Export (0) Print
Expand All
Expand Minimize

2.327 Attribute sDRightsEffective

This constructed attribute returns a single DWORD value that can have up to three bits set: OWNER_SECURITY_INFORMATION, DACL_SECURITY_INFORMATION, and SACL_SECURITY_INFORMATION. If a bit is set, then the user has write access to the corresponding part of the security descriptor.

Note  "Owner" means both owner and group.

cn: SD-Rights-Effective
ldapDisplayName: sDRightsEffective
attributeId: 1.2.840.113556.1.4.1304
attributeSyntax: 2.5.5.9
omSyntax: 2
isSingleValued: TRUE
schemaIdGuid: c3dbafa6-33df-11d2-98b2-0000f87a57d4
systemOnly: FALSE
searchFlags: 0
attributeSecurityGuid: 59ba2f42-79a2-11d0-9020-00c04fc2d3cf
systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED | 
 FLAG_DOMAIN_DISALLOW_RENAME

Version-Specific Behavior: Implemented on Active Directory Application Mode (ADAM), Windows Server 2008 operating system, Active Directory Lightweight Directory Services (AD LDS) for Windows Vista, Windows Server 2008 R2 operating system, Active Directory Lightweight Directory Services (AD LDS) for Windows 7, Windows Server 2012 operating system, Active Directory Lightweight Directory Services (AD LDS) for Windows 8 operating system, Windows Server 2012 R2 operating system, and Active Directory Lightweight Directory Services (AD LDS) for Windows 8.1 operating system.

 
Show:
© 2014 Microsoft