In Active Directory object classes fall into the following three categories: structural, abstract, and auxiliary. The Object-Class-Category attribute specifies the category of the object: 1 for structural, 2 for abstract, and 3 for auxiliary.
Attribute property | Value | Description |
---|---|---|
adminDisplayName | Object-Class-Category | Display name of this object for use in directory service administrative tools. |
adminDescription | Object-Class-Category | Description of this object for use in directory service administrative tools. |
cn | Object-Class-Category | Common name. |
lDAPDisplayName | objectClassCategory | The name used by LDAP clients to refer to the object's class. |
attributeID | 1.2.840.113556.1.2.370 | A unique OID that identifies the attribute. |
objectClass | Attribute-Schema | The class of which this object is an instance. |
objectCategory | Attribute-Schema | Reference to an object class or one of its superclasses, which is used when searching for this object. |
schemaIDGUID | {BF9679E6-0DE6-11D0-A285-00AA003049E2} | A GUID that uniquely identifies this object. You can use this string value in an ACE to control access to objects of this object. |
attributeSyntax | 2.5.5.9 | An OID of a syntax. The combination of the attributeSyntax and oMSyntax properties determines the syntax of an attribute. |
oMSyntax | 10 | Syntax of this attribute as defined by the XAPIA XOM (X/Open Object Model) specification. |
isSingleValued | TRUE | TRUE means that the attribute has a single value, FALSE means that the attribute can have multiple values. |
mAPIID | 33014 | An integer by which MAPI clients identify this attribute. |
rangeUpper | 3 | Upper bounds of the value range for this attribute. |
attributeSecurityGUID | -- not set -- | An optional GUID that identifies the attribute as a member of an attribute set(also known as a property set). |
showInAdvancedViewOnly | TRUE | TRUE means that the object will apear in the Advanced View of the Users and Computers snap-in only, but not in the Windows shell. FALSE means that the object will appear in Normal view of the Users and Computers snap-in and the Windows shell. |
systemFlags | 16 | An integer value that contains flags that define additional properties of this object. Category 1 classes or attributes have the 0x10 bit set by the system and cannot be set by users. They are shipped with Active Directory. For more information, see ADS_SYSETMFLAG_ENUM enumeration in ADSI Reference. |
systemOnly | TRUE | TRUE means that only Active Directory can modify the class of this object. FALSE means users can make the modification as well. |