3.1.1.5.2.7 crossRef Requirements

crossRef objects represent NCs within the Active Directory forest, as well as "external" (foreign) NCs. The relationship between the crossRef and the NC is represented by the nCName attribute on the crossRef. The value of this attribute is the DN of the corresponding NC. Each Active Directory NC has a corresponding crossRef object. A crossRef object can also represent an intention to create a new Active Directory NC with the specified DN.

The following requirements apply to crossRef objects:

  • The FLAG_CR_NTDS_NC bit is set in systemFlags if and only if the nCName represents an Active Directory NC.

  • The FLAG_CR_NTDS_DOMAIN bit is set in systemFlags if and only if the nCName represents a domain Active Directory NC.

  • The FLAG_CR_NTDS_NOT_GC_REPLICATED bit is set in systemFlags if and only if the nCName represents an Application Active Directory NC.

  • If the FLAG_CR_NTDS_NC bit is set in systemFlags and the Enabled attribute value is FALSE, then the crossRef represents an intention to create an Active Directory NC. Otherwise, it represents an Active Directory NC that is actually present.