2.311 Attribute tokenGroups

This attribute specifies a computed attribute that contains the list of SIDs due to a transitive group membership expansion operation on a given user or computer. Token groups cannot be retrieved if no global catalog is present to retrieve the transitive reverse memberships.

 cn: Token-Groups
 ldapDisplayName: tokenGroups
 attributeId: 1.2.840.113556.1.4.1301
 attributeSyntax: 2.5.5.17
 omSyntax: 4
 isSingleValued: FALSE
 schemaIdGuid: b7c69e6d-2cc7-11d2-854e-00a0c983f608
 systemOnly: FALSE
 searchFlags: 0
 attributeSecurityGuid: 037088f8-0ae1-11d2-b422-00a0c968f939
 systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED | 
  FLAG_DOMAIN_DISALLOW_RENAME
 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

Version-Specific Behavior: First implemented on Windows 2000 Server operating system.

The schemaFlagsEx attribute was added to this attribute definition in Windows Server 2008 operating system.