ms-PKI-Key-Recovery-Agent class

One key recovery agent (KRA) object instance is created for each installed Cert Server (with a unique common name) during cert server setup. If two CAs were given the same common name during CA setup, they will share a single KRA object instance.

CNms-PKI-Key-Recovery-Agent
Ldap-Display-NamemsPKI-Key-Recovery-Agent
Update PrivilegeAn admin installing a CA will need to be able to create a KRA instance in the KRA container. Installed cert servers need to be able to update the userCertificate attribute.
Update FrequencyA few certificates will be added at most every few months.
Schema-Id-Guid26ccf238-a08e-4b86-9a82-a8c9ac7ee5cb

Implementations

Windows Server 2003

System-OnlyFalse
Object-Category1
Default-Object-Category-
Governs-Id1.2.840.113556.1.5.195
Default-Hiding-Value1
Rdn-Att-Id
Subclass of
Possible Superiors Container
Auxiliary Classes-
NT-Security-DescriptorO:BAG:BAD:S:
Default Security DescriptorD:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)
System-Flags0x00000010

Windows Server 2003 Attributes

This class contains the following attributes for Windows Server 2003:

AttributeMandatoryDerived from
Account-Expires False
ACS-Policy-Name False
Address False
Address-Home False
Admin-Count False
Admin-Description False
Top
Admin-Display-Name False
Top
Allowed-Attributes False
Top
Allowed-Attributes-Effective False
Top
Allowed-Child-Classes False
Top
Allowed-Child-Classes-Effective False
Top
Assistant False
attributeCertificateAttribute False
audio False
Bad-Password-Time False
Bad-Pwd-Count False
Bridgehead-Server-List-BL False
Top
Business-Category False
Canonical-Name False
Top
carLicense False
Code-Page False
Common-Name True
 
Top
Company False
Control-Access-Rights False
Country-Code False
Country-Name False
Create-Time-Stamp False
Top
DBCS-Pwd False
Default-Class-Store False
Department False
departmentNumber False
Description False
Top
Desktop-Profile False
Destination-Indicator False
Display-Name False
 
Top
Display-Name-Printable False
Top
Division False
DSA-Signature False
Top
DS-Core-Propagation-Data False
Top
Dynamic-LDAP-Server False
E-mail-Addresses False
Employee-ID False
Employee-Number False
Employee-Type False
Extension-Name False
Top
Facsimile-Telephone-Number False
Flags False
Top
From-Entry False
Top
Frs-Computer-Reference-BL False
Top
FRS-Member-Reference-BL False
Top
FSMO-Role-Owner False
Top
Generation-Qualifier False
Given-Name False
 
Group-Membership-SAM False
Group-Priority False
Groups-to-Ignore False
Home-Directory False
Home-Drive False
houseIdentifier False
Initials False
Instance-Type True
Top
International-ISDN-Number False
Is-Critical-System-Object False
Top
Is-Deleted False
Top
Is-Member-Of-DL False
Top
Is-Privilege-Holder False
Top
jpegPhoto False
labeledURI False
Last-Known-Parent False
Top
Last-Logoff False
Last-Logon False
Last-Logon-Timestamp False
Lm-Pwd-History False
Locale-ID False
Locality-Name False
Lockout-Time False
Logo False
Logon-Count False
Logon-Hours False
Logon-Workstation False
Managed-Objects False
Top
Manager False
Mastered-By False
Top
Max-Storage False
MHS-OR-Address False
Modify-Time-Stamp False
Top
ms-COM-PartitionSetLink False
Top
ms-COM-UserLink False
Top
ms-COM-UserPartitionSetLink False
MS-DRM-Identity-Certificate False
ms-DS-Allowed-To-Delegate-To False
ms-DS-Approx-Immed-Subordinates False
Top
ms-DS-Cached-Membership False
ms-DS-Cached-Membership-Time-Stamp False
MS-DS-Consistency-Child-Count False
Top
MS-DS-Consistency-Guid False
Top
MS-DS-Creator-SID False
ms-DS-Mastered-By False
Top
ms-DS-Members-For-Az-Role-BL False
Top
ms-DS-NC-Repl-Cursors False
Top
ms-DS-NC-Repl-Inbound-Neighbors False
Top
ms-DS-NC-Repl-Outbound-Neighbors False
Top
ms-DS-Non-Members-BL False
Top
ms-DS-Object-Reference-BL False
Top
ms-DS-Operations-For-Az-Role-BL False
Top
ms-DS-Operations-For-Az-Task-BL False
Top
ms-DS-Repl-Attribute-Meta-Data False
Top
ms-DS-Repl-Value-Meta-Data False
Top
ms-DS-Site-Affinity False
ms-DS-Tasks-For-Az-Role-BL False
Top
ms-DS-Tasks-For-Az-Task-BL False
Top
ms-DS-User-Account-Control-Computed False
ms-Exch-House-Identifier False
ms-Exch-Owner-BL False
Top
ms-IIS-FTP-Dir False
ms-IIS-FTP-Root False
MSMQ-Digests False
MSMQ-Digests-Mig False
MSMQ-Sign-Certificates False
MSMQ-Sign-Certificates-Mig False
msNPAllowDialin False
msNPCallingStationID False
msNPSavedCallingStationID False
msRADIUSCallbackNumber False
msRADIUSFramedIPAddress False
msRADIUSFramedRoute False
msRADIUSServiceType False
msRASSavedCallbackNumber False
msRASSavedFramedIPAddress False
msRASSavedFramedRoute False
netboot-SCP-BL False
Top
Network-Address False
Non-Security-Member-BL False
Top
Nt-Pwd-History False
NT-Security-Descriptor True
Top
Obj-Dist-Name False
Top
Object-Category True
Top
Object-Class True
Top
Object-Guid False
Top
Object-Version False
Top
Operator-Count False
Organizational-Unit-Name False
Organization-Name False
Other-Login-Workstations False
Other-Mailbox False
Other-Name False
Other-Well-Known-Objects False
Top
Partial-Attribute-Deletion-List False
Top
Partial-Attribute-Set False
Top
Personal-Title False
Phone-Fax-Other False
Phone-Home-Other False
Phone-Home-Primary False
Phone-Ip-Other False
Phone-Ip-Primary False
Phone-ISDN-Primary False
Phone-Mobile-Other False
Phone-Mobile-Primary False
Phone-Office-Other False
Phone-Pager-Other False
Phone-Pager-Primary False
photo False
Physical-Delivery-Office-Name False
Picture False
Possible-Inferiors False
Top
Postal-Address False
Postal-Code False
Post-Office-Box False
Preferred-Delivery-Method False
preferredLanguage False
Preferred-OU False
Primary-Group-ID False
Profile-Path False
Proxied-Object-Name False
Top
Proxy-Addresses False
Top
Pwd-Last-Set False
Query-Policy-BL False
Top
RDN False
Top
Registered-Address False
Repl-Property-Meta-Data False
Top
Repl-UpToDate-Vector False
Top
Reports False
Top
Reps-From False
Top
Reps-To False
Top
Revision False
Top
roomNumber False
Script-Path False
SD-Rights-Effective False
Top
secretary False
See-Also False
Serial-Number False
Server-Reference-BL False
Top
Service-Principal-Name False
Show-In-Advanced-View-Only False
Top
Site-Object-BL False
Top
State-Or-Province-Name False
Street-Address False
Structural-Object-Class False
Top
Sub-Refs False
Top
SubSchemaSubEntry False
Top
Surname False
System-Flags False
Top
Telephone-Number False
Teletex-Terminal-Identifier False
Telex-Number False
Telex-Primary False
Terminal-Server False
Text-Country False
Title False
uid False
Unicode-Pwd False
User-Account-Control False
User-Comment False
User-Parameters False
User-Password False
userPKCS12 False
User-Principal-Name False
User-Shared-Folder False
User-Shared-Folder-Other False
User-SMIME-Certificate False
User-Workstations False
USN-Changed False
Top
USN-Created False
Top
USN-DSA-Last-Obj-Removed False
Top
USN-Intersite False
Top
USN-Last-Obj-Rem False
Top
USN-Source False
Top
Wbem-Path False
Top
Well-Known-Objects False
Top
When-Changed False
Top
When-Created False
Top
WWW-Home-Page False
Top
WWW-Page-Other False
Top
X121-Address False
x500uniqueIdentifier False
X509-Cert False

Windows Server 2003 R2

System-OnlyFalse
Object-Category1
Default-Object-Category-
Governs-Id1.2.840.113556.1.5.195
Default-Hiding-Value1
Rdn-Att-Id
Subclass of
Possible Superiors Container
Auxiliary Classes-
NT-Security-DescriptorO:BAG:BAD:S:
Default Security DescriptorD:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)
System-Flags0x00000010

Windows Server 2003 R2 Attributes

This class contains the following attributes for Windows Server 2003 R2:

AttributeMandatoryDerived from
Account-Expires False
ACS-Policy-Name False
Address False
Address-Home False
Admin-Count False
Admin-Description False
Top
Admin-Display-Name False
Top
Allowed-Attributes False
Top
Allowed-Attributes-Effective False
Top
Allowed-Child-Classes False
Top
Allowed-Child-Classes-Effective False
Top
Assistant False
attributeCertificateAttribute False
audio False
Bad-Password-Time False
Bad-Pwd-Count False
Bridgehead-Server-List-BL False
Top
Business-Category False
Canonical-Name False
Top
carLicense False
Code-Page False
Common-Name True
 
Top
Company False
Control-Access-Rights False
Country-Code False
Country-Name False
Create-Time-Stamp False
Top
DBCS-Pwd False
Default-Class-Store False
Department False
departmentNumber False
Description False
Top
Desktop-Profile False
Destination-Indicator False
Display-Name False
 
Top
Display-Name-Printable False
Top
Division False
DSA-Signature False
Top
DS-Core-Propagation-Data False
Top
Dynamic-LDAP-Server False
E-mail-Addresses False
Employee-ID False
Employee-Number False
Employee-Type False
Extension-Name False
Top
Facsimile-Telephone-Number False
Flags False
Top
From-Entry False
Top
Frs-Computer-Reference-BL False
Top
FRS-Member-Reference-BL False
Top
FSMO-Role-Owner False
Top
Generation-Qualifier False
Given-Name False
 
Group-Membership-SAM False
Group-Priority False
Groups-to-Ignore False
Home-Directory False
Home-Drive False
houseIdentifier False
Initials False
Instance-Type True
Top
International-ISDN-Number False
Is-Critical-System-Object False
Top
Is-Deleted False
Top
Is-Member-Of-DL False
Top
Is-Privilege-Holder False
Top
jpegPhoto False
labeledURI False
Last-Known-Parent False
Top
Last-Logoff False
Last-Logon False
Last-Logon-Timestamp False
Lm-Pwd-History False
Locale-ID False
Locality-Name False
Lockout-Time False
Logo False
Logon-Count False
Logon-Hours False
Logon-Workstation False
Managed-Objects False
Top
Manager False
Mastered-By False
Top
Max-Storage False
MHS-OR-Address False
Modify-Time-Stamp False
Top
ms-COM-PartitionSetLink False
Top
ms-COM-UserLink False
Top
ms-COM-UserPartitionSetLink False
ms-DFSR-ComputerReferenceBL False
Top
ms-DFSR-MemberReferenceBL False
Top
MS-DRM-Identity-Certificate False
ms-DS-Allowed-To-Delegate-To False
ms-DS-Approx-Immed-Subordinates False
Top
ms-DS-Cached-Membership False
ms-DS-Cached-Membership-Time-Stamp False
MS-DS-Consistency-Child-Count False
Top
MS-DS-Consistency-Guid False
Top
MS-DS-Creator-SID False
ms-DS-Mastered-By False
Top
ms-DS-Members-For-Az-Role-BL False
Top
ms-DS-NC-Repl-Cursors False
Top
ms-DS-NC-Repl-Inbound-Neighbors False
Top
ms-DS-NC-Repl-Outbound-Neighbors False
Top
ms-DS-Non-Members-BL False
Top
ms-DS-Object-Reference-BL False
Top
ms-DS-Operations-For-Az-Role-BL False
Top
ms-DS-Operations-For-Az-Task-BL False
Top
ms-DS-Repl-Attribute-Meta-Data False
Top
ms-DS-Repl-Value-Meta-Data False
Top
ms-DS-Site-Affinity False
ms-DS-Source-Object-DN False
ms-DS-Tasks-For-Az-Role-BL False
Top
ms-DS-Tasks-For-Az-Task-BL False
Top
ms-DS-User-Account-Control-Computed False
ms-Exch-House-Identifier False
ms-Exch-Owner-BL False
Top
ms-IIS-FTP-Dir False
ms-IIS-FTP-Root False
MSMQ-Digests False
MSMQ-Digests-Mig False
MSMQ-Sign-Certificates False
MSMQ-Sign-Certificates-Mig False
msNPAllowDialin False
msNPCallingStationID False
msNPSavedCallingStationID False
msRADIUSCallbackNumber False
msRADIUSFramedIPAddress False
msRADIUSFramedRoute False
msRADIUSServiceType False
msRASSavedCallbackNumber False
msRASSavedFramedIPAddress False
msRASSavedFramedRoute False
msSFU-30-Name False
msSFU-30-Nis-Domain False
msSFU-30-Posix-Member-Of False
Top
netboot-SCP-BL False
Top
Network-Address False
Non-Security-Member-BL False
Top
Nt-Pwd-History False
NT-Security-Descriptor True
Top
Obj-Dist-Name False
Top
Object-Category True
Top
Object-Class True
Top
Object-Guid False
Top
Object-Version False
Top
Operator-Count False
Organizational-Unit-Name False
Organization-Name False
Other-Login-Workstations False
Other-Mailbox False
Other-Name False
Other-Well-Known-Objects False
Top
Partial-Attribute-Deletion-List False
Top
Partial-Attribute-Set False
Top
Personal-Title False
Phone-Fax-Other False
Phone-Home-Other False
Phone-Home-Primary False
Phone-Ip-Other False
Phone-Ip-Primary False
Phone-ISDN-Primary False
Phone-Mobile-Other False
Phone-Mobile-Primary False
Phone-Office-Other False
Phone-Pager-Other False
Phone-Pager-Primary False
photo False
Physical-Delivery-Office-Name False
Picture False
Possible-Inferiors False
Top
Postal-Address False
Postal-Code False
Post-Office-Box False
Preferred-Delivery-Method False
preferredLanguage False
Preferred-OU False
Primary-Group-ID False
Profile-Path False
Proxied-Object-Name False
Top
Proxy-Addresses False
Top
Pwd-Last-Set False
Query-Policy-BL False
Top
RDN False
Top
Registered-Address False
Repl-Property-Meta-Data False
Top
Repl-UpToDate-Vector False
Top
Reports False
Top
Reps-From False
Top
Reps-To False
Top
Revision False
Top
roomNumber False
Script-Path False
SD-Rights-Effective False
Top
secretary False
See-Also False
Serial-Number False
Server-Reference-BL False
Top
Service-Principal-Name False
Show-In-Advanced-View-Only False
Top
Site-Object-BL False
Top
State-Or-Province-Name False
Street-Address False
Structural-Object-Class False
Top
Sub-Refs False
Top
SubSchemaSubEntry False
Top
Surname False
System-Flags False
Top
Telephone-Number False
Teletex-Terminal-Identifier False
Telex-Number False
Telex-Primary False
Terminal-Server False
Text-Country False
Title False
uid False
Unicode-Pwd False
User-Account-Control False
User-Comment False
User-Parameters False
User-Password False
userPKCS12 False
User-Principal-Name False
User-Shared-Folder False
User-Shared-Folder-Other False
User-SMIME-Certificate False
User-Workstations False
USN-Changed False
Top
USN-Created False
Top
USN-DSA-Last-Obj-Removed False
Top
USN-Intersite False
Top
USN-Last-Obj-Rem False
Top
USN-Source False
Top
Wbem-Path False
Top
Well-Known-Objects False
Top
When-Changed False
Top
When-Created False
Top
WWW-Home-Page False
Top
WWW-Page-Other False
Top
X121-Address False
x500uniqueIdentifier False
X509-Cert False

Windows Server 2008

System-OnlyFalse
Object-Category1
Default-Object-Category-
Governs-Id1.2.840.113556.1.5.195
Default-Hiding-Value1
Rdn-Att-Id
Subclass of
Possible Superiors Container
Auxiliary Classes-
NT-Security-DescriptorO:BAG:BAD:S:
Default Security DescriptorD:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)
System-Flags0x00000010

Windows Server 2008 Attributes

This class contains the following attributes for Windows Server 2008:

AttributeMandatoryDerived from
Account-Expires False
ACS-Policy-Name False
Address False
Address-Home False
Admin-Count False
Admin-Description False
Top
Admin-Display-Name False
Top
Allowed-Attributes False
Top
Allowed-Attributes-Effective False
Top
Allowed-Child-Classes False
Top
Allowed-Child-Classes-Effective False
Top
Assistant False
attributeCertificateAttribute False
audio False
Bad-Password-Time False
Bad-Pwd-Count False
Bridgehead-Server-List-BL False
Top
Business-Category False
Canonical-Name False
Top
carLicense False
Code-Page False
Common-Name True
 
Top
Company False
Control-Access-Rights False
Country-Code False
Country-Name False
Create-Time-Stamp False
Top
DBCS-Pwd False
Default-Class-Store False
Department False
departmentNumber False
Description False
Top
Desktop-Profile False
Destination-Indicator False
Display-Name False
 
Top
Display-Name-Printable False
Top
Division False
DSA-Signature False
Top
DS-Core-Propagation-Data False
Top
Dynamic-LDAP-Server False
E-mail-Addresses False
Employee-ID False
Employee-Number False
Employee-Type False
Extension-Name False
Top
Facsimile-Telephone-Number False
Flags False
Top
From-Entry False
Top
Frs-Computer-Reference-BL False
Top
FRS-Member-Reference-BL False
Top
FSMO-Role-Owner False
Top
Generation-Qualifier False
Given-Name False
 
Group-Membership-SAM False
Group-Priority False
Groups-to-Ignore False
Home-Directory False
Home-Drive False
houseIdentifier False
Initials False
Instance-Type True
Top
International-ISDN-Number False
Is-Critical-System-Object False
Top
Is-Deleted False
Top
Is-Member-Of-DL False
Top
Is-Privilege-Holder False
Top
jpegPhoto False
labeledURI False
Last-Known-Parent False
Top
Last-Logoff False
Last-Logon False
Last-Logon-Timestamp False
Lm-Pwd-History False
Locale-ID False
Locality-Name False
Lockout-Time False
Logo False
Logon-Count False
Logon-Hours False
Logon-Workstation False
Managed-Objects False
Top
Manager False
Mastered-By False
Top
Max-Storage False
MHS-OR-Address False
Modify-Time-Stamp False
Top
ms-COM-PartitionSetLink False
Top
ms-COM-UserLink False
Top
ms-COM-UserPartitionSetLink False
ms-DFSR-ComputerReferenceBL False
Top
ms-DFSR-MemberReferenceBL False
Top
MS-DRM-Identity-Certificate False
ms-DS-Allowed-To-Delegate-To False
ms-DS-Approx-Immed-Subordinates False
Top
ms-DS-AuthenticatedAt-DC False
ms-DS-AuthenticatedTo-Accountlist False
Top
ms-DS-Cached-Membership False
ms-DS-Cached-Membership-Time-Stamp False
MS-DS-Consistency-Child-Count False
Top
MS-DS-Consistency-Guid False
Top
MS-DS-Creator-SID False
ms-DS-Failed-Interactive-Logon-Count False
ms-DS-Failed-Interactive-Logon-Count-At-Last-Successful-Logon False
ms-DS-HAB-Seniority-Index False
ms-DS-Is-Domain-For False
Top
ms-DS-Is-Full-Replica-For False
Top
ms-DS-Is-Partial-Replica-For False
Top
ms-DS-KrbTgt-Link-BL False
Top
ms-DS-Last-Failed-Interactive-Logon-Time False
ms-DS-Last-Successful-Interactive-Logon-Time False
ms-DS-Mastered-By False
Top
ms-DS-Members-For-Az-Role-BL False
Top
ms-DS-NC-Repl-Cursors False
Top
ms-DS-NC-Repl-Inbound-Neighbors False
Top
ms-DS-NC-Repl-Outbound-Neighbors False
Top
ms-DS-NC-RO-Replica-Locations-BL False
Top
ms-DS-NC-Type False
Top
ms-DS-Non-Members-BL False
Top
ms-DS-Object-Reference-BL False
Top
ms-DS-Operations-For-Az-Role-BL False
Top
ms-DS-Operations-For-Az-Task-BL False
Top
ms-DS-Phonetic-Company-Name False
ms-DS-Phonetic-Department False
ms-DS-Phonetic-Display-Name False
ms-DS-Phonetic-First-Name False
ms-DS-Phonetic-Last-Name False
ms-DS-Principal-Name False
Top
ms-DS-PSO-Applied False
Top
ms-DS-Repl-Attribute-Meta-Data False
Top
ms-DS-Repl-Value-Meta-Data False
Top
ms-DS-Resultant-PSO False
ms-DS-Revealed-DSAs False
Top
ms-DS-Revealed-List-BL False
Top
ms-DS-Secondary-KrbTgt-Number False
ms-DS-Site-Affinity False
ms-DS-Source-Object-DN False
ms-DS-Supported-Encryption-Types False
ms-DS-Tasks-For-Az-Role-BL False
Top
ms-DS-Tasks-For-Az-Task-BL False
Top
ms-DS-User-Account-Control-Computed False
ms-DS-User-Password-Expiry-Time-Computed False
ms-Exch-House-Identifier False
ms-Exch-Owner-BL False
Top
ms-IIS-FTP-Dir False
ms-IIS-FTP-Root False
MSMQ-Digests False
MSMQ-Digests-Mig False
MSMQ-Sign-Certificates False
MSMQ-Sign-Certificates-Mig False
msNPAllowDialin False
msNPCallingStationID False
msNPSavedCallingStationID False
ms-PKI-AccountCredentials False
ms-PKI-DPAPIMasterKeys False
ms-PKI-RoamingTimeStamp False
msRADIUSCallbackNumber False
ms-RADIUS-FramedInterfaceId False
msRADIUSFramedIPAddress False
ms-RADIUS-FramedIpv6Prefix False
ms-RADIUS-FramedIpv6Route False
msRADIUSFramedRoute False
ms-RADIUS-SavedFramedInterfaceId False
ms-RADIUS-SavedFramedIpv6Prefix False
ms-RADIUS-SavedFramedIpv6Route False
msRADIUSServiceType False
msRASSavedCallbackNumber False
msRASSavedFramedIPAddress False
msRASSavedFramedRoute False
msSFU-30-Name False
msSFU-30-Nis-Domain False
msSFU-30-Posix-Member-Of False
Top
ms-TS-Allow-Logon False
ms-TS-Broken-Connection-Action False
ms-TS-Connect-Client-Drives False
ms-TS-Connect-Printer-Drives False
ms-TS-Default-To-Main-Printer False
MS-TS-ExpireDate False
MS-TS-ExpireDate2 False
MS-TS-ExpireDate3 False
MS-TS-ExpireDate4 False
ms-TS-Home-Directory False
ms-TS-Home-Drive False
ms-TS-Initial-Program False
MS-TS-LicenseVersion False
MS-TS-LicenseVersion2 False
MS-TS-LicenseVersion3 False
MS-TS-LicenseVersion4 False
MS-TSLS-Property01 False
MS-TSLS-Property02 False
MS-TS-ManagingLS False
MS-TS-ManagingLS2 False
MS-TS-ManagingLS3 False
MS-TS-ManagingLS4 False
ms-TS-Max-Connection-Time False
ms-TS-Max-Disconnection-Time False
ms-TS-Max-Idle-Time False
ms-TS-Profile-Path False
MS-TS-Property01 False
MS-TS-Property02 False
ms-TS-Reconnection-Action False
ms-TS-Remote-Control False
ms-TS-Work-Directory False
netboot-SCP-BL False
Top
Network-Address False
Non-Security-Member-BL False
Top
Nt-Pwd-History False
NT-Security-Descriptor True
Top
Obj-Dist-Name False
Top
Object-Category True
Top
Object-Class True
Top
Object-Guid False
Top
Object-Version False
Top
Operator-Count False
Organizational-Unit-Name False
Organization-Name False
Other-Login-Workstations False
Other-Mailbox False
Other-Name False
Other-Well-Known-Objects False
Top
Partial-Attribute-Deletion-List False
Top
Partial-Attribute-Set False
Top
Personal-Title False
Phone-Fax-Other False
Phone-Home-Other False
Phone-Home-Primary False
Phone-Ip-Other False
Phone-Ip-Primary False
Phone-ISDN-Primary False
Phone-Mobile-Other False
Phone-Mobile-Primary False
Phone-Office-Other False
Phone-Pager-Other False
Phone-Pager-Primary False
photo False
Physical-Delivery-Office-Name False
Picture False
Possible-Inferiors False
Top
Postal-Address False
Postal-Code False
Post-Office-Box False
Preferred-Delivery-Method False
preferredLanguage False
Preferred-OU False
Primary-Group-ID False
Profile-Path False
Proxied-Object-Name False
Top
Proxy-Addresses False
Top
Pwd-Last-Set False
Query-Policy-BL False
Top
RDN False
Top
Registered-Address False
Repl-Property-Meta-Data False
Top
Repl-UpToDate-Vector False
Top
Reports False
Top
Reps-From False
Top
Reps-To False
Top
Revision False
Top
roomNumber False
Script-Path False
SD-Rights-Effective False
Top
secretary False
See-Also False
Serial-Number False
Server-Reference-BL False
Top
Service-Principal-Name False
Show-In-Advanced-View-Only False
Top
Site-Object-BL False
Top
State-Or-Province-Name False
Street-Address False
Structural-Object-Class False
Top
Sub-Refs False
Top
SubSchemaSubEntry False
Top
Surname False
System-Flags False
Top
Telephone-Number False
Teletex-Terminal-Identifier False
Telex-Number False
Telex-Primary False
Terminal-Server False
Text-Country False
Title False
uid False
Unicode-Pwd False
User-Account-Control False
User-Comment False
User-Parameters False
User-Password False
userPKCS12 False
User-Principal-Name False
User-Shared-Folder False
User-Shared-Folder-Other False
User-SMIME-Certificate False
User-Workstations False
USN-Changed False
Top
USN-Created False
Top
USN-DSA-Last-Obj-Removed False
Top
USN-Intersite False
Top
USN-Last-Obj-Rem False
Top
USN-Source False
Top
Wbem-Path False
Top
Well-Known-Objects False
Top
When-Changed False
Top
When-Created False
Top
WWW-Home-Page False
Top
WWW-Page-Other False
Top
X121-Address False
x500uniqueIdentifier False
X509-Cert False

Windows Server 2008 R2

System-OnlyFalse
Object-Category1
Default-Object-Category-
Governs-Id1.2.840.113556.1.5.195
Default-Hiding-Value1
Rdn-Att-Id
Subclass of
Possible Superiors Container
Auxiliary Classes-
NT-Security-DescriptorO:BAG:BAD:S:
Default Security DescriptorD:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)
System-Flags0x00000010

Windows Server 2008 R2 Attributes

This class contains the following attributes for Windows Server 2008 R2:

AttributeMandatoryDerived from
Account-Expires False
ACS-Policy-Name False
Address False
Address-Home False
Admin-Count False
Admin-Description False
Top
Admin-Display-Name False
Top
Allowed-Attributes False
Top
Allowed-Attributes-Effective False
Top
Allowed-Child-Classes False
Top
Allowed-Child-Classes-Effective False
Top
Assistant False
attributeCertificateAttribute False
audio False
Bad-Password-Time False
Bad-Pwd-Count False
Bridgehead-Server-List-BL False
Top
Business-Category False
Canonical-Name False
Top
carLicense False
Code-Page False
Common-Name True
 
Top
Company False
Control-Access-Rights False
Country-Code False
Country-Name False
Create-Time-Stamp False
Top
DBCS-Pwd False
Default-Class-Store False
Department False
departmentNumber False
Description False
Top
Desktop-Profile False
Destination-Indicator False
Display-Name False
 
Top
Display-Name-Printable False
Top
Division False
DSA-Signature False
Top
DS-Core-Propagation-Data False
Top
Dynamic-LDAP-Server False
E-mail-Addresses False
Employee-ID False
Employee-Number False
Employee-Type False
Extension-Name False
Top
Facsimile-Telephone-Number False
Flags False
Top
From-Entry False
Top
Frs-Computer-Reference-BL False
Top
FRS-Member-Reference-BL False
Top
FSMO-Role-Owner False
Top
Generation-Qualifier False
Given-Name False
 
Group-Membership-SAM False
Group-Priority False
Groups-to-Ignore False
Home-Directory False
Home-Drive False
houseIdentifier False
Initials False
Instance-Type True
Top
International-ISDN-Number False
Is-Critical-System-Object False
Top
Is-Deleted False
Top
Is-Member-Of-DL False
Top
Is-Privilege-Holder False
Top
Is-Recycled False
Top
jpegPhoto False
labeledURI False
Last-Known-Parent False
Top
Last-Logoff False
Last-Logon False
Last-Logon-Timestamp False
Lm-Pwd-History False
Locale-ID False
Locality-Name False
Lockout-Time False
Logo False
Logon-Count False
Logon-Hours False
Logon-Workstation False
Managed-Objects False
Top
Manager False
Mastered-By False
Top
Max-Storage False
MHS-OR-Address False
Modify-Time-Stamp False
Top
ms-COM-PartitionSetLink False
Top
ms-COM-UserLink False
Top
ms-COM-UserPartitionSetLink False
ms-DFSR-ComputerReferenceBL False
Top
ms-DFSR-MemberReferenceBL False
Top
MS-DRM-Identity-Certificate False
ms-DS-Allowed-To-Delegate-To False
ms-DS-Approx-Immed-Subordinates False
Top
ms-DS-AuthenticatedAt-DC False
ms-DS-AuthenticatedTo-Accountlist False
Top
ms-DS-Cached-Membership False
ms-DS-Cached-Membership-Time-Stamp False
MS-DS-Consistency-Child-Count False
Top
MS-DS-Consistency-Guid False
Top
MS-DS-Creator-SID False
ms-DS-Enabled-Feature-BL False
Top
ms-DS-Failed-Interactive-Logon-Count False
ms-DS-Failed-Interactive-Logon-Count-At-Last-Successful-Logon False
ms-DS-HAB-Seniority-Index False
ms-DS-Host-Service-Account-BL False
Top
ms-DS-Is-Domain-For False
Top
ms-DS-Is-Full-Replica-For False
Top
ms-DS-Is-Partial-Replica-For False
Top
ms-DS-KrbTgt-Link-BL False
Top
ms-DS-Last-Failed-Interactive-Logon-Time False
ms-DS-Last-Known-RDN False
Top
ms-DS-Last-Successful-Interactive-Logon-Time False
ms-DS-local-Effective-Deletion-Time False
Top
ms-DS-local-Effective-Recycle-Time False
Top
ms-DS-Mastered-By False
Top
ms-DS-Members-For-Az-Role-BL False
Top
ms-DS-NC-Repl-Cursors False
Top
ms-DS-NC-Repl-Inbound-Neighbors False
Top
ms-DS-NC-Repl-Outbound-Neighbors False
Top
ms-DS-NC-RO-Replica-Locations-BL False
Top
ms-DS-NC-Type False
Top
ms-DS-Non-Members-BL False
Top
ms-DS-Object-Reference-BL False
Top
ms-DS-OIDToGroup-Link-BL False
Top
ms-DS-Operations-For-Az-Role-BL False
Top
ms-DS-Operations-For-Az-Task-BL False
Top
ms-DS-Phonetic-Company-Name False
ms-DS-Phonetic-Department False
ms-DS-Phonetic-Display-Name False
ms-DS-Phonetic-First-Name False
ms-DS-Phonetic-Last-Name False
ms-DS-Principal-Name False
Top
ms-DS-PSO-Applied False
Top
ms-DS-Repl-Attribute-Meta-Data False
Top
ms-DS-Repl-Value-Meta-Data False
Top
ms-DS-Resultant-PSO False
ms-DS-Revealed-DSAs False
Top
ms-DS-Revealed-List-BL False
Top
ms-DS-Secondary-KrbTgt-Number False
ms-DS-Site-Affinity False
ms-DS-Source-Object-DN False
ms-DS-Supported-Encryption-Types False
ms-DS-Tasks-For-Az-Role-BL False
Top
ms-DS-Tasks-For-Az-Task-BL False
Top
ms-DS-User-Account-Control-Computed False
ms-DS-User-Password-Expiry-Time-Computed False
ms-Exch-House-Identifier False
ms-Exch-Owner-BL False
Top
ms-IIS-FTP-Dir False
ms-IIS-FTP-Root False
MSMQ-Digests False
MSMQ-Digests-Mig False
MSMQ-Sign-Certificates False
MSMQ-Sign-Certificates-Mig False
msNPAllowDialin False
msNPCallingStationID False
msNPSavedCallingStationID False
ms-PKI-AccountCredentials False
ms-PKI-Credential-Roaming-Tokens False
ms-PKI-DPAPIMasterKeys False
ms-PKI-RoamingTimeStamp False
msRADIUSCallbackNumber False
ms-RADIUS-FramedInterfaceId False
msRADIUSFramedIPAddress False
ms-RADIUS-FramedIpv6Prefix False
ms-RADIUS-FramedIpv6Route False
msRADIUSFramedRoute False
ms-RADIUS-SavedFramedInterfaceId False
ms-RADIUS-SavedFramedIpv6Prefix False
ms-RADIUS-SavedFramedIpv6Route False
msRADIUSServiceType False
msRASSavedCallbackNumber False
msRASSavedFramedIPAddress False
msRASSavedFramedRoute False
msSFU-30-Name False
msSFU-30-Nis-Domain False
msSFU-30-Posix-Member-Of False
Top
ms-TS-Allow-Logon False
ms-TS-Broken-Connection-Action False
ms-TS-Connect-Client-Drives False
ms-TS-Connect-Printer-Drives False
ms-TS-Default-To-Main-Printer False
MS-TS-ExpireDate False
MS-TS-ExpireDate2 False
MS-TS-ExpireDate3 False
MS-TS-ExpireDate4 False
ms-TS-Home-Directory False
ms-TS-Home-Drive False
ms-TS-Initial-Program False
MS-TS-LicenseVersion False
MS-TS-LicenseVersion2 False
MS-TS-LicenseVersion3 False
MS-TS-LicenseVersion4 False
MS-TSLS-Property01 False
MS-TSLS-Property02 False
MS-TS-ManagingLS False
MS-TS-ManagingLS2 False
MS-TS-ManagingLS3 False
MS-TS-ManagingLS4 False
ms-TS-Max-Connection-Time False
ms-TS-Max-Disconnection-Time False
ms-TS-Max-Idle-Time False
ms-TS-Primary-Desktop False
ms-TS-Profile-Path False
MS-TS-Property01 False
MS-TS-Property02 False
ms-TS-Reconnection-Action False
ms-TS-Remote-Control False
ms-TS-Secondary-Desktops False
ms-TS-Work-Directory False
netboot-SCP-BL False
Top
Network-Address False
Non-Security-Member-BL False
Top
Nt-Pwd-History False
NT-Security-Descriptor True
Top
Obj-Dist-Name False
Top
Object-Category True
Top
Object-Class True
Top
Object-Guid False
Top
Object-Version False
Top
Operator-Count False
Organizational-Unit-Name False
Organization-Name False
Other-Login-Workstations False
Other-Mailbox False
Other-Name False
Other-Well-Known-Objects False
Top
Partial-Attribute-Deletion-List False
Top
Partial-Attribute-Set False
Top
Personal-Title False
Phone-Fax-Other False
Phone-Home-Other False
Phone-Home-Primary False
Phone-Ip-Other False
Phone-Ip-Primary False
Phone-ISDN-Primary False
Phone-Mobile-Other False
Phone-Mobile-Primary False
Phone-Office-Other False
Phone-Pager-Other False
Phone-Pager-Primary False
photo False
Physical-Delivery-Office-Name False
Picture False
Possible-Inferiors False
Top
Postal-Address False
Postal-Code False
Post-Office-Box False
Preferred-Delivery-Method False
preferredLanguage False
Preferred-OU False
Primary-Group-ID False
Profile-Path False
Proxied-Object-Name False
Top
Proxy-Addresses False
Top
Pwd-Last-Set False
Query-Policy-BL False
Top
RDN False
Top
Registered-Address False
Repl-Property-Meta-Data False
Top
Repl-UpToDate-Vector False
Top
Reports False
Top
Reps-From False
Top
Reps-To False
Top
Revision False
Top
roomNumber False
Script-Path False
SD-Rights-Effective False
Top
secretary False
See-Also False
Serial-Number False
Server-Reference-BL False
Top
Service-Principal-Name False
Show-In-Advanced-View-Only False
Top
Site-Object-BL False
Top
State-Or-Province-Name False
Street-Address False
Structural-Object-Class False
Top
Sub-Refs False
Top
SubSchemaSubEntry False
Top
Surname False
System-Flags False
Top
Telephone-Number False
Teletex-Terminal-Identifier False
Telex-Number False
Telex-Primary False
Terminal-Server False
Text-Country False
Title False
uid False
Unicode-Pwd False
User-Account-Control False
User-Comment False
User-Parameters False
User-Password False
userPKCS12 False
User-Principal-Name False
User-Shared-Folder False
User-Shared-Folder-Other False
User-SMIME-Certificate False
User-Workstations False
USN-Changed False
Top
USN-Created False
Top
USN-DSA-Last-Obj-Removed False
Top
USN-Intersite False
Top
USN-Last-Obj-Rem False
Top
USN-Source False
Top
Wbem-Path False
Top
Well-Known-Objects False
Top
When-Changed False
Top
When-Created False
Top
WWW-Home-Page False
Top
WWW-Page-Other False
Top
X121-Address False
x500uniqueIdentifier False
X509-Cert False

Windows Server 2012

System-OnlyFalse
Object-Category1
Default-Object-Category-
Governs-Id1.2.840.113556.1.5.195
Default-Hiding-Value1
Rdn-Att-Id
Subclass of
Possible Superiors Container
Auxiliary Classes-
NT-Security-DescriptorO:BAG:BAD:S:
Default Security DescriptorD:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)
System-Flags0x00000010

Windows Server 2012 Attributes

This class contains the following attributes for Windows Server 2012:

AttributeMandatoryDerived from
Account-Expires False
ACS-Policy-Name False
Address False
Address-Home False
Admin-Count False
Admin-Description False
Top
Admin-Display-Name False
Top
Allowed-Attributes False
Top
Allowed-Attributes-Effective False
Top
Allowed-Child-Classes False
Top
Allowed-Child-Classes-Effective False
Top
Assistant False
attributeCertificateAttribute False
audio False
Bad-Password-Time False
Bad-Pwd-Count False
Bridgehead-Server-List-BL False
Top
Business-Category False
Canonical-Name False
Top
carLicense False
Code-Page False
Common-Name True
 
Top
Company False
Control-Access-Rights False
Country-Code False
Country-Name False
Create-Time-Stamp False
Top
DBCS-Pwd False
Default-Class-Store False
Department False
departmentNumber False
Description False
Top
Desktop-Profile False
Destination-Indicator False
Display-Name False
 
Top
Display-Name-Printable False
Top
Division False
DSA-Signature False
Top
DS-Core-Propagation-Data False
Top
Dynamic-LDAP-Server False
E-mail-Addresses False
Employee-ID False
Employee-Number False
Employee-Type False
Extension-Name False
Top
Facsimile-Telephone-Number False
Flags False
Top
From-Entry False
Top
Frs-Computer-Reference-BL False
Top
FRS-Member-Reference-BL False
Top
FSMO-Role-Owner False
Top
Generation-Qualifier False
Given-Name False
 
Group-Membership-SAM False
Group-Priority False
Groups-to-Ignore False
Home-Directory False
Home-Drive False
houseIdentifier False
Initials False
Instance-Type True
Top
International-ISDN-Number False
Is-Critical-System-Object False
Top
Is-Deleted False
Top
Is-Member-Of-DL False
Top
Is-Privilege-Holder False
Top
Is-Recycled False
Top
jpegPhoto False
labeledURI False
Last-Known-Parent False
Top
Last-Logoff False
Last-Logon False
Last-Logon-Timestamp False
Lm-Pwd-History False
Locale-ID False
Locality-Name False
Lockout-Time False
Logo False
Logon-Count False
Logon-Hours False
Logon-Workstation False
Managed-Objects False
Top
Manager False
Mastered-By False
Top
Max-Storage False
MHS-OR-Address False
Modify-Time-Stamp False
Top
ms-COM-PartitionSetLink False
Top
ms-COM-UserLink False
Top
ms-COM-UserPartitionSetLink False
ms-DFSR-ComputerReferenceBL False
Top
ms-DFSR-MemberReferenceBL False
Top
MS-DRM-Identity-Certificate False
ms-DS-Allowed-To-Act-On-Behalf-Of-Other-Identity False
ms-DS-Allowed-To-Delegate-To False
ms-DS-Approx-Immed-Subordinates False
Top
ms-DS-AuthenticatedAt-DC False
ms-DS-AuthenticatedTo-Accountlist False
Top
ms-DS-Cached-Membership False
ms-DS-Cached-Membership-Time-Stamp False
ms-DS-Claim-Shares-Possible-Values-With-BL False
Top
MS-DS-Consistency-Child-Count False
Top
MS-DS-Consistency-Guid False
Top
MS-DS-Creator-SID False
ms-DS-Enabled-Feature-BL False
Top
ms-DS-Failed-Interactive-Logon-Count False
ms-DS-Failed-Interactive-Logon-Count-At-Last-Successful-Logon False
ms-DS-HAB-Seniority-Index False
ms-DS-Host-Service-Account-BL False
Top
ms-DS-Is-Domain-For False
Top
ms-DS-Is-Full-Replica-For False
Top
ms-DS-Is-Partial-Replica-For False
Top
ms-DS-Is-Primary-Computer-For False
Top
ms-DS-KrbTgt-Link-BL False
Top
ms-DS-Last-Failed-Interactive-Logon-Time False
ms-DS-Last-Known-RDN False
Top
ms-DS-Last-Successful-Interactive-Logon-Time False
ms-DS-local-Effective-Deletion-Time False
Top
ms-DS-local-Effective-Recycle-Time False
Top
ms-DS-Mastered-By False
Top
ms-DS-Members-For-Az-Role-BL False
Top
ms-DS-Members-Of-Resource-Property-List-BL False
Top
ms-DS-NC-Repl-Cursors False
Top
ms-DS-NC-Repl-Inbound-Neighbors False
Top
ms-DS-NC-Repl-Outbound-Neighbors False
Top
ms-DS-NC-RO-Replica-Locations-BL False
Top
ms-DS-NC-Type False
Top
ms-DS-Non-Members-BL False
Top
ms-DS-Object-Reference-BL False
Top
ms-DS-OIDToGroup-Link-BL False
Top
ms-DS-Operations-For-Az-Role-BL False
Top
ms-DS-Operations-For-Az-Task-BL False
Top
ms-DS-Phonetic-Company-Name False
ms-DS-Phonetic-Department False
ms-DS-Phonetic-Display-Name False
ms-DS-Phonetic-First-Name False
ms-DS-Phonetic-Last-Name False
ms-DS-Primary-Computer False
ms-DS-Principal-Name False
Top
ms-DS-PSO-Applied False
Top
ms-DS-Repl-Attribute-Meta-Data False
Top
ms-DS-Repl-Value-Meta-Data False
Top
ms-DS-Resultant-PSO False
ms-DS-Revealed-DSAs False
Top
ms-DS-Revealed-List-BL False
Top
ms-DS-Secondary-KrbTgt-Number False
ms-DS-Site-Affinity False
ms-DS-Source-Object-DN False
ms-DS-Supported-Encryption-Types False
ms-DS-Tasks-For-Az-Role-BL False
Top
ms-DS-Tasks-For-Az-Task-BL False
Top
ms-DS-TDO-Egress-BL False
Top
ms-DS-TDO-Ingress-BL False
Top
ms-DS-User-Account-Control-Computed False
ms-DS-User-Password-Expiry-Time-Computed False
ms-DS-Value-Type-Reference-BL False
Top
ms-Exch-House-Identifier False
ms-Exch-Owner-BL False
Top
ms-IIS-FTP-Dir False
ms-IIS-FTP-Root False
MSMQ-Digests False
MSMQ-Digests-Mig False
MSMQ-Sign-Certificates False
MSMQ-Sign-Certificates-Mig False
msNPAllowDialin False
msNPCallingStationID False
msNPSavedCallingStationID False
ms-PKI-AccountCredentials False
ms-PKI-Credential-Roaming-Tokens False
ms-PKI-DPAPIMasterKeys False
ms-PKI-RoamingTimeStamp False
msRADIUSCallbackNumber False
ms-RADIUS-FramedInterfaceId False
msRADIUSFramedIPAddress False
ms-RADIUS-FramedIpv6Prefix False
ms-RADIUS-FramedIpv6Route False
msRADIUSFramedRoute False
ms-RADIUS-SavedFramedInterfaceId False
ms-RADIUS-SavedFramedIpv6Prefix False
ms-RADIUS-SavedFramedIpv6Route False
msRADIUSServiceType False
msRASSavedCallbackNumber False
msRASSavedFramedIPAddress False
msRASSavedFramedRoute False
msSFU-30-Name False
msSFU-30-Nis-Domain False
msSFU-30-Posix-Member-Of False
Top
ms-TS-Allow-Logon False
ms-TS-Broken-Connection-Action False
ms-TS-Connect-Client-Drives False
ms-TS-Connect-Printer-Drives False
ms-TS-Default-To-Main-Printer False
MS-TS-ExpireDate False
MS-TS-ExpireDate2 False
MS-TS-ExpireDate3 False
MS-TS-ExpireDate4 False
ms-TS-Home-Directory False
ms-TS-Home-Drive False
ms-TS-Initial-Program False
MS-TS-LicenseVersion False
MS-TS-LicenseVersion2 False
MS-TS-LicenseVersion3 False
MS-TS-LicenseVersion4 False
MS-TSLS-Property01 False
MS-TSLS-Property02 False
MS-TS-ManagingLS False
MS-TS-ManagingLS2 False
MS-TS-ManagingLS3 False
MS-TS-ManagingLS4 False
ms-TS-Max-Connection-Time False
ms-TS-Max-Disconnection-Time False
ms-TS-Max-Idle-Time False
ms-TS-Primary-Desktop False
ms-TS-Profile-Path False
MS-TS-Property01 False
MS-TS-Property02 False
ms-TS-Reconnection-Action False
ms-TS-Remote-Control False
ms-TS-Secondary-Desktops False
ms-TS-Work-Directory False
netboot-SCP-BL False
Top
Network-Address False
Non-Security-Member-BL False
Top
Nt-Pwd-History False
NT-Security-Descriptor True
Top
Obj-Dist-Name False
Top
Object-Category True
Top
Object-Class True
Top
Object-Guid False
Top
Object-Version False
Top
Operator-Count False
Organizational-Unit-Name False
Organization-Name False
Other-Login-Workstations False
Other-Mailbox False
Other-Name False
Other-Well-Known-Objects False
Top
Partial-Attribute-Deletion-List False
Top
Partial-Attribute-Set False
Top
Personal-Title False
Phone-Fax-Other False
Phone-Home-Other False
Phone-Home-Primary False
Phone-Ip-Other False
Phone-Ip-Primary False
Phone-ISDN-Primary False
Phone-Mobile-Other False
Phone-Mobile-Primary False
Phone-Office-Other False
Phone-Pager-Other False
Phone-Pager-Primary False
photo False
Physical-Delivery-Office-Name False
Picture False
Possible-Inferiors False
Top
Postal-Address False
Postal-Code False
Post-Office-Box False
Preferred-Delivery-Method False
preferredLanguage False
Preferred-OU False
Primary-Group-ID False
Profile-Path False
Proxied-Object-Name False
Top
Proxy-Addresses False
Top
Pwd-Last-Set False
Query-Policy-BL False
Top
RDN False
Top
Registered-Address False
Repl-Property-Meta-Data False
Top
Repl-UpToDate-Vector False
Top
Reports False
Top
Reps-From False
Top
Reps-To False
Top
Revision False
Top
roomNumber False
Script-Path False
SD-Rights-Effective False
Top
secretary False
See-Also False
Serial-Number False
Server-Reference-BL False
Top
Service-Principal-Name False
Show-In-Advanced-View-Only False
Top
Site-Object-BL False
Top
State-Or-Province-Name False
Street-Address False
Structural-Object-Class False
Top
Sub-Refs False
Top
SubSchemaSubEntry False
Top
Surname False
System-Flags False
Top
Telephone-Number False
Teletex-Terminal-Identifier False
Telex-Number False
Telex-Primary False
Terminal-Server False
Text-Country False
Title False
uid False
Unicode-Pwd False
User-Account-Control False
User-Comment False
User-Parameters False
User-Password False
userPKCS12 False
User-Principal-Name False
User-Shared-Folder False
User-Shared-Folder-Other False
User-SMIME-Certificate False
User-Workstations False
USN-Changed False
Top
USN-Created False
Top
USN-DSA-Last-Obj-Removed False
Top
USN-Intersite False
Top
USN-Last-Obj-Rem False
Top
USN-Source False
Top
Wbem-Path False
Top
Well-Known-Objects False
Top
When-Changed False
Top
When-Created False
Top
WWW-Home-Page False
Top
WWW-Page-Other False
Top
X121-Address False
x500uniqueIdentifier False
X509-Cert False

 

 

Show: