MS-DS-All-Users-Trust-Quota attribute

Used to enforce a combined users quota on the total number of Trusted-Domain objects created by using the new control access right, Create-Inbound-Forest-Trust.

Entry	Value
CN	MS-DS-All-Users-Trust-Quota
Ldap-Display-Name	msDS-AllUsersTrustQuota
Size	-
Update Privilege	Domain administrator
Update Frequency	At forest creation and rarely after that.
Attribute-Id	1.2.840.113556.1.4.1789
System-Id-Guid	d3aa4a5c-4e03-4810-97aa-2b339e7a434b
Syntax	Enumeration

Implementations

• Windows Server 2003
• Windows Server 2003 R2
• Windows Server 2008
• Windows Server 2008 R2
• Windows Server 2012

Windows Server 2003

Entry	Value
Link-Id	-
MAPI-Id	-
System-Only	False
Is-Single-Valued	True
Is Indexed	False
In Global Catalog	False
NT-Security-Descriptor	O:BAG:BAD:S:
Range-Lower	-
Range-Upper	-
Search-Flags	0x00000000
System-Flags	0x00000010
Classes used in	Sam-Domain

Windows Server 2003 R2

Entry	Value
Link-Id	-
MAPI-Id	-
System-Only	False
Is-Single-Valued	True
Is Indexed	False
In Global Catalog	False
NT-Security-Descriptor	O:BAG:BAD:S:
Range-Lower	-
Range-Upper	-
Search-Flags	0x00000000
System-Flags	0x00000010
Classes used in	Sam-Domain

Windows Server 2008

Entry	Value
Link-Id	-
MAPI-Id	-
System-Only	False
Is-Single-Valued	True
Is Indexed	False
In Global Catalog	False
NT-Security-Descriptor	O:BAG:BAD:S:
Range-Lower	-
Range-Upper	-
Search-Flags	0x00000000
System-Flags	0x00000010
Classes used in	Sam-Domain

Windows Server 2008 R2

Entry	Value
Link-Id	-
MAPI-Id	-
System-Only	False
Is-Single-Valued	True
Is Indexed	False
In Global Catalog	False
NT-Security-Descriptor	O:BAG:BAD:S:
Range-Lower	-
Range-Upper	-
Search-Flags	0x00000000
System-Flags	0x00000010
Classes used in	Sam-Domain

Windows Server 2012

Entry	Value
Link-Id	-
MAPI-Id	-
System-Only	False
Is-Single-Valued	True
Is Indexed	False
In Global Catalog	False
NT-Security-Descriptor	O:BAG:BAD:S:
Range-Lower	-
Range-Upper	-
Search-Flags	0x00000000
System-Flags	0x00000010
Classes used in	Sam-Domain