lot of stuff, particularly ACLs.)
|
