MS-DS-Per-User-Trust-Tombstones-Quota attribute
Article 12/14/2020
3 contributors
Feedback
In this article
Used to enforce a per-user quota for deleting Trusted-Domain objects when authorization is based on matching the user's SID.
Entry
Value
CN
MS-DS-Per-User-Trust-Tombstones-Quota
Ldap-Display-Name
msDS-PerUserTrustTombstonesQuota
Size
-
Update Privilege
Domain administrator
Update Frequency
At forest creation and rarely after that.
Attribute-Id
1.2.840.113556.1.4.1790
System-Id-Guid
8b70a6c6-50f9-4fa3-a71e-1ce03040449b
Syntax
Enumeration
Implementations
Windows Server 2003
Entry
Value
Link-Id
-
MAPI-Id
-
System-Only
False
Is-Single-Valued
True
Is Indexed
False
In Global Catalog
False
NT-Security-Descriptor
O:BAG:BAD:S:
Range-Lower
-
Range-Upper
-
Search-Flags
0x00000000
System-Flags
0x00000010
Classes used in
Sam-Domain
Windows Server 2003 R2
Entry
Value
Link-Id
-
MAPI-Id
-
System-Only
False
Is-Single-Valued
True
Is Indexed
False
In Global Catalog
False
NT-Security-Descriptor
O:BAG:BAD:S:
Range-Lower
-
Range-Upper
-
Search-Flags
0x00000000
System-Flags
0x00000010
Classes used in
Sam-Domain
Windows Server 2008
Entry
Value
Link-Id
-
MAPI-Id
-
System-Only
False
Is-Single-Valued
True
Is Indexed
False
In Global Catalog
False
NT-Security-Descriptor
O:BAG:BAD:S:
Range-Lower
-
Range-Upper
-
Search-Flags
0x00000000
System-Flags
0x00000010
Classes used in
Sam-Domain
Windows Server 2008 R2
Entry
Value
Link-Id
-
MAPI-Id
-
System-Only
False
Is-Single-Valued
True
Is Indexed
False
In Global Catalog
False
NT-Security-Descriptor
O:BAG:BAD:S:
Range-Lower
-
Range-Upper
-
Search-Flags
0x00000000
System-Flags
0x00000010
Classes used in
Sam-Domain
Windows Server 2012
Entry
Value
Link-Id
-
MAPI-Id
-
System-Only
False
Is-Single-Valued
True
Is Indexed
False
In Global Catalog
False
NT-Security-Descriptor
O:BAG:BAD:S:
Range-Lower
-
Range-Upper
-
Search-Flags
0x00000000
System-Flags
0x00000010
Classes used in
Sam-Domain