Was this page helpful?
Your feedback about this content is important. Let us know what you think.
Additional feedback?
1500 characters remaining
NTDS-DSA
DMD
DSA
Top
Collapse the table of content
Expand the table of content

NTDS-DSA class

Represents the Active Directory DSA process on the server.

CNNTDS-DSA
Ldap-Display-NamenTDSDSA
Update Privilege-
Update Frequency-
Schema-Id-Guidf0f8ffab-1191-11d0-a060-00aa006c33ed

Implementations

Windows 2000 Server

System-OnlyTrue
Object-Category1
Default-Object-Category-
Governs-Id1.2.840.113556.1.5.7000.47
Default-Hiding-Value1
Rdn-Att-Id
Subclass of
Possible Superiors Server
 
Organization
Auxiliary Classes-
NT-Security-DescriptorO:BAG:BAD:S:
Default Security DescriptorD:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)
System-Flags0x00000010

Windows 2000 Server Attributes

This class contains the following attributes for Windows 2000 Server:

AttributeMandatoryDerived from
Admin-Description False
Top
Admin-Display-Name False
Top
Allowed-Attributes False
Top
Allowed-Attributes-Effective False
Top
Allowed-Child-Classes False
Top
Allowed-Child-Classes-Effective False
Top
Application-Name False
Bridgehead-Server-List-BL False
Top
Canonical-Name False
Top
Common-Name False
Top
Create-Time-Stamp False
Top
Description False
Top
Display-Name False
Top
Display-Name-Printable False
Top
DMD-Location FalseNTDS-DSA
DSA-Signature False
Top
DS-Core-Propagation-Data False
Top
Extension-Name False
Top
Flags False
Top
From-Entry False
Top
Frs-Computer-Reference-BL False
Top
FRS-Member-Reference-BL False
Top
FRS-Root-Path FalseNTDS-DSA
FSMO-Role-Owner False
Top
Has-Master-NCs FalseNTDS-DSA
Has-Partial-Replica-NCs FalseNTDS-DSA
Instance-Type True
Top
Invocation-Id FalseNTDS-DSA
Is-Critical-System-Object False
Top
Is-Deleted False
Top
Is-Member-Of-DL False
Top
Is-Privilege-Holder False
Top
Last-Backup-Restoration-Time FalseNTDS-DSA
Last-Known-Parent False
Top
Managed-By FalseNTDS-DSA
Managed-Objects False
Top
Mastered-By False
Top
Modify-Time-Stamp False
Top
MS-DS-Consistency-Child-Count False
Top
MS-DS-Consistency-Guid False
Top
netboot-SCP-BL False
Top
Network-Address FalseNTDS-DSA
Non-Security-Member-BL False
Top
Notification-List False
NT-Security-Descriptor True
Top
Obj-Dist-Name False
Top
Object-Category True
Top
Object-Class True
Top
Object-Guid False
Top
Object-Version False
Top
Options FalseNTDS-DSA
Other-Well-Known-Objects False
Top
Partial-Attribute-Deletion-List False
Top
Partial-Attribute-Set False
Top
Possible-Inferiors False
Top
Proxied-Object-Name False
Top
Proxy-Addresses False
Top
Query-Policy-BL False
Top
Query-Policy-Object FalseNTDS-DSA
RDN False
Top
Repl-Property-Meta-Data False
Top
Repl-UpToDate-Vector False
Top
Reports False
Top
Reps-From False
Top
Reps-To False
Top
Retired-Repl-DSA-Signatures FalseNTDS-DSA
Revision False
Top
SD-Rights-Effective False
Top
Server-Reference FalseNTDS-DSA
Server-Reference-BL False
Top
Show-In-Advanced-View-Only False
Top
Site-Object-BL False
Top
Sub-Refs False
Top
SubSchemaSubEntry False
Top
System-Flags False
Top
USN-Changed False
Top
USN-Created False
Top
USN-DSA-Last-Obj-Removed False
Top
USN-Intersite False
Top
USN-Last-Obj-Rem False
Top
USN-Source False
Top
Wbem-Path False
Top
Well-Known-Objects False
Top
When-Changed False
Top
When-Created False
Top
WWW-Home-Page False
Top
WWW-Page-Other False
Top

Windows 2000 Server Extended Rights

This class contains the following extended rights for Windows 2000 Server:

Common Name
Abandon-Replication
Do-Garbage-Collection
Recalculate-Hierarchy
Allocate-Rids
Recalculate-Security-Inheritance
DS-Check-Stale-Phantoms

Windows Server 2003

System-OnlyTrue
Object-Category1
Default-Object-Category-
Governs-Id1.2.840.113556.1.5.7000.47
Default-Hiding-Value1
Rdn-Att-Id
Subclass of
Possible Superiors Server
 
Organization
Auxiliary Classes-
NT-Security-DescriptorO:BAG:BAD:S:
Default Security DescriptorD:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)
System-Flags0x00000010

Windows Server 2003 Attributes

This class contains the following attributes for Windows Server 2003:

AttributeMandatoryDerived from
Admin-Description False
Top
Admin-Display-Name False
Top
Allowed-Attributes False
Top
Allowed-Attributes-Effective False
Top
Allowed-Child-Classes False
Top
Allowed-Child-Classes-Effective False
Top
Application-Name False
Bridgehead-Server-List-BL False
Top
Canonical-Name False
Top
Common-Name False
Top
Create-Time-Stamp False
Top
Description False
Top
Display-Name False
Top
Display-Name-Printable False
Top
DMD-Location FalseNTDS-DSA
DSA-Signature False
Top
DS-Core-Propagation-Data False
Top
Extension-Name False
Top
Flags False
Top
From-Entry False
Top
Frs-Computer-Reference-BL False
Top
FRS-Member-Reference-BL False
Top
FRS-Root-Path FalseNTDS-DSA
FSMO-Role-Owner False
Top
Has-Master-NCs FalseNTDS-DSA
Has-Partial-Replica-NCs FalseNTDS-DSA
Instance-Type True
Top
Invocation-Id FalseNTDS-DSA
Is-Critical-System-Object False
Top
Is-Deleted False
Top
Is-Member-Of-DL False
Top
Is-Privilege-Holder False
Top
Last-Backup-Restoration-Time FalseNTDS-DSA
Last-Known-Parent False
Top
Managed-By FalseNTDS-DSA
Managed-Objects False
Top
Mastered-By False
Top
Modify-Time-Stamp False
Top
ms-COM-PartitionSetLink False
Top
ms-COM-UserLink False
Top
ms-DS-Approx-Immed-Subordinates False
Top
ms-DS-Behavior-Version FalseNTDS-DSA
MS-DS-Consistency-Child-Count False
Top
MS-DS-Consistency-Guid False
Top
ms-DS-Has-Domain-NCs FalseNTDS-DSA
ms-DS-Has-Instantiated-NCs FalseNTDS-DSA
ms-DS-Has-Master-NCs FalseNTDS-DSA
ms-DS-Mastered-By False
Top
ms-DS-Members-For-Az-Role-BL False
Top
ms-DS-NC-Repl-Cursors False
Top
ms-DS-NC-Repl-Inbound-Neighbors False
Top
ms-DS-NC-Repl-Outbound-Neighbors False
Top
ms-DS-Non-Members-BL False
Top
ms-DS-Object-Reference-BL False
Top
ms-DS-Operations-For-Az-Role-BL False
Top
ms-DS-Operations-For-Az-Task-BL False
Top
ms-DS-Repl-Attribute-Meta-Data False
Top
ms-DS-ReplicationEpoch FalseNTDS-DSA
ms-DS-Repl-Value-Meta-Data False
Top
ms-DS-Retired-Repl-NC-Signatures FalseNTDS-DSA
ms-DS-Settings False
ms-DS-Tasks-For-Az-Role-BL False
Top
ms-DS-Tasks-For-Az-Task-BL False
Top
ms-Exch-Owner-BL False
Top
netboot-SCP-BL False
Top
Network-Address FalseNTDS-DSA
Non-Security-Member-BL False
Top
Notification-List False
NT-Security-Descriptor True
Top
Obj-Dist-Name False
Top
Object-Category True
Top
Object-Class True
Top
Object-Guid False
Top
Object-Version False
Top
Options FalseNTDS-DSA
Other-Well-Known-Objects False
Top
Partial-Attribute-Deletion-List False
Top
Partial-Attribute-Set False
Top
Possible-Inferiors False
Top
Proxied-Object-Name False
Top
Proxy-Addresses False
Top
Query-Policy-BL False
Top
Query-Policy-Object FalseNTDS-DSA
RDN False
Top
Repl-Property-Meta-Data False
Top
Repl-UpToDate-Vector False
Top
Reports False
Top
Reps-From False
Top
Reps-To False
Top
Retired-Repl-DSA-Signatures FalseNTDS-DSA
Revision False
Top
SD-Rights-Effective False
Top
Server-Reference FalseNTDS-DSA
Server-Reference-BL False
Top
Show-In-Advanced-View-Only False
Top
Site-Object-BL False
Top
Structural-Object-Class False
Top
Sub-Refs False
Top
SubSchemaSubEntry False
Top
System-Flags False
Top
USN-Changed False
Top
USN-Created False
Top
USN-DSA-Last-Obj-Removed False
Top
USN-Intersite False
Top
USN-Last-Obj-Rem False
Top
USN-Source False
Top
Wbem-Path False
Top
Well-Known-Objects False
Top
When-Changed False
Top
When-Created False
Top
WWW-Home-Page False
Top
WWW-Page-Other False
Top

Windows Server 2003 Extended Rights

This class contains the following extended rights for Windows Server 2003:

Common Name
Do-Garbage-Collection
Recalculate-Hierarchy
Allocate-Rids
Recalculate-Security-Inheritance
DS-Check-Stale-Phantoms
Refresh-Group-Cache

ADAM

System-OnlyTrue
Object-Category1
Default-Object-Category-
Governs-Id1.2.840.113556.1.5.7000.47
Default-Hiding-Value1
Rdn-Att-Id
Subclass of
Possible Superiors Server
 
Organization
Auxiliary Classes-
NT-Security-DescriptorO:BAG:BAD:S:
Default Security DescriptorD:S:
System-Flags0x00000010

ADAM Attributes

This class contains the following attributes for ADAM:

AttributeMandatoryDerived from
Admin-Description False
Top
Admin-Display-Name False
Top
Allowed-Attributes False
Top
Allowed-Attributes-Effective False
Top
Allowed-Child-Classes False
Top
Allowed-Child-Classes-Effective False
Top
Bridgehead-Server-List-BL False
Top
Canonical-Name False
Top
Common-Name False
Top
Create-Time-Stamp False
Top
Description False
Top
Display-Name False
Top
DMD-Location FalseNTDS-DSA
DSA-Signature False
Top
DS-Core-Propagation-Data False
Top
From-Entry False
Top
FSMO-Role-Owner False
Top
Has-Master-NCs FalseNTDS-DSA
Has-Partial-Replica-NCs FalseNTDS-DSA
Instance-Type True
Top
Invocation-Id FalseNTDS-DSA
Is-Critical-System-Object False
Top
Is-Deleted False
Top
Is-Member-Of-DL False
Top
Last-Backup-Restoration-Time FalseNTDS-DSA
Last-Known-Parent False
Top
Managed-By FalseNTDS-DSA
Managed-Objects False
Top
Mastered-By False
Top
Modify-Time-Stamp False
Top
ms-DS-Approx-Immed-Subordinates False
Top
ms-DS-Behavior-Version FalseNTDS-DSA
MS-DS-Consistency-Child-Count False
Top
MS-DS-Consistency-Guid False
Top
ms-DS-Disable-For-Instances-BL False
Top
ms-DS-Has-Domain-NCs FalseNTDS-DSA
ms-DS-Has-Instantiated-NCs FalseNTDS-DSA
ms-DS-Has-Master-NCs FalseNTDS-DSA
ms-DS-Mastered-By False
Top
ms-DS-NC-Repl-Cursors False
Top
ms-DS-NC-Repl-Inbound-Neighbors False
Top
ms-DS-NC-Repl-Outbound-Neighbors False
Top
ms-DS-Port-LDAP FalseNTDS-DSA
ms-DS-Port-SSL FalseNTDS-DSA
ms-DS-Repl-Attribute-Meta-Data False
Top
ms-DS-ReplicationEpoch FalseNTDS-DSA
ms-DS-Repl-Value-Meta-Data False
Top
ms-DS-Retired-Repl-NC-Signatures FalseNTDS-DSA
ms-DS-Service-Account FalseNTDS-DSA
ms-DS-Service-Account-BL False
Top
ms-DS-Service-Account-DNS-Domain FalseNTDS-DSA
ms-DS-Settings False
Network-Address FalseNTDS-DSA
NT-Security-Descriptor True
Top
Obj-Dist-Name False
Top
Object-Category True
Top
Object-Class True
Top
Object-Guid False
Top
Object-Version False
Top
Options FalseNTDS-DSA
Other-Well-Known-Objects False
Top
Partial-Attribute-Deletion-List False
Top
Partial-Attribute-Set False
Top
Possible-Inferiors False
Top
Proxied-Object-Name False
Top
Proxy-Addresses False
Top
Query-Policy-BL False
Top
Query-Policy-Object FalseNTDS-DSA
RDN False
Top
Repl-Property-Meta-Data False
Top
Repl-UpToDate-Vector False
Top
Reps-From False
Top
Reps-To False
Top
Retired-Repl-DSA-Signatures FalseNTDS-DSA
Revision False
Top
SD-Rights-Effective False
Top
Server-Reference FalseNTDS-DSA
Server-Reference-BL False
Top
Show-In-Advanced-View-Only False
Top
Site-Object-BL False
Top
Structural-Object-Class False
Top
Sub-Refs False
Top
SubSchemaSubEntry False
Top
System-Flags False
Top
USN-Changed False
Top
USN-Created False
Top
USN-DSA-Last-Obj-Removed False
Top
USN-Intersite False
Top
USN-Last-Obj-Rem False
Top
USN-Source False
Top
Wbem-Path False
Top
Well-Known-Objects False
Top
When-Changed False
Top
When-Created False
Top
WWW-Home-Page False
Top
WWW-Page-Other False
Top

ADAM Extended Rights

This class contains the following extended rights for ADAM:

Common Name
Do-Garbage-Collection
Recalculate-Security-Inheritance

Windows Server 2003 R2

System-OnlyTrue
Object-Category1
Default-Object-Category-
Governs-Id1.2.840.113556.1.5.7000.47
Default-Hiding-Value1
Rdn-Att-Id
Subclass of
Possible Superiors Server
 
Organization
Auxiliary Classes-
NT-Security-DescriptorO:BAG:BAD:S:
Default Security DescriptorD:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)
System-Flags0x00000010

Windows Server 2003 R2 Attributes

This class contains the following attributes for Windows Server 2003 R2:

AttributeMandatoryDerived from
Admin-Description False
Top
Admin-Display-Name False
Top
Allowed-Attributes False
Top
Allowed-Attributes-Effective False
Top
Allowed-Child-Classes False
Top
Allowed-Child-Classes-Effective False
Top
Application-Name False
Bridgehead-Server-List-BL False
Top
Canonical-Name False
Top
Common-Name False
Top
Create-Time-Stamp False
Top
Description False
Top
Display-Name False
Top
Display-Name-Printable False
Top
DMD-Location FalseNTDS-DSA
DSA-Signature False
Top
DS-Core-Propagation-Data False
Top
Extension-Name False
Top
Flags False
Top
From-Entry False
Top
Frs-Computer-Reference-BL False
Top
FRS-Member-Reference-BL False
Top
FRS-Root-Path FalseNTDS-DSA
FSMO-Role-Owner False
Top
Has-Master-NCs FalseNTDS-DSA
Has-Partial-Replica-NCs FalseNTDS-DSA
Instance-Type True
Top
Invocation-Id FalseNTDS-DSA
Is-Critical-System-Object False
Top
Is-Deleted False
Top
Is-Member-Of-DL False
Top
Is-Privilege-Holder False
Top
Last-Backup-Restoration-Time FalseNTDS-DSA
Last-Known-Parent False
Top
Managed-By FalseNTDS-DSA
Managed-Objects False
Top
Mastered-By False
Top
Modify-Time-Stamp False
Top
ms-COM-PartitionSetLink False
Top
ms-COM-UserLink False
Top
ms-DFSR-ComputerReferenceBL False
Top
ms-DFSR-MemberReferenceBL False
Top
ms-DS-Approx-Immed-Subordinates False
Top
ms-DS-Behavior-Version FalseNTDS-DSA
MS-DS-Consistency-Child-Count False
Top
MS-DS-Consistency-Guid False
Top
ms-DS-Has-Domain-NCs FalseNTDS-DSA
ms-DS-Has-Instantiated-NCs FalseNTDS-DSA
ms-DS-Has-Master-NCs FalseNTDS-DSA
ms-DS-Mastered-By False
Top
ms-DS-Members-For-Az-Role-BL False
Top
ms-DS-NC-Repl-Cursors False
Top
ms-DS-NC-Repl-Inbound-Neighbors False
Top
ms-DS-NC-Repl-Outbound-Neighbors False
Top
ms-DS-Non-Members-BL False
Top
ms-DS-Object-Reference-BL False
Top
ms-DS-Operations-For-Az-Role-BL False
Top
ms-DS-Operations-For-Az-Task-BL False
Top
ms-DS-Repl-Attribute-Meta-Data False
Top
ms-DS-ReplicationEpoch FalseNTDS-DSA
ms-DS-Repl-Value-Meta-Data False
Top
ms-DS-Retired-Repl-NC-Signatures FalseNTDS-DSA
ms-DS-Settings False
ms-DS-Tasks-For-Az-Role-BL False
Top
ms-DS-Tasks-For-Az-Task-BL False
Top
ms-Exch-Owner-BL False
Top
msSFU-30-Posix-Member-Of False
Top
netboot-SCP-BL False
Top
Network-Address FalseNTDS-DSA
Non-Security-Member-BL False
Top
Notification-List False
NT-Security-Descriptor True
Top
Obj-Dist-Name False
Top
Object-Category True
Top
Object-Class True
Top
Object-Guid False
Top
Object-Version False
Top
Options FalseNTDS-DSA
Other-Well-Known-Objects False
Top
Partial-Attribute-Deletion-List False
Top
Partial-Attribute-Set False
Top
Possible-Inferiors False
Top
Proxied-Object-Name False
Top
Proxy-Addresses False
Top
Query-Policy-BL False
Top
Query-Policy-Object FalseNTDS-DSA
RDN False
Top
Repl-Property-Meta-Data False
Top
Repl-UpToDate-Vector False
Top
Reports False
Top
Reps-From False
Top
Reps-To False
Top
Retired-Repl-DSA-Signatures FalseNTDS-DSA
Revision False
Top
SD-Rights-Effective False
Top
Server-Reference FalseNTDS-DSA
Server-Reference-BL False
Top
Show-In-Advanced-View-Only False
Top
Site-Object-BL False
Top
Structural-Object-Class False
Top
Sub-Refs False
Top
SubSchemaSubEntry False
Top
System-Flags False
Top
USN-Changed False
Top
USN-Created False
Top
USN-DSA-Last-Obj-Removed False
Top
USN-Intersite False
Top
USN-Last-Obj-Rem False
Top
USN-Source False
Top
Wbem-Path False
Top
Well-Known-Objects False
Top
When-Changed False
Top
When-Created False
Top
WWW-Home-Page False
Top
WWW-Page-Other False
Top

Windows Server 2003 R2 Extended Rights

This class contains the following extended rights for Windows Server 2003 R2:

Common Name
Do-Garbage-Collection
Recalculate-Hierarchy
Allocate-Rids
Recalculate-Security-Inheritance
DS-Check-Stale-Phantoms
Refresh-Group-Cache

Windows Server 2008

System-OnlyTrue
Object-Category1
Default-Object-Category-
Governs-Id1.2.840.113556.1.5.7000.47
Default-Hiding-Value1
Rdn-Att-Id
Subclass of
Possible Superiors Server
 
Organization
Auxiliary Classes-
NT-Security-DescriptorO:BAG:BAD:S:
Default Security DescriptorD:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)
System-Flags0x00000010

Windows Server 2008 Attributes

This class contains the following attributes for Windows Server 2008:

AttributeMandatoryDerived from
Admin-Description False
Top
Admin-Display-Name False
Top
Allowed-Attributes False
Top
Allowed-Attributes-Effective False
Top
Allowed-Child-Classes False
Top
Allowed-Child-Classes-Effective False
Top
Application-Name False
Bridgehead-Server-List-BL False
Top
Canonical-Name False
Top
Common-Name False
Top
Create-Time-Stamp False
Top
Description False
Top
Display-Name False
Top
Display-Name-Printable False
Top
DMD-Location FalseNTDS-DSA
DSA-Signature False
Top
DS-Core-Propagation-Data False
Top
Extension-Name False
Top
Flags False
Top
From-Entry False
Top
Frs-Computer-Reference-BL False
Top
FRS-Member-Reference-BL False
Top
FRS-Root-Path FalseNTDS-DSA
FSMO-Role-Owner False
Top
Has-Master-NCs FalseNTDS-DSA
Has-Partial-Replica-NCs FalseNTDS-DSA
Instance-Type True
Top
Invocation-Id FalseNTDS-DSA
Is-Critical-System-Object False
Top
Is-Deleted False
Top
Is-Member-Of-DL False
Top
Is-Privilege-Holder False
Top
Last-Backup-Restoration-Time FalseNTDS-DSA
Last-Known-Parent False
Top
Managed-By FalseNTDS-DSA
Managed-Objects False
Top
Mastered-By False
Top
Modify-Time-Stamp False
Top
ms-COM-PartitionSetLink False
Top
ms-COM-UserLink False
Top
ms-DFSR-ComputerReferenceBL False
Top
ms-DFSR-MemberReferenceBL False
Top
ms-DS-Approx-Immed-Subordinates False
Top
ms-DS-AuthenticatedTo-Accountlist False
Top
ms-DS-Behavior-Version FalseNTDS-DSA
MS-DS-Consistency-Child-Count False
Top
MS-DS-Consistency-Guid False
Top
ms-DS-Has-Domain-NCs FalseNTDS-DSA
ms-DS-Has-Full-Replica-NCs FalseNTDS-DSA
ms-DS-Has-Instantiated-NCs FalseNTDS-DSA
ms-DS-Has-Master-NCs FalseNTDS-DSA
ms-DS-Is-Domain-For False
Top
ms-DS-Is-Full-Replica-For False
Top
ms-DS-isGC FalseNTDS-DSA
ms-DS-Is-Partial-Replica-For False
Top
ms-DS-isRODC FalseNTDS-DSA
ms-DS-Is-User-Cachable-At-Rodc FalseNTDS-DSA
ms-DS-KrbTgt-Link-BL False
Top
ms-DS-Mastered-By False
Top
ms-DS-Members-For-Az-Role-BL False
Top
ms-DS-NC-Repl-Cursors False
Top
ms-DS-NC-Repl-Inbound-Neighbors False
Top
ms-DS-NC-Repl-Outbound-Neighbors False
Top
ms-DS-NC-RO-Replica-Locations-BL False
Top
ms-DS-NC-Type False
Top
ms-DS-Never-Reveal-Group FalseNTDS-DSA
ms-DS-Non-Members-BL False
Top
ms-DS-Object-Reference-BL False
Top
ms-DS-Operations-For-Az-Role-BL False
Top
ms-DS-Operations-For-Az-Task-BL False
Top
ms-DS-Principal-Name False
Top
ms-DS-PSO-Applied False
Top
ms-DS-Repl-Attribute-Meta-Data False
Top
ms-DS-ReplicationEpoch FalseNTDS-DSA
ms-DS-Repl-Value-Meta-Data False
Top
ms-DS-Retired-Repl-NC-Signatures FalseNTDS-DSA
ms-DS-Revealed-DSAs False
Top
ms-DS-Revealed-List-BL False
Top
ms-DS-Revealed-Users FalseNTDS-DSA
ms-DS-Reveal-OnDemand-Group FalseNTDS-DSA
ms-DS-Settings False
ms-DS-SiteName FalseNTDS-DSA
ms-DS-Tasks-For-Az-Role-BL False
Top
ms-DS-Tasks-For-Az-Task-BL False
Top
ms-Exch-Owner-BL False
Top
msSFU-30-Posix-Member-Of False
Top
netboot-SCP-BL False
Top
Network-Address FalseNTDS-DSA
Non-Security-Member-BL False
Top
Notification-List False
NT-Security-Descriptor True
Top
Obj-Dist-Name False
Top
Object-Category True
Top
Object-Class True
Top
Object-Guid False
Top
Object-Version False
Top
Options FalseNTDS-DSA
Other-Well-Known-Objects False
Top
Partial-Attribute-Deletion-List False
Top
Partial-Attribute-Set False
Top
Possible-Inferiors False
Top
Proxied-Object-Name False
Top
Proxy-Addresses False
Top
Query-Policy-BL False
Top
Query-Policy-Object FalseNTDS-DSA
RDN False
Top
Repl-Property-Meta-Data False
Top
Repl-UpToDate-Vector False
Top
Reports False
Top
Reps-From False
Top
Reps-To False
Top
Retired-Repl-DSA-Signatures FalseNTDS-DSA
Revision False
Top
SD-Rights-Effective False
Top
Server-Reference FalseNTDS-DSA
Server-Reference-BL False
Top
Show-In-Advanced-View-Only False
Top
Site-Object-BL False
Top
Structural-Object-Class False
Top
Sub-Refs False
Top
SubSchemaSubEntry False
Top
System-Flags False
Top
USN-Changed False
Top
USN-Created False
Top
USN-DSA-Last-Obj-Removed False
Top
USN-Intersite False
Top
USN-Last-Obj-Rem False
Top
USN-Source False
Top
Wbem-Path False
Top
Well-Known-Objects False
Top
When-Changed False
Top
When-Created False
Top
WWW-Home-Page False
Top
WWW-Page-Other False
Top

Windows Server 2008 Extended Rights

This class contains the following extended rights for Windows Server 2008:

Common Name
Do-Garbage-Collection
Recalculate-Hierarchy
Allocate-Rids
Recalculate-Security-Inheritance
DS-Check-Stale-Phantoms
Refresh-Group-Cache
Reload-SSL-Certificate

Windows Server 2008 R2

System-OnlyTrue
Object-Category1
Default-Object-Category-
Governs-Id1.2.840.113556.1.5.7000.47
Default-Hiding-Value1
Rdn-Att-Id
Subclass of
Possible Superiors Server
 
Organization
Auxiliary Classes-
NT-Security-DescriptorO:BAG:BAD:S:
Default Security DescriptorD:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)
System-Flags0x00000010

Windows Server 2008 R2 Attributes

This class contains the following attributes for Windows Server 2008 R2:

AttributeMandatoryDerived from
Admin-Description False
Top
Admin-Display-Name False
Top
Allowed-Attributes False
Top
Allowed-Attributes-Effective False
Top
Allowed-Child-Classes False
Top
Allowed-Child-Classes-Effective False
Top
Application-Name False
Bridgehead-Server-List-BL False
Top
Canonical-Name False
Top
Common-Name False
Top
Create-Time-Stamp False
Top
Description False
Top
Display-Name False
Top
Display-Name-Printable False
Top
DMD-Location FalseNTDS-DSA
DSA-Signature False
Top
DS-Core-Propagation-Data False
Top
Extension-Name False
Top
Flags False
Top
From-Entry False
Top
Frs-Computer-Reference-BL False
Top
FRS-Member-Reference-BL False
Top
FRS-Root-Path FalseNTDS-DSA
FSMO-Role-Owner False
Top
Has-Master-NCs FalseNTDS-DSA
Has-Partial-Replica-NCs FalseNTDS-DSA
Instance-Type True
Top
Invocation-Id FalseNTDS-DSA
Is-Critical-System-Object False
Top
Is-Deleted False
Top
Is-Member-Of-DL False
Top
Is-Privilege-Holder False
Top
Is-Recycled False
Top
Last-Backup-Restoration-Time FalseNTDS-DSA
Last-Known-Parent False
Top
Managed-By FalseNTDS-DSA
Managed-Objects False
Top
Mastered-By False
Top
Modify-Time-Stamp False
Top
ms-COM-PartitionSetLink False
Top
ms-COM-UserLink False
Top
ms-DFSR-ComputerReferenceBL False
Top
ms-DFSR-MemberReferenceBL False
Top
ms-DS-Approx-Immed-Subordinates False
Top
ms-DS-AuthenticatedTo-Accountlist False
Top
ms-DS-Behavior-Version FalseNTDS-DSA
MS-DS-Consistency-Child-Count False
Top
MS-DS-Consistency-Guid False
Top
ms-DS-Enabled-Feature FalseNTDS-DSA
ms-DS-Enabled-Feature-BL False
Top
ms-DS-Has-Domain-NCs FalseNTDS-DSA
ms-DS-Has-Full-Replica-NCs FalseNTDS-DSA
ms-DS-Has-Instantiated-NCs FalseNTDS-DSA
ms-DS-Has-Master-NCs FalseNTDS-DSA
ms-DS-Host-Service-Account-BL False
Top
ms-DS-Is-Domain-For False
Top
ms-DS-Is-Full-Replica-For False
Top
ms-DS-isGC FalseNTDS-DSA
ms-DS-Is-Partial-Replica-For False
Top
ms-DS-isRODC FalseNTDS-DSA
ms-DS-Is-User-Cachable-At-Rodc FalseNTDS-DSA
ms-DS-KrbTgt-Link-BL False
Top
ms-DS-Last-Known-RDN False
Top
ms-DS-local-Effective-Deletion-Time False
Top
ms-DS-local-Effective-Recycle-Time False
Top
ms-DS-Mastered-By False
Top
ms-DS-Members-For-Az-Role-BL False
Top
ms-DS-NC-Repl-Cursors False
Top
ms-DS-NC-Repl-Inbound-Neighbors False
Top
ms-DS-NC-Repl-Outbound-Neighbors False
Top
ms-DS-NC-RO-Replica-Locations-BL False
Top
ms-DS-NC-Type False
Top
ms-DS-Never-Reveal-Group FalseNTDS-DSA
ms-DS-Non-Members-BL False
Top
ms-DS-Object-Reference-BL False
Top
ms-DS-OIDToGroup-Link-BL False
Top
ms-DS-Operations-For-Az-Role-BL False
Top
ms-DS-Operations-For-Az-Task-BL False
Top
ms-DS-Principal-Name False
Top
ms-DS-PSO-Applied False
Top
ms-DS-Repl-Attribute-Meta-Data False
Top
ms-DS-ReplicationEpoch FalseNTDS-DSA
ms-DS-Repl-Value-Meta-Data False
Top
ms-DS-Retired-Repl-NC-Signatures FalseNTDS-DSA
ms-DS-Revealed-DSAs False
Top
ms-DS-Revealed-List-BL False
Top
ms-DS-Revealed-Users FalseNTDS-DSA
ms-DS-Reveal-OnDemand-Group FalseNTDS-DSA
ms-DS-Settings False
ms-DS-SiteName FalseNTDS-DSA
ms-DS-Tasks-For-Az-Role-BL False
Top
ms-DS-Tasks-For-Az-Task-BL False
Top
ms-Exch-Owner-BL False
Top
msSFU-30-Posix-Member-Of False
Top
netboot-SCP-BL False
Top
Network-Address FalseNTDS-DSA
Non-Security-Member-BL False
Top
Notification-List False
NT-Security-Descriptor True
Top
Obj-Dist-Name False
Top
Object-Category True
Top
Object-Class True
Top
Object-Guid False
Top
Object-Version False
Top
Options FalseNTDS-DSA
Other-Well-Known-Objects False
Top
Partial-Attribute-Deletion-List False
Top
Partial-Attribute-Set False
Top
Possible-Inferiors False
Top
Proxied-Object-Name False
Top
Proxy-Addresses False
Top
Query-Policy-BL False
Top
Query-Policy-Object FalseNTDS-DSA
RDN False
Top
Repl-Property-Meta-Data False
Top
Repl-UpToDate-Vector False
Top
Reports False
Top
Reps-From False
Top
Reps-To False
Top
Retired-Repl-DSA-Signatures FalseNTDS-DSA
Revision False
Top
SD-Rights-Effective False
Top
Server-Reference FalseNTDS-DSA
Server-Reference-BL False
Top
Show-In-Advanced-View-Only False
Top
Site-Object-BL False
Top
Structural-Object-Class False
Top
Sub-Refs False
Top
SubSchemaSubEntry False
Top
System-Flags False
Top
USN-Changed False
Top
USN-Created False
Top
USN-DSA-Last-Obj-Removed False
Top
USN-Intersite False
Top
USN-Last-Obj-Rem False
Top
USN-Source False
Top
Wbem-Path False
Top
Well-Known-Objects False
Top
When-Changed False
Top
When-Created False
Top
WWW-Home-Page False
Top
WWW-Page-Other False
Top

Windows Server 2008 R2 Extended Rights

This class contains the following extended rights for Windows Server 2008 R2:

Common Name
Do-Garbage-Collection
Recalculate-Hierarchy
Allocate-Rids
Recalculate-Security-Inheritance
DS-Check-Stale-Phantoms
Refresh-Group-Cache
Reload-SSL-Certificate

Windows Server 2012

System-OnlyTrue
Object-Category1
Default-Object-Category-
Governs-Id1.2.840.113556.1.5.7000.47
Default-Hiding-Value1
Rdn-Att-Id
Subclass of
Possible Superiors Server
 
Organization
Auxiliary Classes-
NT-Security-DescriptorO:BAG:BAD:S:
Default Security DescriptorD:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)
System-Flags0x00000010

Windows Server 2012 Attributes

This class contains the following attributes for Windows Server 2012:

AttributeMandatoryDerived from
Admin-Description False
Top
Admin-Display-Name False
Top
Allowed-Attributes False
Top
Allowed-Attributes-Effective False
Top
Allowed-Child-Classes False
Top
Allowed-Child-Classes-Effective False
Top
Application-Name False
Bridgehead-Server-List-BL False
Top
Canonical-Name False
Top
Common-Name False
Top
Create-Time-Stamp False
Top
Description False
Top
Display-Name False
Top
Display-Name-Printable False
Top
DMD-Location FalseNTDS-DSA
DSA-Signature False
Top
DS-Core-Propagation-Data False
Top
Extension-Name False
Top
Flags False
Top
From-Entry False
Top
Frs-Computer-Reference-BL False
Top
FRS-Member-Reference-BL False
Top
FRS-Root-Path FalseNTDS-DSA
FSMO-Role-Owner False
Top
Has-Master-NCs FalseNTDS-DSA
Has-Partial-Replica-NCs FalseNTDS-DSA
Instance-Type True
Top
Invocation-Id FalseNTDS-DSA
Is-Critical-System-Object False
Top
Is-Deleted False
Top
Is-Member-Of-DL False
Top
Is-Privilege-Holder False
Top
Is-Recycled False
Top
Last-Backup-Restoration-Time FalseNTDS-DSA
Last-Known-Parent False
Top
Managed-By FalseNTDS-DSA
Managed-Objects False
Top
Mastered-By False
Top
Modify-Time-Stamp False
Top
ms-COM-PartitionSetLink False
Top
ms-COM-UserLink False
Top
ms-DFSR-ComputerReferenceBL False
Top
ms-DFSR-MemberReferenceBL False
Top
ms-DS-Approx-Immed-Subordinates False
Top
ms-DS-AuthenticatedTo-Accountlist False
Top
ms-DS-Behavior-Version FalseNTDS-DSA
ms-DS-Claim-Shares-Possible-Values-With-BL False
Top
MS-DS-Consistency-Child-Count False
Top
MS-DS-Consistency-Guid False
Top
ms-DS-Enabled-Feature FalseNTDS-DSA
ms-DS-Enabled-Feature-BL False
Top
ms-DS-Has-Domain-NCs FalseNTDS-DSA
ms-DS-Has-Full-Replica-NCs FalseNTDS-DSA
ms-DS-Has-Instantiated-NCs FalseNTDS-DSA
ms-DS-Has-Master-NCs FalseNTDS-DSA
ms-DS-Host-Service-Account-BL False
Top
ms-DS-Is-Domain-For False
Top
ms-DS-Is-Full-Replica-For False
Top
ms-DS-isGC FalseNTDS-DSA
ms-DS-Is-Partial-Replica-For False
Top
ms-DS-Is-Primary-Computer-For False
Top
ms-DS-isRODC FalseNTDS-DSA
ms-DS-Is-User-Cachable-At-Rodc FalseNTDS-DSA
ms-DS-KrbTgt-Link-BL False
Top
ms-DS-Last-Known-RDN False
Top
ms-DS-local-Effective-Deletion-Time False
Top
ms-DS-local-Effective-Recycle-Time False
Top
ms-DS-Mastered-By False
Top
ms-DS-Members-For-Az-Role-BL False
Top
ms-DS-Members-Of-Resource-Property-List-BL False
Top
ms-DS-NC-Repl-Cursors False
Top
ms-DS-NC-Repl-Inbound-Neighbors False
Top
ms-DS-NC-Repl-Outbound-Neighbors False
Top
ms-DS-NC-RO-Replica-Locations-BL False
Top
ms-DS-NC-Type False
Top
ms-DS-Never-Reveal-Group FalseNTDS-DSA
ms-DS-Non-Members-BL False
Top
ms-DS-Object-Reference-BL False
Top
ms-DS-OIDToGroup-Link-BL False
Top
ms-DS-Operations-For-Az-Role-BL False
Top
ms-DS-Operations-For-Az-Task-BL False
Top
ms-DS-Principal-Name False
Top
ms-DS-PSO-Applied False
Top
ms-DS-Repl-Attribute-Meta-Data False
Top
ms-DS-ReplicationEpoch FalseNTDS-DSA
ms-DS-Repl-Value-Meta-Data False
Top
ms-DS-Retired-Repl-NC-Signatures FalseNTDS-DSA
ms-DS-Revealed-DSAs False
Top
ms-DS-Revealed-List-BL False
Top
ms-DS-Revealed-Users FalseNTDS-DSA
ms-DS-Reveal-OnDemand-Group FalseNTDS-DSA
ms-DS-Settings False
ms-DS-SiteName FalseNTDS-DSA
ms-DS-Tasks-For-Az-Role-BL False
Top
ms-DS-Tasks-For-Az-Task-BL False
Top
ms-DS-TDO-Egress-BL False
Top
ms-DS-TDO-Ingress-BL False
Top
ms-DS-Value-Type-Reference-BL False
Top
ms-Exch-Owner-BL False
Top
msSFU-30-Posix-Member-Of False
Top
netboot-SCP-BL False
Top
Network-Address FalseNTDS-DSA
Non-Security-Member-BL False
Top
Notification-List False
NT-Security-Descriptor True
Top
Obj-Dist-Name False
Top
Object-Category True
Top
Object-Class True
Top
Object-Guid False
Top
Object-Version False
Top
Options FalseNTDS-DSA
Other-Well-Known-Objects False
Top
Partial-Attribute-Deletion-List False
Top
Partial-Attribute-Set False
Top
Possible-Inferiors False
Top
Proxied-Object-Name False
Top
Proxy-Addresses False
Top
Query-Policy-BL False
Top
Query-Policy-Object FalseNTDS-DSA
RDN False
Top
Repl-Property-Meta-Data False
Top
Repl-UpToDate-Vector False
Top
Reports False
Top
Reps-From False
Top
Reps-To False
Top
Retired-Repl-DSA-Signatures FalseNTDS-DSA
Revision False
Top
SD-Rights-Effective False
Top
Server-Reference FalseNTDS-DSA
Server-Reference-BL False
Top
Show-In-Advanced-View-Only False
Top
Site-Object-BL False
Top
Structural-Object-Class False
Top
Sub-Refs False
Top
SubSchemaSubEntry False
Top
System-Flags False
Top
USN-Changed False
Top
USN-Created False
Top
USN-DSA-Last-Obj-Removed False
Top
USN-Intersite False
Top
USN-Last-Obj-Rem False
Top
USN-Source False
Top
Wbem-Path False
Top
Well-Known-Objects False
Top
When-Changed False
Top
When-Created False
Top
WWW-Home-Page False
Top
WWW-Page-Other False
Top

Windows Server 2012 Extended Rights

This class contains the following extended rights for Windows Server 2012:

Common Name
Do-Garbage-Collection
Recalculate-Hierarchy
Allocate-Rids
Recalculate-Security-Inheritance
DS-Check-Stale-Phantoms
Refresh-Group-Cache
Reload-SSL-Certificate

Windows Server 2012 Validated Writes

This class contains the following validated writes for Windows Server 2012:

Common Name
Validated-MS-DS-Behavior-Version

 

 

Show:
© 2015 Microsoft