ms-DS-Az-LDAP-Query attribute
Article 12/14/2020
3 contributors
Feedback
In this article
A string that defines the LDAP query (max length 4096) which determines the membership of a user object to the group.
Entry
Value
CN
ms-DS-Az-LDAP-Query
Ldap-Display-Name
msDS-AzLDAPQuery
Size
4096 characters
Update Privilege
AzRoles admin
Update Frequency
During initialization or policy change.
Attribute-Id
1.2.840.113556.1.4.1792
System-Id-Guid
5e53368b-fc94-45c8-9d7d-daf31ee7112d
Syntax
String(Unicode)
Implementations
Windows Server 2003
Entry
Value
Link-Id
-
MAPI-Id
-
System-Only
False
Is-Single-Valued
True
Is Indexed
False
In Global Catalog
False
NT-Security-Descriptor
O:BAG:BAD:S:
Range-Lower
0
Range-Upper
4096
Search-Flags
0x00000000
System-Flags
0x00000010
Classes used in
Group
Windows Server 2003 R2
Entry
Value
Link-Id
-
MAPI-Id
-
System-Only
False
Is-Single-Valued
True
Is Indexed
False
In Global Catalog
False
NT-Security-Descriptor
O:BAG:BAD:S:
Range-Lower
0
Range-Upper
4096
Search-Flags
0x00000000
System-Flags
0x00000010
Classes used in
Group
Windows Server 2008
Entry
Value
Link-Id
-
MAPI-Id
-
System-Only
False
Is-Single-Valued
True
Is Indexed
False
In Global Catalog
False
NT-Security-Descriptor
O:BAG:BAD:S:
Range-Lower
0
Range-Upper
4096
Search-Flags
0x00000000
System-Flags
0x00000010
Classes used in
Group
Windows Server 2008 R2
Entry
Value
Link-Id
-
MAPI-Id
-
System-Only
False
Is-Single-Valued
True
Is Indexed
False
In Global Catalog
False
NT-Security-Descriptor
O:BAG:BAD:S:
Range-Lower
0
Range-Upper
4096
Search-Flags
0x00000000
System-Flags
0x00000010
Classes used in
Group
Windows Server 2012
Entry
Value
Link-Id
-
MAPI-Id
-
System-Only
False
Is-Single-Valued
True
Is Indexed
False
In Global Catalog
False
NT-Security-Descriptor
O:BAG:BAD:S:
Range-Lower
0
Range-Upper
4096
Search-Flags
0x00000000
System-Flags
0x00000010
Classes used in
Group