2.2.12 Group Type Flags

  • Article

Constants for defining group type. These constants define the values that are used in the groupType attribute.

Symbolic name

Value

GROUP_TYPE_BUILTIN_LOCAL_GROUP

0x00000001

GROUP_TYPE_ACCOUNT_GROUP

0x00000002

GROUP_TYPE_RESOURCE_GROUP

0x00000004

GROUP_TYPE_UNIVERSAL_GROUP

0x00000008

GROUP_TYPE_APP_BASIC_GROUP

0x00000010

GROUP_TYPE_APP_QUERY_GROUP

0x00000020

GROUP_TYPE_SECURITY_ENABLED

0x80000000

GROUP_TYPE_BUILTIN_LOCAL_GROUP: Specifies a group that is created by the system.

GROUP_TYPE_ACCOUNT_GROUP: Specifies a global group.

GROUP_TYPE_RESOURCE_GROUP: Specifies a domain local group.

GROUP_TYPE_UNIVERSAL_GROUP: Specifies a universal group.

GROUP_TYPE_APP_BASIC_GROUP: Groups of this type are not used by Active Directory. This constant is included in this document because the value of this constant is used by Active Directory in processing the groupType attribute (see section 3.1.1.5.4.2.2).

GROUP_TYPE_APP_QUERY_GROUP: Groups of this type are not used by Active Directory. This constant is included in this document because the value of this constant is used by Active Directory in processing the groupType attribute.

GROUP_TYPE_SECURITY_ENABLED: Specifies a security-enabled group.

The flag GROUP_TYPE_BUILTIN_LOCAL_GROUP is reserved for use by the system, and can be set in combination with other flags on system-created Builtin objects (see section 6.1.1.4.12). The flag GROUP_TYPE_BUILTIN_LOCAL_GROUP cannot be set by clients.

Otherwise, the flags GROUP_TYPE_ACCOUNT_GROUP, GROUP_TYPE_RESOURCE_GROUP, GROUP_TYPE_UNIVERSAL_GROUP, GROUP_TYPE_APP_BASIC_GROUP, and GROUP_TYPE_APP_QUERY_GROUP are mutually exclusive, and only one value MUST be set. The flag GROUP_TYPE_SECURITY_ENABLED can be combined using a bitwise OR with flags GROUP_TYPE_BUILTIN_LOCAL_GROUP, GROUP_TYPE_ACCOUNT_GROUP, GROUP_TYPE_RESOURCE_GROUP, and GROUP_TYPE_UNIVERSAL_GROUP.