Edit

ms-DS-Az-LDAP-Query attribute

  • Article

A string that defines the LDAP query (max length 4096) which determines the membership of a user object to the group.

Entry Value
CN ms-DS-Az-LDAP-Query
Ldap-Display-Name msDS-AzLDAPQuery
Size 4096 characters
Update Privilege AzRoles admin
Update Frequency During initialization or policy change.
Attribute-Id 1.2.840.113556.1.4.1792
System-Id-Guid 5e53368b-fc94-45c8-9d7d-daf31ee7112d
Syntax String(Unicode)

Implementations

Windows Server 2003

Entry Value
Link-Id -
MAPI-Id -
System-Only False
Is-Single-Valued True
Is Indexed False
In Global Catalog False
NT-Security-Descriptor O:BAG:BAD:S:
Range-Lower 0
Range-Upper 4096
Search-Flags 0x00000000
System-Flags 0x00000010
Classes used in Group

Windows Server 2003 R2

Entry Value
Link-Id -
MAPI-Id -
System-Only False
Is-Single-Valued True
Is Indexed False
In Global Catalog False
NT-Security-Descriptor O:BAG:BAD:S:
Range-Lower 0
Range-Upper 4096
Search-Flags 0x00000000
System-Flags 0x00000010
Classes used in Group

Windows Server 2008

Entry Value
Link-Id -
MAPI-Id -
System-Only False
Is-Single-Valued True
Is Indexed False
In Global Catalog False
NT-Security-Descriptor O:BAG:BAD:S:
Range-Lower 0
Range-Upper 4096
Search-Flags 0x00000000
System-Flags 0x00000010
Classes used in Group

Windows Server 2008 R2

Entry Value
Link-Id -
MAPI-Id -
System-Only False
Is-Single-Valued True
Is Indexed False
In Global Catalog False
NT-Security-Descriptor O:BAG:BAD:S:
Range-Lower 0
Range-Upper 4096
Search-Flags 0x00000000
System-Flags 0x00000010
Classes used in Group

Windows Server 2012

Entry Value
Link-Id -
MAPI-Id -
System-Only False
Is-Single-Valued True
Is Indexed False
In Global Catalog False
NT-Security-Descriptor O:BAG:BAD:S:
Range-Lower 0
Range-Upper 4096
Search-Flags 0x00000000
System-Flags 0x00000010
Classes used in Group