Appendix E: Active Directory Property Sets

Updated: December 5, 2005

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

This section contains all of the property sets defined in the Active Directory Schema.

Note
For descriptions of the individual member properties of each property set refer to the Active Directory schema. Follow the MSDN Library link on the Web Resources page at http://msdn2.microsoft.com/en-us/library/ms683990.aspx. To locate the Active Directory Schema section in the Platform Software Development Kit (SDK), click Networking and Directory Services.

The following property sets exist in the Windows 2000 Active Directory schema:

The following property sets were added in the Windows Server 2003 Active Directory schema:

The following table describes the fields used to describe the property-sets in this appendix.

Term	Description
Description	A description of the property set.
CN (Name)	Every object in Active Directory has a naming attribute from which its relative distinguished name is formed. The Naming Attribute for control Access Right objects is Common Name.
Display-Name	The Common Name of an object might not be descriptive enough for some users. Display Name is provided as a more descriptive name.
Rights-GUID	The unique ID for identifying a control access right.
Applies-To	Provides the name of the classes that this property set applies to. Includes the Schema ID GUID of the class in parentheses. For example, the PKI-Certificate-Template class (Schema ID GUID e5209ca2-3bba-11d2-90cc-00c04fd91ab1 ).
Property Set Members	This lists the set of attributes that belong to this property set.

Domain Password Information

The following table describes the Domain Password property sets.

Term	Description
Description	Property set containing all lockout and password age related attributes on user account
CN	Domain-Password
Display-Name	Domain Password & Lockout Policies
Rights-GUID	c7407360-20bf-11d0-a768-00aa006e0529
Applies-To	Domain (Schema ID GUID: 19195a5a-6da0-11d0-afd3-00c04fd930c9) Domain-DNS (Schema ID GUID: 19195a5b-6da0-11d0-afd3-00c04fd930c9)
Property Set Members	Lock-Out-Observation-Window Lockout-Duration Lockout-Threshold Max-Pwd-Age Min-Pwd-Age Min-Pwd-Length Pwd-History-Length Pwd-Properties

The following table describes the Email Information property sets.

Term	Description
Description	Property set containing user attributes that describe user e-mail related information
CN	Email-Information
Display-Name	Phone and Mail Options
Rights-GUID	E45795B2-9455-11d1-AEBD-0000F80367C1
Applies-To	Group (Schema ID GUID: bf967a9c-0de6-11d0-a285-00aa003049e2) inetOrgPerson (Schema ID GUID: 4828CC14-1437-45bc-9B07-AD6F015E5F28) User (Schema ID GUID: bf967aba-0de6-11d0-a285-00aa003049e2)
Property Set Members	This property does not have any members

The following table describes the General Information property sets.

Term	Description
Description	Property set containing a set of user attributes that constitute general user information
CN	General-Information
Display-Name	General Information
Rights-GUID	59ba2f42-79a2-11d0-9020-00c04fc2d3cf
Applies-To	inetOrgPerson (Schema ID GUID: 4828CC14-1437-45bc-9B07-AD6F015E5F28) User (Schema ID GUID: bf967aba-0de6-11d0-a285-00aa003049e2)
Property Set Members	Admin-Description Code-Page Country-Code Display-Name Object-Sid Primary-Group-ID SAM-Account-Name SAM-Account-Type SD-Rights-Effective Show-In-Advanced-View-Only SID-History uid User-Comment