ms-DS-Never-Reveal-Group attribute

Used with RODCs to define which users, computers, and groups are not allowed to have their passwords cached on an RODC.

Entry Value
CN ms-DS-Never-Reveal-Group
Ldap-Display-Name msDS-NeverRevealGroup
Size -
Update Privilege -
Update Frequency -
Attribute-Id 1.2.840.113556.1.4.1926
System-Id-Guid 15585999-fd49-4d66-b25d-eeb96aba8174
Syntax Object(DS-DN)

Implementations

Windows Server 2008

Entry Value
Link-Id 2106
MAPI-Id -
System-Only False
Is-Single-Valued False
Is Indexed False
In Global Catalog False
NT-Security-Descriptor O:BAG:BAD:S:
Range-Lower -
Range-Upper -
Search-Flags 0x00000000
System-Flags 0x00000010
Classes used in Computer
NTDS-DSA

Windows Server 2008 R2

Entry Value
Link-Id 2106
MAPI-Id -
System-Only False
Is-Single-Valued False
Is Indexed False
In Global Catalog False
NT-Security-Descriptor O:BAG:BAD:S:
Range-Lower -
Range-Upper -
Search-Flags 0x00000000
System-Flags 0x00000010
Classes used in Computer
NTDS-DSA

Windows Server 2012

Entry Value
Link-Id 2106
MAPI-Id -
System-Only False
Is-Single-Valued False
Is Indexed False
In Global Catalog False
NT-Security-Descriptor O:BAG:BAD:S:
Range-Lower -
Range-Upper -
Search-Flags 0x00000000
System-Flags 0x00000010
Classes used in Computer
NTDS-DSA