Overview#

ObjectGUID is an Attribute-Names which represents a Universally Unique Identifier as used in Microsoft Active Directory.

LDAP Microsoft Active Directory Attribute Definition#

The ObjectGUID AttributeTypes is defined as:

• CN: Object-Guid
• OID of 1.2.840.113556.1.4.2
• NAME: ObjectGUID
• DESC: The unique identifier for an object.
• EQUALITY:
• ORDERING:
• SYNTAX: 2.5.5.10 Replica Link
• LOWERBOUND: 16
• UPPERBOUND: 16
• OMSyntax: 4
• SchemaIDGUID: bf9679e7-0de6-11d0-a285-00aa003049e2
• mapiID:
• SINGLE-VALUE
• NO-USER-MODIFICATION
• USAGE: OperationalAttribute
• Extended Flags:
  • X-ORIGIN: Microsoft
• X-SYSTEMFLAGS
  • FLAG_SCHEMA_BASE_OBJECT
  • FLAG_ATTR_REQ_PARTIAL_SET_MEMBER
  • FLAG_ATTR_NOT_REPLICATED
• X-SCHEMAFLAGSEx
• X-SEARCH-FLAGS
  • fPRESERVEONDELETE
  • fATTINDEX
• Used as MUST in:
  • Top
• Used as MAY in:

ObjectGUID LDAP SearchFilters#

In order to form an LDAP SearchFilter that searches based on an ObjectGUID, the GUID value must be entered in a special syntax in the filter - where each byte in the hexadecimal representation of the GUID must be escaped with a Backslash () symbol. To provide an example, in order to search for an object with hexadecimal GUID "90395F191AB51B4A9E9686C66CB18D11", the corresponding filter should be set as:

(objectGUID=\90\39\5F\19\1A\B5\1B\4A\9E\96\86\C6\6C\B1\8D\11)

Endian Ordering Issue#

If we look at a (Object GUID) it looks like:

 878ce8b7-2713-41a9-a765-5e3905ab5ef2 

The order is due to the Endian Ordering used by Microsoft Active Directory

Universally Unique Identifier#

ObjectGUID is generally a Universally Unique Identifier other than the format differs from the UUID standard only in the byte order of the first 3 fields.

More Information#

There might be more information for this subject on one of the following:

• 1.2.840.113556.1.4.2
• Ambiguous Name Resolution
• LDAP_SERVER_EXTENDED_DN_OID
• MAD Naming Attributes
• Universally Unique Identifier

---

• [#1] - summarizing-pki-certificate-validation - based on information obtained 2013-04-10
• [#2] - Object-Guid attribute - based on information obtained 2019-11-12
• [#3] - Using objectGUID to Bind to an Object - based on information obtained 2019-11-12
• [#4] - 2.263 Attribute objectGUID - based on information obtained 2019-11-12