Home Library Learn Samples Downloads Support Community Forums
MSDN Library
Open Specifications
Protocols
Windows Protocols
Technical Documents
[MS-ADLS]: Active Directory Lightweight Directory Services Schema
2 Attributes
2.1 Attribute accountExpires
2.2 Attribute adminContextMenu
2.3 Attribute adminDescription
2.4 Attribute adminDisplayName
2.5 Attribute adminMultiselectPropertyPages
2.6 Attribute adminPropertyPages
2.7 Attribute allowedAttributes
2.8 Attribute allowedAttributesEffective
2.9 Attribute allowedChildClasses
2.10 Attribute allowedChildClassesEffective
2.11 Attribute aNR
2.12 Attribute appliesTo
2.13 Attribute assistant
2.14 Attribute attributeCertificateAttribute
2.15 Attribute attributeDisplayNames
2.16 Attribute attributeID
2.17 Attribute attributeSecurityGUID
2.18 Attribute attributeSyntax
2.19 Attribute attributeTypes
2.20 Attribute audio
2.21 Attribute auxiliaryClass
2.22 Attribute badPasswordTime
2.23 Attribute badPwdCount
2.24 Attribute bridgeheadServerListBL
2.25 Attribute bridgeheadTransportList
2.26 Attribute businessCategory
2.27 Attribute c
2.28 Attribute canonicalName
2.29 Attribute carLicense
2.30 Attribute classDisplayName
2.31 Attribute cn
2.32 Attribute co
2.33 Attribute comment
2.34 Attribute company
2.35 Attribute configurationFile
2.36 Attribute configurationFileGuid
2.37 Attribute contextMenu
2.38 Attribute cost
2.39 Attribute countryCode
2.40 Attribute createDialog
2.41 Attribute createTimeStamp
2.42 Attribute createWizardExt
2.43 Attribute creationWizard
2.44 Attribute dc
2.45 Attribute defaultClassStore
2.46 Attribute defaultGroup
2.47 Attribute defaultHidingValue
2.48 Attribute defaultObjectCategory
2.49 Attribute defaultSecurityDescriptor
2.50 Attribute department
2.51 Attribute departmentNumber
2.52 Attribute description
2.53 Attribute desktopProfile
2.54 Attribute destinationIndicator
2.55 Attribute directReports
2.56 Attribute displayName
2.57 Attribute displayNamePrintable
2.58 Attribute distinguishedName
2.59 Attribute dITContentRules
2.60 Attribute division
2.61 Attribute dMDLocation
2.62 Attribute dmdName
2.63 Attribute dNSHostName
2.64 Attribute dnsRoot
2.65 Attribute dSASignature
2.66 Attribute dSCorePropagationData
2.67 Attribute dSHeuristics
2.68 Attribute dSUIAdminMaximum
2.69 Attribute dSUIAdminNotification
2.70 Attribute dSUIShellMaximum
2.71 Attribute dynamicLDAPServer
2.72 Attribute employeeID
2.73 Attribute employeeNumber
2.74 Attribute employeeType
2.75 Attribute Enabled
2.76 Attribute enabledConnection
2.77 Attribute entryTTL
2.78 Attribute extendedAttributeInfo
2.79 Attribute extendedCharsAllowed
2.80 Attribute extendedClassInfo
2.81 Attribute extensionName
2.82 Attribute extraColumns
2.83 Attribute facsimileTelephoneNumber
2.84 Attribute fromEntry
2.85 Attribute fromServer
2.86 Attribute fSMORoleOwner
2.87 Attribute garbageCollPeriod
2.88 Attribute generatedConnection
2.89 Attribute generationQualifier
2.90 Attribute givenName
2.91 Attribute governsID
2.92 Attribute groupType
2.93 Attribute hasMasterNCs
2.94 Attribute hasPartialReplicaNCs
2.95 Attribute homePhone
2.96 Attribute homePostalAddress
2.97 Attribute houseIdentifier
2.98 Attribute iconPath
2.99 Attribute initials
2.100 Attribute instanceType
2.101 Attribute internationalISDNNumber
2.102 Attribute interSiteTopologyFailover
2.103 Attribute interSiteTopologyGenerator
2.104 Attribute interSiteTopologyRenew
2.105 Attribute invocationId
2.106 Attribute ipPhone
2.107 Attribute isCriticalSystemObject
2.108 Attribute isDefunct
2.109 Attribute isDeleted
2.110 Attribute isEphemeral
2.111 Attribute isMemberOfPartialAttributeSet
2.112 Attribute isRecycled
2.113 Attribute isSingleValued
2.114 Attribute jpegPhoto
2.115 Attribute keywords
2.116 Attribute l
2.117 Attribute labeledURI
2.118 Attribute lastAgedChange
2.119 Attribute lastBackupRestorationTime
2.120 Attribute lastKnownParent
2.121 Attribute lastLogonTimestamp
2.122 Attribute lDAPAdminLimits
2.123 Attribute lDAPDisplayName
2.124 Attribute lDAPIPDenyList
2.125 Attribute linkID
2.126 Attribute localizationDisplayId
2.127 Attribute location
2.128 Attribute lockoutTime
2.129 Attribute mail
2.130 Attribute mailAddress
2.131 Attribute managedBy
2.132 Attribute managedObjects
2.133 Attribute manager
2.134 Attribute masteredBy
2.135 Attribute mayContain
2.136 Attribute member
2.137 Attribute memberOf
2.138 Attribute middleName
2.139 Attribute mobile
2.140 Attribute modifyTimeStamp
2.141 Attribute moveTreeState
2.142 Attribute mS-DS-ConsistencyChildCount
2.143 Attribute mS-DS-ConsistencyGuid
2.144 Attribute mS-DS-ReplicatesNCReason
2.145 Attribute ms-DS-UserAccountAutoLocked
2.146 Attribute ms-DS-UserEncryptedTextPasswordAllowed
2.147 Attribute ms-DS-UserPasswordNotRequired
2.148 Attribute msDS-AllowedDNSSuffixes
2.149 Attribute msDS-Approx-Immed-Subordinates
2.150 Attribute msDS-Auxiliary-Classes
2.151 Attribute msDS-AzApplicationData
2.152 Attribute msDS-AzApplicationName
2.153 Attribute msDS-AzApplicationVersion
2.154 Attribute msDS-AzBizRule
2.155 Attribute msDS-AzBizRuleLanguage
2.156 Attribute msDS-AzClassId
2.157 Attribute msDS-AzDomainTimeout
2.158 Attribute msDS-AzGenerateAudits
2.159 Attribute msDS-AzGenericData
2.160 Attribute msDS-AzLastImportedBizRulePath
2.161 Attribute msDS-AzLDAPQuery
2.162 Attribute msDS-AzMajorVersion
2.163 Attribute msDS-AzMinorVersion
2.164 Attribute msDS-AzObjectGuid
2.165 Attribute msDS-AzOperationID
2.166 Attribute msDS-AzScopeName
2.167 Attribute msDS-AzScriptEngineCacheMax
2.168 Attribute msDS-AzScriptTimeout
2.169 Attribute msDS-AzTaskIsRoleDefinition
2.170 Attribute msDS-Behavior-Version
2.171 Attribute msDS-BridgeHeadServersUsed
2.172 Attribute msDS-DefaultNamingContext
2.173 Attribute msDS-DefaultNamingContextBL
2.174 Attribute msDS-DefaultQuota
2.175 Attribute msDS-DeletedObjectLifetime
2.176 Attribute msDS-DisableForInstances
2.177 Attribute msDS-DisableForInstancesBL
2.178 Attribute msDS-DnsRootAlias
2.179 Attribute msDS-EnabledFeature
2.180 Attribute msDS-EnabledFeatureBL
2.181 Attribute msDS-Entry-Time-To-Die
2.182 Attribute msDS-ExecuteScriptPassword
2.183 Attribute msDS-FilterContainers
2.184 Attribute msDS-HasDomainNCs
2.185 Attribute msDS-HasInstantiatedNCs
2.186 Attribute msDS-hasMasterNCs
2.187 Attribute msDS-IntId
2.188 Attribute msDS-LastKnownRDN
2.189 Attribute msDS-LocalEffectiveDeletionTime
2.190 Attribute msDS-LocalEffectiveRecycleTime
2.191 Attribute msDs-masteredBy
2.192 Attribute msDS-MembersForAzRole
2.193 Attribute msDS-MembersForAzRoleBL
2.194 Attribute msDS-NC-Replica-Locations
2.195 Attribute msDS-NCReplCursors
2.196 Attribute msDS-NCReplInboundNeighbors
2.197 Attribute msDS-NCReplOutboundNeighbors
2.198 Attribute msDS-Non-Security-Group-Extra-Classes
2.199 Attribute msDS-NonMembers
2.200 Attribute msDS-NonMembersBL
2.201 Attribute msDS-OperationsForAzRole
2.202 Attribute msDS-OperationsForAzRoleBL
2.203 Attribute msDS-OperationsForAzTask
2.204 Attribute msDS-OperationsForAzTaskBL
2.205 Attribute msDS-OptionalFeatureFlags
2.206 Attribute msDS-OptionalFeatureGUID
2.207 Attribute msDS-Other-Settings
2.208 Attribute msDS-PortLDAP
2.209 Attribute msDS-PortSSL
2.210 Attribute msDS-Preferred-GC-Site
2.211 Attribute msDS-PrincipalName
2.212 Attribute msDS-QuotaAmount
2.213 Attribute msDS-QuotaEffective
2.214 Attribute msDS-QuotaTrustee
2.215 Attribute msDS-QuotaUsed
2.216 Attribute msDS-ReplAttributeMetaData
2.217 Attribute msDS-ReplAuthenticationMode
2.218 Attribute msDS-Replication-Notify-First-DSA-Delay
2.219 Attribute msDS-Replication-Notify-Subsequent-DSA-Delay
2.220 Attribute msDS-ReplicationEpoch
2.221 Attribute msDS-ReplValueMetaData
2.222 Attribute msDS-RequiredDomainBehaviorVersion
2.223 Attribute msDS-RequiredForestBehaviorVersion
2.224 Attribute msDS-RetiredReplNCSignatures
2.225 Attribute msDs-Schema-Extensions
2.226 Attribute msDS-SCPContainer
2.227 Attribute msDS-SDReferenceDomain
2.228 Attribute msDS-Security-Group-Extra-Classes
2.229 Attribute msDS-ServiceAccount
2.230 Attribute msDS-ServiceAccountBL
2.231 Attribute msDS-ServiceAccountDNSDomain
2.232 Attribute msDS-Settings
2.233 Attribute msDS-TasksForAzRole
2.234 Attribute msDS-TasksForAzRoleBL
2.235 Attribute msDS-TasksForAzTask
2.236 Attribute msDS-TasksForAzTaskBL
2.237 Attribute msDS-TombstoneQuotaFactor
2.238 Attribute msDS-TopQuotaUsage
2.239 Attribute msDS-UpdateScript
2.240 Attribute msDS-User-Account-Control-Computed
2.241 Attribute msDS-UserAccountDisabled
2.242 Attribute msDS-UserDontExpirePassword
2.243 Attribute msDS-UserPasswordExpired
2.244 Attribute msDS-USNLastSyncSuccess
2.245 Attribute mustContain
2.246 Attribute name
2.247 Attribute nCName
2.248 Attribute nETBIOSName
2.249 Attribute networkAddress
2.250 Attribute nonIndexedMetadata
2.251 Attribute notificationList
2.252 Attribute ntPwdHistory
2.253 Attribute nTSecurityDescriptor
2.254 Attribute o
2.255 Attribute objectCategory
2.256 Attribute objectClass
2.257 Attribute objectClassCategory
2.258 Attribute objectClasses
2.259 Attribute objectGUID
2.260 Attribute objectSid
2.261 Attribute objectVersion
2.262 Attribute oMObjectClass
2.263 Attribute oMSyntax
2.264 Attribute options
2.265 Attribute otherFacsimileTelephoneNumber
2.266 Attribute otherHomePhone
2.267 Attribute otherIpPhone
2.268 Attribute otherMobile
2.269 Attribute otherPager
2.270 Attribute otherTelephone
2.271 Attribute otherWellKnownObjects
2.272 Attribute ou
2.273 Attribute owner
2.274 Attribute ownerBL
2.275 Attribute pager
2.276 Attribute parentGUID
2.277 Attribute partialAttributeDeletionList
2.278 Attribute partialAttributeSet
2.279 Attribute pekList
2.280 Attribute personalTitle
2.281 Attribute photo
2.282 Attribute physicalDeliveryOfficeName
2.283 Attribute possibleInferiors
2.284 Attribute possSuperiors
2.285 Attribute postalAddress
2.286 Attribute postalCode
2.287 Attribute postOfficeBox
2.288 Attribute preferredDeliveryMethod
2.289 Attribute preferredLanguage
2.290 Attribute preferredOU
2.291 Attribute prefixMap
2.292 Attribute primaryGroupToken
2.293 Attribute primaryInternationalISDNNumber
2.294 Attribute primaryTelexNumber
2.295 Attribute proxiedObjectName
2.296 Attribute proxyAddresses
2.297 Attribute pwdLastSet
2.298 Attribute queryFilter
2.299 Attribute queryPolicyBL
2.300 Attribute queryPolicyObject
2.301 Attribute rangeLower
2.302 Attribute rangeUpper
2.303 Attribute rDNAttID
2.304 Attribute registeredAddress
2.305 Attribute replInterval
2.306 Attribute replPropertyMetaData
2.307 Attribute replTopologyStayOfExecution
2.308 Attribute replUpToDateVector
2.309 Attribute repsFrom
2.310 Attribute repsTo
2.311 Attribute retiredReplDSASignatures
2.312 Attribute revision
2.313 Attribute rightsGuid
2.314 Attribute roomNumber
2.315 Attribute rootTrust
2.316 Attribute schedule
2.317 Attribute schemaFlagsEx
2.318 Attribute schemaIDGUID
2.319 Attribute schemaInfo
2.320 Attribute schemaUpdate
2.321 Attribute schemaVersion
2.322 Attribute scopeFlags
2.323 Attribute sDRightsEffective
2.324 Attribute searchFlags
2.325 Attribute searchGuide
2.326 Attribute secretary
2.327 Attribute seeAlso
2.328 Attribute serialNumber
2.329 Attribute serverReference
2.330 Attribute serverReferenceBL
2.331 Attribute shellContextMenu
2.332 Attribute shellPropertyPages
2.333 Attribute showInAdvancedViewOnly
2.334 Attribute siteLinkList
2.335 Attribute siteList
2.336 Attribute siteObject
2.337 Attribute siteObjectBL
2.338 Attribute siteServer
2.339 Attribute sn
2.340 Attribute sourceObjectGuid
2.341 Attribute st
2.342 Attribute street
2.343 Attribute streetAddress
2.344 Attribute structuralObjectClass
2.345 Attribute subClassOf
2.346 Attribute subRefs
2.347 Attribute subSchemaSubEntry
2.348 Attribute superiorDNSRoot
2.349 Attribute supplementalCredentials
2.350 Attribute systemAuxiliaryClass
2.351 Attribute systemFlags
2.352 Attribute systemMayContain
2.353 Attribute systemMustContain
2.354 Attribute systemOnly
2.355 Attribute systemPossSuperiors
2.356 Attribute telephoneNumber
2.357 Attribute teletexTerminalIdentifier
2.358 Attribute telexNumber
2.359 Attribute thumbnailLogo
2.360 Attribute thumbnailPhoto
2.361 Attribute title
2.362 Attribute tokenGroups
2.363 Attribute tombstoneLifetime
2.364 Attribute transportAddressAttribute
2.365 Attribute transportDLLName
2.366 Attribute transportType
2.367 Attribute treatAsLeaf
2.368 Attribute trustParent
2.369 Attribute uid
2.370 Attribute unicodePwd
2.371 Attribute uPNSuffixes
2.372 Attribute url
2.373 Attribute userCertificate
2.374 Attribute userParameters
2.375 Attribute userPassword
2.376 Attribute userPKCS12
2.377 Attribute userPrincipalName
2.378 Attribute userSMIMECertificate
2.379 Attribute uSNChanged
2.380 Attribute uSNCreated
2.381 Attribute uSNDSALastObjRemoved
2.382 Attribute USNIntersite
2.383 Attribute uSNLastObjRem
2.384 Attribute uSNSource
2.385 Attribute validAccesses
2.386 Attribute wbemPath
2.387 Attribute wellKnownObjects
2.388 Attribute whenChanged
2.389 Attribute whenCreated
2.390 Attribute wWWHomePage
2.391 Attribute x121Address
2.392 Attribute x500uniqueIdentifier
Expand Minimize
This topic has not yet been rated - Rate this topic

2.362 Attribute tokenGroups

This computed attribute contains the list of SIDs due to a transitive group membership expansion operation on a given user or computer. Token groups cannot be retrieved if no global catalog is present to retrieve the transitive reverse memberships.

cn: Token-Groups
ldapDisplayName: tokenGroups
attributeId: 1.2.840.113556.1.4.1301
attributeSyntax: 2.5.5.17
omSyntax: 4
isSingleValued: FALSE
schemaIdGuid: b7c69e6d-2cc7-11d2-854e-00a0c983f608
systemOnly: FALSE
searchFlags: 0
attributeSecurityGuid: 037088f8-0ae1-11d2-b422-00a0c968f939
systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED | 
 FLAG_DOMAIN_DISALLOW_RENAME

Version-Specific Behavior: Implemented on Active Directory® Application Mode (ADAM), Windows Server® 2008 operating system, Active Directory® Lightweight Directory Services (AD LDS) for Windows® Vista, Windows Server® 2008 R2 operating system, Active Directory® Lightweight Directory Services (AD LDS) for Windows® 7, Windows Server® 2012 operating system, and Active Directory® Lightweight Directory Services (AD LDS) for Windows® 8.

 
Did you find this helpful?
(1500 characters remaining)
© 2013 Microsoft. All rights reserved.