Well-Known-Objects attribute

This attribute contains a list of well-known object containers by GUID and distinguished name. The well-known objects are system containers. This information is used to retrieve an object after it has been moved by using just the GUID and the domain name. Whenever the object is moved, the system automatically updates the Distinguished Name portion of the Well-Known-Objects values that referred to the object. The file Ntdsapi.h contains the following definitions, which can be used to retrieve an object (the GUIDs that are associated to these objects are contained in Ntdsapi.h):

  • GUID_USERS_CONTAINER_W
  • GUID_COMPUTRS_CONTAINER_W
  • GUID_SYSTEMS_CONTAINER_W
  • GUID_DOMAIN_CONTROLLERS_CONTAINER_W
  • GUID_INFRASTRUCTURE_CONTAINER_W
  • GUID_DELETED_OBJECTS_CONTAINER_W
  • GUID_LOSTANDFOUND_CONTAINER_W
  • GUID_FOREIGNSECURITYPRINCIPALS_CONTAINER_W
  • GUID_PROGRAM_DATA_CONTAINER_W
  • GUID_MICROSOFT_PROGRAM_DATA_CONTAINER_W
  • GUID_NTDS_QUOTAS_CONTAINER_W
Entry Value
CN Well-Known-Objects
Ldap-Display-Name wellKnownObjects
Size -
Update Privilege This value is set by the system.
Update Frequency Whenever one of the system containers is moved.
Attribute-Id 1.2.840.113556.1.4.618
System-Id-Guid 05308983-7688-11d1-aded-00c04fd8d5cd
Syntax Object(DN-Binary)

Implementations

Windows 2000 Server

Entry Value
Link-Id -
MAPI-Id -
System-Only True
Is-Single-Valued False
Is Indexed False
In Global Catalog True
NT-Security-Descriptor O:BAG:BAD:S:
Range-Lower -
Range-Upper -
Search-Flags 0x00000000
System-Flags 0x00000012
Classes used in Top

Windows Server 2003

Entry Value
Link-Id -
MAPI-Id -
System-Only True
Is-Single-Valued False
Is Indexed False
In Global Catalog True
NT-Security-Descriptor O:BAG:BAD:S:
Range-Lower 16
Range-Upper 16
Search-Flags 0x00000000
System-Flags 0x00000012
Classes used in Top

ADAM

Entry Value
Link-Id -
MAPI-Id -
System-Only True
Is-Single-Valued False
Is Indexed False
In Global Catalog True
NT-Security-Descriptor O:BAG:BAD:S:
Range-Lower 16
Range-Upper 16
Search-Flags 0x00000000
System-Flags 0x00000012
Classes used in Top

Windows Server 2003 R2

Entry Value
Link-Id -
MAPI-Id -
System-Only True
Is-Single-Valued False
Is Indexed False
In Global Catalog True
NT-Security-Descriptor O:BAG:BAD:S:
Range-Lower 16
Range-Upper 16
Search-Flags 0x00000000
System-Flags 0x00000012
Classes used in Top

Windows Server 2008

Entry Value
Link-Id -
MAPI-Id -
System-Only True
Is-Single-Valued False
Is Indexed False
In Global Catalog True
NT-Security-Descriptor O:BAG:BAD:S:
Range-Lower 16
Range-Upper 16
Search-Flags 0x00000000
System-Flags 0x00000012
Classes used in Top

Windows Server 2008 R2

Entry Value
Link-Id -
MAPI-Id -
System-Only True
Is-Single-Valued False
Is Indexed False
In Global Catalog True
NT-Security-Descriptor O:BAG:BAD:S:
Range-Lower 16
Range-Upper 16
Search-Flags 0x00000000
System-Flags 0x00000012
Classes used in Top

Windows Server 2012

Entry Value
Link-Id -
MAPI-Id -
System-Only True
Is-Single-Valued False
Is Indexed False
In Global Catalog True
NT-Security-Descriptor O:BAG:BAD:S:
Range-Lower 16
Range-Upper 16
Search-Flags 0x00000000
System-Flags 0x00000012
Classes used in Top