2.2.12 Group Type Flags

Constants for defining group type. These constants define the values that are used in the groupType attribute.

Symbolic name	Value
GROUP_TYPE_BUILTIN_LOCAL_GROUP	0x00000001
GROUP_TYPE_ACCOUNT_GROUP	0x00000002
GROUP_TYPE_RESOURCE_GROUP	0x00000004
GROUP_TYPE_UNIVERSAL_GROUP	0x00000008
GROUP_TYPE_APP_BASIC_GROUP	0x00000010
GROUP_TYPE_APP_QUERY_GROUP	0x00000020
GROUP_TYPE_SECURITY_ENABLED	0x80000000

GROUP_TYPE_BUILTIN_LOCAL_GROUP: Specifies a group that is created by the system.

GROUP_TYPE_ACCOUNT_GROUP: Specifies a global group.

GROUP_TYPE_RESOURCE_GROUP: Specifies a domain local group.

GROUP_TYPE_UNIVERSAL_GROUP: Specifies a universal group.

GROUP_TYPE_APP_BASIC_GROUP: Groups of this type are not used by Active Directory. This constant is included in this document because the value of this constant is used by Active Directory in processing the groupType attribute (see section 3.1.1.5.4.2.2).

GROUP_TYPE_APP_QUERY_GROUP: Groups of this type are not used by Active Directory. This constant is included in this document because the value of this constant is used by Active Directory in processing the groupType attribute.

GROUP_TYPE_SECURITY_ENABLED: Specifies a security-enabled group.

The flag GROUP_TYPE_BUILTIN_LOCAL_GROUP is reserved for use by the system, and can be set in combination with other flags on system-created Builtin objects (see section 6.1.1.4.12). The flag GROUP_TYPE_BUILTIN_LOCAL_GROUP cannot be set by clients.

Otherwise, the flags GROUP_TYPE_ACCOUNT_GROUP, GROUP_TYPE_RESOURCE_GROUP, GROUP_TYPE_UNIVERSAL_GROUP, GROUP_TYPE_APP_BASIC_GROUP, and GROUP_TYPE_APP_QUERY_GROUP are mutually exclusive, and only one value MUST be set. The flag GROUP_TYPE_SECURITY_ENABLED can be combined using a bitwise OR with flags GROUP_TYPE_BUILTIN_LOCAL_GROUP, GROUP_TYPE_ACCOUNT_GROUP, GROUP_TYPE_RESOURCE_GROUP, and GROUP_TYPE_UNIVERSAL_GROUP.