ms-PKI-RA-Policies attribute
Article 12/14/2020
3 contributors
Feedback
In this article
Contains the list of required policy OIDs from registration authorities who sign the enrollment request.
Entry
Value
CN
ms-PKI-RA-Policies
Ldap-Display-Name
msPKI-RA-Policies
Size
64 bytes times the number of entries.
Update Privilege
Domain administrator
Update Frequency
When the certificate template (ms-PKI-Certificate-Template) object is edited, created, or cloned.
Attribute-Id
1.2.840.113556.1.4.1438
System-Id-Guid
d546ae22-0951-4d47-817e-1c9f96faad46
Syntax
String(Unicode)
Implementations
Windows Server 2003
Entry
Value
Link-Id
-
MAPI-Id
-
System-Only
False
Is-Single-Valued
False
Is Indexed
False
In Global Catalog
False
NT-Security-Descriptor
O:BAG:BAD:S:
Range-Lower
-
Range-Upper
-
Search-Flags
0x00000000
System-Flags
0x00000010
Classes used in
PKI-Certificate-Template
Windows Server 2003 R2
Entry
Value
Link-Id
-
MAPI-Id
-
System-Only
False
Is-Single-Valued
False
Is Indexed
False
In Global Catalog
False
NT-Security-Descriptor
O:BAG:BAD:S:
Range-Lower
-
Range-Upper
-
Search-Flags
0x00000000
System-Flags
0x00000010
Classes used in
PKI-Certificate-Template
Windows Server 2008
Entry
Value
Link-Id
-
MAPI-Id
-
System-Only
False
Is-Single-Valued
False
Is Indexed
False
In Global Catalog
False
NT-Security-Descriptor
O:BAG:BAD:S:
Range-Lower
-
Range-Upper
-
Search-Flags
0x00000000
System-Flags
0x00000010
Classes used in
PKI-Certificate-Template
Windows Server 2008 R2
Entry
Value
Link-Id
-
MAPI-Id
-
System-Only
False
Is-Single-Valued
False
Is Indexed
False
In Global Catalog
False
NT-Security-Descriptor
O:BAG:BAD:S:
Range-Lower
-
Range-Upper
-
Search-Flags
0x00000000
System-Flags
0x00000010
Classes used in
PKI-Certificate-Template
Windows Server 2012
Entry
Value
Link-Id
-
MAPI-Id
-
System-Only
False
Is-Single-Valued
False
Is Indexed
False
In Global Catalog
False
NT-Security-Descriptor
O:BAG:BAD:S:
Range-Lower
-
Range-Upper
-
Search-Flags
0x00000000
System-Flags
0x00000010
Classes used in
PKI-Certificate-Template