2.311 Attribute tokenGroups

This attribute specifies a computed attribute that contains the list of SIDs due to a transitive group membership expansion operation on a given user or computer. Token groups cannot be retrieved if no global catalog is present to retrieve the transitive reverse memberships.

 cn: Token-Groups
 ldapDisplayName: tokenGroups
 attributeId: 1.2.840.113556.1.4.1301
 attributeSyntax: 2.5.5.17
 omSyntax: 4
 isSingleValued: FALSE
 schemaIdGuid: b7c69e6d-2cc7-11d2-854e-00a0c983f608
 systemOnly: FALSE
 searchFlags: 0
 attributeSecurityGuid: 037088f8-0ae1-11d2-b422-00a0c968f939
 systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED | 
  FLAG_DOMAIN_DISALLOW_RENAME
 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

Version-Specific Behavior: Implemented on Windows 2000 Server operating system, Windows Server 2003 operating system, Windows Server 2003 R2 operating system, Windows Server 2008 operating system, Windows Server 2008 R2 operating system, Windows Server 2012 operating system, Windows Server 2012 R2 operating system, Windows Server 2016 operating system, and Windows Server operating system.

The schemaFlagsEx attribute was added to this attribute definition in Windows Server 2008.

Show: