DSOP_UPLEVEL_FILTER_FLAGS structure (objsel.h)

Article
10/05/2021

The DSOP_UPLEVEL_FILTER_FLAGS structure contains flags that indicate the filters to use for an up-level scope. An up-level scope is a scope that supports the ADSI LDAP provider. For more information, see ADSI LDAP Provider. This structure is contained in the DSOP_FILTER_FLAGS structure when calling IDsObjectPicker::Initialize.

Syntax

typedef struct _DSOP_UPLEVEL_FILTER_FLAGS {
  ULONG flBothModes;
  ULONG flMixedModeOnly;
  ULONG flNativeModeOnly;
} DSOP_UPLEVEL_FILTER_FLAGS;

Members

flBothModes

Filter flags to use for an up-level scope, regardless of whether it is a mixed or native mode domain. This member can be a combination of one or more of the following flags.

DSOP_FILTER_INCLUDE_ADVANCED_VIEW (1 (0x1))

Includes objects that have the showInAdvancedViewOnly attribute set to TRUE.

DSOP_FILTER_USERS (2 (0x2))

Includes user objects.

DSOP_FILTER_BUILTIN_GROUPS (4 (0x4))

Includes built-in group objects. Built-in groups are group objects with a groupType value that contain the GROUP_TYPE_BUILTIN_LOCAL_GROUP (0x00000001), GROUP_TYPE_RESOURCE_GROUP (0x00000004), and GROUP_TYPE_SECURITY_ENABLED (0x80000000) flags.

DSOP_FILTER_WELL_KNOWN_PRINCIPALS (8 (0x8))

Includes the contents of the Well Known Security Principals container.

DSOP_FILTER_UNIVERSAL_GROUPS_DL (16 (0x10))

Includes distribution group objects with universal scope.

DSOP_FILTER_UNIVERSAL_GROUPS_SE (32 (0x20))

Includes security groups with universal scope. This flag has no effect in a mixed mode domain because universal security groups do not exist in mixed mode domains.

DSOP_FILTER_GLOBAL_GROUPS_DL (64 (0x40))

Includes distribution group objects with global scope.

DSOP_FILTER_GLOBAL_GROUPS_SE (128 (0x80))

Includes security group objects with global scope.

DSOP_FILTER_DOMAIN_LOCAL_GROUPS_DL (256 (0x100))

Includes distribution group objects with domain local scope.

DSOP_FILTER_DOMAIN_LOCAL_GROUPS_SE (512 (0x200))

Includes security group objects with domain local scope.

DSOP_FILTER_CONTACTS (1024 (0x400))

Includes contact objects.

DSOP_FILTER_COMPUTERS (2048 (0x800))

Includes computer objects.

DSOP_FILTER_SERVICE_ACCOUNTS (0x00001000)

Includes managed service account and group managed service account objects.

DSOP_FILTER_PASSWORDSETTINGS_OBJECTS (0x00002000)

Includes password settings objects.

flMixedModeOnly

Filter flags to use for an up-level domain in mixed mode. Mixed mode refers to an up-level domain that may have Windows NT 4.0 Backup Domain Controllers present. This member can be a combination of the flags listed in the flBothModes flags. The DSOP_FILTER_UNIVERSAL_GROUPS_SE flag has no effect in a mixed-mode domain because universal security groups do not exist in mixed mode domains.

flNativeModeOnly

Filter flags to use for an up-level domain in native mode. Native mode refers to an up-level domain in which an administrator has enabled native mode operation. This member can be a combination of the flags listed in the flBothModes flags.

Remarks

For more information about domain modes, see Detecting the Operation Mode of a Domain.

For more information about group types and scope, see Group Objects.

Requirements

Requirement	Value
Minimum supported client	Windows Vista
Minimum supported server	Windows Server 2008
Header	objsel.h