3.1.1.5.3.1.1 Validated Writes

  • Article

msdn link

In some cases, when the requester does not have RIGHT_DS_WRITE_PROPERTY access on an attribute, but has RIGHT_DS_WRITE_PROPERTY_EXTENDED access (also called "validated write"), then the write is allowed, subject to additional constraints for the attribute value. The following subsections specify the additional checks that are performed for validated writes of the specified attributes.

See section 5.1.3.2.2 for the validated write rights GUIDs.