2.327 Attribute sDRightsEffective
This constructed attribute returns a single DWORD value that can have up to three bits set: OWNER_SECURITY_INFORMATION, DACL_SECURITY_INFORMATION, and SACL_SECURITY_INFORMATION. If a bit is set, then the user has write access to the corresponding part of the security descriptor.
Note: "Owner" means both owner and group.
-
cn: SD-Rights-Effective ldapDisplayName: sDRightsEffective attributeId: 1.2.840.113556.1.4.1304 attributeSyntax: 2.5.5.9 omSyntax: 2 isSingleValued: TRUE schemaIdGuid: c3dbafa6-33df-11d2-98b2-0000f87a57d4 systemOnly: FALSE searchFlags: 0 attributeSecurityGuid: 59ba2f42-79a2-11d0-9020-00c04fc2d3cf systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED | FLAG_DOMAIN_DISALLOW_RENAME
Version-Specific Behavior: First implemented on Active Directory Application Mode (ADAM) and Windows Server 2008 operating system.