2.327 Attribute sDRightsEffective

This constructed attribute returns a single DWORD value that can have up to three bits set: OWNER_SECURITY_INFORMATION, DACL_SECURITY_INFORMATION, and SACL_SECURITY_INFORMATION. If a bit is set, then the user has write access to the corresponding part of the security descriptor.

Note: "Owner" means both owner and group.

 cn: SD-Rights-Effective
 ldapDisplayName: sDRightsEffective
 attributeId: 1.2.840.113556.1.4.1304
 attributeSyntax: 2.5.5.9
 omSyntax: 2
 isSingleValued: TRUE
 schemaIdGuid: c3dbafa6-33df-11d2-98b2-0000f87a57d4
 systemOnly: FALSE
 searchFlags: 0
 attributeSecurityGuid: 59ba2f42-79a2-11d0-9020-00c04fc2d3cf
 systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED | 
  FLAG_DOMAIN_DISALLOW_RENAME

Version-Specific Behavior: First implemented on Active Directory Application Mode (ADAM) and Windows Server 2008 operating system.