Overview#

NTDSDSA is the ObjectClass Type that represents the Microsoft Active Directory Directory System Agent (DSA) process on the Domain Controller, as specified in MS-ADSC section 2.204.

Although Ldapwiki has seen Microsoft Documentation state: "Each DC in a forest has an nTDSDSA object in the config NC. See requirements in section 6.1.2.1. An nTDSDSA object has the following attributes: name: NTDS Settings"

We can find no direct reference to the NTDSSettings AttributeType.

The attributes of this object defined for FRS are:

• fRSRootPath: Attribute not used by FRS.

LDAP ObjectClass Definition#

The Microsoft Active Directory ObjectClass Type is defined as:

• OID: 1.2.840.113556.1.5.7000.47
• ObjectClass-Name: NTDSDSA
• SUP: organization, server
• SchemaIDGUID: f0f8ffab-1191-11d0-a060-00aa006c33ed
• RdnAttId: CN
• OMSyntax:
• systemOnly: TRUE
• defaultHidingValue: TRUE
• STRUCTURAL
• MUST:
• MAY:
  • msDS-EnabledFeature
  • msDS-IsUserCachableAtRodc
  • msDS-SiteName
  • msDS-isRODC
  • msDS-isGC
  • msDS-RevealedUsers
  • msDS-NeverRevealGroup
  • msDS-RevealOnDemandGroup
  • msDS-hasFullReplicaNCs
  • serverReference
  • msDS-RetiredReplNCSignatures
  • retiredReplDSASignatures
  • queryPolicyObject
  • options
  • networkAddress
  • msDS-ReplicationEpoch
  • msDS-HasInstantiatedNCs
  • msDS-hasMasterNCs
  • msDS-HasDomainNCs
  • msDS-Behavior-Version
  • managedBy
  • lastBackupRestorationTime
  • invocationId
  • hasPartialReplicaNCs
  • hasMasterNCs
  • fRSRootPath
  • dMDLocation
• Extended Flags:
  • X-ORIGIN: NDTS
• X-SYSTEMFLAGS: FLAG_SCHEMA_BASE_OBJECT
• X-SCHEMAFLAGSEx:
• X-SEARCH-FLAGS:

More Information#

There might be more information for this subject on one of the following:

• DefaultNamingContext
• LDAP policy in Active Directory

---

• [#1] - 2.3.1.4 NTDS Active Directory Service Agent (nTDSDSA) Object - based on information obtained 2020-02-02
• [#2] - 2.204 Class nTDSDSA - based on information obtained 2020-02-02