ms-DS-GroupMSAMembership attribute

This attribute is used for access checks to determine if a requestor has permission to retrieve the password for a group MSA.

Entry Value
CN ms-DS-GroupMSAMembership
Ldap-Display-Name msDS-GroupMSAMembership
Size -
Update Privilege -
Update Frequency -
Attribute-Id 1.2.840.113556.1.4.2200
System-Id-Guid 888eedd6-ce04-df40-b462-b8a50e41ba38
Syntax String(NT-Sec-Desc)


Windows Server 2012

Entry Value
Link-Id -
System-Only False
Is-Single-Valued True
Is Indexed False
In Global Catalog False
NT-Security-Descriptor O:BAG:BAD:S:
Range-Lower -
Range-Upper -
Search-Flags 0x00000000
System-Flags 0x00000010
Classes used in ms-DS-Group-Managed-Service-Account