D

Anitha Abraham

Updated January 22, 2025 10:49

Tables that start with the letter D and the associated parameters are given below. Click the arrow beside the table name to expand the section and view the parameters.

Table 1: DHCPClass

DHCPClass

Name	Type	Description
Id [KEY]	String	Combined index and DN. Multiple indices are only possible when a column is set to SplitDataByRow.
DN	String	The full distinguished name.
RDN	String	The relative distinguished name.
BaseDN	String	The base distinguished name.
DhcpFlags	String	The dhcp-Flags attribute is not currently used.
DhcpIdentification	String	The dhcp-Identification attribute is not currently used.
DhcpType	String	The type of DHCP server. This attribute is set on all objects of objectClass dHCPClass. Its value defines the type of object:
DhcpUniqueKey	String	The dhcp-Unique-Key attribute is not currently used.
InstanceType	String	A bitfield that dictates how the object is instantiated on a particular server. The value of this attribute can differ on different replicas even if the replicas are in sync.
NTSecurityDescriptor	String	The Windows NT security descriptor for the schema object. A security descriptor is a data structure that contains security information about an object, such as the ownership and permissions of the object.
ObjectCategory	String	An object class name used to group objects of this or derived classes.
ObjectClass	String	The list of classes from which this class is derived.
AdminDescription	String	The description displayed on admin screens.
AdminDisplayName	String	The name to be displayed on admin screens.
AllowedAttributes	String	Attributes that will be permitted to be assigned to a class.
AllowedAttributesEffective	String	A list of attributes that can be modified on the object.
AllowedChildClasses	String	Classes that can be contained by a class.
AllowedChildClassesEffective	String	A list of classes that can be modified.
BridgeheadServerListBL	String	The list of servers that are bridgeheads for replication.
CanonicalName	String	The name of the object in canonical format. myserver2.fabrikam.com/users/jeffsmith is an example of a distinguished name in canonical format.This is a constructed attribute. The results returned are identical to those returned by the following Active Directory function: DsCrackNames(NULL, DS_NAME_FLAG_SYNTACTICAL_ONLY, DS_FQDN_1779_NAME, DS_CANONICAL_NAME, ...).
Cn	String	The name that represents an object. Used to perform searches.
CreateTimeStamp	Datetime	The date when this object was created. This value isreplicated.
Description	String	Contains the description to display for an object. This value is restricted as single-valued for backward compatibility in some cases but is allowed to be multi-valued in others. See Remarks.
DhcpClasses	String	The dhcp-Classes attribute is not currently used.
DhcpMask	String	The dhcp-Mask attribute is not currently used.
DhcpMaxKey	String	The dhcp-MaxKey attribute is not currently used.
DhcpObjDescription	String	The dhcp-Obj-Description attribute is not currently used.
DhcpObjName	String	The dhcp-Obj-Name attribute is not currently used.
DhcpOptions	String	The dhcp-Options attribute is not currently used.
DhcpProperties	String	The dhcp-Properties attribute is not currently used.
DhcpRanges	String	The dhcp-Ranges attribute is not currently used.
DhcpReservations	String	The dhcp-Reservations attribute is not currently used.
DhcpServers	String	Contains a list of servers that are authorized in the enterprise.
DhcpSites	String	The dhcp-Sites attribute is not currently used.
DhcpState	String	The dhcp-State attribute is not currently used.
DhcpSubnets	String	The dhcp-Subnets attribute is not currently used.
DhcpUpdateTime	String	The dhcp-Update-Time attribute is not currently used.
DisplayName	String	The display name for an object. This is usually the combination of the users first name, middle initial, and last name.
DisplayNamePrintable	String	The printable display name for an object. The printable display name is usually the combination of the user's first name, middle initial, and last name.
DSASignature	String	The DSA-Signature of an object is the Invocation-ID of the last directory to modify the object.
DSCorePropagationData	String	The DS-Core-Propagation-Data attribute is for internal use only.
ExtensionName	String	The name of a property page used to extend the UI of a directory object.
Flags	String	To be used by the object to store bit information.
FromEntry	String	This is a constructed attribute that is TRUE if the object is writable and FALSE if it is read-only, for example, a GC replica instance.
FrsComputerReferenceBL	String	Reference to replica sets to which this computer belongs.
FRSMemberReferenceBL	String	Reference to subscriber objects for this member.
FSMORoleOwner	String	Flexible Single-Master Operation: The distinguished name of the DC where the schema can be modified.
IsCriticalSystemObject	String	If TRUE,the object hosting this attribute must be replicated during installation of a new replica.
IsDeleted	String	If TRUE, this object has been marked for deletion and cannot be instantiated. After the tombstone period has expired, it will be removed from the system.
MemberOf	String	The distinguished name of the groups to which this object belongs.
IsPrivilegeHolder	String	Backward link to privileges held by a given principal.
LastKnownParent	String	The Distinguished Name (DN) of the last known parent of an orphaned object.
ManagedObjects	String	Contains the list of objects that are managed by the user. The objects listed are those that have the property managedBy property set to this user. Each item in the list is a linked reference to the managed object.
MasteredBy	String	Backward link for Has-Master-NCs attribute. The distinguished name for its NTDS Settings objects.
ModifyTimeStamp	Datetime	A computed attribute that represents the date when this object was last changed. This value is not replicated.
MscopeId	String	Indicates that there is a multicast scope on the specified DHCP server.
MS-DS-ConsistencyChildCount	String	This attribute is used to check consistency between the directory and another object, database, or application, by comparing a count of child objects.
MS-DS-ConsistencyGuid	String	This attribute is used to check consistency between the directory and another object, database, or application, by comparing GUIDs.
NetbootSCPBL	String	A list of service connection points that reference this NetBoot server.
NetworkAddress	String	The TCP/IP address for a network segment. Also called the subnet address.
NonSecurityMemberBL	String	List of nonsecurity-members for an Exchange distribution list.
DistinguishedName	String	Same as the Distinguished Name for an object. Used by Exchange.
ObjectGUID	String	The unique identifier for an object.
ObjectVersion	String	This can be used to store a version number for the object.
OptionDescription	String	This attribute contains a description of an option that is set on the DHCP server.
OptionsLocation	String	For DHCP, the options location contains the DN for alternate sites that contain the options information.
OtherWellKnownObjects	String	Contains a list of containers by GUID and Distinguished Name. This permits retrieving an object after it has been moved by using just the GUID and the domain name. Whenever the object is moved, the system automatically updates the Distinguished Name.
PartialAttributeDeletionList	String	Tracks the internal replication state of partial replicas (that is, on GCs).Attribute of the partial replica NC object. Used when the GC is in the process of removing attributes from the objects in its partial replica NCs.
PartialAttributeSet	String	Tracks the internal replication state of partial replicas (that is, on GCs).Attribute of the partial replica NC object. Defines the set of attributes present on a particular partial replica NC.
PossibleInferiors	String	The list of objects that this object can contain.
ProxiedObjectName	String	This attribute is used internally by Active Directory to help track interdomain moves.
ProxyAddresses	String	A proxy address is the address by which a Microsoft Exchange Server recipient object is recognized in a foreign mail system. Proxy addresses are required for all recipient objects, such as custom recipients and distribution lists.
QueryPolicyBL	String	List of all objects holding references to a given Query-Policy.
Name	String	The Relative Distinguished Name (RDN) of an object. An RDN is the relative portion of a distinguished name (DN), which uniquely identifies an LDAP object.
ReplPropertyMetaData	String	Tracks internal replication state information for DS objects.Information here can be extracted in public form through the public API DsReplicaGetInfo().Present on all DS objects.
ReplUpToDateVector	String	Tracks internal replication state information for an entire NC.Information here can be extracted in public form through the API DsReplicaGetInfo().Present on all NC root objects.
DirectReports	String	Contains the list of users that directly report to the user. The users listed as reports are those that have the property manager property set to this user. Each item in the list is a linked reference to the object that represents the user.
RepsFrom	String	Lists the servers from which the directory will accept changes for the defined naming context.
RepsTo	String	Lists the servers that the directory will notify of changes and servers to which the directory will send changes on Request for the defined naming context.
Revision	String	The revision level for a security descriptor or other change. Only used in the sam-server and ds-ui-settings objects.
SDRightsEffective	String	This constructed attribute returns a single DWORD value that can have up to three bits set:
ServerReferenceBL	String	Found in the domain naming context. The distinguished name of a computer under the sites folder.
ShowInAdvancedViewOnly	String	TRUE if this attribute is to be visible in the Advanced mode of the UI.
SiteObjectBL	String	The list of distinguished names for subnets that belong to this site.
SubRefs	String	List of subordinate references of a Naming Context.
SubSchemaSubEntry	String	The distinguished name for the location of the subschema object where a class or attribute is defined.
SuperScopeDescription	String	This attribute provides a description for a superscope.
SuperScopes	String	This attribute is used to group together all the different scopes used in the DHCP class into a single entity.
SystemFlags	String	An integer value that contains flags that define additional properties of the class.See Remarks.
USNChanged	String	The update sequence number (USN) assigned by the local directory for the latest change, including creation. See also , USN-Created.
USNCreated	String	The update sequence number (USN) assigned at object creation. See also, USN-Changed.
USNDSALastObjRemoved	String	Contains the update sequence number (USN) for the last system object that was removed from a server.
USNIntersite	String	The update sequence number (USN) for inter-site replication.
USNLastObjRem	String	Contains the update sequence number (USN) for the last non-system object that was removed from a server.
USNSource	String	Value of the USN-Changed attribute of the object from the remote directory that replicated the change to the local server.
WbemPath	String	References to objects in other ADSI namespaces.
WellKnownObjects	String	This attribute contains a list of well-known object containers by GUID and distinguished name. The well-known objects are system containers. This information is used to retrieve an object after it has been moved by using just the GUID and the domain name. Whenever the object is moved, the system automatically updates the Distinguished Name portion of the Well-Known-Objects values that referred to the object.The file Ntdsapi.h contains the following definitions, which can be used to retrieve an object (the GUIDs that are associated to these objects are contained in Ntdsapi.h):
WhenChanged	Datetime	The date when this object was last changed. This value is not replicated and exists in the global catalog.
WhenCreated	Datetime	The date when this object was created. This value is replicated and is in the global catalog.
WWWHomePage	String	A web page that is the primary landing page of a website.
Url	String	A list of alternate webpages.

Table 2: DnsNode

DnsNode

Name	Type	Description
Id [KEY]	String	Combined index and DN. Multiple indices are only possible when a column is set to SplitDataByRow.
DN	String	The full distinguished name.
RDN	String	The relative distinguished name.
BaseDN	String	The base distinguished name.
Dc	String	The naming attribute for Domain and DNS objects. Usually displayed as dc=DomainName.
InstanceType	String	A bitfield that dictates how the object is instantiated on a particular server. The value of this attribute can differ on different replicas even if the replicas are in sync.
NTSecurityDescriptor	String	The Windows NT security descriptor for the schema object. A security descriptor is a data structure that contains security information about an object, such as the ownership and permissions of the object.
ObjectCategory	String	An object class name used to group objects of this or derived classes.
ObjectClass	String	The list of classes from which this class is derived.
AdminDescription	String	The description displayed on admin screens.
AdminDisplayName	String	The name to be displayed on admin screens.
AllowedAttributes	String	Attributes that will be permitted to be assigned to a class.
AllowedAttributesEffective	String	A list of attributes that can be modified on the object.
AllowedChildClasses	String	Classes that can be contained by a class.
AllowedChildClassesEffective	String	A list of classes that can be modified.
BridgeheadServerListBL	String	The list of servers that are bridgeheads for replication.
CanonicalName	String	The name of the object in canonical format. myserver2.fabrikam.com/users/jeffsmith is an example of a distinguished name in canonical format.This is a constructed attribute. The results returned are identical to those returned by the following Active Directory function: DsCrackNames(NULL, DS_NAME_FLAG_SYNTACTICAL_ONLY, DS_FQDN_1779_NAME, DS_CANONICAL_NAME, ...).
Cn	String	The name that represents an object. Used to perform searches.
CreateTimeStamp	Datetime	The date when this object was created. This value isreplicated.
Description	String	Contains the description to display for an object. This value is restricted as single-valued for backward compatibility in some cases but is allowed to be multi-valued in others. See Remarks.
DisplayName	String	The display name for an object. This is usually the combination of the users first name, middle initial, and last name.
DisplayNamePrintable	String	The printable display name for an object. The printable display name is usually the combination of the user's first name, middle initial, and last name.
DNSProperty	String	Used to store binary settings (properties) on DNS zone objects.
DnsRecord	String	Used to store binary DNS resource records on DNS objects.
DNSTombstoned	String	True if this object has been tombstoned. This attribute exists to make searching for tombstoned records easier and faster. Tombstoned objects are objects that have been deleted but not yet removed from the directory.
DSASignature	String	The DSA-Signature of an object is the Invocation-ID of the last directory to modify the object.
DSCorePropagationData	String	The DS-Core-Propagation-Data attribute is for internal use only.
ExtensionName	String	The name of a property page used to extend the UI of a directory object.
Flags	String	To be used by the object to store bit information.
FromEntry	String	This is a constructed attribute that is TRUE if the object is writable and FALSE if it is read-only, for example, a GC replica instance.
FrsComputerReferenceBL	String	Reference to replica sets to which this computer belongs.
FRSMemberReferenceBL	String	Reference to subscriber objects for this member.
FSMORoleOwner	String	Flexible Single-Master Operation: The distinguished name of the DC where the schema can be modified.
IsCriticalSystemObject	String	If TRUE,the object hosting this attribute must be replicated during installation of a new replica.
IsDeleted	String	If TRUE, this object has been marked for deletion and cannot be instantiated. After the tombstone period has expired, it will be removed from the system.
MemberOf	String	The distinguished name of the groups to which this object belongs.
IsPrivilegeHolder	String	Backward link to privileges held by a given principal.
LastKnownParent	String	The Distinguished Name (DN) of the last known parent of an orphaned object.
ManagedObjects	String	Contains the list of objects that are managed by the user. The objects listed are those that have the property managedBy property set to this user. Each item in the list is a linked reference to the managed object.
MasteredBy	String	Backward link for Has-Master-NCs attribute. The distinguished name for its NTDS Settings objects.
ModifyTimeStamp	Datetime	A computed attribute that represents the date when this object was last changed. This value is not replicated.
MS-DS-ConsistencyChildCount	String	This attribute is used to check consistency between the directory and another object, database, or application, by comparing a count of child objects.
MS-DS-ConsistencyGuid	String	This attribute is used to check consistency between the directory and another object, database, or application, by comparing GUIDs.
NetbootSCPBL	String	A list of service connection points that reference this NetBoot server.
NonSecurityMemberBL	String	List of nonsecurity-members for an Exchange distribution list.
DistinguishedName	String	Same as the Distinguished Name for an object. Used by Exchange.
ObjectGUID	String	The unique identifier for an object.
ObjectVersion	String	This can be used to store a version number for the object.
OtherWellKnownObjects	String	Contains a list of containers by GUID and Distinguished Name. This permits retrieving an object after it has been moved by using just the GUID and the domain name. Whenever the object is moved, the system automatically updates the Distinguished Name.
PartialAttributeDeletionList	String	Tracks the internal replication state of partial replicas (that is, on GCs).Attribute of the partial replica NC object. Used when the GC is in the process of removing attributes from the objects in its partial replica NCs.
PartialAttributeSet	String	Tracks the internal replication state of partial replicas (that is, on GCs).Attribute of the partial replica NC object. Defines the set of attributes present on a particular partial replica NC.
PossibleInferiors	String	The list of objects that this object can contain.
ProxiedObjectName	String	This attribute is used internally by Active Directory to help track interdomain moves.
ProxyAddresses	String	A proxy address is the address by which a Microsoft Exchange Server recipient object is recognized in a foreign mail system. Proxy addresses are required for all recipient objects, such as custom recipients and distribution lists.
QueryPolicyBL	String	List of all objects holding references to a given Query-Policy.
Name	String	The Relative Distinguished Name (RDN) of an object. An RDN is the relative portion of a distinguished name (DN), which uniquely identifies an LDAP object.
ReplPropertyMetaData	String	Tracks internal replication state information for DS objects.Information here can be extracted in public form through the public API DsReplicaGetInfo().Present on all DS objects.
ReplUpToDateVector	String	Tracks internal replication state information for an entire NC.Information here can be extracted in public form through the API DsReplicaGetInfo().Present on all NC root objects.
DirectReports	String	Contains the list of users that directly report to the user. The users listed as reports are those that have the property manager property set to this user. Each item in the list is a linked reference to the object that represents the user.
RepsFrom	String	Lists the servers from which the directory will accept changes for the defined naming context.
RepsTo	String	Lists the servers that the directory will notify of changes and servers to which the directory will send changes on Request for the defined naming context.
Revision	String	The revision level for a security descriptor or other change. Only used in the sam-server and ds-ui-settings objects.
SDRightsEffective	String	This constructed attribute returns a single DWORD value that can have up to three bits set:
ServerReferenceBL	String	Found in the domain naming context. The distinguished name of a computer under the sites folder.
ShowInAdvancedViewOnly	String	TRUE if this attribute is to be visible in the Advanced mode of the UI.
SiteObjectBL	String	The list of distinguished names for subnets that belong to this site.
SubRefs	String	List of subordinate references of a Naming Context.
SubSchemaSubEntry	String	The distinguished name for the location of the subschema object where a class or attribute is defined.
SystemFlags	String	An integer value that contains flags that define additional properties of the class.See Remarks.
USNChanged	String	The update sequence number (USN) assigned by the local directory for the latest change, including creation. See also , USN-Created.
USNCreated	String	The update sequence number (USN) assigned at object creation. See also, USN-Changed.
USNDSALastObjRemoved	String	Contains the update sequence number (USN) for the last system object that was removed from a server.
USNIntersite	String	The update sequence number (USN) for inter-site replication.
USNLastObjRem	String	Contains the update sequence number (USN) for the last non-system object that was removed from a server.
USNSource	String	Value of the USN-Changed attribute of the object from the remote directory that replicated the change to the local server.
WbemPath	String	References to objects in other ADSI namespaces.
WellKnownObjects	String	This attribute contains a list of well-known object containers by GUID and distinguished name. The well-known objects are system containers. This information is used to retrieve an object after it has been moved by using just the GUID and the domain name. Whenever the object is moved, the system automatically updates the Distinguished Name portion of the Well-Known-Objects values that referred to the object.The file Ntdsapi.h contains the following definitions, which can be used to retrieve an object (the GUIDs that are associated to these objects are contained in Ntdsapi.h):
WhenChanged	Datetime	The date when this object was last changed. This value is not replicated and exists in the global catalog.
WhenCreated	Datetime	The date when this object was created. This value is replicated and is in the global catalog.
WWWHomePage	String	A web page that is the primary landing page of a website.
Url	String	A list of alternate webpages.

Table 3: DnsZone

DnsZone

Name	Type	Description
Id [KEY]	String	Combined index and DN. Multiple indices are only possible when a column is set to SplitDataByRow.
DN	String	The full distinguished name.
RDN	String	The relative distinguished name.
BaseDN	String	The base distinguished name.
Dc	String	The naming attribute for Domain and DNS objects. Usually displayed as dc=DomainName.
InstanceType	String	A bitfield that dictates how the object is instantiated on a particular server. The value of this attribute can differ on different replicas even if the replicas are in sync.
NTSecurityDescriptor	String	The Windows NT security descriptor for the schema object. A security descriptor is a data structure that contains security information about an object, such as the ownership and permissions of the object.
ObjectCategory	String	An object class name used to group objects of this or derived classes.
ObjectClass	String	The list of classes from which this class is derived.
AdminDescription	String	The description displayed on admin screens.
AdminDisplayName	String	The name to be displayed on admin screens.
AllowedAttributes	String	Attributes that will be permitted to be assigned to a class.
AllowedAttributesEffective	String	A list of attributes that can be modified on the object.
AllowedChildClasses	String	Classes that can be contained by a class.
AllowedChildClassesEffective	String	A list of classes that can be modified.
BridgeheadServerListBL	String	The list of servers that are bridgeheads for replication.
CanonicalName	String	The name of the object in canonical format. myserver2.fabrikam.com/users/jeffsmith is an example of a distinguished name in canonical format.This is a constructed attribute. The results returned are identical to those returned by the following Active Directory function: DsCrackNames(NULL, DS_NAME_FLAG_SYNTACTICAL_ONLY, DS_FQDN_1779_NAME, DS_CANONICAL_NAME, ...).
Cn	String	The name that represents an object. Used to perform searches.
CreateTimeStamp	Datetime	The date when this object was created. This value isreplicated.
Description	String	Contains the description to display for an object. This value is restricted as single-valued for backward compatibility in some cases but is allowed to be multi-valued in others. See Remarks.
DisplayName	String	The display name for an object. This is usually the combination of the users first name, middle initial, and last name.
DisplayNamePrintable	String	The printable display name for an object. The printable display name is usually the combination of the user's first name, middle initial, and last name.
DnsAllowDynamic	String	The Dns-Allow-Dynamic attribute is not currently used.
DnsAllowXFR	String	The Dns-Allow-XFR attribute is not currently used.
DnsNotifySecondaries	String	The Dns-Notify-Secondaries attribute is not currently used.
DNSProperty	String	Used to store binary settings (properties) on DNS zone objects.
DnsSecureSecondaries	String	The Dns-Secure-Secondaries attribute is not currently used.
DSASignature	String	The DSA-Signature of an object is the Invocation-ID of the last directory to modify the object.
DSCorePropagationData	String	The DS-Core-Propagation-Data attribute is for internal use only.
ExtensionName	String	The name of a property page used to extend the UI of a directory object.
Flags	String	To be used by the object to store bit information.
FromEntry	String	This is a constructed attribute that is TRUE if the object is writable and FALSE if it is read-only, for example, a GC replica instance.
FrsComputerReferenceBL	String	Reference to replica sets to which this computer belongs.
FRSMemberReferenceBL	String	Reference to subscriber objects for this member.
FSMORoleOwner	String	Flexible Single-Master Operation: The distinguished name of the DC where the schema can be modified.
IsCriticalSystemObject	String	If TRUE,the object hosting this attribute must be replicated during installation of a new replica.
IsDeleted	String	If TRUE, this object has been marked for deletion and cannot be instantiated. After the tombstone period has expired, it will be removed from the system.
MemberOf	String	The distinguished name of the groups to which this object belongs.
IsPrivilegeHolder	String	Backward link to privileges held by a given principal.
LastKnownParent	String	The Distinguished Name (DN) of the last known parent of an orphaned object.
ManagedBy	String	The distinguished name of the user that is assigned to manage this object.
ManagedObjects	String	Contains the list of objects that are managed by the user. The objects listed are those that have the property managedBy property set to this user. Each item in the list is a linked reference to the managed object.
MasteredBy	String	Backward link for Has-Master-NCs attribute. The distinguished name for its NTDS Settings objects.
ModifyTimeStamp	Datetime	A computed attribute that represents the date when this object was last changed. This value is not replicated.
MS-DS-ConsistencyChildCount	String	This attribute is used to check consistency between the directory and another object, database, or application, by comparing a count of child objects.
MS-DS-ConsistencyGuid	String	This attribute is used to check consistency between the directory and another object, database, or application, by comparing GUIDs.
NetbootSCPBL	String	A list of service connection points that reference this NetBoot server.
NonSecurityMemberBL	String	List of nonsecurity-members for an Exchange distribution list.
DistinguishedName	String	Same as the Distinguished Name for an object. Used by Exchange.
ObjectGUID	String	The unique identifier for an object.
ObjectVersion	String	This can be used to store a version number for the object.
OtherWellKnownObjects	String	Contains a list of containers by GUID and Distinguished Name. This permits retrieving an object after it has been moved by using just the GUID and the domain name. Whenever the object is moved, the system automatically updates the Distinguished Name.
PartialAttributeDeletionList	String	Tracks the internal replication state of partial replicas (that is, on GCs).Attribute of the partial replica NC object. Used when the GC is in the process of removing attributes from the objects in its partial replica NCs.
PartialAttributeSet	String	Tracks the internal replication state of partial replicas (that is, on GCs).Attribute of the partial replica NC object. Defines the set of attributes present on a particular partial replica NC.
PossibleInferiors	String	The list of objects that this object can contain.
ProxiedObjectName	String	This attribute is used internally by Active Directory to help track interdomain moves.
ProxyAddresses	String	A proxy address is the address by which a Microsoft Exchange Server recipient object is recognized in a foreign mail system. Proxy addresses are required for all recipient objects, such as custom recipients and distribution lists.
QueryPolicyBL	String	List of all objects holding references to a given Query-Policy.
Name	String	The Relative Distinguished Name (RDN) of an object. An RDN is the relative portion of a distinguished name (DN), which uniquely identifies an LDAP object.
ReplPropertyMetaData	String	Tracks internal replication state information for DS objects.Information here can be extracted in public form through the public API DsReplicaGetInfo().Present on all DS objects.
ReplUpToDateVector	String	Tracks internal replication state information for an entire NC.Information here can be extracted in public form through the API DsReplicaGetInfo().Present on all NC root objects.
DirectReports	String	Contains the list of users that directly report to the user. The users listed as reports are those that have the property manager property set to this user. Each item in the list is a linked reference to the object that represents the user.
RepsFrom	String	Lists the servers from which the directory will accept changes for the defined naming context.
RepsTo	String	Lists the servers that the directory will notify of changes and servers to which the directory will send changes on Request for the defined naming context.
Revision	String	The revision level for a security descriptor or other change. Only used in the sam-server and ds-ui-settings objects.
SDRightsEffective	String	This constructed attribute returns a single DWORD value that can have up to three bits set:
ServerReferenceBL	String	Found in the domain naming context. The distinguished name of a computer under the sites folder.
ShowInAdvancedViewOnly	String	TRUE if this attribute is to be visible in the Advanced mode of the UI.
SiteObjectBL	String	The list of distinguished names for subnets that belong to this site.
SubRefs	String	List of subordinate references of a Naming Context.
SubSchemaSubEntry	String	The distinguished name for the location of the subschema object where a class or attribute is defined.
SystemFlags	String	An integer value that contains flags that define additional properties of the class.See Remarks.
USNChanged	String	The update sequence number (USN) assigned by the local directory for the latest change, including creation. See also , USN-Created.
USNCreated	String	The update sequence number (USN) assigned at object creation. See also, USN-Changed.
USNDSALastObjRemoved	String	Contains the update sequence number (USN) for the last system object that was removed from a server.
USNIntersite	String	The update sequence number (USN) for inter-site replication.
USNLastObjRem	String	Contains the update sequence number (USN) for the last non-system object that was removed from a server.
USNSource	String	Value of the USN-Changed attribute of the object from the remote directory that replicated the change to the local server.
WbemPath	String	References to objects in other ADSI namespaces.
WellKnownObjects	String	This attribute contains a list of well-known object containers by GUID and distinguished name. The well-known objects are system containers. This information is used to retrieve an object after it has been moved by using just the GUID and the domain name. Whenever the object is moved, the system automatically updates the Distinguished Name portion of the Well-Known-Objects values that referred to the object.The file Ntdsapi.h contains the following definitions, which can be used to retrieve an object (the GUIDs that are associated to these objects are contained in Ntdsapi.h):
WhenChanged	Datetime	The date when this object was last changed. This value is not replicated and exists in the global catalog.
WhenCreated	Datetime	The date when this object was created. This value is replicated and is in the global catalog.
WWWHomePage	String	A web page that is the primary landing page of a website.
Url	String	A list of alternate webpages.

Table 4: Domain

Domain

Name	Type	Description
Id [KEY]	String	Combined index and DN. Multiple indices are only possible when a column is set to SplitDataByRow.
DN	String	The full distinguished name.
RDN	String	The relative distinguished name.
BaseDN	String	The base distinguished name.
Dc	String	The naming attribute for Domain and DNS objects. Usually displayed as dc=DomainName.
InstanceType	String	A bitfield that dictates how the object is instantiated on a particular server. The value of this attribute can differ on different replicas even if the replicas are in sync.
NTSecurityDescriptor	String	The Windows NT security descriptor for the schema object. A security descriptor is a data structure that contains security information about an object, such as the ownership and permissions of the object.
ObjectCategory	String	An object class name used to group objects of this or derived classes.
ObjectClass	String	The list of classes from which this class is derived.
AdminDescription	String	The description displayed on admin screens.
AdminDisplayName	String	The name to be displayed on admin screens.
AllowedAttributes	String	Attributes that will be permitted to be assigned to a class.
AllowedAttributesEffective	String	A list of attributes that can be modified on the object.
AllowedChildClasses	String	Classes that can be contained by a class.
AllowedChildClassesEffective	String	A list of classes that can be modified.
BridgeheadServerListBL	String	The list of servers that are bridgeheads for replication.
CanonicalName	String	The name of the object in canonical format. myserver2.fabrikam.com/users/jeffsmith is an example of a distinguished name in canonical format.This is a constructed attribute. The results returned are identical to those returned by the following Active Directory function: DsCrackNames(NULL, DS_NAME_FLAG_SYNTACTICAL_ONLY, DS_FQDN_1779_NAME, DS_CANONICAL_NAME, ...).
Cn	String	The name that represents an object. Used to perform searches.
CreateTimeStamp	Datetime	The date when this object was created. This value isreplicated.
Description	String	Contains the description to display for an object. This value is restricted as single-valued for backward compatibility in some cases but is allowed to be multi-valued in others. See Remarks.
DisplayName	String	The display name for an object. This is usually the combination of the users first name, middle initial, and last name.
DisplayNamePrintable	String	The printable display name for an object. The printable display name is usually the combination of the user's first name, middle initial, and last name.
DSASignature	String	The DSA-Signature of an object is the Invocation-ID of the last directory to modify the object.
DSCorePropagationData	String	The DS-Core-Propagation-Data attribute is for internal use only.
ExtensionName	String	The name of a property page used to extend the UI of a directory object.
Flags	String	To be used by the object to store bit information.
FromEntry	String	This is a constructed attribute that is TRUE if the object is writable and FALSE if it is read-only, for example, a GC replica instance.
FrsComputerReferenceBL	String	Reference to replica sets to which this computer belongs.
FRSMemberReferenceBL	String	Reference to subscriber objects for this member.
FSMORoleOwner	String	Flexible Single-Master Operation: The distinguished name of the DC where the schema can be modified.
IsCriticalSystemObject	String	If TRUE,the object hosting this attribute must be replicated during installation of a new replica.
IsDeleted	String	If TRUE, this object has been marked for deletion and cannot be instantiated. After the tombstone period has expired, it will be removed from the system.
MemberOf	String	The distinguished name of the groups to which this object belongs.
IsPrivilegeHolder	String	Backward link to privileges held by a given principal.
LastKnownParent	String	The Distinguished Name (DN) of the last known parent of an orphaned object.
ManagedObjects	String	Contains the list of objects that are managed by the user. The objects listed are those that have the property managedBy property set to this user. Each item in the list is a linked reference to the managed object.
MasteredBy	String	Backward link for Has-Master-NCs attribute. The distinguished name for its NTDS Settings objects.
ModifyTimeStamp	Datetime	A computed attribute that represents the date when this object was last changed. This value is not replicated.
MS-DS-ConsistencyChildCount	String	This attribute is used to check consistency between the directory and another object, database, or application, by comparing a count of child objects.
MS-DS-ConsistencyGuid	String	This attribute is used to check consistency between the directory and another object, database, or application, by comparing GUIDs.
NetbootSCPBL	String	A list of service connection points that reference this NetBoot server.
NonSecurityMemberBL	String	List of nonsecurity-members for an Exchange distribution list.
DistinguishedName	String	Same as the Distinguished Name for an object. Used by Exchange.
ObjectGUID	String	The unique identifier for an object.
ObjectVersion	String	This can be used to store a version number for the object.
OtherWellKnownObjects	String	Contains a list of containers by GUID and Distinguished Name. This permits retrieving an object after it has been moved by using just the GUID and the domain name. Whenever the object is moved, the system automatically updates the Distinguished Name.
PartialAttributeDeletionList	String	Tracks the internal replication state of partial replicas (that is, on GCs).Attribute of the partial replica NC object. Used when the GC is in the process of removing attributes from the objects in its partial replica NCs.
PartialAttributeSet	String	Tracks the internal replication state of partial replicas (that is, on GCs).Attribute of the partial replica NC object. Defines the set of attributes present on a particular partial replica NC.
PossibleInferiors	String	The list of objects that this object can contain.
ProxiedObjectName	String	This attribute is used internally by Active Directory to help track interdomain moves.
ProxyAddresses	String	A proxy address is the address by which a Microsoft Exchange Server recipient object is recognized in a foreign mail system. Proxy addresses are required for all recipient objects, such as custom recipients and distribution lists.
QueryPolicyBL	String	List of all objects holding references to a given Query-Policy.
Name	String	The Relative Distinguished Name (RDN) of an object. An RDN is the relative portion of a distinguished name (DN), which uniquely identifies an LDAP object.
ReplPropertyMetaData	String	Tracks internal replication state information for DS objects.Information here can be extracted in public form through the public API DsReplicaGetInfo().Present on all DS objects.
ReplUpToDateVector	String	Tracks internal replication state information for an entire NC.Information here can be extracted in public form through the API DsReplicaGetInfo().Present on all NC root objects.
DirectReports	String	Contains the list of users that directly report to the user. The users listed as reports are those that have the property manager property set to this user. Each item in the list is a linked reference to the object that represents the user.
RepsFrom	String	Lists the servers from which the directory will accept changes for the defined naming context.
RepsTo	String	Lists the servers that the directory will notify of changes and servers to which the directory will send changes on Request for the defined naming context.
Revision	String	The revision level for a security descriptor or other change. Only used in the sam-server and ds-ui-settings objects.
SDRightsEffective	String	This constructed attribute returns a single DWORD value that can have up to three bits set:
ServerReferenceBL	String	Found in the domain naming context. The distinguished name of a computer under the sites folder.
ShowInAdvancedViewOnly	String	TRUE if this attribute is to be visible in the Advanced mode of the UI.
SiteObjectBL	String	The list of distinguished names for subnets that belong to this site.
SubRefs	String	List of subordinate references of a Naming Context.
SubSchemaSubEntry	String	The distinguished name for the location of the subschema object where a class or attribute is defined.
SystemFlags	String	An integer value that contains flags that define additional properties of the class.See Remarks.
USNChanged	String	The update sequence number (USN) assigned by the local directory for the latest change, including creation. See also , USN-Created.
USNCreated	String	The update sequence number (USN) assigned at object creation. See also, USN-Changed.
USNDSALastObjRemoved	String	Contains the update sequence number (USN) for the last system object that was removed from a server.
USNIntersite	String	The update sequence number (USN) for inter-site replication.
USNLastObjRem	String	Contains the update sequence number (USN) for the last non-system object that was removed from a server.
USNSource	String	Value of the USN-Changed attribute of the object from the remote directory that replicated the change to the local server.
WbemPath	String	References to objects in other ADSI namespaces.
WellKnownObjects	String	This attribute contains a list of well-known object containers by GUID and distinguished name. The well-known objects are system containers. This information is used to retrieve an object after it has been moved by using just the GUID and the domain name. Whenever the object is moved, the system automatically updates the Distinguished Name portion of the Well-Known-Objects values that referred to the object.The file Ntdsapi.h contains the following definitions, which can be used to retrieve an object (the GUIDs that are associated to these objects are contained in Ntdsapi.h):
WhenChanged	Datetime	The date when this object was last changed. This value is not replicated and exists in the global catalog.
WhenCreated	Datetime	The date when this object was created. This value is replicated and is in the global catalog.
WWWHomePage	String	A web page that is the primary landing page of a website.
Url	String	A list of alternate webpages.

Table 5: DomainDNS

DomainDNS

Name	Type	Description
Id [KEY]	String	Combined index and DN. Multiple indices are only possible when a column is set to SplitDataByRow.
DN	String	The full distinguished name.
RDN	String	The relative distinguished name.
BaseDN	String	The base distinguished name.
CACertificate	String	Certificates of trusted Certification Authorities.
Dc	String	The naming attribute for Domain and DNS objects. Usually displayed as dc=DomainName.
InstanceType	String	A bitfield that dictates how the object is instantiated on a particular server. The value of this attribute can differ on different replicas even if the replicas are in sync.
NTSecurityDescriptor	String	The Windows NT security descriptor for the schema object. A security descriptor is a data structure that contains security information about an object, such as the ownership and permissions of the object.
ObjectCategory	String	An object class name used to group objects of this or derived classes.
ObjectClass	String	The list of classes from which this class is derived.
AdminDescription	String	The description displayed on admin screens.
AdminDisplayName	String	The name to be displayed on admin screens.
AllowedAttributes	String	Attributes that will be permitted to be assigned to a class.
AllowedAttributesEffective	String	A list of attributes that can be modified on the object.
AllowedChildClasses	String	Classes that can be contained by a class.
AllowedChildClassesEffective	String	A list of classes that can be modified.
AuditingPolicy	String	Auditing policy for the local policy.
BridgeheadServerListBL	String	The list of servers that are bridgeheads for replication.
BuiltinCreationTime	String	The Builtin-Creation-Time attribute is used to support replication to Windows NT 4.0 domains.
BuiltinModifiedCount	String	The Builtin-Modified-Count attribute is used to support replication to Windows NT 4.0 domains.
CanonicalName	String	The name of the object in canonical format. myserver2.fabrikam.com/users/jeffsmith is an example of a distinguished name in canonical format.This is a constructed attribute. The results returned are identical to those returned by the following Active Directory function: DsCrackNames(NULL, DS_NAME_FLAG_SYNTACTICAL_ONLY, DS_FQDN_1779_NAME, DS_CANONICAL_NAME, ...).
Cn	String	The name that represents an object. Used to perform searches.
ControlAccessRights	String	Used by DS Security to determine which users can perform specific operations on the host object.
CreateTimeStamp	Datetime	The date when this object was created. This value isreplicated.
CreationTime	String	The date and time that the object was created.
DefaultLocalPolicyObject	String	A reference to a Policy object that defines the local policy for the host object.
Description	String	Contains the description to display for an object. This value is restricted as single-valued for backward compatibility in some cases but is allowed to be multi-valued in others. See Remarks.
DesktopProfile	String	The location of the desktop profile for a user or group of users. Not used.
DisplayName	String	The display name for an object. This is usually the combination of the users first name, middle initial, and last name.
DisplayNamePrintable	String	The printable display name for an object. The printable display name is usually the combination of the user's first name, middle initial, and last name.
DomainPolicyObject	String	Reference to the policy object that defines the Local Security Authority policy for the host domain.
DSASignature	String	The DSA-Signature of an object is the Invocation-ID of the last directory to modify the object.
DSCorePropagationData	String	The DS-Core-Propagation-Data attribute is for internal use only.
EFSPolicy	String	The Encrypting File System Policy.
ExtensionName	String	The name of a property page used to extend the UI of a directory object.
Flags	String	To be used by the object to store bit information.
FromEntry	String	This is a constructed attribute that is TRUE if the object is writable and FALSE if it is read-only, for example, a GC replica instance.
FrsComputerReferenceBL	String	Reference to replica sets to which this computer belongs.
FRSMemberReferenceBL	String	Reference to subscriber objects for this member.
FSMORoleOwner	String	Flexible Single-Master Operation: The distinguished name of the DC where the schema can be modified.
GPLink	String	A sorted list of Group Policy options.Each option is a DWORD.Use of the UNICODE string is a convenience.
GPOptions	String	Options that affect all group policies associated with the object hosting this property.
IsCriticalSystemObject	String	If TRUE,the object hosting this attribute must be replicated during installation of a new replica.
IsDeleted	String	If TRUE, this object has been marked for deletion and cannot be instantiated. After the tombstone period has expired, it will be removed from the system.
MemberOf	String	The distinguished name of the groups to which this object belongs.
IsPrivilegeHolder	String	Backward link to privileges held by a given principal.
LastKnownParent	String	The Distinguished Name (DN) of the last known parent of an orphaned object.
LockoutDuration	String	The amount of time that an account is locked due to the Lockout-Threshold being exceeded. This value is stored as a large integer that represents the negative of the number of 100-nanosecond intervals from the time the Lockout-Threshold is exceeded that must elapse before the account is unlocked.
LockOutObservationWindow	String	The range of time, in 100-nanosecond intervals,in which the system increments the incorrect logon count.
LockoutThreshold	String	The number of invalid logon attempts that are permitted before the account is locked out.
LSACreationTime	String	The LSA-Creation-Time attribute is used to support replication to Windows NT 4.0 domains.
LSAModifiedCount	String	The LSA-Modified-Count attribute is used to support replication to Windows NT 4.0 domains.
ManagedBy	String	The distinguished name of the user that is assigned to manage this object.
ManagedObjects	String	Contains the list of objects that are managed by the user. The objects listed are those that have the property managedBy property set to this user. Each item in the list is a linked reference to the managed object.
MasteredBy	String	Backward link for Has-Master-NCs attribute. The distinguished name for its NTDS Settings objects.
MaxPwdAge	String	The maximum amount of time, in 100-nanosecond intervals, a password is valid. This value is stored as a large integer that represents the number of 100-nanosecond intervals from the time the password was set before the password expires.
MinPwdAge	String	The minimum amount of time, in 100-nanosecond intervals, that a password is valid.
MinPwdLength	String	The minimum number of characters that a password must contain.
ModifiedCountAtLastProm	String	The Net Logon Change Log serial number at last promotion.
ModifyTimeStamp	Datetime	A computed attribute that represents the date when this object was last changed. This value is not replicated.
MS-DS-ConsistencyChildCount	String	This attribute is used to check consistency between the directory and another object, database, or application, by comparing a count of child objects.
MS-DS-ConsistencyGuid	String	This attribute is used to check consistency between the directory and another object, database, or application, by comparing GUIDs.
Ms-DS-MachineAccountQuota	String	The number of computer accounts that a user is allowed to create in a domain.
NETBIOSName	String	The name of the object to be used over NetBIOS.
NetbootSCPBL	String	A list of service connection points that reference this NetBoot server.
NextRid	String	The Next Rid field used by the mixed mode allocator.
NonSecurityMemberBL	String	List of nonsecurity-members for an Exchange distribution list.
NTMixedDomain	String	Indicates that the domain is in native mode or mixed mode. This attribute is found in the domainDNS (head) object for the domain.
DistinguishedName	String	Same as the Distinguished Name for an object. Used by Exchange.
ObjectGUID	String	The unique identifier for an object.
ObjectVersion	String	This can be used to store a version number for the object.
OtherWellKnownObjects	String	Contains a list of containers by GUID and Distinguished Name. This permits retrieving an object after it has been moved by using just the GUID and the domain name. Whenever the object is moved, the system automatically updates the Distinguished Name.
PartialAttributeDeletionList	String	Tracks the internal replication state of partial replicas (that is, on GCs).Attribute of the partial replica NC object. Used when the GC is in the process of removing attributes from the objects in its partial replica NCs.
PartialAttributeSet	String	Tracks the internal replication state of partial replicas (that is, on GCs).Attribute of the partial replica NC object. Defines the set of attributes present on a particular partial replica NC.
PekKeyChangeInterval	String	Password encryption key change interval.
PekList	String	List of password encryption keys.
PossibleInferiors	String	The list of objects that this object can contain.
PrivateKey	String	An encrypted private key.
ProxiedObjectName	String	This attribute is used internally by Active Directory to help track interdomain moves.
ProxyAddresses	String	A proxy address is the address by which a Microsoft Exchange Server recipient object is recognized in a foreign mail system. Proxy addresses are required for all recipient objects, such as custom recipients and distribution lists.
PwdHistoryLength	String	The number of old passwords to save.
PwdProperties	String	Password Properties. Part of Domain Policy. A bitfield to indicate complexity and storage restrictions.
QueryPolicyBL	String	List of all objects holding references to a given Query-Policy.
Name	String	The Relative Distinguished Name (RDN) of an object. An RDN is the relative portion of a distinguished name (DN), which uniquely identifies an LDAP object.
ReplicaSource	String	This attribute contains the GUID of a replication source.
ReplPropertyMetaData	String	Tracks internal replication state information for DS objects.Information here can be extracted in public form through the public API DsReplicaGetInfo().Present on all DS objects.
ReplUpToDateVector	String	Tracks internal replication state information for an entire NC.Information here can be extracted in public form through the API DsReplicaGetInfo().Present on all NC root objects.
DirectReports	String	Contains the list of users that directly report to the user. The users listed as reports are those that have the property manager property set to this user. Each item in the list is a linked reference to the object that represents the user.
RepsFrom	String	Lists the servers from which the directory will accept changes for the defined naming context.
RepsTo	String	Lists the servers that the directory will notify of changes and servers to which the directory will send changes on Request for the defined naming context.
Revision	String	The revision level for a security descriptor or other change. Only used in the sam-server and ds-ui-settings objects.
RIDManagerReference	String	The Distinguished Name for the RID Manager of an object.
SDRightsEffective	String	This constructed attribute returns a single DWORD value that can have up to three bits set:
ServerReferenceBL	String	Found in the domain naming context. The distinguished name of a computer under the sites folder.
ShowInAdvancedViewOnly	String	TRUE if this attribute is to be visible in the Advanced mode of the UI.
SiteObjectBL	String	The list of distinguished names for subnets that belong to this site.
SubRefs	String	List of subordinate references of a Naming Context.
SubSchemaSubEntry	String	The distinguished name for the location of the subschema object where a class or attribute is defined.
SystemFlags	String	An integer value that contains flags that define additional properties of the class.See Remarks.
TreeName	String	DNS name of the domain at the root of a tree.
USNChanged	String	The update sequence number (USN) assigned by the local directory for the latest change, including creation. See also , USN-Created.
USNCreated	String	The update sequence number (USN) assigned at object creation. See also, USN-Changed.
USNDSALastObjRemoved	String	Contains the update sequence number (USN) for the last system object that was removed from a server.
USNIntersite	String	The update sequence number (USN) for inter-site replication.
USNLastObjRem	String	Contains the update sequence number (USN) for the last non-system object that was removed from a server.
USNSource	String	Value of the USN-Changed attribute of the object from the remote directory that replicated the change to the local server.
WbemPath	String	References to objects in other ADSI namespaces.
WellKnownObjects	String	This attribute contains a list of well-known object containers by GUID and distinguished name. The well-known objects are system containers. This information is used to retrieve an object after it has been moved by using just the GUID and the domain name. Whenever the object is moved, the system automatically updates the Distinguished Name portion of the Well-Known-Objects values that referred to the object.The file Ntdsapi.h contains the following definitions, which can be used to retrieve an object (the GUIDs that are associated to these objects are contained in Ntdsapi.h):
WhenChanged	Datetime	The date when this object was last changed. This value is not replicated and exists in the global catalog.
WhenCreated	Datetime	The date when this object was created. This value is replicated and is in the global catalog.
WWWHomePage	String	A web page that is the primary landing page of a website.
Url	String	A list of alternate webpages.

Table 6: DomainPolicy

DomainPolicy

Name	Type	Description
Id [KEY]	String	Combined index and DN. Multiple indices are only possible when a column is set to SplitDataByRow.
DN	String	The full distinguished name.
RDN	String	The relative distinguished name.
BaseDN	String	The base distinguished name.
InstanceType	String	A bitfield that dictates how the object is instantiated on a particular server. The value of this attribute can differ on different replicas even if the replicas are in sync.
NTSecurityDescriptor	String	The Windows NT security descriptor for the schema object. A security descriptor is a data structure that contains security information about an object, such as the ownership and permissions of the object.
ObjectCategory	String	An object class name used to group objects of this or derived classes.
ObjectClass	String	The list of classes from which this class is derived.
AdminDescription	String	The description displayed on admin screens.
AdminDisplayName	String	The name to be displayed on admin screens.
AllowedAttributes	String	Attributes that will be permitted to be assigned to a class.
AllowedAttributesEffective	String	A list of attributes that can be modified on the object.
AllowedChildClasses	String	Classes that can be contained by a class.
AllowedChildClassesEffective	String	A list of classes that can be modified.
AuthenticationOptions	String	The authentication options used in ADSI to bind to directory services objects.
BridgeheadServerListBL	String	The list of servers that are bridgeheads for replication.
CanonicalName	String	The name of the object in canonical format. myserver2.fabrikam.com/users/jeffsmith is an example of a distinguished name in canonical format.This is a constructed attribute. The results returned are identical to those returned by the following Active Directory function: DsCrackNames(NULL, DS_NAME_FLAG_SYNTACTICAL_ONLY, DS_FQDN_1779_NAME, DS_CANONICAL_NAME, ...).
Cn	String	The name that represents an object. Used to perform searches.
CreateTimeStamp	Datetime	The date when this object was created. This value isreplicated.
DefaultLocalPolicyObject	String	A reference to a Policy object that defines the local policy for the host object.
Description	String	Contains the description to display for an object. This value is restricted as single-valued for backward compatibility in some cases but is allowed to be multi-valued in others. See Remarks.
DisplayName	String	The display name for an object. This is usually the combination of the users first name, middle initial, and last name.
DisplayNamePrintable	String	The printable display name for an object. The printable display name is usually the combination of the user's first name, middle initial, and last name.
DomainCAs	String	List of certification authorities for a given domain.
DomainPolicyReference	String	The Distinguished Name of a domain policy object that a policy object copies from.
DomainWidePolicy	String	This is for user extensible policy to be replicated to the clients.
DSASignature	String	The DSA-Signature of an object is the Invocation-ID of the last directory to modify the object.
DSCorePropagationData	String	The DS-Core-Propagation-Data attribute is for internal use only.
EFSPolicy	String	The Encrypting File System Policy.
ExtensionName	String	The name of a property page used to extend the UI of a directory object.
Flags	String	To be used by the object to store bit information.
ForceLogoff	String	Used in computing the kick off time in SamIGetAccountRestrictions.Logoff time minus Force Log off equals kick off time.
FromEntry	String	This is a constructed attribute that is TRUE if the object is writable and FALSE if it is read-only, for example, a GC replica instance.
FrsComputerReferenceBL	String	Reference to replica sets to which this computer belongs.
FRSMemberReferenceBL	String	Reference to subscriber objects for this member.
FSMORoleOwner	String	Flexible Single-Master Operation: The distinguished name of the DC where the schema can be modified.
IpsecPolicyReference	String	The distinguished name of the related Internet Protocol security (IPsec) policy.
IsCriticalSystemObject	String	If TRUE,the object hosting this attribute must be replicated during installation of a new replica.
IsDeleted	String	If TRUE, this object has been marked for deletion and cannot be instantiated. After the tombstone period has expired, it will be removed from the system.
MemberOf	String	The distinguished name of the groups to which this object belongs.
IsPrivilegeHolder	String	Backward link to privileges held by a given principal.
LastKnownParent	String	The Distinguished Name (DN) of the last known parent of an orphaned object.
LockoutDuration	String	The amount of time that an account is locked due to the Lockout-Threshold being exceeded. This value is stored as a large integer that represents the negative of the number of 100-nanosecond intervals from the time the Lockout-Threshold is exceeded that must elapse before the account is unlocked.
LockOutObservationWindow	String	The range of time, in 100-nanosecond intervals,in which the system increments the incorrect logon count.
LockoutThreshold	String	The number of invalid logon attempts that are permitted before the account is locked out.
ManagedBy	String	The distinguished name of the user that is assigned to manage this object.
ManagedObjects	String	Contains the list of objects that are managed by the user. The objects listed are those that have the property managedBy property set to this user. Each item in the list is a linked reference to the managed object.
MasteredBy	String	Backward link for Has-Master-NCs attribute. The distinguished name for its NTDS Settings objects.
MaxPwdAge	String	The maximum amount of time, in 100-nanosecond intervals, a password is valid. This value is stored as a large integer that represents the number of 100-nanosecond intervals from the time the password was set before the password expires.
MaxRenewAge	String	This attribute determines the time period, in days, during which a user's ticket-granting ticket (TGT) can be renewed for purposes of Kerberos authentication. The default setting is 7 days in the Default Domain Group Policy object (GPO).
MaxTicketAge	String	This attribute determines the maximum amount of time, in hours, that a user's ticket-granting ticket (TGT) can be used for the purpose of Kerberos authentication. When a user's TGT expires, a new one must be requested, or the existing one must be renewed.By default, this setting is set to 10 hours in the Default Domain Group Policy object (GPO).
MinPwdAge	String	The minimum amount of time, in 100-nanosecond intervals, that a password is valid.
MinPwdLength	String	The minimum number of characters that a password must contain.
MinTicketAge	String	This attribute determines the minimum time period, in hours, that a user's ticket-granting ticket (TGT) can be used for Kerberos authentication before a request can be made to renew the ticket.
ModifyTimeStamp	Datetime	A computed attribute that represents the date when this object was last changed. This value is not replicated.
MS-DS-ConsistencyChildCount	String	This attribute is used to check consistency between the directory and another object, database, or application, by comparing a count of child objects.
MS-DS-ConsistencyGuid	String	This attribute is used to check consistency between the directory and another object, database, or application, by comparing GUIDs.
NetbootSCPBL	String	A list of service connection points that reference this NetBoot server.
NonSecurityMemberBL	String	List of nonsecurity-members for an Exchange distribution list.
DistinguishedName	String	Same as the Distinguished Name for an object. Used by Exchange.
ObjectGUID	String	The unique identifier for an object.
ObjectVersion	String	This can be used to store a version number for the object.
OtherWellKnownObjects	String	Contains a list of containers by GUID and Distinguished Name. This permits retrieving an object after it has been moved by using just the GUID and the domain name. Whenever the object is moved, the system automatically updates the Distinguished Name.
PartialAttributeDeletionList	String	Tracks the internal replication state of partial replicas (that is, on GCs).Attribute of the partial replica NC object. Used when the GC is in the process of removing attributes from the objects in its partial replica NCs.
PartialAttributeSet	String	Tracks the internal replication state of partial replicas (that is, on GCs).Attribute of the partial replica NC object. Defines the set of attributes present on a particular partial replica NC.
PossibleInferiors	String	The list of objects that this object can contain.
ProxiedObjectName	String	This attribute is used internally by Active Directory to help track interdomain moves.
ProxyAddresses	String	A proxy address is the address by which a Microsoft Exchange Server recipient object is recognized in a foreign mail system. Proxy addresses are required for all recipient objects, such as custom recipients and distribution lists.
ProxyLifetime	String	Contains the lifetime for a proxy object.
PublicKeyPolicy	String	Reference to the Public Key policy for this domain.
PwdHistoryLength	String	The number of old passwords to save.
PwdProperties	String	Password Properties. Part of Domain Policy. A bitfield to indicate complexity and storage restrictions.
QualityOfService	String	Local or domain quality of service bits on policy objects.
QueryPolicyBL	String	List of all objects holding references to a given Query-Policy.
Name	String	The Relative Distinguished Name (RDN) of an object. An RDN is the relative portion of a distinguished name (DN), which uniquely identifies an LDAP object.
ReplPropertyMetaData	String	Tracks internal replication state information for DS objects.Information here can be extracted in public form through the public API DsReplicaGetInfo().Present on all DS objects.
ReplUpToDateVector	String	Tracks internal replication state information for an entire NC.Information here can be extracted in public form through the API DsReplicaGetInfo().Present on all NC root objects.
DirectReports	String	Contains the list of users that directly report to the user. The users listed as reports are those that have the property manager property set to this user. Each item in the list is a linked reference to the object that represents the user.
RepsFrom	String	Lists the servers from which the directory will accept changes for the defined naming context.
RepsTo	String	Lists the servers that the directory will notify of changes and servers to which the directory will send changes on Request for the defined naming context.
Revision	String	The revision level for a security descriptor or other change. Only used in the sam-server and ds-ui-settings objects.
SDRightsEffective	String	This constructed attribute returns a single DWORD value that can have up to three bits set:
ServerReferenceBL	String	Found in the domain naming context. The distinguished name of a computer under the sites folder.
ShowInAdvancedViewOnly	String	TRUE if this attribute is to be visible in the Advanced mode of the UI.
SiteObjectBL	String	The list of distinguished names for subnets that belong to this site.
SubRefs	String	List of subordinate references of a Naming Context.
SubSchemaSubEntry	String	The distinguished name for the location of the subschema object where a class or attribute is defined.
SystemFlags	String	An integer value that contains flags that define additional properties of the class.See Remarks.
USNChanged	String	The update sequence number (USN) assigned by the local directory for the latest change, including creation. See also , USN-Created.
USNCreated	String	The update sequence number (USN) assigned at object creation. See also, USN-Changed.
USNDSALastObjRemoved	String	Contains the update sequence number (USN) for the last system object that was removed from a server.
USNIntersite	String	The update sequence number (USN) for inter-site replication.
USNLastObjRem	String	Contains the update sequence number (USN) for the last non-system object that was removed from a server.
USNSource	String	Value of the USN-Changed attribute of the object from the remote directory that replicated the change to the local server.
WbemPath	String	References to objects in other ADSI namespaces.
WellKnownObjects	String	This attribute contains a list of well-known object containers by GUID and distinguished name. The well-known objects are system containers. This information is used to retrieve an object after it has been moved by using just the GUID and the domain name. Whenever the object is moved, the system automatically updates the Distinguished Name portion of the Well-Known-Objects values that referred to the object.The file Ntdsapi.h contains the following definitions, which can be used to retrieve an object (the GUIDs that are associated to these objects are contained in Ntdsapi.h):
WhenChanged	Datetime	The date when this object was last changed. This value is not replicated and exists in the global catalog.
WhenCreated	Datetime	The date when this object was created. This value is replicated and is in the global catalog.
WWWHomePage	String	A web page that is the primary landing page of a website.
Url	String	A list of alternate webpages.

Table 7: DomainRelatedObject

DomainRelatedObject

Name	Type	Description
Id [KEY]	String	Combined index and DN. Multiple indices are only possible when a column is set to SplitDataByRow.
DN	String	The full distinguished name.
RDN	String	The relative distinguished name.
BaseDN	String	The base distinguished name.
InstanceType	String	A bitfield that dictates how the object is instantiated on a particular server. The value of this attribute can differ on different replicas even if the replicas are in sync.
NTSecurityDescriptor	String	The Windows NT security descriptor for the schema object. A security descriptor is a data structure that contains security information about an object, such as the ownership and permissions of the object.
ObjectCategory	String	An object class name used to group objects of this or derived classes.
ObjectClass	String	The list of classes from which this class is derived.
AdminDescription	String	The description displayed on admin screens.
AdminDisplayName	String	The name to be displayed on admin screens.
AllowedAttributes	String	Attributes that will be permitted to be assigned to a class.
AllowedAttributesEffective	String	A list of attributes that can be modified on the object.
AllowedChildClasses	String	Classes that can be contained by a class.
AllowedChildClassesEffective	String	A list of classes that can be modified.
AssociatedDomain	String	The associatedDomain attribute type specifies a DNS domain that is associated with an object.
BridgeheadServerListBL	String	The list of servers that are bridgeheads for replication.
CanonicalName	String	The name of the object in canonical format. myserver2.fabrikam.com/users/jeffsmith is an example of a distinguished name in canonical format.This is a constructed attribute. The results returned are identical to those returned by the following Active Directory function: DsCrackNames(NULL, DS_NAME_FLAG_SYNTACTICAL_ONLY, DS_FQDN_1779_NAME, DS_CANONICAL_NAME, ...).
Cn	String	The name that represents an object. Used to perform searches.
CreateTimeStamp	Datetime	The date when this object was created. This value isreplicated.
Description	String	Contains the description to display for an object. This value is restricted as single-valued for backward compatibility in some cases but is allowed to be multi-valued in others. See Remarks.
DisplayName	String	The display name for an object. This is usually the combination of the users first name, middle initial, and last name.
DisplayNamePrintable	String	The printable display name for an object. The printable display name is usually the combination of the user's first name, middle initial, and last name.
DSASignature	String	The DSA-Signature of an object is the Invocation-ID of the last directory to modify the object.
DSCorePropagationData	String	The DS-Core-Propagation-Data attribute is for internal use only.
ExtensionName	String	The name of a property page used to extend the UI of a directory object.
Flags	String	To be used by the object to store bit information.
FromEntry	String	This is a constructed attribute that is TRUE if the object is writable and FALSE if it is read-only, for example, a GC replica instance.
FrsComputerReferenceBL	String	Reference to replica sets to which this computer belongs.
FRSMemberReferenceBL	String	Reference to subscriber objects for this member.
FSMORoleOwner	String	Flexible Single-Master Operation: The distinguished name of the DC where the schema can be modified.
IsCriticalSystemObject	String	If TRUE,the object hosting this attribute must be replicated during installation of a new replica.
IsDeleted	String	If TRUE, this object has been marked for deletion and cannot be instantiated. After the tombstone period has expired, it will be removed from the system.
MemberOf	String	The distinguished name of the groups to which this object belongs.
IsPrivilegeHolder	String	Backward link to privileges held by a given principal.
LastKnownParent	String	The Distinguished Name (DN) of the last known parent of an orphaned object.
ManagedObjects	String	Contains the list of objects that are managed by the user. The objects listed are those that have the property managedBy property set to this user. Each item in the list is a linked reference to the managed object.
MasteredBy	String	Backward link for Has-Master-NCs attribute. The distinguished name for its NTDS Settings objects.
ModifyTimeStamp	Datetime	A computed attribute that represents the date when this object was last changed. This value is not replicated.
MsCOM-PartitionSetLink	String	A link used to associate a COM+ Partition with a COM+ PartitionSet object.
MsCOM-UserLink	String	A link used to associate a COM+ PartitionSet with a User object.
MsDS-Approx-Immed-Subordinates	String	The value returned by this attribute is based on index sizes.This may be off by +/-10% on large containers, and the error is theoretically unbounded, but using this attribute helps the UI display the contents of a container.
MS-DS-ConsistencyChildCount	String	This attribute is used to check consistency between the directory and another object, database, or application, by comparing a count of child objects.
MS-DS-ConsistencyGuid	String	This attribute is used to check consistency between the directory and another object, database, or application, by comparing GUIDs.
MsDs-masteredBy	String	Backward link for msDS-hasMasterNCs.
MsDS-MembersForAzRoleBL	String	Backward link from member application group or user to Az-Role objects linking to it.
MsDS-NCReplCursors	String	A list of past and present replication partners, and how current we are with each of them.
MsDS-NCReplInboundNeighbors	String	Replication partners for this partition.This server obtains replication data from these other servers, which act as sources.
MsDS-NCReplOutboundNeighbors	String	Replication partners for this partition.This server sends replication data to these other servers, which act as destinations. This server will notify these other servers when new data is available.
MsDS-NonMembersBL	String	Backward link from non-member group or user to Az groups that link to it (same functionality as Non-Security-Member-BL).
MsDS-ObjectReferenceBL	String	Backward link for ms-DS-Object-Reference.
MsDS-OperationsForAzRoleBL	String	Backward link from Az-Operation to Az-Role objects that link to it.
MsDS-OperationsForAzTaskBL	String	Backward link from Az-Operation to Az-Task objects that link to it.
MsDS-ReplAttributeMetaData	String	A list of metadata for each replicated attribute. The metadata indicates who changed the attribute last.
MsDS-ReplValueMetaData	String	A list of metadata for each value of an attribute. The metadata indicates who changed the value last.
MsDS-TasksForAzRoleBL	String	Backward link from Az-Task to Az-Role objects that link to it.
MsDS-TasksForAzTaskBL	String	Backward link from Az-Task to the Az-Task objects that link to it.
OwnerBL	String	The backward link to the owner attribute. Contains a list of owners for an object.
NetbootSCPBL	String	A list of service connection points that reference this NetBoot server.
NonSecurityMemberBL	String	List of nonsecurity-members for an Exchange distribution list.
DistinguishedName	String	Same as the Distinguished Name for an object. Used by Exchange.
ObjectGUID	String	The unique identifier for an object.
ObjectVersion	String	This can be used to store a version number for the object.
OtherWellKnownObjects	String	Contains a list of containers by GUID and Distinguished Name. This permits retrieving an object after it has been moved by using just the GUID and the domain name. Whenever the object is moved, the system automatically updates the Distinguished Name.
PartialAttributeDeletionList	String	Tracks the internal replication state of partial replicas (that is, on GCs).Attribute of the partial replica NC object. Used when the GC is in the process of removing attributes from the objects in its partial replica NCs.
PartialAttributeSet	String	Tracks the internal replication state of partial replicas (that is, on GCs).Attribute of the partial replica NC object. Defines the set of attributes present on a particular partial replica NC.
PossibleInferiors	String	The list of objects that this object can contain.
ProxiedObjectName	String	This attribute is used internally by Active Directory to help track interdomain moves.
ProxyAddresses	String	A proxy address is the address by which a Microsoft Exchange Server recipient object is recognized in a foreign mail system. Proxy addresses are required for all recipient objects, such as custom recipients and distribution lists.
QueryPolicyBL	String	List of all objects holding references to a given Query-Policy.
Name	String	The Relative Distinguished Name (RDN) of an object. An RDN is the relative portion of a distinguished name (DN), which uniquely identifies an LDAP object.
ReplPropertyMetaData	String	Tracks internal replication state information for DS objects.Information here can be extracted in public form through the public API DsReplicaGetInfo().Present on all DS objects.
ReplUpToDateVector	String	Tracks internal replication state information for an entire NC.Information here can be extracted in public form through the API DsReplicaGetInfo().Present on all NC root objects.
DirectReports	String	Contains the list of users that directly report to the user. The users listed as reports are those that have the property manager property set to this user. Each item in the list is a linked reference to the object that represents the user.
RepsFrom	String	Lists the servers from which the directory will accept changes for the defined naming context.
RepsTo	String	Lists the servers that the directory will notify of changes and servers to which the directory will send changes on Request for the defined naming context.
Revision	String	The revision level for a security descriptor or other change. Only used in the sam-server and ds-ui-settings objects.
SDRightsEffective	String	This constructed attribute returns a single DWORD value that can have up to three bits set:
ServerReferenceBL	String	Found in the domain naming context. The distinguished name of a computer under the sites folder.
ShowInAdvancedViewOnly	String	TRUE if this attribute is to be visible in the Advanced mode of the UI.
SiteObjectBL	String	The list of distinguished names for subnets that belong to this site.
StructuralObjectClass	String	This constructed attribute stores a list of classes contained in a class hierarchy, including abstract classes. This list does contain dynamically linked auxiliary classes.
SubRefs	String	List of subordinate references of a Naming Context.
SubSchemaSubEntry	String	The distinguished name for the location of the subschema object where a class or attribute is defined.
SystemFlags	String	An integer value that contains flags that define additional properties of the class.See Remarks.
USNChanged	String	The update sequence number (USN) assigned by the local directory for the latest change, including creation. See also , USN-Created.
USNCreated	String	The update sequence number (USN) assigned at object creation. See also, USN-Changed.
USNDSALastObjRemoved	String	Contains the update sequence number (USN) for the last system object that was removed from a server.
USNIntersite	String	The update sequence number (USN) for inter-site replication.
USNLastObjRem	String	Contains the update sequence number (USN) for the last non-system object that was removed from a server.
USNSource	String	Value of the USN-Changed attribute of the object from the remote directory that replicated the change to the local server.
WbemPath	String	References to objects in other ADSI namespaces.
WellKnownObjects	String	This attribute contains a list of well-known object containers by GUID and distinguished name. The well-known objects are system containers. This information is used to retrieve an object after it has been moved by using just the GUID and the domain name. Whenever the object is moved, the system automatically updates the Distinguished Name portion of the Well-Known-Objects values that referred to the object.The file Ntdsapi.h contains the following definitions, which can be used to retrieve an object (the GUIDs that are associated to these objects are contained in Ntdsapi.h):
WhenChanged	Datetime	The date when this object was last changed. This value is not replicated and exists in the global catalog.
WhenCreated	Datetime	The date when this object was created. This value is replicated and is in the global catalog.
WWWHomePage	String	A web page that is the primary landing page of a website.
Url	String	A list of alternate webpages.