ms-DS-Reveal-OnDemand-Group attribute
Used with RODCs to define which users, computers, and groups are allowed to have their passwords cached on an RODC.
| Entry | Value |
|---|---|
| CN | ms-DS-Reveal-OnDemand-Group |
| Ldap-Display-Name | msDS-RevealOnDemandGroup |
| Size | - |
| Update Privilege | - |
| Update Frequency | - |
| Attribute-Id | 1.2.840.113556.1.4.1928 |
| System-Id-Guid | 303d9f4a-1dd6-4b38-8fc5-33afe8c988ad |
| Syntax | Object(DS-DN) |
Implementations
Windows Server 2008
| Entry | Value |
|---|---|
| Link-Id | 2110 |
| MAPI-Id | - |
| System-Only | False |
| Is-Single-Valued | False |
| Is Indexed | False |
| In Global Catalog | False |
| NT-Security-Descriptor | O:BAG:BAD:S: |
| Range-Lower | - |
| Range-Upper | - |
| Search-Flags | 0x00000000 |
| System-Flags | 0x00000010 |
| Classes used in | Computer NTDS-DSA |
Windows Server 2008 R2
| Entry | Value |
|---|---|
| Link-Id | 2110 |
| MAPI-Id | - |
| System-Only | False |
| Is-Single-Valued | False |
| Is Indexed | False |
| In Global Catalog | False |
| NT-Security-Descriptor | O:BAG:BAD:S: |
| Range-Lower | - |
| Range-Upper | - |
| Search-Flags | 0x00000000 |
| System-Flags | 0x00000010 |
| Classes used in | Computer NTDS-DSA |
Windows Server 2012
| Entry | Value |
|---|---|
| Link-Id | 2110 |
| MAPI-Id | - |
| System-Only | False |
| Is-Single-Valued | False |
| Is Indexed | False |
| In Global Catalog | False |
| NT-Security-Descriptor | O:BAG:BAD:S: |
| Range-Lower | - |
| Range-Upper | - |
| Search-Flags | 0x00000000 |
| System-Flags | 0x00000010 |
| Classes used in | Computer NTDS-DSA |