Overview[1]#
SystemFlags within Microsoft Active Directory An integer value that contains flags that define additional properties of the class.Attribute Definition Microsoft Active Directory#
The SystemFlags AttributeTypes is defined as:- OID of 1.2.840.113556.1.4.375
- NAME: SystemFlags
- DESC: An integer value that contains flags that define additional properties of the class.
- EQUALITY:
- ORDERING:
- SYNTAX: 1.3.6.1.4.1.1466.115.121.1.27
- SINGLE-VALUE
- NO-USER-MODIFICATION
- USAGE
This attribute can be zero or a combination of one or more of the following Bitmask values which are Big-Endian byte order.
| HEX | Code | Description |
|---|---|---|
| 0x00000001 | FLAG_ATTR_NOT_REPLICATED | When applied to an attribute, the attributeTypes is non-replicated. When applied to a CrossRef object, the naming context is in NTDS. |
| 0x00000002 | FLAG_ATTR_REQ_PARTIAL_SET_MEMBER | When used on an attributeSchema object, it specifies that the attribute is a member of a Partial Attribute Set (PAS). If used on a crossRef objectClass, it specifies that the Directory Partition Hierarchy is a Domain Directory Partition. |
| 0x00000004 | FLAG_ATTR_IS_CONSTRUCTED | When applied to an attribute, the it is a Constructed Attribute. |
| 0x00000008 | FLAG_ATTR_IS_OPERATIONAL | Only used on an attributeSchema object. It specifies that the attributeType is an operational attribute. The attributeType cannot be deleted. |
| 0x00000010 | FLAG_SCHEMA_BASE_OBJECT | When set, indicates the object is a category 1 object. A category 1 object is a class or attributeType that is included in the base schema included with the system. |
| 0x00000020 | FLAG_ATTR_IS_RDN | Only used on an attributeSchema object and specifies that this attributeType can be used as an RDN attribute. |
| 0x04000000 | FLAG_DOMAIN_DISALLOW_MOVE | Specifies that if the objectClass is in a Domain Directory Partition, the object cannot be moved. |
| 0x08000000 | FLAG_DOMAIN_DISALLOW_RENAME | Specifies that if the objectClass is in a Domain Directory Partition, the object cannot be renamed. |
| 0x10000000 | FLAG_CONFIG_ALLOW_LIMITED_MOVE | Specifies that if the objectClass is in the Configuration Directory Partition, the object can be moved, with restrictions. |
| 0x20000000 | FLAG_CONFIG_ALLOW_MOVE | Specifies that if the objectClass is in the Configuration Directory Partition, the object can be moved. |
| 0x40000000 | FLAG_CONFIG_ALLOW_RENAME | Specifies that if the objectClass is in the Configuration Directory Partition, the object can be renamed. |
| 0x80000000 | FLAG_DISALLOW_DELETE | Specifies that the objectClass cannot be deleted. |
More Information#
There might be more information for this subject on one of the following:- 1.2.840.113556.1.4.375
- Bad-Pwd-Count
- FLAG_ATTR_IS_RDN
- FLAG_ATTR_NOT_REPLICATED
- FLAG_SCHEMA_BASE_OBJECT
- Not Synchronized
- Retrieving Constructed Attributes
- X-SYSTEMFLAGS
- [#1] - System-Flags attribute
- based on 2015-04-06
- [#2] - 2.2.10 System Flags - based on information obtained 2017-06-19-
