Share via

2.233 Attribute sDRightsEffective

  • Article

This attribute specifies a constructed attribute that returns a single DWORD value that can have up to three bits set: OWNER_SECURITY_INFORMATION, DACL_SECURITY_INFORMATION, and SACL_SECURITY_INFORMATION. If a bit is set, then the user has write access to the corresponding part of the security descriptor. Owner means both owner and group.

 cn: SD-Rights-Effective
 ldapDisplayName: sDRightsEffective
 attributeId: 1.2.840.113556.1.4.1304
 attributeSyntax: 2.5.5.9
 omSyntax: 2
 isSingleValued: TRUE
 schemaIdGuid: c3dbafa6-33df-11d2-98b2-0000f87a57d4
 systemOnly: FALSE
 searchFlags: 0
 attributeSecurityGuid: 59ba2f42-79a2-11d0-9020-00c04fc2d3cf
 systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED | 
  FLAG_DOMAIN_DISALLOW_RENAME
 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

Version-Specific Behavior: First implemented on Windows 2000 Server operating system.

The schemaFlagsEx attribute was added to this attribute definition in Windows Server 2008 operating system.