2.366 Attribute tokenGroups

  • Article

This computed attribute contains the list of SIDs due to a transitive group membership expansion operation on a given user or computer. Token groups cannot be retrieved if no global catalog is present to retrieve the transitive reverse memberships.

 cn: Token-Groups
 ldapDisplayName: tokenGroups
 attributeId: 1.2.840.113556.1.4.1301
 attributeSyntax: 2.5.5.17
 omSyntax: 4
 isSingleValued: FALSE
 schemaIdGuid: b7c69e6d-2cc7-11d2-854e-00a0c983f608
 systemOnly: FALSE
 searchFlags: 0
 attributeSecurityGuid: 037088f8-0ae1-11d2-b422-00a0c968f939
 systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED | 
  FLAG_DOMAIN_DISALLOW_RENAME

Version-Specific Behavior: First implemented on Active Directory Application Mode (ADAM) and Windows Server 2008 operating system.