ms-DS-Never-Reveal-Group attribute
Used with RODCs to define which users, computers, and groups are not allowed to have their passwords cached on an RODC.
| Entry | Value |
|---|---|
| CN | ms-DS-Never-Reveal-Group |
| Ldap-Display-Name | msDS-NeverRevealGroup |
| Size | - |
| Update Privilege | - |
| Update Frequency | - |
| Attribute-Id | 1.2.840.113556.1.4.1926 |
| System-Id-Guid | 15585999-fd49-4d66-b25d-eeb96aba8174 |
| Syntax | Object(DS-DN) |
Implementations
Windows Server 2008
| Entry | Value |
|---|---|
| Link-Id | 2106 |
| MAPI-Id | - |
| System-Only | False |
| Is-Single-Valued | False |
| Is Indexed | False |
| In Global Catalog | False |
| NT-Security-Descriptor | O:BAG:BAD:S: |
| Range-Lower | - |
| Range-Upper | - |
| Search-Flags | 0x00000000 |
| System-Flags | 0x00000010 |
| Classes used in | Computer NTDS-DSA |
Windows Server 2008 R2
| Entry | Value |
|---|---|
| Link-Id | 2106 |
| MAPI-Id | - |
| System-Only | False |
| Is-Single-Valued | False |
| Is Indexed | False |
| In Global Catalog | False |
| NT-Security-Descriptor | O:BAG:BAD:S: |
| Range-Lower | - |
| Range-Upper | - |
| Search-Flags | 0x00000000 |
| System-Flags | 0x00000010 |
| Classes used in | Computer NTDS-DSA |
Windows Server 2012
| Entry | Value |
|---|---|
| Link-Id | 2106 |
| MAPI-Id | - |
| System-Only | False |
| Is-Single-Valued | False |
| Is Indexed | False |
| In Global Catalog | False |
| NT-Security-Descriptor | O:BAG:BAD:S: |
| Range-Lower | - |
| Range-Upper | - |
| Search-Flags | 0x00000000 |
| System-Flags | 0x00000010 |
| Classes used in | Computer NTDS-DSA |