SAM-Account-Type attribute

This attribute contains information about every account type object. You can enumerate a list of account types or you can use the Display Information API to create a list. Because computers, normal user accounts, and trust accounts can also be enumerated as user objects, the values for these accounts must be a contiguous range.

The possible values for this attribute are the following:

  • SAM_DOMAIN_OBJECT 0x0
  • SAM_GROUP_OBJECT 0x10000000
  • SAM_NON_SECURITY_GROUP_OBJECT 0x10000001
  • SAM_ALIAS_OBJECT 0x20000000
  • SAM_NON_SECURITY_ALIAS_OBJECT 0x20000001
  • SAM_USER_OBJECT 0x30000000
  • SAM_NORMAL_USER_ACCOUNT 0x30000000
  • SAM_MACHINE_ACCOUNT 0x30000001
  • SAM_TRUST_ACCOUNT 0x30000002
  • SAM_APP_BASIC_GROUP 0x40000000
  • SAM_APP_QUERY_GROUP 0x40000001
  • SAM_ACCOUNT_TYPE_MAX 0x7fffffff
CN SAM-Account-Type
Ldap-Display-Name sAMAccountType
Size -
Update Privilege This value is set by the system.
Update Frequency This is set by the operating system when the object is created.
Attribute-Id 1.2.840.113556.1.4.302
System-Id-Guid 6e7b626c-64f2-11d0-afd2-00c04fd930c9
Syntax Enumeration

Implementations

Windows 2000 Server

Link-Id -
MAPI-Id -
System-Only False
Is-Single-Valued True
Is Indexed True
In Global Catalog True
NT-Security-Descriptor O:BAG:BAD:S:
Range-Lower -
Range-Upper -
Search-Flags 0x00000001
System-Flags 0x00000012
Classes used in Security-Principal

Windows Server 2003

Link-Id -
MAPI-Id -
System-Only False
Is-Single-Valued True
Is Indexed True
In Global Catalog True
NT-Security-Descriptor O:BAG:BAD:S:
Range-Lower -
Range-Upper -
Search-Flags 0x00000001
System-Flags 0x00000012
Classes used in Security-Principal

Windows Server 2003 R2

Link-Id -
MAPI-Id -
System-Only False
Is-Single-Valued True
Is Indexed True
In Global Catalog True
NT-Security-Descriptor O:BAG:BAD:S:
Range-Lower -
Range-Upper -
Search-Flags 0x00000001
System-Flags 0x00000012
Classes used in Security-Principal

Windows Server 2008

Link-Id -
MAPI-Id -
System-Only False
Is-Single-Valued True
Is Indexed True
In Global Catalog True
NT-Security-Descriptor O:BAG:BAD:S:
Range-Lower -
Range-Upper -
Search-Flags 0x00000001
System-Flags 0x00000012
Classes used in Security-Principal

Windows Server 2008 R2

Link-Id -
MAPI-Id -
System-Only False
Is-Single-Valued True
Is Indexed True
In Global Catalog True
NT-Security-Descriptor O:BAG:BAD:S:
Range-Lower -
Range-Upper -
Search-Flags 0x00000001
System-Flags 0x00000012
Classes used in Security-Principal

Windows Server 2012

Link-Id -
MAPI-Id -
System-Only False
Is-Single-Valued True
Is Indexed True
In Global Catalog True
NT-Security-Descriptor O:BAG:BAD:S:
Range-Lower -
Range-Upper -
Search-Flags 0x00000001
System-Flags 0x00000012
Classes used in Security-Principal