ms-DS-Site-Affinity attribute
Article 12/14/2020
3 contributors
Feedback
In this article
The ms-DS-Site-Affinity attribute is used by the Security Accounts Manager for group expansion during token evaluation.
Entry
Value
CN
ms-DS-Site-Affinity
Ldap-Display-Name
msDS-Site-Affinity
Size
Multiple-valued binary BLOB, where each value is sizeof(GUID) + sizeof(LARGE_INTEGER).
Update Privilege
-
Update Frequency
By default once every three months.
Attribute-Id
1.2.840.113556.1.4.1443
System-Id-Guid
c17c5602-bcb7-46f0-9656-6370ca884b72
Syntax
Object(Replica-Link)
Implementations
Windows Server 2003
Entry
Value
Link-Id
-
MAPI-Id
-
System-Only
False
Is-Single-Valued
False
Is Indexed
True
In Global Catalog
False
NT-Security-Descriptor
O:BAG:BAD:S:
Range-Lower
-
Range-Upper
-
Search-Flags
0x00000001
System-Flags
0x00000010
Classes used in
User
Windows Server 2003 R2
Entry
Value
Link-Id
-
MAPI-Id
-
System-Only
False
Is-Single-Valued
False
Is Indexed
True
In Global Catalog
False
NT-Security-Descriptor
O:BAG:BAD:S:
Range-Lower
-
Range-Upper
-
Search-Flags
0x00000001
System-Flags
0x00000010
Classes used in
User
Windows Server 2008
Entry
Value
Link-Id
-
MAPI-Id
-
System-Only
False
Is-Single-Valued
False
Is Indexed
True
In Global Catalog
False
NT-Security-Descriptor
O:BAG:BAD:S:
Range-Lower
-
Range-Upper
-
Search-Flags
0x00000001
System-Flags
0x00000010
Classes used in
User
Windows Server 2008 R2
Entry
Value
Link-Id
-
MAPI-Id
-
System-Only
False
Is-Single-Valued
False
Is Indexed
True
In Global Catalog
False
NT-Security-Descriptor
O:BAG:BAD:S:
Range-Lower
-
Range-Upper
-
Search-Flags
0x00000001
System-Flags
0x00000010
Classes used in
User
Windows Server 2012
Entry
Value
Link-Id
-
MAPI-Id
-
System-Only
False
Is-Single-Valued
False
Is Indexed
True
In Global Catalog
False
NT-Security-Descriptor
O:BAG:BAD:S:
Range-Lower
-
Range-Upper
-
Search-Flags
0x00000001
System-Flags
0x00000010
Classes used in
User