Export (0) Print
Expand All

3.1.7.2 Domain Unjoin Processing

This event accepts the following parameter:

DomainSID: A SID ([MS-DTYP] section 2.4.2) identifying the domain being joined.

Upon invocation of this event, the server MUST perform the following processing:

  1. Let A be the database object whose objectSid is S-1-5-32-544, whose database object type is group (that is, an object with objectClass group or derived from group), and with groupType containing GROUP_TYPE_RESOURCE_GROUP. If A's member attribute contains a dsname value that references the object whose objectSid specifies the SID for the Domain Administrators group, the server MUST remove that value. The SID for the Domain Administrators group is constructed by joining the DomainSID parameter with the well-known RID for Domain Administrators ([MS-ADTS] section 6.1.1.6.5).

  2. Let B be the database object whose objectSid is S-1-5-32-545, whose database object type is group (that is, an object with objectClass group or derived from group), and with groupType containing GROUP_TYPE_RESOURCE_GROUP. If B's member attribute contains a dsname value that references the object whose objectSid specifies the SID for the Domain Users group, the server MUST remove that value. The SID for the Domain Users group is constructed by joining the DomainSID parameter with the well-known RID for Domain Users ([MS-ADTS] section 6.1.1.6.9).

 
Show:
© 2014 Microsoft