2.223 Attribute sAMAccountType

This attribute specifies the account type of the security principal objects in Active Directory.

The possible values for this attribute are defined in the following table.

Name

Value

SAM_DOMAIN_OBJECT

0x0

SAM_GROUP_OBJECT

0x10000000

SAM_NON_SECURITY_GROUP_OBJECT

0x10000001

SAM_ALIAS_OBJECT

0x20000000

SAM_NON_SECURITY_ALIAS_OBJECT

0x20000001

SAM_USER_OBJECT

0x30000000

SAM_MACHINE_ACCOUNT

0x30000001

SAM_TRUST_ACCOUNT

0x30000002

SAM_APP_BASIC_GROUP

0x40000000

SAM_APP_QUERY_GROUP

0x40000001

SAM_ACCOUNT_TYPE_MAX

0x7fffffff

 cn: SAM-Account-Type
 ldapDisplayName: sAMAccountType
 attributeId: 1.2.840.113556.1.4.302
 attributeSyntax: 2.5.5.9
 omSyntax: 2
 isSingleValued: TRUE
 schemaIdGuid: 6e7b626c-64f2-11d0-afd2-00c04fd930c9
 systemOnly: FALSE
 searchFlags: fATTINDEX
 attributeSecurityGuid: 59ba2f42-79a2-11d0-9020-00c04fc2d3cf
 isMemberOfPartialAttributeSet: TRUE
 systemFlags: FLAG_SCHEMA_BASE_OBJECT | 
  FLAG_ATTR_REQ_PARTIAL_SET_MEMBER 
 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

Version-Specific Behavior: First implemented on Windows 2000 Server operating system.

The schemaFlagsEx attribute was added to this attribute definition in Windows Server 2008 operating system.