Primary-Group-Token attribute

A computed attribute that is used in retrieving the membership list of a group, such as Domain Users. The complete membership of such groups is not stored explicitly for scaling reasons.

Entry	Value
CN	Primary-Group-Token
Ldap-Display-Name	primaryGroupToken
Size	4 bytes
Update Privilege	This value is set by the system.
Update Frequency	Whenever an objects primary group changes.
Attribute-Id	1.2.840.113556.1.4.1412
System-Id-Guid	c0ed8738-7efd-4481-84d9-66d2db8be369
Syntax	Enumeration

Implementations

• Windows 2000 Server
• Windows Server 2003
• ADAM
• Windows Server 2003 R2
• Windows Server 2008
• Windows Server 2008 R2
• Windows Server 2012

Windows 2000 Server

Entry	Value
Link-Id	-
MAPI-Id	-
System-Only	True
Is-Single-Valued	True
Is Indexed	False
In Global Catalog	False
NT-Security-Descriptor	O:BAG:BAD:S:
Range-Lower	-
Range-Upper	-
Search-Flags	0x00000000
System-Flags	0x00000014
Classes used in	Group

Windows Server 2003

Entry	Value
Link-Id	-
MAPI-Id	-
System-Only	True
Is-Single-Valued	True
Is Indexed	False
In Global Catalog	False
NT-Security-Descriptor	O:BAG:BAD:S:
Range-Lower	-
Range-Upper	-
Search-Flags	0x00000000
System-Flags	0x00000014
Classes used in	Group

ADAM

Entry	Value
Link-Id	-
MAPI-Id	-
System-Only	True
Is-Single-Valued	True
Is Indexed	False
In Global Catalog	False
NT-Security-Descriptor	O:BAG:BAD:S:
Range-Lower	-
Range-Upper	-
Search-Flags	0x00000000
System-Flags	0x00000014
Classes used in	Group

Windows Server 2003 R2

Entry	Value
Link-Id	-
MAPI-Id	-
System-Only	True
Is-Single-Valued	True
Is Indexed	False
In Global Catalog	False
NT-Security-Descriptor	O:BAG:BAD:S:
Range-Lower	-
Range-Upper	-
Search-Flags	0x00000000
System-Flags	0x00000014
Classes used in	Group

Windows Server 2008

Entry	Value
Link-Id	-
MAPI-Id	-
System-Only	True
Is-Single-Valued	True
Is Indexed	False
In Global Catalog	False
NT-Security-Descriptor	O:BAG:BAD:S:
Range-Lower	-
Range-Upper	-
Search-Flags	0x00000000
System-Flags	0x00000014
Classes used in	Group

Windows Server 2008 R2

Entry	Value
Link-Id	-
MAPI-Id	-
System-Only	True
Is-Single-Valued	True
Is Indexed	False
In Global Catalog	False
NT-Security-Descriptor	O:BAG:BAD:S:
Range-Lower	-
Range-Upper	-
Search-Flags	0x00000000
System-Flags	0x00000014
Classes used in	Group

Windows Server 2012

Entry	Value
Link-Id	-
MAPI-Id	-
System-Only	True
Is-Single-Valued	True
Is Indexed	False
In Global Catalog	False
NT-Security-Descriptor	O:BAG:BAD:S:
Range-Lower	-
Range-Upper	-
Search-Flags	0x00000000
System-Flags	0x00000014
Classes used in	Group