2.2.8 LDAP Extended DN Control

  • Article

The presence of this LDAP control, with OID 1.2.840.113556.1.4.529, in an LDAP Search request instructs AD DS to return each distinguished name (DN) (4) in an extended format containing the values of the "objectGUID" and "objectSid" attributes.

This extension is defined for AD DS in the Active Directory Technical Specification [MS-ADTS] section 3.1.1.3.4.1.5 ("LDAP_SERVER_EXTENDED_DN_OID").