ms-DS-Allowed-DNS-Suffixes attribute

The list of allowed suffixes for the dNSHostName attribute in computer objects.

Entry	Value
CN	ms-DS-Allowed-DNS-Suffixes
Ldap-Display-Name	msDS-AllowedDNSSuffixes
Size	-
Update Privilege	Domain administrator
Update Frequency	-
Attribute-Id	1.2.840.113556.1.4.1710
System-Id-Guid	8469441b-9ac4-4e45-8205-bd219dbf672d
Syntax	String(Unicode)

Implementations

• Windows Server 2003
• ADAM
• Windows Server 2003 R2
• Windows Server 2008
• Windows Server 2008 R2
• Windows Server 2012

Windows Server 2003

Entry	Value
Link-Id	-
MAPI-Id	-
System-Only	False
Is-Single-Valued	False
Is Indexed	False
In Global Catalog	False
NT-Security-Descriptor	O:BAG:BAD:S:
Range-Lower	0
Range-Upper	2048
Search-Flags	0x00000000
System-Flags	0x00000010
Classes used in	Domain-DNS

ADAM

Entry	Value
Link-Id	-
MAPI-Id	-
System-Only	False
Is-Single-Valued	False
Is Indexed	False
In Global Catalog	False
NT-Security-Descriptor	O:BAG:BAD:S:
Range-Lower	0
Range-Upper	2048
Search-Flags	0x00000000
System-Flags	0x00000010
Classes used in	Domain-DNS

Windows Server 2003 R2

Entry	Value
Link-Id	-
MAPI-Id	-
System-Only	False
Is-Single-Valued	False
Is Indexed	False
In Global Catalog	False
NT-Security-Descriptor	O:BAG:BAD:S:
Range-Lower	0
Range-Upper	2048
Search-Flags	0x00000000
System-Flags	0x00000010
Classes used in	Domain-DNS

Windows Server 2008

Entry	Value
Link-Id	-
MAPI-Id	-
System-Only	False
Is-Single-Valued	False
Is Indexed	False
In Global Catalog	False
NT-Security-Descriptor	O:BAG:BAD:S:
Range-Lower	0
Range-Upper	2048
Search-Flags	0x00000000
System-Flags	0x00000010
Classes used in	Domain-DNS

Windows Server 2008 R2

Entry	Value
Link-Id	-
MAPI-Id	-
System-Only	False
Is-Single-Valued	False
Is Indexed	False
In Global Catalog	False
NT-Security-Descriptor	O:BAG:BAD:S:
Range-Lower	0
Range-Upper	2048
Search-Flags	0x00000000
System-Flags	0x00000010
Classes used in	Domain-DNS

Windows Server 2012

Entry	Value
Link-Id	-
MAPI-Id	-
System-Only	False
Is-Single-Valued	False
Is Indexed	False
In Global Catalog	False
NT-Security-Descriptor	O:BAG:BAD:S:
Range-Lower	0
Range-Upper	2048
Search-Flags	0x00000000
System-Flags	0x00000010
Classes used in	Domain-DNS