Share via

3.4.4.2.3.1.17 ActiveDirectoryDomain/SystemsContainer

  • Article

The SystemsContainer element contains the distinguished name of the System Container ([MS-ADTS] section 6.1.1.4.11) directory object of the domain.

 <xs:element name="SystemsContainer" nillable="true" type="xs:string" />

The SystemsContainer element is populated from the DN portion ([MS-ADTS] section 6.1.1.4) of one of the values of the multivalued attribute domainDNS!wellKnownObjects on the domain NC root object that meets the following criteria:

  • The Binary portion of the value is equal to GUID_SYSTEMS_CONTAINER_W. See [MS-ADTS] section 6.1.1.4.

If multiple values satisfy the above requirements, then only one of the values MUST be chosen, but any of the values MAY be chosen<39> to populate the element. If no values satisfy the above requirements, the server returns a null ActiveDirectoryDomain/SystemsContainer element. If the domainDNS!wellKnownObjects attribute is not present or cannot be read due to the client lacking access rights to read the attribute, the server returns the SOAP fault described in section 3.4.4.2.8.1.