Articles in this section

P

Tables that start with the letter P and the associated parameters are given below. Click the arrow beside the table name to expand the section and view the parameters.

Table 1: Person

Person

Name

Type

Description

Id

[KEY]

String

Combined index and DN. Multiple indices are only possible when a column is set to SplitDataByRow.

DN

String

The full distinguished name.

RDN

String

The relative distinguished name.

BaseDN

String

The base distinguished name.

InstanceType

String

A bitfield that dictates how the object is instantiated on a particular server. The value of this attribute can differ on different replicas even if the replicas are in sync.

NTSecurityDescriptor

String

The Windows NT security descriptor for the schema object. A security descriptor is a data structure that contains security information about an object, such as the ownership and permissions of the object.

ObjectCategory

String

An object class name used to group objects of this or derived classes.

ObjectClass

String

The list of classes from which this class is derived.

AdminDescription

String

The description displayed on admin screens.

AdminDisplayName

String

The name to be displayed on admin screens.

AllowedAttributes

String

Attributes that will be permitted to be assigned to a class.

AllowedAttributesEffective

String

A list of attributes that can be modified on the object.

AllowedChildClasses

String

Classes that can be contained by a class.

AllowedChildClassesEffective

String

A list of classes that can be modified.

BridgeheadServerListBL

String

The list of servers that are bridgeheads for replication.

CanonicalName

String

The name of the object in canonical format. myserver2.fabrikam.com/users/jeffsmith is an example of a distinguished name in canonical format.This is a constructed attribute. The results returned are identical to those returned by the following Active Directory function: DsCrackNames(NULL, DS_NAME_FLAG_SYNTACTICAL_ONLY, DS_FQDN_1779_NAME, DS_CANONICAL_NAME, ...).

Cn

String

The name that represents an object. Used to perform searches.

CreateTimeStamp

Datetime

The date when this object was created. This value isreplicated.

Description

String

Contains the description to display for an object. This value is restricted as single-valued for backward compatibility in some cases but is allowed to be multi-valued in others. See Remarks.

DisplayName

String

The display name for an object. This is usually the combination of the users first name, middle initial, and last name.

DisplayNamePrintable

String

The printable display name for an object. The printable display name is usually the combination of the user's first name, middle initial, and last name.

DSASignature

String

The DSA-Signature of an object is the Invocation-ID of the last directory to modify the object.

DSCorePropagationData

String

The DS-Core-Propagation-Data attribute is for internal use only.

ExtensionName

String

The name of a property page used to extend the UI of a directory object.

Flags

String

To be used by the object to store bit information.

FromEntry

String

This is a constructed attribute that is TRUE if the object is writable and FALSE if it is read-only, for example, a GC replica instance.

FrsComputerReferenceBL

String

Reference to replica sets to which this computer belongs.

FRSMemberReferenceBL

String

Reference to subscriber objects for this member.

FSMORoleOwner

String

Flexible Single-Master Operation: The distinguished name of the DC where the schema can be modified.

IsCriticalSystemObject

String

If TRUE,the object hosting this attribute must be replicated during installation of a new replica.

IsDeleted

String

If TRUE, this object has been marked for deletion and cannot be instantiated. After the tombstone period has expired, it will be removed from the system.

MemberOf

String

The distinguished name of the groups to which this object belongs.

IsPrivilegeHolder

String

Backward link to privileges held by a given principal.

LastKnownParent

String

The Distinguished Name (DN) of the last known parent of an orphaned object.

ManagedObjects

String

Contains the list of objects that are managed by the user. The objects listed are those that have the property managedBy property set to this user. Each item in the list is a linked reference to the managed object.

MasteredBy

String

Backward link for Has-Master-NCs attribute. The distinguished name for its NTDS Settings objects.

ModifyTimeStamp

Datetime

A computed attribute that represents the date when this object was last changed. This value is not replicated.

MS-DS-ConsistencyChildCount

String

This attribute is used to check consistency between the directory and another object, database, or application, by comparing a count of child objects.

MS-DS-ConsistencyGuid

String

This attribute is used to check consistency between the directory and another object, database, or application, by comparing GUIDs.

NetbootSCPBL

String

A list of service connection points that reference this NetBoot server.

NonSecurityMemberBL

String

List of nonsecurity-members for an Exchange distribution list.

DistinguishedName

String

Same as the Distinguished Name for an object. Used by Exchange.

ObjectGUID

String

The unique identifier for an object.

ObjectVersion

String

This can be used to store a version number for the object.

OtherWellKnownObjects

String

Contains a list of containers by GUID and Distinguished Name. This permits retrieving an object after it has been moved by using just the GUID and the domain name. Whenever the object is moved, the system automatically updates the Distinguished Name.

PartialAttributeDeletionList

String

Tracks the internal replication state of partial replicas (that is, on GCs).Attribute of the partial replica NC object. Used when the GC is in the process of removing attributes from the objects in its partial replica NCs.

PartialAttributeSet

String

Tracks the internal replication state of partial replicas (that is, on GCs).Attribute of the partial replica NC object. Defines the set of attributes present on a particular partial replica NC.

PossibleInferiors

String

The list of objects that this object can contain.

ProxiedObjectName

String

This attribute is used internally by Active Directory to help track interdomain moves.

ProxyAddresses

String

A proxy address is the address by which a Microsoft Exchange Server recipient object is recognized in a foreign mail system. Proxy addresses are required for all recipient objects, such as custom recipients and distribution lists.

QueryPolicyBL

String

List of all objects holding references to a given Query-Policy.

Name

String

The Relative Distinguished Name (RDN) of an object. An RDN is the relative portion of a distinguished name (DN), which uniquely identifies an LDAP object.

ReplPropertyMetaData

String

Tracks internal replication state information for DS objects.Information here can be extracted in public form through the public API DsReplicaGetInfo().Present on all DS objects.

ReplUpToDateVector

String

Tracks internal replication state information for an entire NC.Information here can be extracted in public form through the API DsReplicaGetInfo().Present on all NC root objects.

DirectReports

String

Contains the list of users that directly report to the user. The users listed as reports are those that have the property manager property set to this user. Each item in the list is a linked reference to the object that represents the user.

RepsFrom

String

Lists the servers from which the directory will accept changes for the defined naming context.

RepsTo

String

Lists the servers that the directory will notify of changes and servers to which the directory will send changes on Request for the defined naming context.

Revision

String

The revision level for a security descriptor or other change. Only used in the sam-server and ds-ui-settings objects.

SDRightsEffective

String

This constructed attribute returns a single DWORD value that can have up to three bits set:

SeeAlso

String

List of distinguished names that are related to an object.

ServerReferenceBL

String

Found in the domain naming context. The distinguished name of a computer under the sites folder.

ShowInAdvancedViewOnly

String

TRUE if this attribute is to be visible in the Advanced mode of the UI.

SiteObjectBL

String

The list of distinguished names for subnets that belong to this site.

SubRefs

String

List of subordinate references of a Naming Context.

SubSchemaSubEntry

String

The distinguished name for the location of the subschema object where a class or attribute is defined.

Sn

String

This attribute contains the family or last name for a user.

SystemFlags

String

An integer value that contains flags that define additional properties of the class.See Remarks.

TelephoneNumber

String

The primary telephone number.

UserPassword

String

The user's password in UTF-8 format. This is a write-only attribute.

USNChanged

String

The update sequence number (USN) assigned by the local directory for the latest change, including creation. See also , USN-Created.

USNCreated

String

The update sequence number (USN) assigned at object creation. See also, USN-Changed.

USNDSALastObjRemoved

String

Contains the update sequence number (USN) for the last system object that was removed from a server.

USNIntersite

String

The update sequence number (USN) for inter-site replication.

USNLastObjRem

String

Contains the update sequence number (USN) for the last non-system object that was removed from a server.

USNSource

String

Value of the USN-Changed attribute of the object from the remote directory that replicated the change to the local server.

WbemPath

String

References to objects in other ADSI namespaces.

WellKnownObjects

String

This attribute contains a list of well-known object containers by GUID and distinguished name. The well-known objects are system containers. This information is used to retrieve an object after it has been moved by using just the GUID and the domain name. Whenever the object is moved, the system automatically updates the Distinguished Name portion of the Well-Known-Objects values that referred to the object.The file Ntdsapi.h contains the following definitions, which can be used to retrieve an object (the GUIDs that are associated to these objects are contained in Ntdsapi.h):

WhenChanged

Datetime

The date when this object was last changed. This value is not replicated and exists in the global catalog.

WhenCreated

Datetime

The date when this object was created. This value is replicated and is in the global catalog.

WWWHomePage

String

A web page that is the primary landing page of a website.

Url

String

A list of alternate webpages.

Table 2: PosixAccount

PosixAccount

Name

Type

Description

Id

[KEY]

String

Combined index and DN. Multiple indices are only possible when a column is set to SplitDataByRow.

DN

String

The full distinguished name.

RDN

String

The relative distinguished name.

BaseDN

String

The base distinguished name.

InstanceType

String

A bitfield that dictates how the object is instantiated on a particular server. The value of this attribute can differ on different replicas even if the replicas are in sync.

NTSecurityDescriptor

String

The Windows NT security descriptor for the schema object. A security descriptor is a data structure that contains security information about an object, such as the ownership and permissions of the object.

ObjectCategory

String

An object class name used to group objects of this or derived classes.

ObjectClass

String

The list of classes from which this class is derived.

AdminDescription

String

The description displayed on admin screens.

AdminDisplayName

String

The name to be displayed on admin screens.

AllowedAttributes

String

Attributes that will be permitted to be assigned to a class.

AllowedAttributesEffective

String

A list of attributes that can be modified on the object.

AllowedChildClasses

String

Classes that can be contained by a class.

AllowedChildClassesEffective

String

A list of classes that can be modified.

BridgeheadServerListBL

String

The list of servers that are bridgeheads for replication.

CanonicalName

String

The name of the object in canonical format. myserver2.fabrikam.com/users/jeffsmith is an example of a distinguished name in canonical format.This is a constructed attribute. The results returned are identical to those returned by the following Active Directory function: DsCrackNames(NULL, DS_NAME_FLAG_SYNTACTICAL_ONLY, DS_FQDN_1779_NAME, DS_CANONICAL_NAME, ...).

Cn

String

The name that represents an object. Used to perform searches.

CreateTimeStamp

Datetime

The date when this object was created. This value isreplicated.

Description

String

Contains the description to display for an object. This value is restricted as single-valued for backward compatibility in some cases but is allowed to be multi-valued in others. See Remarks.

DisplayName

String

The display name for an object. This is usually the combination of the users first name, middle initial, and last name.

DisplayNamePrintable

String

The printable display name for an object. The printable display name is usually the combination of the user's first name, middle initial, and last name.

DSASignature

String

The DSA-Signature of an object is the Invocation-ID of the last directory to modify the object.

DSCorePropagationData

String

The DS-Core-Propagation-Data attribute is for internal use only.

ExtensionName

String

The name of a property page used to extend the UI of a directory object.

Flags

String

To be used by the object to store bit information.

FromEntry

String

This is a constructed attribute that is TRUE if the object is writable and FALSE if it is read-only, for example, a GC replica instance.

FrsComputerReferenceBL

String

Reference to replica sets to which this computer belongs.

FRSMemberReferenceBL

String

Reference to subscriber objects for this member.

FSMORoleOwner

String

Flexible Single-Master Operation: The distinguished name of the DC where the schema can be modified.

Gecos

String

Contains the information that is stored in the GECOS field.

GidNumber

String

Contains an integer value that uniquely identifies a group in an administrative domain.

HomeDirectory

String

The home directory for the account. If homeDrive is set and specifies a drive letter, homeDirectory must be a UNC path. Otherwise, homeDirectory is a fully qualified local path including the drive letter (for example, DriveLetter:\Directory\Folder). This value can be a null string.

IsCriticalSystemObject

String

If TRUE,the object hosting this attribute must be replicated during installation of a new replica.

IsDeleted

String

If TRUE, this object has been marked for deletion and cannot be instantiated. After the tombstone period has expired, it will be removed from the system.

MemberOf

String

The distinguished name of the groups to which this object belongs.

IsPrivilegeHolder

String

Backward link to privileges held by a given principal.

LastKnownParent

String

The Distinguished Name (DN) of the last known parent of an orphaned object.

LoginShell

String

Contains the path to the login shell.

ManagedObjects

String

Contains the list of objects that are managed by the user. The objects listed are those that have the property managedBy property set to this user. Each item in the list is a linked reference to the managed object.

MasteredBy

String

Backward link for Has-Master-NCs attribute. The distinguished name for its NTDS Settings objects.

ModifyTimeStamp

Datetime

A computed attribute that represents the date when this object was last changed. This value is not replicated.

MsCOM-PartitionSetLink

String

A link used to associate a COM+ Partition with a COM+ PartitionSet object.

MsCOM-UserLink

String

A link used to associate a COM+ PartitionSet with a User object.

MsDFSR-ComputerReferenceBL

String

Contains the backward link for the ms-DFSR-ComputerReference attribute.

MsDFSR-MemberReferenceBL

String

Contains the backward link for the ms-DFSR-MemberReference attribute.

MsDS-Approx-Immed-Subordinates

String

The value returned by this attribute is based on index sizes.This may be off by +/-10% on large containers, and the error is theoretically unbounded, but using this attribute helps the UI display the contents of a container.

MS-DS-ConsistencyChildCount

String

This attribute is used to check consistency between the directory and another object, database, or application, by comparing a count of child objects.

MS-DS-ConsistencyGuid

String

This attribute is used to check consistency between the directory and another object, database, or application, by comparing GUIDs.

MsDs-masteredBy

String

Backward link for msDS-hasMasterNCs.

MsDS-MembersForAzRoleBL

String

Backward link from member application group or user to Az-Role objects linking to it.

MsDS-NCReplCursors

String

A list of past and present replication partners, and how current we are with each of them.

MsDS-NCReplInboundNeighbors

String

Replication partners for this partition.This server obtains replication data from these other servers, which act as sources.

MsDS-NCReplOutboundNeighbors

String

Replication partners for this partition.This server sends replication data to these other servers, which act as destinations. This server will notify these other servers when new data is available.

MsDS-NonMembersBL

String

Backward link from non-member group or user to Az groups that link to it (same functionality as Non-Security-Member-BL).

MsDS-ObjectReferenceBL

String

Backward link for ms-DS-Object-Reference.

MsDS-OperationsForAzRoleBL

String

Backward link from Az-Operation to Az-Role objects that link to it.

MsDS-OperationsForAzTaskBL

String

Backward link from Az-Operation to Az-Task objects that link to it.

MsDS-ReplAttributeMetaData

String

A list of metadata for each replicated attribute. The metadata indicates who changed the attribute last.

MsDS-ReplValueMetaData

String

A list of metadata for each value of an attribute. The metadata indicates who changed the value last.

MsDS-TasksForAzRoleBL

String

Backward link from Az-Task to Az-Role objects that link to it.

MsDS-TasksForAzTaskBL

String

Backward link from Az-Task to the Az-Task objects that link to it.

OwnerBL

String

The backward link to the owner attribute. Contains a list of owners for an object.

MsSFU30PosixMemberOf

String

Contains the display names of groups to which this user belongs.

NetbootSCPBL

String

A list of service connection points that reference this NetBoot server.

NonSecurityMemberBL

String

List of nonsecurity-members for an Exchange distribution list.

DistinguishedName

String

Same as the Distinguished Name for an object. Used by Exchange.

ObjectGUID

String

The unique identifier for an object.

ObjectVersion

String

This can be used to store a version number for the object.

OtherWellKnownObjects

String

Contains a list of containers by GUID and Distinguished Name. This permits retrieving an object after it has been moved by using just the GUID and the domain name. Whenever the object is moved, the system automatically updates the Distinguished Name.

PartialAttributeDeletionList

String

Tracks the internal replication state of partial replicas (that is, on GCs).Attribute of the partial replica NC object. Used when the GC is in the process of removing attributes from the objects in its partial replica NCs.

PartialAttributeSet

String

Tracks the internal replication state of partial replicas (that is, on GCs).Attribute of the partial replica NC object. Defines the set of attributes present on a particular partial replica NC.

PossibleInferiors

String

The list of objects that this object can contain.

ProxiedObjectName

String

This attribute is used internally by Active Directory to help track interdomain moves.

ProxyAddresses

String

A proxy address is the address by which a Microsoft Exchange Server recipient object is recognized in a foreign mail system. Proxy addresses are required for all recipient objects, such as custom recipients and distribution lists.

QueryPolicyBL

String

List of all objects holding references to a given Query-Policy.

Name

String

The Relative Distinguished Name (RDN) of an object. An RDN is the relative portion of a distinguished name (DN), which uniquely identifies an LDAP object.

ReplPropertyMetaData

String

Tracks internal replication state information for DS objects.Information here can be extracted in public form through the public API DsReplicaGetInfo().Present on all DS objects.

ReplUpToDateVector

String

Tracks internal replication state information for an entire NC.Information here can be extracted in public form through the API DsReplicaGetInfo().Present on all NC root objects.

DirectReports

String

Contains the list of users that directly report to the user. The users listed as reports are those that have the property manager property set to this user. Each item in the list is a linked reference to the object that represents the user.

RepsFrom

String

Lists the servers from which the directory will accept changes for the defined naming context.

RepsTo

String

Lists the servers that the directory will notify of changes and servers to which the directory will send changes on Request for the defined naming context.

Revision

String

The revision level for a security descriptor or other change. Only used in the sam-server and ds-ui-settings objects.

SDRightsEffective

String

This constructed attribute returns a single DWORD value that can have up to three bits set:

ServerReferenceBL

String

Found in the domain naming context. The distinguished name of a computer under the sites folder.

ShowInAdvancedViewOnly

String

TRUE if this attribute is to be visible in the Advanced mode of the UI.

SiteObjectBL

String

The list of distinguished names for subnets that belong to this site.

StructuralObjectClass

String

This constructed attribute stores a list of classes contained in a class hierarchy, including abstract classes. This list does contain dynamically linked auxiliary classes.

SubRefs

String

List of subordinate references of a Naming Context.

SubSchemaSubEntry

String

The distinguished name for the location of the subschema object where a class or attribute is defined.

SystemFlags

String

An integer value that contains flags that define additional properties of the class.See Remarks.

Uid

String

A user ID.

UidNumber

String

Contains an integer that uniquely identifies a user in an administrative domain.

UnixHomeDirectory

String

Contains the absolute path to the home directory.

UnixUserPassword

String

Contains a user password that is compatible with a UNIX system.

UserPassword

String

The user's password in UTF-8 format. This is a write-only attribute.

USNChanged

String

The update sequence number (USN) assigned by the local directory for the latest change, including creation. See also , USN-Created.

USNCreated

String

The update sequence number (USN) assigned at object creation. See also, USN-Changed.

USNDSALastObjRemoved

String

Contains the update sequence number (USN) for the last system object that was removed from a server.

USNIntersite

String

The update sequence number (USN) for inter-site replication.

USNLastObjRem

String

Contains the update sequence number (USN) for the last non-system object that was removed from a server.

USNSource

String

Value of the USN-Changed attribute of the object from the remote directory that replicated the change to the local server.

WbemPath

String

References to objects in other ADSI namespaces.

WellKnownObjects

String

This attribute contains a list of well-known object containers by GUID and distinguished name. The well-known objects are system containers. This information is used to retrieve an object after it has been moved by using just the GUID and the domain name. Whenever the object is moved, the system automatically updates the Distinguished Name portion of the Well-Known-Objects values that referred to the object.The file Ntdsapi.h contains the following definitions, which can be used to retrieve an object (the GUIDs that are associated to these objects are contained in Ntdsapi.h):

WhenChanged

Datetime

The date when this object was last changed. This value is not replicated and exists in the global catalog.

WhenCreated

Datetime

The date when this object was created. This value is replicated and is in the global catalog.

WWWHomePage

String

A web page that is the primary landing page of a website.

Url

String

A list of alternate webpages.

Table 3: PosixGroup

PosixGroup

Name

Type

Description

Id

[KEY]

String

Combined index and DN. Multiple indices are only possible when a column is set to SplitDataByRow.

DN

String

The full distinguished name.

RDN

String

The relative distinguished name.

BaseDN

String

The base distinguished name.

InstanceType

String

A bitfield that dictates how the object is instantiated on a particular server. The value of this attribute can differ on different replicas even if the replicas are in sync.

NTSecurityDescriptor

String

The Windows NT security descriptor for the schema object. A security descriptor is a data structure that contains security information about an object, such as the ownership and permissions of the object.

ObjectCategory

String

An object class name used to group objects of this or derived classes.

ObjectClass

String

The list of classes from which this class is derived.

AdminDescription

String

The description displayed on admin screens.

AdminDisplayName

String

The name to be displayed on admin screens.

AllowedAttributes

String

Attributes that will be permitted to be assigned to a class.

AllowedAttributesEffective

String

A list of attributes that can be modified on the object.

AllowedChildClasses

String

Classes that can be contained by a class.

AllowedChildClassesEffective

String

A list of classes that can be modified.

BridgeheadServerListBL

String

The list of servers that are bridgeheads for replication.

CanonicalName

String

The name of the object in canonical format. myserver2.fabrikam.com/users/jeffsmith is an example of a distinguished name in canonical format.This is a constructed attribute. The results returned are identical to those returned by the following Active Directory function: DsCrackNames(NULL, DS_NAME_FLAG_SYNTACTICAL_ONLY, DS_FQDN_1779_NAME, DS_CANONICAL_NAME, ...).

Cn

String

The name that represents an object. Used to perform searches.

CreateTimeStamp

Datetime

The date when this object was created. This value isreplicated.

Description

String

Contains the description to display for an object. This value is restricted as single-valued for backward compatibility in some cases but is allowed to be multi-valued in others. See Remarks.

DisplayName

String

The display name for an object. This is usually the combination of the users first name, middle initial, and last name.

DisplayNamePrintable

String

The printable display name for an object. The printable display name is usually the combination of the user's first name, middle initial, and last name.

DSASignature

String

The DSA-Signature of an object is the Invocation-ID of the last directory to modify the object.

DSCorePropagationData

String

The DS-Core-Propagation-Data attribute is for internal use only.

ExtensionName

String

The name of a property page used to extend the UI of a directory object.

Flags

String

To be used by the object to store bit information.

FromEntry

String

This is a constructed attribute that is TRUE if the object is writable and FALSE if it is read-only, for example, a GC replica instance.

FrsComputerReferenceBL

String

Reference to replica sets to which this computer belongs.

FRSMemberReferenceBL

String

Reference to subscriber objects for this member.

FSMORoleOwner

String

Flexible Single-Master Operation: The distinguished name of the DC where the schema can be modified.

GidNumber

String

Contains an integer value that uniquely identifies a group in an administrative domain.

IsCriticalSystemObject

String

If TRUE,the object hosting this attribute must be replicated during installation of a new replica.

IsDeleted

String

If TRUE, this object has been marked for deletion and cannot be instantiated. After the tombstone period has expired, it will be removed from the system.

MemberOf

String

The distinguished name of the groups to which this object belongs.

IsPrivilegeHolder

String

Backward link to privileges held by a given principal.

LastKnownParent

String

The Distinguished Name (DN) of the last known parent of an orphaned object.

ManagedObjects

String

Contains the list of objects that are managed by the user. The objects listed are those that have the property managedBy property set to this user. Each item in the list is a linked reference to the managed object.

MasteredBy

String

Backward link for Has-Master-NCs attribute. The distinguished name for its NTDS Settings objects.

MemberUid

String

Contains the login names of the members of a group.

ModifyTimeStamp

Datetime

A computed attribute that represents the date when this object was last changed. This value is not replicated.

MsCOM-PartitionSetLink

String

A link used to associate a COM+ Partition with a COM+ PartitionSet object.

MsCOM-UserLink

String

A link used to associate a COM+ PartitionSet with a User object.

MsDFSR-ComputerReferenceBL

String

Contains the backward link for the ms-DFSR-ComputerReference attribute.

MsDFSR-MemberReferenceBL

String

Contains the backward link for the ms-DFSR-MemberReference attribute.

MsDS-Approx-Immed-Subordinates

String

The value returned by this attribute is based on index sizes.This may be off by +/-10% on large containers, and the error is theoretically unbounded, but using this attribute helps the UI display the contents of a container.

MS-DS-ConsistencyChildCount

String

This attribute is used to check consistency between the directory and another object, database, or application, by comparing a count of child objects.

MS-DS-ConsistencyGuid

String

This attribute is used to check consistency between the directory and another object, database, or application, by comparing GUIDs.

MsDs-masteredBy

String

Backward link for msDS-hasMasterNCs.

MsDS-MembersForAzRoleBL

String

Backward link from member application group or user to Az-Role objects linking to it.

MsDS-NCReplCursors

String

A list of past and present replication partners, and how current we are with each of them.

MsDS-NCReplInboundNeighbors

String

Replication partners for this partition.This server obtains replication data from these other servers, which act as sources.

MsDS-NCReplOutboundNeighbors

String

Replication partners for this partition.This server sends replication data to these other servers, which act as destinations. This server will notify these other servers when new data is available.

MsDS-NonMembersBL

String

Backward link from non-member group or user to Az groups that link to it (same functionality as Non-Security-Member-BL).

MsDS-ObjectReferenceBL

String

Backward link for ms-DS-Object-Reference.

MsDS-OperationsForAzRoleBL

String

Backward link from Az-Operation to Az-Role objects that link to it.

MsDS-OperationsForAzTaskBL

String

Backward link from Az-Operation to Az-Task objects that link to it.

MsDS-ReplAttributeMetaData

String

A list of metadata for each replicated attribute. The metadata indicates who changed the attribute last.

MsDS-ReplValueMetaData

String

A list of metadata for each value of an attribute. The metadata indicates who changed the value last.

MsDS-TasksForAzRoleBL

String

Backward link from Az-Task to Az-Role objects that link to it.

MsDS-TasksForAzTaskBL

String

Backward link from Az-Task to the Az-Task objects that link to it.

OwnerBL

String

The backward link to the owner attribute. Contains a list of owners for an object.

MsSFU30PosixMemberOf

String

Contains the display names of groups to which this user belongs.

NetbootSCPBL

String

A list of service connection points that reference this NetBoot server.

NonSecurityMemberBL

String

List of nonsecurity-members for an Exchange distribution list.

DistinguishedName

String

Same as the Distinguished Name for an object. Used by Exchange.

ObjectGUID

String

The unique identifier for an object.

ObjectVersion

String

This can be used to store a version number for the object.

OtherWellKnownObjects

String

Contains a list of containers by GUID and Distinguished Name. This permits retrieving an object after it has been moved by using just the GUID and the domain name. Whenever the object is moved, the system automatically updates the Distinguished Name.

PartialAttributeDeletionList

String

Tracks the internal replication state of partial replicas (that is, on GCs).Attribute of the partial replica NC object. Used when the GC is in the process of removing attributes from the objects in its partial replica NCs.

PartialAttributeSet

String

Tracks the internal replication state of partial replicas (that is, on GCs).Attribute of the partial replica NC object. Defines the set of attributes present on a particular partial replica NC.

PossibleInferiors

String

The list of objects that this object can contain.

ProxiedObjectName

String

This attribute is used internally by Active Directory to help track interdomain moves.

ProxyAddresses

String

A proxy address is the address by which a Microsoft Exchange Server recipient object is recognized in a foreign mail system. Proxy addresses are required for all recipient objects, such as custom recipients and distribution lists.

QueryPolicyBL

String

List of all objects holding references to a given Query-Policy.

Name

String

The Relative Distinguished Name (RDN) of an object. An RDN is the relative portion of a distinguished name (DN), which uniquely identifies an LDAP object.

ReplPropertyMetaData

String

Tracks internal replication state information for DS objects.Information here can be extracted in public form through the public API DsReplicaGetInfo().Present on all DS objects.

ReplUpToDateVector

String

Tracks internal replication state information for an entire NC.Information here can be extracted in public form through the API DsReplicaGetInfo().Present on all NC root objects.

DirectReports

String

Contains the list of users that directly report to the user. The users listed as reports are those that have the property manager property set to this user. Each item in the list is a linked reference to the object that represents the user.

RepsFrom

String

Lists the servers from which the directory will accept changes for the defined naming context.

RepsTo

String

Lists the servers that the directory will notify of changes and servers to which the directory will send changes on Request for the defined naming context.

Revision

String

The revision level for a security descriptor or other change. Only used in the sam-server and ds-ui-settings objects.

SDRightsEffective

String

This constructed attribute returns a single DWORD value that can have up to three bits set:

ServerReferenceBL

String

Found in the domain naming context. The distinguished name of a computer under the sites folder.

ShowInAdvancedViewOnly

String

TRUE if this attribute is to be visible in the Advanced mode of the UI.

SiteObjectBL

String

The list of distinguished names for subnets that belong to this site.

StructuralObjectClass

String

This constructed attribute stores a list of classes contained in a class hierarchy, including abstract classes. This list does contain dynamically linked auxiliary classes.

SubRefs

String

List of subordinate references of a Naming Context.

SubSchemaSubEntry

String

The distinguished name for the location of the subschema object where a class or attribute is defined.

SystemFlags

String

An integer value that contains flags that define additional properties of the class.See Remarks.

UnixUserPassword

String

Contains a user password that is compatible with a UNIX system.

UserPassword

String

The user's password in UTF-8 format. This is a write-only attribute.

USNChanged

String

The update sequence number (USN) assigned by the local directory for the latest change, including creation. See also , USN-Created.

USNCreated

String

The update sequence number (USN) assigned at object creation. See also, USN-Changed.

USNDSALastObjRemoved

String

Contains the update sequence number (USN) for the last system object that was removed from a server.

USNIntersite

String

The update sequence number (USN) for inter-site replication.

USNLastObjRem

String

Contains the update sequence number (USN) for the last non-system object that was removed from a server.

USNSource

String

Value of the USN-Changed attribute of the object from the remote directory that replicated the change to the local server.

WbemPath

String

References to objects in other ADSI namespaces.

WellKnownObjects

String

This attribute contains a list of well-known object containers by GUID and distinguished name. The well-known objects are system containers. This information is used to retrieve an object after it has been moved by using just the GUID and the domain name. Whenever the object is moved, the system automatically updates the Distinguished Name portion of the Well-Known-Objects values that referred to the object.The file Ntdsapi.h contains the following definitions, which can be used to retrieve an object (the GUIDs that are associated to these objects are contained in Ntdsapi.h):

WhenChanged

Datetime

The date when this object was last changed. This value is not replicated and exists in the global catalog.

WhenCreated

Datetime

The date when this object was created. This value is replicated and is in the global catalog.

WWWHomePage

String

A web page that is the primary landing page of a website.

Url

String

A list of alternate webpages.

Table 4: PrintQueue

PrintQueue

Name

Type

Description

Id

[KEY]

String

Combined index and DN. Multiple indices are only possible when a column is set to SplitDataByRow.

DN

String

The full distinguished name.

RDN

String

The relative distinguished name.

BaseDN

String

The base distinguished name.

InstanceType

String

A bitfield that dictates how the object is instantiated on a particular server. The value of this attribute can differ on different replicas even if the replicas are in sync.

NTSecurityDescriptor

String

The Windows NT security descriptor for the schema object. A security descriptor is a data structure that contains security information about an object, such as the ownership and permissions of the object.

ObjectCategory

String

An object class name used to group objects of this or derived classes.

ObjectClass

String

The list of classes from which this class is derived.

PrinterName

String

The display name of an attached printer.

ServerName

String

The name of a server.

ShortServerName

String

Pre-Windows 2000 compatible server name for print servers.

UNCName

String

The universal naming convention name for shared volumes and printers.

AdminDescription

String

The description displayed on admin screens.

AdminDisplayName

String

The name to be displayed on admin screens.

AllowedAttributes

String

Attributes that will be permitted to be assigned to a class.

AllowedAttributesEffective

String

A list of attributes that can be modified on the object.

AllowedChildClasses

String

Classes that can be contained by a class.

AllowedChildClassesEffective

String

A list of classes that can be modified.

AssetNumber

String

The tracking number for the object.

BridgeheadServerListBL

String

The list of servers that are bridgeheads for replication.

BytesPerMinute

String

Printer data transfer rate.

CanonicalName

String

The name of the object in canonical format. myserver2.fabrikam.com/users/jeffsmith is an example of a distinguished name in canonical format.This is a constructed attribute. The results returned are identical to those returned by the following Active Directory function: DsCrackNames(NULL, DS_NAME_FLAG_SYNTACTICAL_ONLY, DS_FQDN_1779_NAME, DS_CANONICAL_NAME, ...).

Cn

String

The name that represents an object. Used to perform searches.

CreateTimeStamp

Datetime

The date when this object was created. This value isreplicated.

DefaultPriority

String

The default priority (of a process, print job, and so on).

Description

String

Contains the description to display for an object. This value is restricted as single-valued for backward compatibility in some cases but is allowed to be multi-valued in others. See Remarks.

DisplayName

String

The display name for an object. This is usually the combination of the users first name, middle initial, and last name.

DisplayNamePrintable

String

The printable display name for an object. The printable display name is usually the combination of the user's first name, middle initial, and last name.

DriverName

String

The device driver name.

DriverVersion

String

The Version number of device driver.

DSASignature

String

The DSA-Signature of an object is the Invocation-ID of the last directory to modify the object.

DSCorePropagationData

String

The DS-Core-Propagation-Data attribute is for internal use only.

ExtensionName

String

The name of a property page used to extend the UI of a directory object.

Flags

String

To be used by the object to store bit information.

FromEntry

String

This is a constructed attribute that is TRUE if the object is writable and FALSE if it is read-only, for example, a GC replica instance.

FrsComputerReferenceBL

String

Reference to replica sets to which this computer belongs.

FRSMemberReferenceBL

String

Reference to subscriber objects for this member.

FSMORoleOwner

String

Flexible Single-Master Operation: The distinguished name of the DC where the schema can be modified.

IsCriticalSystemObject

String

If TRUE,the object hosting this attribute must be replicated during installation of a new replica.

IsDeleted

String

If TRUE, this object has been marked for deletion and cannot be instantiated. After the tombstone period has expired, it will be removed from the system.

MemberOf

String

The distinguished name of the groups to which this object belongs.

IsPrivilegeHolder

String

Backward link to privileges held by a given principal.

Keywords

String

A list of keywords that can be used to locate a given connection point.

LastKnownParent

String

The Distinguished Name (DN) of the last known parent of an orphaned object.

Location

String

The user's location, such as office number.

ManagedBy

String

The distinguished name of the user that is assigned to manage this object.

ManagedObjects

String

Contains the list of objects that are managed by the user. The objects listed are those that have the property managedBy property set to this user. Each item in the list is a linked reference to the managed object.

MasteredBy

String

Backward link for Has-Master-NCs attribute. The distinguished name for its NTDS Settings objects.

ModifyTimeStamp

Datetime

A computed attribute that represents the date when this object was last changed. This value is not replicated.

MS-DS-ConsistencyChildCount

String

This attribute is used to check consistency between the directory and another object, database, or application, by comparing a count of child objects.

MS-DS-ConsistencyGuid

String

This attribute is used to check consistency between the directory and another object, database, or application, by comparing GUIDs.

NetbootSCPBL

String

A list of service connection points that reference this NetBoot server.

NonSecurityMemberBL

String

List of nonsecurity-members for an Exchange distribution list.

DistinguishedName

String

Same as the Distinguished Name for an object. Used by Exchange.

ObjectGUID

String

The unique identifier for an object.

ObjectVersion

String

This can be used to store a version number for the object.

OperatingSystem

String

The Operating System name, for example, Windows Vista Enterprise.

OperatingSystemHotfix

String

The hotfix level of the operating system.

OperatingSystemServicePack

String

The operating system service pack ID string (for example, SP3).

OperatingSystemVersion

String

The operating system version string, for example, 4.0.

OtherWellKnownObjects

String

Contains a list of containers by GUID and Distinguished Name. This permits retrieving an object after it has been moved by using just the GUID and the domain name. Whenever the object is moved, the system automatically updates the Distinguished Name.

PartialAttributeDeletionList

String

Tracks the internal replication state of partial replicas (that is, on GCs).Attribute of the partial replica NC object. Used when the GC is in the process of removing attributes from the objects in its partial replica NCs.

PartialAttributeSet

String

Tracks the internal replication state of partial replicas (that is, on GCs).Attribute of the partial replica NC object. Defines the set of attributes present on a particular partial replica NC.

PhysicalLocationObject

String

Used to map a device (for example, a printer, computer, and so on) to a physical location.

PortName

String

List of port names. For example, for printer ports or comm ports.

PossibleInferiors

String

The list of objects that this object can contain.

PrintAttributes

String

A bitmask of printer attributes.

PrintBinNames

String

A list of printer bin names.

PrintCollate

String

TRUE if a printer has collating bins.

PrintColor

String

TRUE if a printer can print in color.

PrintDuplexSupported

String

Indicates the type of duplex support a printer has.

PrintEndTime

String

The time a print queue stops servicing jobs.

PrintFormName

String

The name of the currently loaded form.

PrintKeepPrintedJobs

String

TRUE if printed jobs are kept.

PrintLanguage

String

The supported page description language (for example, PostScript, PCL).

PrintMACAddress

String

The user-supplied MAC address.

PrintMaxCopies

String

The maximum number of copies a device can print.

PrintMaxResolutionSupported

String

The maximum printer resolution.

PrintMaxXExtent

String

The maximum horizontal print region.

PrintMaxYExtent

String

The maximum vertical print region.

PrintMediaReady

String

A list of available media for a printer.

PrintMediaSupported

String

A list of media supported by a printer.

PrintMemory

String

The amount of memory installed in a printer.

PrintMinXExtent

String

The minimum horizontal print region.

PrintMinYExtent

String

The minimum vertical print region.

PrintNetworkAddress

String

The user-supplied network address.

PrintNotify

String

A user-supplied string that specifies the notification contact.

PrintNumberUp

String

The number of page images per sheet.

PrintOrientationsSupported

String

The page rotation for landscape printing.

PrintOwner

String

A user-supplied owner string.

PrintPagesPerMinute

String

Driver-supplied print rate in pages per minute.

PrintRate

String

Driver-supplied print rate.

PrintRateUnit

String

Driver-supplied print rate unit.

PrintSeparatorFile

String

The file path of the printer separator page.

PrintShareName

String

The printer's share name.

PrintSpooling

String

A string that represents the type of printer spooling.

PrintStaplingSupported

String

TRUE if the printer supports stapling. Supplied by the driver.

PrintStartTime

String

The time a print queue begins servicing jobs.

PrintStatus

String

Status from the print spooler. Currently unused.

Priority

String

The current priority (of a process, print job, and so on).

ProxiedObjectName

String

This attribute is used internally by Active Directory to help track interdomain moves.

ProxyAddresses

String

A proxy address is the address by which a Microsoft Exchange Server recipient object is recognized in a foreign mail system. Proxy addresses are required for all recipient objects, such as custom recipients and distribution lists.

QueryPolicyBL

String

List of all objects holding references to a given Query-Policy.

Name

String

The Relative Distinguished Name (RDN) of an object. An RDN is the relative portion of a distinguished name (DN), which uniquely identifies an LDAP object.

ReplPropertyMetaData

String

Tracks internal replication state information for DS objects.Information here can be extracted in public form through the public API DsReplicaGetInfo().Present on all DS objects.

ReplUpToDateVector

String

Tracks internal replication state information for an entire NC.Information here can be extracted in public form through the API DsReplicaGetInfo().Present on all NC root objects.

DirectReports

String

Contains the list of users that directly report to the user. The users listed as reports are those that have the property manager property set to this user. Each item in the list is a linked reference to the object that represents the user.

RepsFrom

String

Lists the servers from which the directory will accept changes for the defined naming context.

RepsTo

String

Lists the servers that the directory will notify of changes and servers to which the directory will send changes on Request for the defined naming context.

Revision

String

The revision level for a security descriptor or other change. Only used in the sam-server and ds-ui-settings objects.

SDRightsEffective

String

This constructed attribute returns a single DWORD value that can have up to three bits set:

ServerReferenceBL

String

Found in the domain naming context. The distinguished name of a computer under the sites folder.

ShowInAdvancedViewOnly

String

TRUE if this attribute is to be visible in the Advanced mode of the UI.

SiteObjectBL

String

The list of distinguished names for subnets that belong to this site.

SubRefs

String

List of subordinate references of a Naming Context.

SubSchemaSubEntry

String

The distinguished name for the location of the subschema object where a class or attribute is defined.

SystemFlags

String

An integer value that contains flags that define additional properties of the class.See Remarks.

USNChanged

String

The update sequence number (USN) assigned by the local directory for the latest change, including creation. See also , USN-Created.

USNCreated

String

The update sequence number (USN) assigned at object creation. See also, USN-Changed.

USNDSALastObjRemoved

String

Contains the update sequence number (USN) for the last system object that was removed from a server.

USNIntersite

String

The update sequence number (USN) for inter-site replication.

USNLastObjRem

String

Contains the update sequence number (USN) for the last non-system object that was removed from a server.

USNSource

String

Value of the USN-Changed attribute of the object from the remote directory that replicated the change to the local server.

VersionNumber

String

A general purpose version number.

WbemPath

String

References to objects in other ADSI namespaces.

WellKnownObjects

String

This attribute contains a list of well-known object containers by GUID and distinguished name. The well-known objects are system containers. This information is used to retrieve an object after it has been moved by using just the GUID and the domain name. Whenever the object is moved, the system automatically updates the Distinguished Name portion of the Well-Known-Objects values that referred to the object.The file Ntdsapi.h contains the following definitions, which can be used to retrieve an object (the GUIDs that are associated to these objects are contained in Ntdsapi.h):

WhenChanged

Datetime

The date when this object was last changed. This value is not replicated and exists in the global catalog.

WhenCreated

Datetime

The date when this object was created. This value is replicated and is in the global catalog.

WWWHomePage

String

A web page that is the primary landing page of a website.

Url

String

A list of alternate webpages.