Was this page helpful?
Your feedback about this content is important. Let us know what you think.
Additional feedback?
1500 characters remaining
User
DMD
DSA
Top
Collapse the table of content
Expand the table of content

User class

This class is used to store information about an employee or contractor who works for an organization. It is also possible to apply this class to long term visitors.

CNUser
Ldap-Display-Nameuser
Update PrivilegeDomain administrator or account owner.
Update FrequencyThis record will be updated each time a new person joins or leaves the company.
Schema-Id-Guidbf967aba-0de6-11d0-a285-00aa003049e2

Implementations

Windows 2000 Server

System-OnlyFalse
Object-Category1
Default-Object-Category
Governs-Id1.2.840.113556.1.5.9
Default-Hiding-Value0
Rdn-Att-Id
Subclass of
Possible Superiors Domain-DNS
 
Organizational-Unit
 
Builtin-Domain
Auxiliary Classes Mail-Recipient (System)
 
Security-Principal (System)
NT-Security-DescriptorO:BAG:BAD:S:
Default Security DescriptorD:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;AO)(A;;RPLCLORC;;;PS)(OA;;CR;ab721a53-1e2f-11d0-9819-00aa0040529b;;PS)(OA;;CR;ab721a54-1e2f-11d0-9819-00aa0040529b;;PS)(OA;;CR;ab721a56-1e2f-11d0-9819-00aa0040529b;;PS)(OA;;RPWP;77B5B886-944A-11d1-AEBD-0000F80367C1;;PS)(OA;;RPWP;E45795B2-9455-11d1-AEBD-0000F80367C1;;PS)(OA;;RPWP;E45795B3-9455-11d1-AEBD-0000F80367C1;;PS)(OA;;RP;037088f8-0ae1-11d2-b422-00a0c968f939;;RS)(OA;;RP;4c164200-20c0-11d0-a768-00aa006e0529;;RS)(OA;;RP;bc0ac240-79a9-11d0-9020-00c04fc2d4cf;;RS)(A;;RC;;;AU)(OA;;RP;59ba2f42-79a2-11d0-9020-00c04fc2d3cf;;AU)(OA;;RP;77B5B886-944A-11d1-AEBD-0000F80367C1;;AU)(OA;;RP;E45795B3-9455-11d1-AEBD-0000F80367C1;;AU)(OA;;RP;e48d0154-bcf8-11d1-8702-00c04fb96050;;AU)(OA;;CR;ab721a53-1e2f-11d0-9819-00aa0040529b;;WD)(OA;;RP;5f202010-79a5-11d0-9020-00c04fc2d4cf;;RS)(OA;;RPWP;bf967a7f-0de6-11d0-a285-00aa003049e2;;CA)
System-Flags0x00000010

Windows 2000 Server Attributes

This class contains the following attributes for Windows 2000 Server:

AttributeMandatoryDerived from
Account-Expires FalseUser
Account-Name-History False
ACS-Policy-Name FalseUser
Address False
Address-Home False
Admin-Count FalseUser
Admin-Description False
Top
Admin-Display-Name False
Top
Allowed-Attributes False
Top
Allowed-Attributes-Effective False
Top
Allowed-Child-Classes False
Top
Allowed-Child-Classes-Effective False
Top
Alt-Security-Identities False
Assistant False
Bad-Password-Time FalseUser
Bad-Pwd-Count FalseUser
Bridgehead-Server-List-BL False
Top
Canonical-Name False
Top
Code-Page FalseUser
Comment False
Common-Name True
 
Top
Company False
Control-Access-Rights FalseUser
Country-Code False
Country-Name False
Create-Time-Stamp False
Top
DBCS-Pwd FalseUser
Default-Class-Store FalseUser
Department False
Description False
Top
Desktop-Profile FalseUser
Destination-Indicator False
Display-Name False
Top
Display-Name-Printable False
Top
Division False
DSA-Signature False
Top
DS-Core-Propagation-Data False
Top
Dynamic-LDAP-Server FalseUser
E-mail-Addresses False
Employee-ID False
Extension-Name False
Top
Facsimile-Telephone-Number False
Flags False
Top
From-Entry False
Top
Frs-Computer-Reference-BL False
Top
FRS-Member-Reference-BL False
Top
FSMO-Role-Owner False
Top
Garbage-Coll-Period False
Generation-Qualifier False
Given-Name False
Group-Membership-SAM FalseUser
Group-Priority FalseUser
Groups-to-Ignore FalseUser
Home-Directory FalseUser
Home-Drive FalseUser
Initials False
Instance-Type True
Top
International-ISDN-Number False
Is-Critical-System-Object False
Top
Is-Deleted False
Top
Is-Member-Of-DL False
Top
Is-Privilege-Holder False
Top
Last-Known-Parent False
Top
Last-Logoff FalseUser
Last-Logon FalseUser
Legacy-Exchange-DN False
Lm-Pwd-History FalseUser
Locale-ID FalseUser
Locality-Name False
Lockout-Time FalseUser
Logo False
Logon-Count FalseUser
Logon-Hours FalseUser
Logon-Workstation FalseUser
Managed-Objects False
Top
Manager False
Mastered-By False
Top
Max-Storage FalseUser
MHS-OR-Address False
Modify-Time-Stamp False
Top
MS-DS-Consistency-Child-Count False
Top
MS-DS-Consistency-Guid False
Top
MS-DS-Creator-SID FalseUser
MSMQ-Digests FalseUser
MSMQ-Digests-Mig FalseUser
MSMQ-Sign-Certificates FalseUser
MSMQ-Sign-Certificates-Mig FalseUser
msNPAllowDialin FalseUser
msNPCallingStationID FalseUser
msNPSavedCallingStationID FalseUser
msRADIUSCallbackNumber FalseUser
msRADIUSFramedIPAddress FalseUser
msRADIUSFramedRoute FalseUser
msRADIUSServiceType FalseUser
msRASSavedCallbackNumber FalseUser
msRASSavedFramedIPAddress FalseUser
msRASSavedFramedRoute FalseUser
netboot-SCP-BL False
Top
Network-Address FalseUser
Non-Security-Member-BL False
Top
Nt-Pwd-History FalseUser
NT-Security-Descriptor True
Top
 
Obj-Dist-Name False
Top
Object-Category True
Top
Object-Class True
Top
Object-Guid False
Top
Object-Sid True
Object-Version False
Top
Operator-Count FalseUser
Organizational-Unit-Name False
Organization-Name False
Other-Login-Workstations FalseUser
Other-Mailbox False
Other-Name False
Other-Well-Known-Objects False
Top
Partial-Attribute-Deletion-List False
Top
Partial-Attribute-Set False
Top
Personal-Title False
Phone-Fax-Other False
Phone-Home-Other False
Phone-Home-Primary False
Phone-Ip-Other False
Phone-Ip-Primary False
Phone-ISDN-Primary False
Phone-Mobile-Other False
Phone-Mobile-Primary False
Phone-Office-Other False
Phone-Pager-Other False
Phone-Pager-Primary False
Physical-Delivery-Office-Name False
Picture False
Possible-Inferiors False
Top
Postal-Address False
Postal-Code False
Post-Office-Box False
Preferred-Delivery-Method False
Preferred-OU FalseUser
Primary-Group-ID FalseUser
Profile-Path FalseUser
Proxied-Object-Name False
Top
Proxy-Addresses False
Top
Pwd-Last-Set FalseUser
Query-Policy-BL False
Top
RDN False
Top
Registered-Address False
Repl-Property-Meta-Data False
Top
Repl-UpToDate-Vector False
Top
Reports False
Top
Reps-From False
Top
Reps-To False
Top
Revision False
Top
Rid False
SAM-Account-Name True
SAM-Account-Type False
Script-Path FalseUser
SD-Rights-Effective False
Top
Security-Identifier False
See-Also False
Server-Reference-BL False
Top
Service-Principal-Name FalseUser
Show-In-Address-Book False
Show-In-Advanced-View-Only False
Top
SID-History False
Site-Object-BL False
Top
State-Or-Province-Name False
Street-Address False
Sub-Refs False
Top
SubSchemaSubEntry False
Top
Supplemental-Credentials False
Surname False
System-Flags False
Top
Telephone-Number False
Teletex-Terminal-Identifier False
Telex-Number False
Telex-Primary False
Terminal-Server FalseUser
Text-Country False
Text-Encoded-OR-Address False
Title False
Token-Groups False
Token-Groups-Global-And-Universal False
Token-Groups-No-GC-Acceptable False
Unicode-Pwd FalseUser
User-Account-Control FalseUser
User-Cert False
User-Comment False
User-Parameters FalseUser
User-Password False
User-Principal-Name FalseUser
User-Shared-Folder FalseUser
User-Shared-Folder-Other FalseUser
User-SMIME-Certificate False
User-Workstations FalseUser
USN-Changed False
Top
USN-Created False
Top
USN-DSA-Last-Obj-Removed False
Top
USN-Intersite False
Top
USN-Last-Obj-Rem False
Top
USN-Source False
Top
Wbem-Path False
Top
Well-Known-Objects False
Top
When-Changed False
Top
When-Created False
Top
WWW-Home-Page False
Top
WWW-Page-Other False
Top
X121-Address False
X509-Cert FalseUser
 

Windows 2000 Server Extended Rights

This class contains the following extended rights for Windows 2000 Server:

Common Name
User-Change-Password
User-Force-Change-Password
Send-As
Receive-As

Windows 2000 Server Property Sets

This class contains the following property sets for Windows 2000 Server:

Common Name
General-Information
User-Account-Restrictions
User-Logon
Membership
Personal-Information
Email-Information
Web-Information
Public-Information
RAS-Information

Windows Server 2003

System-OnlyFalse
Object-Category1
Default-Object-Category
Governs-Id1.2.840.113556.1.5.9
Default-Hiding-Value0
Rdn-Att-Id
Subclass of
Possible Superiors Domain-DNS
 
Organizational-Unit
 
Builtin-Domain
Auxiliary Classes Mail-Recipient (System)
 
Security-Principal (System)
NT-Security-DescriptorO:BAG:BAD:S:
Default Security DescriptorD:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;AO)(A;;RPLCLORC;;;PS)(OA;;CR;ab721a53-1e2f-11d0-9819-00aa0040529b;;PS)(OA;;CR;ab721a54-1e2f-11d0-9819-00aa0040529b;;PS)(OA;;CR;ab721a56-1e2f-11d0-9819-00aa0040529b;;PS)(OA;;RPWP;77B5B886-944A-11d1-AEBD-0000F80367C1;;PS)(OA;;RPWP;E45795B2-9455-11d1-AEBD-0000F80367C1;;PS)(OA;;RPWP;E45795B3-9455-11d1-AEBD-0000F80367C1;;PS)(OA;;RP;037088f8-0ae1-11d2-b422-00a0c968f939;;RS)(OA;;RP;4c164200-20c0-11d0-a768-00aa006e0529;;RS)(OA;;RP;bc0ac240-79a9-11d0-9020-00c04fc2d4cf;;RS)(A;;RC;;;AU)(OA;;RP;59ba2f42-79a2-11d0-9020-00c04fc2d3cf;;AU)(OA;;RP;77B5B886-944A-11d1-AEBD-0000F80367C1;;AU)(OA;;RP;E45795B3-9455-11d1-AEBD-0000F80367C1;;AU)(OA;;RP;e48d0154-bcf8-11d1-8702-00c04fb96050;;AU)(OA;;CR;ab721a53-1e2f-11d0-9819-00aa0040529b;;WD)(OA;;RP;5f202010-79a5-11d0-9020-00c04fc2d4cf;;RS)(OA;;RPWP;bf967a7f-0de6-11d0-a285-00aa003049e2;;CA)(OA;;RP;46a9b11d-60ae-405a-b7e8-ff8a58d456d2;;S-1-5-32-560)(OA;;WPRP;6db69a1c-9422-11d1-aebd-0000f80367c1;;S-1-5-32-561)
System-Flags0x00000010

Windows Server 2003 Attributes

This class contains the following attributes for Windows Server 2003:

AttributeMandatoryDerived from
Account-Expires FalseUser
Account-Name-History False
ACS-Policy-Name FalseUser
Address False
Address-Home FalseUser
 
Admin-Count FalseUser
Admin-Description False
Top
Admin-Display-Name False
Top
Allowed-Attributes False
Top
Allowed-Attributes-Effective False
Top
Allowed-Child-Classes False
Top
Allowed-Child-Classes-Effective False
Top
Alt-Security-Identities False
Assistant False
attributeCertificateAttribute False
audio FalseUser
Bad-Password-Time FalseUser
Bad-Pwd-Count FalseUser
Bridgehead-Server-List-BL False
Top
Business-Category FalseUser
Canonical-Name False
Top
carLicense FalseUser
Code-Page FalseUser
Comment False
Common-Name True
 
Top
Company False
Control-Access-Rights FalseUser
Country-Code False
Country-Name False
Create-Time-Stamp False
Top
DBCS-Pwd FalseUser
Default-Class-Store FalseUser
Department False
departmentNumber FalseUser
Description False
Top
Desktop-Profile FalseUser
Destination-Indicator False
Display-Name FalseUser
 
Top
Display-Name-Printable False
Top
Division False
DSA-Signature False
Top
DS-Core-Propagation-Data False
Top
Dynamic-LDAP-Server FalseUser
E-mail-Addresses FalseUser
 
Employee-ID False
Employee-Number FalseUser
Employee-Type FalseUser
Extension-Name False
Top
Facsimile-Telephone-Number False
Flags False
Top
From-Entry False
Top
Frs-Computer-Reference-BL False
Top
FRS-Member-Reference-BL False
Top
FSMO-Role-Owner False
Top
Garbage-Coll-Period False
Generation-Qualifier False
Given-Name FalseUser
 
Group-Membership-SAM FalseUser
Group-Priority FalseUser
Groups-to-Ignore FalseUser
Home-Directory FalseUser
Home-Drive FalseUser
houseIdentifier False
Initials FalseUser
 
Instance-Type True
Top
International-ISDN-Number False
Is-Critical-System-Object False
Top
Is-Deleted False
Top
Is-Member-Of-DL False
Top
Is-Privilege-Holder False
Top
jpegPhoto FalseUser
labeledURI FalseUser
 
Last-Known-Parent False
Top
Last-Logoff FalseUser
Last-Logon FalseUser
Last-Logon-Timestamp FalseUser
Legacy-Exchange-DN False
Lm-Pwd-History FalseUser
Locale-ID FalseUser
Locality-Name False
Lockout-Time FalseUser
Logo False
Logon-Count FalseUser
Logon-Hours FalseUser
Logon-Workstation FalseUser
Managed-Objects False
Top
Manager FalseUser
 
Mastered-By False
Top
Max-Storage FalseUser
MHS-OR-Address False
Modify-Time-Stamp False
Top
ms-COM-PartitionSetLink False
Top
ms-COM-UserLink False
Top
ms-COM-UserPartitionSetLink FalseUser
MS-DRM-Identity-Certificate FalseUser
ms-DS-Allowed-To-Delegate-To False
ms-DS-Approx-Immed-Subordinates False
Top
ms-DS-Cached-Membership FalseUser
ms-DS-Cached-Membership-Time-Stamp FalseUser
MS-DS-Consistency-Child-Count False
Top
MS-DS-Consistency-Guid False
Top
MS-DS-Creator-SID FalseUser
ms-DS-KeyVersionNumber False
ms-DS-Mastered-By False
Top
ms-DS-Members-For-Az-Role-BL False
Top
ms-DS-NC-Repl-Cursors False
Top
ms-DS-NC-Repl-Inbound-Neighbors False
Top
ms-DS-NC-Repl-Outbound-Neighbors False
Top
ms-DS-Non-Members-BL False
Top
ms-DS-Object-Reference-BL False
Top
ms-DS-Operations-For-Az-Role-BL False
Top
ms-DS-Operations-For-Az-Task-BL False
Top
ms-DS-Repl-Attribute-Meta-Data False
Top
ms-DS-Repl-Value-Meta-Data False
Top
ms-DS-Site-Affinity FalseUser
ms-DS-Tasks-For-Az-Role-BL False
Top
ms-DS-Tasks-For-Az-Task-BL False
Top
ms-DS-User-Account-Control-Computed FalseUser
ms-Exch-Assistant-Name False
ms-Exch-House-Identifier False
ms-Exch-LabeledURI False
ms-Exch-Owner-BL False
Top
ms-IIS-FTP-Dir FalseUser
ms-IIS-FTP-Root FalseUser
MSMQ-Digests FalseUser
MSMQ-Digests-Mig FalseUser
MSMQ-Sign-Certificates FalseUser
MSMQ-Sign-Certificates-Mig FalseUser
msNPAllowDialin FalseUser
msNPCallingStationID FalseUser
msNPSavedCallingStationID FalseUser
msRADIUSCallbackNumber FalseUser
msRADIUSFramedIPAddress FalseUser
msRADIUSFramedRoute FalseUser
msRADIUSServiceType FalseUser
msRASSavedCallbackNumber FalseUser
msRASSavedFramedIPAddress FalseUser
msRASSavedFramedRoute FalseUser
netboot-SCP-BL False
Top
Network-Address FalseUser
Non-Security-Member-BL False
Top
Nt-Pwd-History FalseUser
NT-Security-Descriptor True
Top
 
Obj-Dist-Name False
Top
Object-Category True
Top
Object-Class True
Top
Object-Guid False
Top
Object-Sid True
Object-Version False
Top
Operator-Count FalseUser
Organizational-Unit-Name False
Organization-Name FalseUser
 
Other-Login-Workstations FalseUser
Other-Mailbox False
Other-Name False
Other-Well-Known-Objects False
Top
Partial-Attribute-Deletion-List False
Top
Partial-Attribute-Set False
Top
Personal-Title False
Phone-Fax-Other False
Phone-Home-Other False
Phone-Home-Primary FalseUser
 
Phone-Ip-Other False
Phone-Ip-Primary False
Phone-ISDN-Primary False
Phone-Mobile-Other False
Phone-Mobile-Primary FalseUser
 
Phone-Office-Other False
Phone-Pager-Other False
Phone-Pager-Primary FalseUser
 
photo FalseUser
Physical-Delivery-Office-Name False
Picture False
Possible-Inferiors False
Top
Postal-Address False
Postal-Code False
Post-Office-Box False
Preferred-Delivery-Method False
preferredLanguage FalseUser
Preferred-OU FalseUser
Primary-Group-ID FalseUser
Profile-Path FalseUser
Proxied-Object-Name False
Top
Proxy-Addresses False
Top
Pwd-Last-Set FalseUser
Query-Policy-BL False
Top
RDN False
Top
Registered-Address False
Repl-Property-Meta-Data False
Top
Repl-UpToDate-Vector False
Top
Reports False
Top
Reps-From False
Top
Reps-To False
Top
Revision False
Top
Rid False
roomNumber FalseUser
SAM-Account-Name True
SAM-Account-Type False
Script-Path FalseUser
SD-Rights-Effective False
Top
secretary FalseUser
 
Security-Identifier False
See-Also False
Serial-Number False
Server-Reference-BL False
Top
Service-Principal-Name FalseUser
Show-In-Address-Book False
Show-In-Advanced-View-Only False
Top
SID-History False
Site-Object-BL False
Top
State-Or-Province-Name False
Street-Address False
Structural-Object-Class False
Top
Sub-Refs False
Top
SubSchemaSubEntry False
Top
Supplemental-Credentials False
Surname False
System-Flags False
Top
Telephone-Number False
Teletex-Terminal-Identifier False
Telex-Number False
Telex-Primary False
Terminal-Server FalseUser
Text-Country False
Text-Encoded-OR-Address False
Title False
Token-Groups False
Token-Groups-Global-And-Universal False
Token-Groups-No-GC-Acceptable False
uid FalseUser
Unicode-Pwd FalseUser
User-Account-Control FalseUser
User-Cert False
User-Comment False
User-Parameters FalseUser
User-Password False
userPKCS12 FalseUser
User-Principal-Name FalseUser
User-Shared-Folder FalseUser
User-Shared-Folder-Other FalseUser
User-SMIME-Certificate FalseUser
 
User-Workstations FalseUser
USN-Changed False
Top
USN-Created False
Top
USN-DSA-Last-Obj-Removed False
Top
USN-Intersite False
Top
USN-Last-Obj-Rem False
Top
USN-Source False
Top
Wbem-Path False
Top
Well-Known-Objects False
Top
When-Changed False
Top
When-Created False
Top
WWW-Home-Page False
Top
WWW-Page-Other False
Top
X121-Address False
x500uniqueIdentifier FalseUser
X509-Cert FalseUser
 

Windows Server 2003 Extended Rights

This class contains the following extended rights for Windows Server 2003:

Common Name
User-Change-Password
User-Force-Change-Password
Send-As
Receive-As
Allowed-To-Authenticate

Windows Server 2003 Property Sets

This class contains the following property sets for Windows Server 2003:

Common Name
General-Information
User-Account-Restrictions
User-Logon
Membership
Personal-Information
Email-Information
Web-Information
Public-Information
RAS-Information

Windows Server 2003 R2

System-OnlyFalse
Object-Category1
Default-Object-Category
Governs-Id1.2.840.113556.1.5.9
Default-Hiding-Value0
Rdn-Att-Id
Subclass of
Possible Superiors Domain-DNS
 
Organizational-Unit
 
Builtin-Domain
Auxiliary Classes posixAccount
 
shadowAccount
 
Mail-Recipient (System)
 
Security-Principal (System)
NT-Security-DescriptorO:BAG:BAD:S:
Default Security DescriptorD:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;AO)(A;;RPLCLORC;;;PS)(OA;;CR;ab721a53-1e2f-11d0-9819-00aa0040529b;;PS)(OA;;CR;ab721a54-1e2f-11d0-9819-00aa0040529b;;PS)(OA;;CR;ab721a56-1e2f-11d0-9819-00aa0040529b;;PS)(OA;;RPWP;77B5B886-944A-11d1-AEBD-0000F80367C1;;PS)(OA;;RPWP;E45795B2-9455-11d1-AEBD-0000F80367C1;;PS)(OA;;RPWP;E45795B3-9455-11d1-AEBD-0000F80367C1;;PS)(OA;;RP;037088f8-0ae1-11d2-b422-00a0c968f939;;RS)(OA;;RP;4c164200-20c0-11d0-a768-00aa006e0529;;RS)(OA;;RP;bc0ac240-79a9-11d0-9020-00c04fc2d4cf;;RS)(A;;RC;;;AU)(OA;;RP;59ba2f42-79a2-11d0-9020-00c04fc2d3cf;;AU)(OA;;RP;77B5B886-944A-11d1-AEBD-0000F80367C1;;AU)(OA;;RP;E45795B3-9455-11d1-AEBD-0000F80367C1;;AU)(OA;;RP;e48d0154-bcf8-11d1-8702-00c04fb96050;;AU)(OA;;CR;ab721a53-1e2f-11d0-9819-00aa0040529b;;WD)(OA;;RP;5f202010-79a5-11d0-9020-00c04fc2d4cf;;RS)(OA;;RPWP;bf967a7f-0de6-11d0-a285-00aa003049e2;;CA)(OA;;RP;46a9b11d-60ae-405a-b7e8-ff8a58d456d2;;S-1-5-32-560)(OA;;WPRP;6db69a1c-9422-11d1-aebd-0000f80367c1;;S-1-5-32-561)
System-Flags0x00000010

Windows Server 2003 R2 Attributes

This class contains the following attributes for Windows Server 2003 R2:

AttributeMandatoryDerived from
Account-Expires FalseUser
Account-Name-History False
ACS-Policy-Name FalseUser
Address False
Address-Home FalseUser
 
Admin-Count FalseUser
Admin-Description False
Top
Admin-Display-Name False
Top
Allowed-Attributes False
Top
Allowed-Attributes-Effective False
Top
Allowed-Child-Classes False
Top
Allowed-Child-Classes-Effective False
Top
Alt-Security-Identities False
Assistant False
attributeCertificateAttribute False
audio FalseUser
Bad-Password-Time FalseUser
Bad-Pwd-Count FalseUser
Bridgehead-Server-List-BL False
Top
Business-Category FalseUser
Canonical-Name False
Top
carLicense FalseUser
Code-Page FalseUser
Comment False
Common-Name True
 
Top
 
Company False
Control-Access-Rights FalseUser
Country-Code False
Country-Name False
Create-Time-Stamp False
Top
DBCS-Pwd FalseUser
Default-Class-Store FalseUser
Department False
departmentNumber FalseUser
Description False
Top
 
Desktop-Profile FalseUser
Destination-Indicator False
Display-Name FalseUser
 
Top
Display-Name-Printable False
Top
Division False
DSA-Signature False
Top
DS-Core-Propagation-Data False
Top
Dynamic-LDAP-Server FalseUser
E-mail-Addresses FalseUser
 
Employee-ID False
Employee-Number FalseUser
Employee-Type FalseUser
Extension-Name False
Top
Facsimile-Telephone-Number False
Flags False
Top
From-Entry False
Top
Frs-Computer-Reference-BL False
Top
FRS-Member-Reference-BL False
Top
FSMO-Role-Owner False
Top
Garbage-Coll-Period False
gecos False
Generation-Qualifier False
gidNumber False
Given-Name FalseUser
 
Group-Membership-SAM FalseUser
Group-Priority FalseUser
Groups-to-Ignore FalseUser
Home-Directory FalseUser
 
Home-Drive FalseUser
houseIdentifier False
Initials FalseUser
 
Instance-Type True
Top
International-ISDN-Number False
Is-Critical-System-Object False
Top
Is-Deleted False
Top
Is-Member-Of-DL False
Top
Is-Privilege-Holder False
Top
jpegPhoto FalseUser
labeledURI FalseUser
 
Last-Known-Parent False
Top
Last-Logoff FalseUser
Last-Logon FalseUser
Last-Logon-Timestamp FalseUser
Legacy-Exchange-DN False
Lm-Pwd-History FalseUser
Locale-ID FalseUser
Locality-Name False
Lockout-Time FalseUser
loginShell False
Logo False
Logon-Count FalseUser
Logon-Hours FalseUser
Logon-Workstation FalseUser
Managed-Objects False
Top
Manager FalseUser
 
Mastered-By False
Top
Max-Storage FalseUser
MHS-OR-Address False
Modify-Time-Stamp False
Top
ms-COM-PartitionSetLink False
Top
ms-COM-UserLink False
Top
ms-COM-UserPartitionSetLink FalseUser
ms-DFSR-ComputerReferenceBL False
Top
ms-DFSR-MemberReferenceBL False
Top
MS-DRM-Identity-Certificate FalseUser
ms-DS-Allowed-To-Delegate-To False
ms-DS-Approx-Immed-Subordinates False
Top
ms-DS-Cached-Membership FalseUser
ms-DS-Cached-Membership-Time-Stamp FalseUser
MS-DS-Consistency-Child-Count False
Top
MS-DS-Consistency-Guid False
Top
MS-DS-Creator-SID FalseUser
ms-DS-KeyVersionNumber False
ms-DS-Mastered-By False
Top
ms-DS-Members-For-Az-Role-BL False
Top
ms-DS-NC-Repl-Cursors False
Top
ms-DS-NC-Repl-Inbound-Neighbors False
Top
ms-DS-NC-Repl-Outbound-Neighbors False
Top
ms-DS-Non-Members-BL False
Top
ms-DS-Object-Reference-BL False
Top
ms-DS-Operations-For-Az-Role-BL False
Top
ms-DS-Operations-For-Az-Task-BL False
Top
ms-DS-Repl-Attribute-Meta-Data False
Top
ms-DS-Repl-Value-Meta-Data False
Top
ms-DS-Site-Affinity FalseUser
ms-DS-Source-Object-DN FalseUser
ms-DS-Tasks-For-Az-Role-BL False
Top
ms-DS-Tasks-For-Az-Task-BL False
Top
ms-DS-User-Account-Control-Computed FalseUser
ms-Exch-Assistant-Name False
ms-Exch-House-Identifier False
ms-Exch-LabeledURI False
ms-Exch-Owner-BL False
Top
ms-IIS-FTP-Dir FalseUser
ms-IIS-FTP-Root FalseUser
MSMQ-Digests FalseUser
MSMQ-Digests-Mig FalseUser
MSMQ-Sign-Certificates FalseUser
MSMQ-Sign-Certificates-Mig FalseUser
msNPAllowDialin FalseUser
msNPCallingStationID FalseUser
msNPSavedCallingStationID FalseUser
msRADIUSCallbackNumber FalseUser
msRADIUSFramedIPAddress FalseUser
msRADIUSFramedRoute FalseUser
msRADIUSServiceType FalseUser
msRASSavedCallbackNumber FalseUser
msRASSavedFramedIPAddress FalseUser
msRASSavedFramedRoute FalseUser
msSFU-30-Name FalseUser
msSFU-30-Nis-Domain FalseUser
msSFU-30-Posix-Member-Of False
Top
netboot-SCP-BL False
Top
Network-Address FalseUser
Non-Security-Member-BL False
Top
Nt-Pwd-History FalseUser
NT-Security-Descriptor True
Top
 
Obj-Dist-Name False
Top
Object-Category True
Top
Object-Class True
Top
Object-Guid False
Top
Object-Sid True
Object-Version False
Top
Operator-Count FalseUser
Organizational-Unit-Name False
Organization-Name FalseUser
 
Other-Login-Workstations FalseUser
Other-Mailbox False
Other-Name False
Other-Well-Known-Objects False
Top
Partial-Attribute-Deletion-List False
Top
Partial-Attribute-Set False
Top
Personal-Title False
Phone-Fax-Other False
Phone-Home-Other False
Phone-Home-Primary FalseUser
 
Phone-Ip-Other False
Phone-Ip-Primary False
Phone-ISDN-Primary False
Phone-Mobile-Other False
Phone-Mobile-Primary FalseUser
 
Phone-Office-Other False
Phone-Pager-Other False
Phone-Pager-Primary FalseUser
 
photo FalseUser
Physical-Delivery-Office-Name False
Picture False
Possible-Inferiors False
Top
Postal-Address False
Postal-Code False
Post-Office-Box False
Preferred-Delivery-Method False
preferredLanguage FalseUser
Preferred-OU FalseUser
Primary-Group-ID FalseUser
Profile-Path FalseUser
Proxied-Object-Name False
Top
Proxy-Addresses False
Top
Pwd-Last-Set FalseUser
Query-Policy-BL False
Top
RDN False
Top
Registered-Address False
Repl-Property-Meta-Data False
Top
Repl-UpToDate-Vector False
Top
Reports False
Top
Reps-From False
Top
Reps-To False
Top
Revision False
Top
Rid False
roomNumber FalseUser
SAM-Account-Name True
SAM-Account-Type False
Script-Path FalseUser
SD-Rights-Effective False
Top
secretary FalseUser
 
Security-Identifier False
See-Also False
Serial-Number False
Server-Reference-BL False
Top
Service-Principal-Name FalseUser
shadowExpire False
shadowFlag False
shadowInactive False
shadowLastChange False
shadowMax False
shadowMin False
shadowWarning False
Show-In-Address-Book False
Show-In-Advanced-View-Only False
Top
SID-History False
Site-Object-BL False
Top
State-Or-Province-Name False
Street-Address False
Structural-Object-Class False
Top
Sub-Refs False
Top
SubSchemaSubEntry False
Top
Supplemental-Credentials False
Surname False
System-Flags False
Top
Telephone-Number False
Teletex-Terminal-Identifier False
Telex-Number False
Telex-Primary False
Terminal-Server FalseUser
Text-Country False
Text-Encoded-OR-Address False
Title False
Token-Groups False
Token-Groups-Global-And-Universal False
Token-Groups-No-GC-Acceptable False
uid FalseUser
 
uidNumber False
Unicode-Pwd FalseUser
unixHomeDirectory False
unixUserPassword False
User-Account-Control FalseUser
User-Cert False
User-Comment False
User-Parameters FalseUser
User-Password False
 
userPKCS12 FalseUser
User-Principal-Name FalseUser
User-Shared-Folder FalseUser
User-Shared-Folder-Other FalseUser
User-SMIME-Certificate FalseUser
 
User-Workstations FalseUser
USN-Changed False
Top
USN-Created False
Top
USN-DSA-Last-Obj-Removed False
Top
USN-Intersite False
Top
USN-Last-Obj-Rem False
Top
USN-Source False
Top
Wbem-Path False
Top
Well-Known-Objects False
Top
When-Changed False
Top
When-Created False
Top
WWW-Home-Page False
Top
WWW-Page-Other False
Top
X121-Address False
x500uniqueIdentifier FalseUser
X509-Cert FalseUser
 

Windows Server 2003 R2 Extended Rights

This class contains the following extended rights for Windows Server 2003 R2:

Common Name
User-Change-Password
User-Force-Change-Password
Send-As
Receive-As
Allowed-To-Authenticate

Windows Server 2003 R2 Property Sets

This class contains the following property sets for Windows Server 2003 R2:

Common Name
General-Information
User-Account-Restrictions
User-Logon
Membership
Personal-Information
Email-Information
Web-Information
Public-Information
RAS-Information

Windows Server 2008

System-OnlyFalse
Object-Category1
Default-Object-Category
Governs-Id1.2.840.113556.1.5.9
Default-Hiding-Value0
Rdn-Att-Id
Subclass of
Possible Superiors Domain-DNS
 
Organizational-Unit
 
Builtin-Domain
Auxiliary Classes posixAccount
 
shadowAccount
 
Mail-Recipient (System)
 
Security-Principal (System)
NT-Security-DescriptorO:BAG:BAD:S:
Default Security DescriptorD:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;AO)(A;;RPLCLORC;;;PS)(OA;;CR;ab721a53-1e2f-11d0-9819-00aa0040529b;;PS)(OA;;CR;ab721a54-1e2f-11d0-9819-00aa0040529b;;PS)(OA;;CR;ab721a56-1e2f-11d0-9819-00aa0040529b;;PS)(OA;;RPWP;77B5B886-944A-11d1-AEBD-0000F80367C1;;PS)(OA;;RPWP;E45795B2-9455-11d1-AEBD-0000F80367C1;;PS)(OA;;RPWP;E45795B3-9455-11d1-AEBD-0000F80367C1;;PS)(OA;;RP;037088f8-0ae1-11d2-b422-00a0c968f939;;RS)(OA;;RP;4c164200-20c0-11d0-a768-00aa006e0529;;RS)(OA;;RP;bc0ac240-79a9-11d0-9020-00c04fc2d4cf;;RS)(A;;RC;;;AU)(OA;;RP;59ba2f42-79a2-11d0-9020-00c04fc2d3cf;;AU)(OA;;RP;77B5B886-944A-11d1-AEBD-0000F80367C1;;AU)(OA;;RP;E45795B3-9455-11d1-AEBD-0000F80367C1;;AU)(OA;;RP;e48d0154-bcf8-11d1-8702-00c04fb96050;;AU)(OA;;CR;ab721a53-1e2f-11d0-9819-00aa0040529b;;WD)(OA;;RP;5f202010-79a5-11d0-9020-00c04fc2d4cf;;RS)(OA;;RPWP;bf967a7f-0de6-11d0-a285-00aa003049e2;;CA)(OA;;RP;46a9b11d-60ae-405a-b7e8-ff8a58d456d2;;S-1-5-32-560)(OA;;WPRP;6db69a1c-9422-11d1-aebd-0000f80367c1;;S-1-5-32-561)(OA;;WPRP;5805bc62-bdc9-4428-a5e2-856a0f4c185e;;S-1-5-32-561)
System-Flags0x00000010

Windows Server 2008 Attributes

This class contains the following attributes for Windows Server 2008:

AttributeMandatoryDerived from
Account-Expires FalseUser
Account-Name-History False
ACS-Policy-Name FalseUser
Address False
Address-Home FalseUser
 
Admin-Count FalseUser
Admin-Description False
Top
Admin-Display-Name False
Top
Allowed-Attributes False
Top
Allowed-Attributes-Effective False
Top
Allowed-Child-Classes False
Top
Allowed-Child-Classes-Effective False
Top
Alt-Security-Identities False
Assistant False
attributeCertificateAttribute False
audio FalseUser
Bad-Password-Time FalseUser
Bad-Pwd-Count FalseUser
Bridgehead-Server-List-BL False
Top
Business-Category FalseUser
Canonical-Name False
Top
carLicense FalseUser
Code-Page FalseUser
Comment False
Common-Name True
 
Top
 
Company False
Control-Access-Rights FalseUser
Country-Code False
Country-Name False
Create-Time-Stamp False
Top
DBCS-Pwd FalseUser
Default-Class-Store FalseUser
Department False
departmentNumber FalseUser
Description False
Top
 
Desktop-Profile FalseUser
Destination-Indicator False
Display-Name FalseUser
 
Top
Display-Name-Printable False
Top
Division False
DSA-Signature False
Top
DS-Core-Propagation-Data False
Top
Dynamic-LDAP-Server FalseUser
E-mail-Addresses FalseUser
 
Employee-ID False
Employee-Number FalseUser
Employee-Type FalseUser
Extension-Name False
Top
Facsimile-Telephone-Number False
Flags False
Top
From-Entry False
Top
Frs-Computer-Reference-BL False
Top
FRS-Member-Reference-BL False
Top
FSMO-Role-Owner False
Top
Garbage-Coll-Period False
gecos False
Generation-Qualifier False
gidNumber False
Given-Name FalseUser
 
Group-Membership-SAM FalseUser
Group-Priority FalseUser
Groups-to-Ignore FalseUser
Home-Directory FalseUser
 
Home-Drive FalseUser
houseIdentifier False
Initials FalseUser
 
Instance-Type True
Top
International-ISDN-Number False
Is-Critical-System-Object False
Top
Is-Deleted False
Top
Is-Member-Of-DL False
Top
Is-Privilege-Holder False
Top
jpegPhoto FalseUser
labeledURI FalseUser
 
Last-Known-Parent False
Top
Last-Logoff FalseUser
Last-Logon FalseUser
Last-Logon-Timestamp FalseUser
Legacy-Exchange-DN False
Lm-Pwd-History FalseUser
Locale-ID FalseUser
Locality-Name False
Lockout-Time FalseUser
loginShell False
Logo False
Logon-Count FalseUser
Logon-Hours FalseUser
Logon-Workstation FalseUser
Managed-Objects False
Top
Manager FalseUser
 
Mastered-By False
Top
Max-Storage FalseUser
MHS-OR-Address False
Modify-Time-Stamp False
Top
ms-COM-PartitionSetLink False
Top
ms-COM-UserLink False
Top
ms-COM-UserPartitionSetLink FalseUser
ms-DFSR-ComputerReferenceBL False
Top
ms-DFSR-MemberReferenceBL False
Top
MS-DRM-Identity-Certificate FalseUser
ms-DS-Allowed-To-Delegate-To False
ms-DS-Approx-Immed-Subordinates False
Top
ms-DS-AuthenticatedAt-DC FalseUser
ms-DS-AuthenticatedTo-Accountlist False
Top
ms-DS-Cached-Membership FalseUser
ms-DS-Cached-Membership-Time-Stamp FalseUser
MS-DS-Consistency-Child-Count False
Top
MS-DS-Consistency-Guid False
Top
MS-DS-Creator-SID FalseUser
ms-DS-Failed-Interactive-Logon-Count FalseUser
ms-DS-Failed-Interactive-Logon-Count-At-Last-Successful-Logon FalseUser
ms-DS-HAB-Seniority-Index False
ms-DS-Is-Domain-For False
Top
ms-DS-Is-Full-Replica-For False
Top
ms-DS-Is-Partial-Replica-For False
Top
ms-DS-KeyVersionNumber False
ms-DS-KrbTgt-Link-BL False
Top
ms-DS-Last-Failed-Interactive-Logon-Time FalseUser
ms-DS-Last-Successful-Interactive-Logon-Time FalseUser
ms-DS-Mastered-By False
Top
ms-DS-Members-For-Az-Role-BL False
Top
ms-DS-NC-Repl-Cursors False
Top
ms-DS-NC-Repl-Inbound-Neighbors False
Top
ms-DS-NC-Repl-Outbound-Neighbors False
Top
ms-DS-NC-RO-Replica-Locations-BL False
Top
ms-DS-NC-Type False
Top
ms-DS-Non-Members-BL False
Top
ms-DS-Object-Reference-BL False
Top
ms-DS-Operations-For-Az-Role-BL False
Top
ms-DS-Operations-For-Az-Task-BL False
Top
ms-DS-Phonetic-Company-Name False
ms-DS-Phonetic-Department False
ms-DS-Phonetic-Display-Name False
ms-DS-Phonetic-First-Name False
ms-DS-Phonetic-Last-Name False
ms-DS-Principal-Name False
Top
ms-DS-PSO-Applied False
Top
ms-DS-Repl-Attribute-Meta-Data False
Top
ms-DS-Repl-Value-Meta-Data False
Top
ms-DS-Resultant-PSO FalseUser
ms-DS-Revealed-DSAs False
Top
ms-DS-Revealed-List-BL False
Top
ms-DS-Secondary-KrbTgt-Number FalseUser
ms-DS-Site-Affinity FalseUser
ms-DS-Source-Object-DN FalseUser
ms-DS-Supported-Encryption-Types FalseUser
ms-DS-Tasks-For-Az-Role-BL False
Top
ms-DS-Tasks-For-Az-Task-BL False
Top
ms-DS-User-Account-Control-Computed FalseUser
ms-DS-User-Password-Expiry-Time-Computed FalseUser
ms-Exch-Assistant-Name False
ms-Exch-House-Identifier False
ms-Exch-LabeledURI False
ms-Exch-Owner-BL False
Top
ms-IIS-FTP-Dir FalseUser
ms-IIS-FTP-Root FalseUser
MSMQ-Digests FalseUser
MSMQ-Digests-Mig FalseUser
MSMQ-Sign-Certificates FalseUser
MSMQ-Sign-Certificates-Mig FalseUser
msNPAllowDialin FalseUser
msNPCallingStationID FalseUser
msNPSavedCallingStationID FalseUser
ms-PKI-AccountCredentials FalseUser
ms-PKI-DPAPIMasterKeys FalseUser
ms-PKI-RoamingTimeStamp FalseUser
msRADIUSCallbackNumber FalseUser
ms-RADIUS-FramedInterfaceId FalseUser
msRADIUSFramedIPAddress FalseUser
ms-RADIUS-FramedIpv6Prefix FalseUser
ms-RADIUS-FramedIpv6Route FalseUser
msRADIUSFramedRoute FalseUser
ms-RADIUS-SavedFramedInterfaceId FalseUser
ms-RADIUS-SavedFramedIpv6Prefix FalseUser
ms-RADIUS-SavedFramedIpv6Route FalseUser
msRADIUSServiceType FalseUser
msRASSavedCallbackNumber FalseUser
msRASSavedFramedIPAddress FalseUser
msRASSavedFramedRoute FalseUser
msSFU-30-Name FalseUser
msSFU-30-Nis-Domain FalseUser
msSFU-30-Posix-Member-Of False
Top
ms-TS-Allow-Logon FalseUser
ms-TS-Broken-Connection-Action FalseUser
ms-TS-Connect-Client-Drives FalseUser
ms-TS-Connect-Printer-Drives FalseUser
ms-TS-Default-To-Main-Printer FalseUser
MS-TS-ExpireDate FalseUser
MS-TS-ExpireDate2 FalseUser
MS-TS-ExpireDate3 FalseUser
MS-TS-ExpireDate4 FalseUser
ms-TS-Home-Directory FalseUser
ms-TS-Home-Drive FalseUser
ms-TS-Initial-Program FalseUser
MS-TS-LicenseVersion FalseUser
MS-TS-LicenseVersion2 FalseUser
MS-TS-LicenseVersion3 FalseUser
MS-TS-LicenseVersion4 FalseUser
MS-TSLS-Property01 FalseUser
MS-TSLS-Property02 FalseUser
MS-TS-ManagingLS FalseUser
MS-TS-ManagingLS2 FalseUser
MS-TS-ManagingLS3 FalseUser
MS-TS-ManagingLS4 FalseUser
ms-TS-Max-Connection-Time FalseUser
ms-TS-Max-Disconnection-Time FalseUser
ms-TS-Max-Idle-Time FalseUser
ms-TS-Profile-Path FalseUser
MS-TS-Property01 FalseUser
MS-TS-Property02 FalseUser
ms-TS-Reconnection-Action FalseUser
ms-TS-Remote-Control FalseUser
ms-TS-Work-Directory FalseUser
netboot-SCP-BL False
Top
Network-Address FalseUser
Non-Security-Member-BL False
Top
Nt-Pwd-History FalseUser
NT-Security-Descriptor True
Top
 
Obj-Dist-Name False
Top
Object-Category True
Top
Object-Class True
Top
Object-Guid False
Top
Object-Sid True
Object-Version False
Top
Operator-Count FalseUser
Organizational-Unit-Name False
Organization-Name FalseUser
 
Other-Login-Workstations FalseUser
Other-Mailbox False
Other-Name False
Other-Well-Known-Objects False
Top
Partial-Attribute-Deletion-List False
Top
Partial-Attribute-Set False
Top
Personal-Title False
Phone-Fax-Other False
Phone-Home-Other False
Phone-Home-Primary FalseUser
 
Phone-Ip-Other False
Phone-Ip-Primary False
Phone-ISDN-Primary False
Phone-Mobile-Other False
Phone-Mobile-Primary FalseUser
 
Phone-Office-Other False
Phone-Pager-Other False
Phone-Pager-Primary FalseUser
 
photo FalseUser
Physical-Delivery-Office-Name False
Picture False
Possible-Inferiors False
Top
Postal-Address False
Postal-Code False
Post-Office-Box False
Preferred-Delivery-Method False
preferredLanguage FalseUser
Preferred-OU FalseUser
Primary-Group-ID FalseUser
Profile-Path FalseUser
Proxied-Object-Name False
Top
Proxy-Addresses False
Top
Pwd-Last-Set FalseUser
Query-Policy-BL False
Top
RDN False
Top
Registered-Address False
Repl-Property-Meta-Data False
Top
Repl-UpToDate-Vector False
Top
Reports False
Top
Reps-From False
Top
Reps-To False
Top
Revision False
Top
Rid False
roomNumber FalseUser
SAM-Account-Name True
SAM-Account-Type False
Script-Path FalseUser
SD-Rights-Effective False
Top
secretary FalseUser
 
Security-Identifier False
See-Also False
Serial-Number False
Server-Reference-BL False
Top
Service-Principal-Name FalseUser
shadowExpire False
shadowFlag False
shadowInactive False
shadowLastChange False
shadowMax False
shadowMin False
shadowWarning False
Show-In-Address-Book False
Show-In-Advanced-View-Only False
Top
SID-History False
Site-Object-BL False
Top
State-Or-Province-Name False
Street-Address False
Structural-Object-Class False
Top
Sub-Refs False
Top
SubSchemaSubEntry False
Top
Supplemental-Credentials False
Surname False
System-Flags False
Top
Telephone-Number False
Teletex-Terminal-Identifier False
Telex-Number False
Telex-Primary False
Terminal-Server FalseUser
Text-Country False
Text-Encoded-OR-Address False
Title False
Token-Groups False
Token-Groups-Global-And-Universal False
Token-Groups-No-GC-Acceptable False
uid FalseUser
 
uidNumber False
Unicode-Pwd FalseUser
unixHomeDirectory False
unixUserPassword False
User-Account-Control FalseUser
User-Cert False
User-Comment False
User-Parameters FalseUser
User-Password False
 
userPKCS12 FalseUser
User-Principal-Name FalseUser
User-Shared-Folder FalseUser
User-Shared-Folder-Other FalseUser
User-SMIME-Certificate FalseUser
 
User-Workstations FalseUser
USN-Changed False
Top
USN-Created False
Top
USN-DSA-Last-Obj-Removed False
Top
USN-Intersite False
Top
USN-Last-Obj-Rem False
Top
USN-Source False
Top
Wbem-Path False
Top
Well-Known-Objects False
Top
When-Changed False
Top
When-Created False
Top
WWW-Home-Page False
Top
WWW-Page-Other False
Top
X121-Address False
x500uniqueIdentifier FalseUser
X509-Cert FalseUser
 

Windows Server 2008 Extended Rights

This class contains the following extended rights for Windows Server 2008:

Common Name
User-Change-Password
User-Force-Change-Password
Send-As
Receive-As
Allowed-To-Authenticate

Windows Server 2008 Property Sets

This class contains the following property sets for Windows Server 2008:

Common Name
General-Information
User-Account-Restrictions
User-Logon
Membership
Personal-Information
Email-Information
Web-Information
Public-Information
RAS-Information
Private-Information
Terminal-Server-License-Server

Windows Server 2008 R2

System-OnlyFalse
Object-Category1
Default-Object-Category
Governs-Id1.2.840.113556.1.5.9
Default-Hiding-Value0
Rdn-Att-Id
Subclass of
Possible Superiors Domain-DNS
 
Organizational-Unit
 
Builtin-Domain
Auxiliary Classes posixAccount
 
shadowAccount
 
Mail-Recipient (System)
 
Security-Principal (System)
NT-Security-DescriptorO:BAG:BAD:S:
Default Security DescriptorD:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;AO)(A;;RPLCLORC;;;PS)(OA;;CR;ab721a53-1e2f-11d0-9819-00aa0040529b;;PS)(OA;;CR;ab721a54-1e2f-11d0-9819-00aa0040529b;;PS)(OA;;CR;ab721a56-1e2f-11d0-9819-00aa0040529b;;PS)(OA;;RPWP;77B5B886-944A-11d1-AEBD-0000F80367C1;;PS)(OA;;RPWP;E45795B2-9455-11d1-AEBD-0000F80367C1;;PS)(OA;;RPWP;E45795B3-9455-11d1-AEBD-0000F80367C1;;PS)(OA;;RP;037088f8-0ae1-11d2-b422-00a0c968f939;;RS)(OA;;RP;4c164200-20c0-11d0-a768-00aa006e0529;;RS)(OA;;RP;bc0ac240-79a9-11d0-9020-00c04fc2d4cf;;RS)(A;;RC;;;AU)(OA;;RP;59ba2f42-79a2-11d0-9020-00c04fc2d3cf;;AU)(OA;;RP;77B5B886-944A-11d1-AEBD-0000F80367C1;;AU)(OA;;RP;E45795B3-9455-11d1-AEBD-0000F80367C1;;AU)(OA;;RP;e48d0154-bcf8-11d1-8702-00c04fb96050;;AU)(OA;;CR;ab721a53-1e2f-11d0-9819-00aa0040529b;;WD)(OA;;RP;5f202010-79a5-11d0-9020-00c04fc2d4cf;;RS)(OA;;RPWP;bf967a7f-0de6-11d0-a285-00aa003049e2;;CA)(OA;;RP;46a9b11d-60ae-405a-b7e8-ff8a58d456d2;;S-1-5-32-560)(OA;;WPRP;6db69a1c-9422-11d1-aebd-0000f80367c1;;S-1-5-32-561)(OA;;WPRP;5805bc62-bdc9-4428-a5e2-856a0f4c185e;;S-1-5-32-561)
System-Flags0x00000010

Windows Server 2008 R2 Attributes

This class contains the following attributes for Windows Server 2008 R2:

AttributeMandatoryDerived from
Account-Expires FalseUser
Account-Name-History False
ACS-Policy-Name FalseUser
Address False
Address-Home FalseUser
 
Admin-Count FalseUser
Admin-Description False
Top
Admin-Display-Name False
Top
Allowed-Attributes False
Top
Allowed-Attributes-Effective False
Top
Allowed-Child-Classes False
Top
Allowed-Child-Classes-Effective False
Top
Alt-Security-Identities False
Assistant False
attributeCertificateAttribute False
audio FalseUser
Bad-Password-Time FalseUser
Bad-Pwd-Count FalseUser
Bridgehead-Server-List-BL False
Top
Business-Category FalseUser
Canonical-Name False
Top
carLicense FalseUser
Code-Page FalseUser
Comment False
Common-Name True
 
Top
 
Company False
Control-Access-Rights FalseUser
Country-Code False
Country-Name False
Create-Time-Stamp False
Top
DBCS-Pwd FalseUser
Default-Class-Store FalseUser
Department False
departmentNumber FalseUser
Description False
Top
 
Desktop-Profile FalseUser
Destination-Indicator False
Display-Name FalseUser
 
Top
Display-Name-Printable False
Top
Division False
DSA-Signature False
Top
DS-Core-Propagation-Data False
Top
Dynamic-LDAP-Server FalseUser
E-mail-Addresses FalseUser
 
Employee-ID False
Employee-Number FalseUser
Employee-Type FalseUser
Extension-Name False
Top
Facsimile-Telephone-Number False
Flags False
Top
From-Entry False
Top
Frs-Computer-Reference-BL False
Top
FRS-Member-Reference-BL False
Top
FSMO-Role-Owner False
Top
Garbage-Coll-Period False
gecos False
Generation-Qualifier False
gidNumber False
Given-Name FalseUser
 
Group-Membership-SAM FalseUser
Group-Priority FalseUser
Groups-to-Ignore FalseUser
Home-Directory FalseUser
 
Home-Drive FalseUser
houseIdentifier False
Initials FalseUser
 
Instance-Type True
Top
International-ISDN-Number False
Is-Critical-System-Object False
Top
Is-Deleted False
Top
Is-Member-Of-DL False
Top
Is-Privilege-Holder False
Top
Is-Recycled False
Top
jpegPhoto FalseUser
labeledURI FalseUser
 
Last-Known-Parent False
Top
Last-Logoff FalseUser
Last-Logon FalseUser
Last-Logon-Timestamp FalseUser
Legacy-Exchange-DN False
Lm-Pwd-History FalseUser
Locale-ID FalseUser
Locality-Name False
Lockout-Time FalseUser
loginShell False
Logo False
Logon-Count FalseUser
Logon-Hours FalseUser
Logon-Workstation FalseUser
Managed-Objects False
Top
Manager FalseUser
 
Mastered-By False
Top
Max-Storage FalseUser
MHS-OR-Address False
Modify-Time-Stamp False
Top
ms-COM-PartitionSetLink False
Top
ms-COM-UserLink False
Top
ms-COM-UserPartitionSetLink FalseUser
ms-DFSR-ComputerReferenceBL False
Top
ms-DFSR-MemberReferenceBL False
Top
MS-DRM-Identity-Certificate FalseUser
ms-DS-Allowed-To-Delegate-To False
ms-DS-Approx-Immed-Subordinates False
Top
ms-DS-AuthenticatedAt-DC FalseUser
ms-DS-AuthenticatedTo-Accountlist False
Top
ms-DS-Cached-Membership FalseUser
ms-DS-Cached-Membership-Time-Stamp FalseUser
MS-DS-Consistency-Child-Count False
Top
MS-DS-Consistency-Guid False
Top
MS-DS-Creator-SID FalseUser
ms-DS-Enabled-Feature-BL False
Top
ms-DS-Failed-Interactive-Logon-Count FalseUser
ms-DS-Failed-Interactive-Logon-Count-At-Last-Successful-Logon FalseUser
ms-DS-HAB-Seniority-Index False
ms-DS-Host-Service-Account-BL False
Top
ms-DS-Is-Domain-For False
Top
ms-DS-Is-Full-Replica-For False
Top
ms-DS-Is-Partial-Replica-For False
Top
ms-DS-KeyVersionNumber False
ms-DS-KrbTgt-Link-BL False
Top
ms-DS-Last-Failed-Interactive-Logon-Time FalseUser
ms-DS-Last-Known-RDN False
Top
ms-DS-Last-Successful-Interactive-Logon-Time FalseUser
ms-DS-local-Effective-Deletion-Time False
Top
ms-DS-local-Effective-Recycle-Time False
Top
ms-DS-Mastered-By False
Top
ms-DS-Members-For-Az-Role-BL False
Top
ms-DS-NC-Repl-Cursors False
Top
ms-DS-NC-Repl-Inbound-Neighbors False
Top
ms-DS-NC-Repl-Outbound-Neighbors False
Top
ms-DS-NC-RO-Replica-Locations-BL False
Top
ms-DS-NC-Type False
Top
ms-DS-Non-Members-BL False
Top
ms-DS-Object-Reference-BL False
Top
ms-DS-OIDToGroup-Link-BL False
Top
ms-DS-Operations-For-Az-Role-BL False
Top
ms-DS-Operations-For-Az-Task-BL False
Top
ms-DS-Phonetic-Company-Name False
ms-DS-Phonetic-Department False
ms-DS-Phonetic-Display-Name False
ms-DS-Phonetic-First-Name False
ms-DS-Phonetic-Last-Name False
ms-DS-Principal-Name False
Top
ms-DS-PSO-Applied False
Top
ms-DS-Repl-Attribute-Meta-Data False
Top
ms-DS-Repl-Value-Meta-Data False
Top
ms-DS-Resultant-PSO FalseUser
ms-DS-Revealed-DSAs False
Top
ms-DS-Revealed-List-BL False
Top
ms-DS-Secondary-KrbTgt-Number FalseUser
ms-DS-Site-Affinity FalseUser
ms-DS-Source-Object-DN FalseUser
ms-DS-Supported-Encryption-Types FalseUser
ms-DS-Tasks-For-Az-Role-BL False
Top
ms-DS-Tasks-For-Az-Task-BL False
Top
ms-DS-User-Account-Control-Computed FalseUser
ms-DS-User-Password-Expiry-Time-Computed FalseUser
ms-Exch-Assistant-Name False
ms-Exch-House-Identifier False
ms-Exch-LabeledURI False
ms-Exch-Owner-BL False
Top
ms-IIS-FTP-Dir FalseUser
ms-IIS-FTP-Root FalseUser
MSMQ-Digests FalseUser
MSMQ-Digests-Mig FalseUser
MSMQ-Sign-Certificates FalseUser
MSMQ-Sign-Certificates-Mig FalseUser
msNPAllowDialin FalseUser
msNPCallingStationID FalseUser
msNPSavedCallingStationID FalseUser
ms-PKI-AccountCredentials FalseUser
ms-PKI-Credential-Roaming-Tokens FalseUser
ms-PKI-DPAPIMasterKeys FalseUser
ms-PKI-RoamingTimeStamp FalseUser
msRADIUSCallbackNumber FalseUser
ms-RADIUS-FramedInterfaceId FalseUser
msRADIUSFramedIPAddress FalseUser
ms-RADIUS-FramedIpv6Prefix FalseUser
ms-RADIUS-FramedIpv6Route FalseUser
msRADIUSFramedRoute FalseUser
ms-RADIUS-SavedFramedInterfaceId FalseUser
ms-RADIUS-SavedFramedIpv6Prefix FalseUser
ms-RADIUS-SavedFramedIpv6Route FalseUser
msRADIUSServiceType FalseUser
msRASSavedCallbackNumber FalseUser
msRASSavedFramedIPAddress FalseUser
msRASSavedFramedRoute FalseUser
msSFU-30-Name FalseUser
msSFU-30-Nis-Domain FalseUser
msSFU-30-Posix-Member-Of False
Top
ms-TS-Allow-Logon FalseUser
ms-TS-Broken-Connection-Action FalseUser
ms-TS-Connect-Client-Drives FalseUser
ms-TS-Connect-Printer-Drives FalseUser
ms-TS-Default-To-Main-Printer FalseUser
MS-TS-ExpireDate FalseUser
MS-TS-ExpireDate2 FalseUser
MS-TS-ExpireDate3 FalseUser
MS-TS-ExpireDate4 FalseUser
ms-TS-Home-Directory FalseUser
ms-TS-Home-Drive FalseUser
ms-TS-Initial-Program FalseUser
MS-TS-LicenseVersion FalseUser
MS-TS-LicenseVersion2 FalseUser
MS-TS-LicenseVersion3 FalseUser
MS-TS-LicenseVersion4 FalseUser
MS-TSLS-Property01 FalseUser
MS-TSLS-Property02 FalseUser
MS-TS-ManagingLS FalseUser
MS-TS-ManagingLS2 FalseUser
MS-TS-ManagingLS3 FalseUser
MS-TS-ManagingLS4 FalseUser
ms-TS-Max-Connection-Time FalseUser
ms-TS-Max-Disconnection-Time FalseUser
ms-TS-Max-Idle-Time FalseUser
ms-TS-Primary-Desktop FalseUser
ms-TS-Profile-Path FalseUser
MS-TS-Property01 FalseUser
MS-TS-Property02 FalseUser
ms-TS-Reconnection-Action FalseUser
ms-TS-Remote-Control FalseUser
ms-TS-Secondary-Desktops FalseUser
ms-TS-Work-Directory FalseUser
netboot-SCP-BL False
Top
Network-Address FalseUser
Non-Security-Member-BL False
Top
Nt-Pwd-History FalseUser
NT-Security-Descriptor True
Top
 
Obj-Dist-Name False
Top
Object-Category True
Top
Object-Class True
Top
Object-Guid False
Top
Object-Sid True
Object-Version False
Top
Operator-Count FalseUser
Organizational-Unit-Name False
Organization-Name FalseUser
 
Other-Login-Workstations FalseUser
Other-Mailbox False
Other-Name False
Other-Well-Known-Objects False
Top
Partial-Attribute-Deletion-List False
Top
Partial-Attribute-Set False
Top
Personal-Title False
Phone-Fax-Other False
Phone-Home-Other False
Phone-Home-Primary FalseUser
 
Phone-Ip-Other False
Phone-Ip-Primary False
Phone-ISDN-Primary False
Phone-Mobile-Other False
Phone-Mobile-Primary FalseUser
 
Phone-Office-Other False
Phone-Pager-Other False
Phone-Pager-Primary FalseUser
 
photo FalseUser
Physical-Delivery-Office-Name False
Picture False
Possible-Inferiors False
Top
Postal-Address False
Postal-Code False
Post-Office-Box False
Preferred-Delivery-Method False
preferredLanguage FalseUser
Preferred-OU FalseUser
Primary-Group-ID FalseUser
Profile-Path FalseUser
Proxied-Object-Name False
Top
Proxy-Addresses False
Top
Pwd-Last-Set FalseUser
Query-Policy-BL False
Top
RDN False
Top
Registered-Address False
Repl-Property-Meta-Data False
Top
Repl-UpToDate-Vector False
Top
Reports False
Top
Reps-From False
Top
Reps-To False
Top
Revision False
Top
Rid False
roomNumber FalseUser
SAM-Account-Name True
SAM-Account-Type False
Script-Path FalseUser
SD-Rights-Effective False
Top
secretary FalseUser
 
Security-Identifier False
See-Also False
Serial-Number False
Server-Reference-BL False
Top
Service-Principal-Name FalseUser
shadowExpire False
shadowFlag False
shadowInactive False
shadowLastChange False
shadowMax False
shadowMin False
shadowWarning False
Show-In-Address-Book False
Show-In-Advanced-View-Only False
Top
SID-History False
Site-Object-BL False
Top
State-Or-Province-Name False
Street-Address False
Structural-Object-Class False
Top
Sub-Refs False
Top
SubSchemaSubEntry False
Top
Supplemental-Credentials False
Surname False
System-Flags False
Top
Telephone-Number False
Teletex-Terminal-Identifier False
Telex-Number False
Telex-Primary False
Terminal-Server FalseUser
Text-Country False
Text-Encoded-OR-Address False
Title False
Token-Groups False
Token-Groups-Global-And-Universal False
Token-Groups-No-GC-Acceptable False
uid FalseUser
 
uidNumber False
Unicode-Pwd FalseUser
unixHomeDirectory False
unixUserPassword False
User-Account-Control FalseUser
User-Cert False
User-Comment False
User-Parameters FalseUser
User-Password False
 
userPKCS12 FalseUser
User-Principal-Name FalseUser
User-Shared-Folder FalseUser
User-Shared-Folder-Other FalseUser
User-SMIME-Certificate FalseUser
 
User-Workstations FalseUser
USN-Changed False
Top
USN-Created False
Top
USN-DSA-Last-Obj-Removed False
Top
USN-Intersite False
Top
USN-Last-Obj-Rem False
Top
USN-Source False
Top
Wbem-Path False
Top
Well-Known-Objects False
Top
When-Changed False
Top
When-Created False
Top
WWW-Home-Page False
Top
WWW-Page-Other False
Top
X121-Address False
x500uniqueIdentifier FalseUser
X509-Cert FalseUser
 

Windows Server 2008 R2 Extended Rights

This class contains the following extended rights for Windows Server 2008 R2:

Common Name
User-Change-Password
User-Force-Change-Password
Send-As
Receive-As
Allowed-To-Authenticate

Windows Server 2008 R2 Property Sets

This class contains the following property sets for Windows Server 2008 R2:

Common Name
General-Information
User-Account-Restrictions
User-Logon
Membership
Personal-Information
Email-Information
Web-Information
Public-Information
RAS-Information
Private-Information
Terminal-Server-License-Server

Windows Server 2012

System-OnlyFalse
Object-Category1
Default-Object-Category
Governs-Id1.2.840.113556.1.5.9
Default-Hiding-Value0
Rdn-Att-Id
Subclass of
Possible Superiors Domain-DNS
 
Organizational-Unit
 
Builtin-Domain
Auxiliary Classes posixAccount
 
shadowAccount
 
Mail-Recipient (System)
 
Security-Principal (System)
NT-Security-DescriptorO:BAG:BAD:S:
Default Security DescriptorD:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;AO)(A;;RPLCLORC;;;PS)(OA;;CR;ab721a53-1e2f-11d0-9819-00aa0040529b;;PS)(OA;;CR;ab721a54-1e2f-11d0-9819-00aa0040529b;;PS)(OA;;CR;ab721a56-1e2f-11d0-9819-00aa0040529b;;PS)(OA;;RPWP;77B5B886-944A-11d1-AEBD-0000F80367C1;;PS)(OA;;RPWP;E45795B2-9455-11d1-AEBD-0000F80367C1;;PS)(OA;;RPWP;E45795B3-9455-11d1-AEBD-0000F80367C1;;PS)(OA;;RP;037088f8-0ae1-11d2-b422-00a0c968f939;;RS)(OA;;RP;4c164200-20c0-11d0-a768-00aa006e0529;;RS)(OA;;RP;bc0ac240-79a9-11d0-9020-00c04fc2d4cf;;RS)(A;;RC;;;AU)(OA;;RP;59ba2f42-79a2-11d0-9020-00c04fc2d3cf;;AU)(OA;;RP;77B5B886-944A-11d1-AEBD-0000F80367C1;;AU)(OA;;RP;E45795B3-9455-11d1-AEBD-0000F80367C1;;AU)(OA;;RP;e48d0154-bcf8-11d1-8702-00c04fb96050;;AU)(OA;;CR;ab721a53-1e2f-11d0-9819-00aa0040529b;;WD)(OA;;RP;5f202010-79a5-11d0-9020-00c04fc2d4cf;;RS)(OA;;RPWP;bf967a7f-0de6-11d0-a285-00aa003049e2;;CA)(OA;;RP;46a9b11d-60ae-405a-b7e8-ff8a58d456d2;;S-1-5-32-560)(OA;;WPRP;6db69a1c-9422-11d1-aebd-0000f80367c1;;S-1-5-32-561)(OA;;WPRP;5805bc62-bdc9-4428-a5e2-856a0f4c185e;;S-1-5-32-561)
System-Flags0x00000010

Windows Server 2012 Attributes

This class contains the following attributes for Windows Server 2012:

AttributeMandatoryDerived from
Account-Expires FalseUser
Account-Name-History False
ACS-Policy-Name FalseUser
Address False
Address-Home FalseUser
 
Admin-Count FalseUser
Admin-Description False
Top
Admin-Display-Name False
Top
Allowed-Attributes False
Top
Allowed-Attributes-Effective False
Top
Allowed-Child-Classes False
Top
Allowed-Child-Classes-Effective False
Top
Alt-Security-Identities False
Assistant False
attributeCertificateAttribute False
audio FalseUser
Bad-Password-Time FalseUser
Bad-Pwd-Count FalseUser
Bridgehead-Server-List-BL False
Top
Business-Category FalseUser
Canonical-Name False
Top
carLicense FalseUser
Code-Page FalseUser
Comment False
Common-Name True
 
Top
 
Company False
Control-Access-Rights FalseUser
Country-Code False
Country-Name False
Create-Time-Stamp False
Top
DBCS-Pwd FalseUser
Default-Class-Store FalseUser
Department False
departmentNumber FalseUser
Description False
Top
 
Desktop-Profile FalseUser
Destination-Indicator False
Display-Name FalseUser
 
Top
Display-Name-Printable False
Top
Division False
DSA-Signature False
Top
DS-Core-Propagation-Data False
Top
Dynamic-LDAP-Server FalseUser
E-mail-Addresses FalseUser
 
Employee-ID False
Employee-Number FalseUser
Employee-Type FalseUser
Extension-Name False
Top
Facsimile-Telephone-Number False
Flags False
Top
From-Entry False
Top
Frs-Computer-Reference-BL False
Top
FRS-Member-Reference-BL False
Top
FSMO-Role-Owner False
Top
Garbage-Coll-Period False
gecos False
Generation-Qualifier False
gidNumber False
Given-Name FalseUser
 
Group-Membership-SAM FalseUser
Group-Priority FalseUser
Groups-to-Ignore FalseUser
Home-Directory FalseUser
 
Home-Drive FalseUser
houseIdentifier False
Initials FalseUser
 
Instance-Type True
Top
International-ISDN-Number False
Is-Critical-System-Object False
Top
Is-Deleted False
Top
Is-Member-Of-DL False
Top
Is-Privilege-Holder False
Top
Is-Recycled False
Top
jpegPhoto FalseUser
labeledURI FalseUser
 
Last-Known-Parent False
Top
Last-Logoff FalseUser
Last-Logon FalseUser
Last-Logon-Timestamp FalseUser
Legacy-Exchange-DN False
Lm-Pwd-History FalseUser
Locale-ID FalseUser
Locality-Name False
Lockout-Time FalseUser
loginShell False
Logo False
Logon-Count FalseUser
Logon-Hours FalseUser
Logon-Workstation FalseUser
Managed-Objects False
Top
Manager FalseUser
 
Mastered-By False
Top
Max-Storage FalseUser
MHS-OR-Address False
Modify-Time-Stamp False
Top
ms-COM-PartitionSetLink False
Top
ms-COM-UserLink False
Top
ms-COM-UserPartitionSetLink FalseUser
ms-DFSR-ComputerReferenceBL False
Top
ms-DFSR-MemberReferenceBL False
Top
MS-DRM-Identity-Certificate FalseUser
ms-DS-Allowed-To-Act-On-Behalf-Of-Other-Identity False
ms-DS-Allowed-To-Delegate-To False
ms-DS-Approx-Immed-Subordinates False
Top
ms-DS-AuthenticatedAt-DC FalseUser
ms-DS-AuthenticatedTo-Accountlist False
Top
ms-DS-Cached-Membership FalseUser
ms-DS-Cached-Membership-Time-Stamp FalseUser
ms-DS-Claim-Shares-Possible-Values-With-BL False
Top
MS-DS-Consistency-Child-Count False
Top
MS-DS-Consistency-Guid False
Top
MS-DS-Creator-SID FalseUser
ms-DS-Enabled-Feature-BL False
Top
ms-DS-Failed-Interactive-Logon-Count FalseUser
ms-DS-Failed-Interactive-Logon-Count-At-Last-Successful-Logon FalseUser
ms-DS-GeoCoordinates-Altitude False
ms-DS-GeoCoordinates-Latitude False
ms-DS-GeoCoordinates-Longitude False
ms-DS-HAB-Seniority-Index False
ms-DS-Host-Service-Account-BL False
Top
ms-DS-Is-Domain-For False
Top
ms-DS-Is-Full-Replica-For False
Top
ms-DS-Is-Partial-Replica-For False
Top
ms-DS-Is-Primary-Computer-For False
Top
ms-DS-KeyVersionNumber False
ms-DS-KrbTgt-Link-BL False
Top
ms-DS-Last-Failed-Interactive-Logon-Time FalseUser
ms-DS-Last-Known-RDN False
Top
ms-DS-Last-Successful-Interactive-Logon-Time FalseUser
ms-DS-local-Effective-Deletion-Time False
Top
ms-DS-local-Effective-Recycle-Time False
Top
ms-DS-Mastered-By False
Top
ms-DS-Members-For-Az-Role-BL False
Top
ms-DS-Members-Of-Resource-Property-List-BL False
Top
ms-DS-NC-Repl-Cursors False
Top
ms-DS-NC-Repl-Inbound-Neighbors False
Top
ms-DS-NC-Repl-Outbound-Neighbors False
Top
ms-DS-NC-RO-Replica-Locations-BL False
Top
ms-DS-NC-Type False
Top
ms-DS-Non-Members-BL False
Top
ms-DS-Object-Reference-BL False
Top
ms-DS-OIDToGroup-Link-BL False
Top
ms-DS-Operations-For-Az-Role-BL False
Top
ms-DS-Operations-For-Az-Task-BL False
Top
ms-DS-Phonetic-Company-Name False
ms-DS-Phonetic-Department False
ms-DS-Phonetic-Display-Name False
ms-DS-Phonetic-First-Name False
ms-DS-Phonetic-Last-Name False
ms-DS-Primary-Computer FalseUser
ms-DS-Principal-Name False
Top
ms-DS-PSO-Applied False
Top
ms-DS-Repl-Attribute-Meta-Data False
Top
ms-DS-Repl-Value-Meta-Data False
Top
ms-DS-Resultant-PSO FalseUser
ms-DS-Revealed-DSAs False
Top
ms-DS-Revealed-List-BL False
Top
ms-DS-Secondary-KrbTgt-Number FalseUser
ms-DS-Site-Affinity FalseUser
ms-DS-Source-Object-DN FalseUser
ms-DS-Supported-Encryption-Types FalseUser
ms-DS-Tasks-For-Az-Role-BL False
Top
ms-DS-Tasks-For-Az-Task-BL False
Top
ms-DS-TDO-Egress-BL False
Top
ms-DS-TDO-Ingress-BL False
Top
ms-DS-User-Account-Control-Computed FalseUser
ms-DS-User-Password-Expiry-Time-Computed FalseUser
ms-DS-Value-Type-Reference-BL False
Top
ms-Exch-Assistant-Name False
ms-Exch-House-Identifier False
ms-Exch-LabeledURI False
ms-Exch-Owner-BL False
Top
ms-IIS-FTP-Dir FalseUser
ms-IIS-FTP-Root FalseUser
MSMQ-Digests FalseUser
MSMQ-Digests-Mig FalseUser
MSMQ-Sign-Certificates FalseUser
MSMQ-Sign-Certificates-Mig FalseUser
msNPAllowDialin FalseUser
msNPCallingStationID FalseUser
msNPSavedCallingStationID FalseUser
ms-PKI-AccountCredentials FalseUser
ms-PKI-Credential-Roaming-Tokens FalseUser
ms-PKI-DPAPIMasterKeys FalseUser
ms-PKI-RoamingTimeStamp FalseUser
msRADIUSCallbackNumber FalseUser
ms-RADIUS-FramedInterfaceId FalseUser
msRADIUSFramedIPAddress FalseUser
ms-RADIUS-FramedIpv6Prefix FalseUser
ms-RADIUS-FramedIpv6Route FalseUser
msRADIUSFramedRoute FalseUser
ms-RADIUS-SavedFramedInterfaceId FalseUser
ms-RADIUS-SavedFramedIpv6Prefix FalseUser
ms-RADIUS-SavedFramedIpv6Route FalseUser
msRADIUSServiceType FalseUser
msRASSavedCallbackNumber FalseUser
msRASSavedFramedIPAddress FalseUser
msRASSavedFramedRoute FalseUser
msSFU-30-Name FalseUser
msSFU-30-Nis-Domain FalseUser
msSFU-30-Posix-Member-Of False
Top
ms-TS-Allow-Logon FalseUser
ms-TS-Broken-Connection-Action FalseUser
ms-TS-Connect-Client-Drives FalseUser
ms-TS-Connect-Printer-Drives FalseUser
ms-TS-Default-To-Main-Printer FalseUser
MS-TS-ExpireDate FalseUser
MS-TS-ExpireDate2 FalseUser
MS-TS-ExpireDate3 FalseUser
MS-TS-ExpireDate4 FalseUser
ms-TS-Home-Directory FalseUser
ms-TS-Home-Drive FalseUser
ms-TS-Initial-Program FalseUser
MS-TS-LicenseVersion FalseUser
MS-TS-LicenseVersion2 FalseUser
MS-TS-LicenseVersion3 FalseUser
MS-TS-LicenseVersion4 FalseUser
MS-TSLS-Property01 FalseUser
MS-TSLS-Property02 FalseUser
MS-TS-ManagingLS FalseUser
MS-TS-ManagingLS2 FalseUser
MS-TS-ManagingLS3 FalseUser
MS-TS-ManagingLS4 FalseUser
ms-TS-Max-Connection-Time FalseUser
ms-TS-Max-Disconnection-Time FalseUser
ms-TS-Max-Idle-Time FalseUser
ms-TS-Primary-Desktop FalseUser
ms-TS-Profile-Path FalseUser
MS-TS-Property01 FalseUser
MS-TS-Property02 FalseUser
ms-TS-Reconnection-Action FalseUser
ms-TS-Remote-Control FalseUser
ms-TS-Secondary-Desktops FalseUser
ms-TS-Work-Directory FalseUser
netboot-SCP-BL False
Top
Network-Address FalseUser
Non-Security-Member-BL False
Top
Nt-Pwd-History FalseUser
NT-Security-Descriptor True
Top
 
Obj-Dist-Name False
Top
Object-Category True
Top
Object-Class True
Top
Object-Guid False
Top
Object-Sid True
Object-Version False
Top
Operator-Count FalseUser
Organizational-Unit-Name False
Organization-Name FalseUser
 
Other-Login-Workstations FalseUser
Other-Mailbox False
Other-Name False
Other-Well-Known-Objects False
Top
Partial-Attribute-Deletion-List False
Top
Partial-Attribute-Set False
Top
Personal-Title False
Phone-Fax-Other False
Phone-Home-Other False
Phone-Home-Primary FalseUser
 
Phone-Ip-Other False
Phone-Ip-Primary False
Phone-ISDN-Primary False
Phone-Mobile-Other False
Phone-Mobile-Primary FalseUser
 
Phone-Office-Other False
Phone-Pager-Other False
Phone-Pager-Primary FalseUser
 
photo FalseUser
Physical-Delivery-Office-Name False
Picture False
Possible-Inferiors False
Top
Postal-Address False
Postal-Code False
Post-Office-Box False
Preferred-Delivery-Method False
preferredLanguage FalseUser
Preferred-OU FalseUser
Primary-Group-ID FalseUser
Profile-Path FalseUser
Proxied-Object-Name False
Top
Proxy-Addresses False
Top
Pwd-Last-Set FalseUser
Query-Policy-BL False
Top
RDN False
Top
Registered-Address False
Repl-Property-Meta-Data False
Top
Repl-UpToDate-Vector False
Top
Reports False
Top
Reps-From False
Top
Reps-To False
Top
Revision False
Top
Rid False
roomNumber FalseUser
SAM-Account-Name True
SAM-Account-Type False
Script-Path FalseUser
SD-Rights-Effective False
Top
secretary FalseUser
 
Security-Identifier False
See-Also False
Serial-Number False
Server-Reference-BL False
Top
Service-Principal-Name FalseUser
shadowExpire False
shadowFlag False
shadowInactive False
shadowLastChange False
shadowMax False
shadowMin False
shadowWarning False
Show-In-Address-Book False
Show-In-Advanced-View-Only False
Top
SID-History False
Site-Object-BL False
Top
State-Or-Province-Name False
Street-Address False
Structural-Object-Class False
Top
Sub-Refs False
Top
SubSchemaSubEntry False
Top
Supplemental-Credentials False
Surname False
System-Flags False
Top
Telephone-Number False
Teletex-Terminal-Identifier False
Telex-Number False
Telex-Primary False
Terminal-Server FalseUser
Text-Country False
Text-Encoded-OR-Address False
Title False
Token-Groups False
Token-Groups-Global-And-Universal False
Token-Groups-No-GC-Acceptable False
uid FalseUser
 
uidNumber False
Unicode-Pwd FalseUser
unixHomeDirectory False
unixUserPassword False
User-Account-Control FalseUser
User-Cert False
User-Comment False
User-Parameters FalseUser
User-Password False
 
userPKCS12 FalseUser
User-Principal-Name FalseUser
User-Shared-Folder FalseUser
User-Shared-Folder-Other FalseUser
User-SMIME-Certificate FalseUser
 
User-Workstations FalseUser
USN-Changed False
Top
USN-Created False
Top
USN-DSA-Last-Obj-Removed False
Top
USN-Intersite False
Top
USN-Last-Obj-Rem False
Top
USN-Source False
Top
Wbem-Path False
Top
Well-Known-Objects False
Top
When-Changed False
Top
When-Created False
Top
WWW-Home-Page False
Top
WWW-Page-Other False
Top
X121-Address False
x500uniqueIdentifier FalseUser
X509-Cert FalseUser
 

Windows Server 2012 Extended Rights

This class contains the following extended rights for Windows Server 2012:

Common Name
User-Change-Password
User-Force-Change-Password
Send-As
Receive-As
Allowed-To-Authenticate

Windows Server 2012 Property Sets

This class contains the following property sets for Windows Server 2012:

Common Name
General-Information
User-Account-Restrictions
User-Logon
Membership
Personal-Information
Email-Information
Web-Information
Public-Information
RAS-Information
Private-Information
Terminal-Server-License-Server

 

 

Show:
© 2015 Microsoft