2.2.1.17 AD ACCESS_MASK

  • Artigo

msdn link

These access mask values are specific to ACEs that apply to Active Directory objects. More information about these values is specified in [MS-ADTS] section 5.1.3.

Constant/value

Description

ACTRL_DS_LIST

0x00000004

Indicates the ability to read the children of an object in Active Directory.

ACTRL_DS_READ_PROP

0x00000010

Indicates the access control to read a property in Active Directory.

ACTRL_DS_WRITE_PROP

0x00000020

Indicates the access control to write a property in Active Directory.

ACTRL_DS_DELETE_TREE

0x00000040

Indicates the ability to delete a tree of objects.

ACTRL_DS_CONTROL_ACCESS

0x00000100

Indicates the ability to perform an operation on an object as indicated by the ObjectGuid field in the ACE. See value CR in [MS-ADTS] section 5.1.3.2.