Well-Known-Objects attribute
Article 12/14/2020
3 contributors
Feedback
In this article
This attribute contains a list of well-known object containers by GUID and distinguished name. The well-known objects are system containers. This information is used to retrieve an object after it has been moved by using just the GUID and the domain name. Whenever the object is moved, the system automatically updates the Distinguished Name portion of the Well-Known-Objects values that referred to the object. The file Ntdsapi.h contains the following definitions, which can be used to retrieve an object (the GUIDs that are associated to these objects are contained in Ntdsapi.h):
GUID_USERS_CONTAINER_W
GUID_COMPUTRS_CONTAINER_W
GUID_SYSTEMS_CONTAINER_W
GUID_DOMAIN_CONTROLLERS_CONTAINER_W
GUID_INFRASTRUCTURE_CONTAINER_W
GUID_DELETED_OBJECTS_CONTAINER_W
GUID_LOSTANDFOUND_CONTAINER_W
GUID_FOREIGNSECURITYPRINCIPALS_CONTAINER_W
GUID_PROGRAM_DATA_CONTAINER_W
GUID_MICROSOFT_PROGRAM_DATA_CONTAINER_W
GUID_NTDS_QUOTAS_CONTAINER_W
Entry
Value
CN
Well-Known-Objects
Ldap-Display-Name
wellKnownObjects
Size
-
Update Privilege
This value is set by the system.
Update Frequency
Whenever one of the system containers is moved.
Attribute-Id
1.2.840.113556.1.4.618
System-Id-Guid
05308983-7688-11d1-aded-00c04fd8d5cd
Syntax
Object(DN-Binary)
Implementations
Windows 2000 Server
Entry
Value
Link-Id
-
MAPI-Id
-
System-Only
True
Is-Single-Valued
False
Is Indexed
False
In Global Catalog
True
NT-Security-Descriptor
O:BAG:BAD:S:
Range-Lower
-
Range-Upper
-
Search-Flags
0x00000000
System-Flags
0x00000012
Classes used in
Top
Windows Server 2003
Entry
Value
Link-Id
-
MAPI-Id
-
System-Only
True
Is-Single-Valued
False
Is Indexed
False
In Global Catalog
True
NT-Security-Descriptor
O:BAG:BAD:S:
Range-Lower
16
Range-Upper
16
Search-Flags
0x00000000
System-Flags
0x00000012
Classes used in
Top
ADAM
Entry
Value
Link-Id
-
MAPI-Id
-
System-Only
True
Is-Single-Valued
False
Is Indexed
False
In Global Catalog
True
NT-Security-Descriptor
O:BAG:BAD:S:
Range-Lower
16
Range-Upper
16
Search-Flags
0x00000000
System-Flags
0x00000012
Classes used in
Top
Windows Server 2003 R2
Entry
Value
Link-Id
-
MAPI-Id
-
System-Only
True
Is-Single-Valued
False
Is Indexed
False
In Global Catalog
True
NT-Security-Descriptor
O:BAG:BAD:S:
Range-Lower
16
Range-Upper
16
Search-Flags
0x00000000
System-Flags
0x00000012
Classes used in
Top
Windows Server 2008
Entry
Value
Link-Id
-
MAPI-Id
-
System-Only
True
Is-Single-Valued
False
Is Indexed
False
In Global Catalog
True
NT-Security-Descriptor
O:BAG:BAD:S:
Range-Lower
16
Range-Upper
16
Search-Flags
0x00000000
System-Flags
0x00000012
Classes used in
Top
Windows Server 2008 R2
Entry
Value
Link-Id
-
MAPI-Id
-
System-Only
True
Is-Single-Valued
False
Is Indexed
False
In Global Catalog
True
NT-Security-Descriptor
O:BAG:BAD:S:
Range-Lower
16
Range-Upper
16
Search-Flags
0x00000000
System-Flags
0x00000012
Classes used in
Top
Windows Server 2012
Entry
Value
Link-Id
-
MAPI-Id
-
System-Only
True
Is-Single-Valued
False
Is Indexed
False
In Global Catalog
True
NT-Security-Descriptor
O:BAG:BAD:S:
Range-Lower
16
Range-Upper
16
Search-Flags
0x00000000
System-Flags
0x00000012
Classes used in
Top