12 files changed, 2147 insertions, 2047 deletions

diff --git a/source4/dsdb/config.mk b/source4/dsdb/config.mk
index 2ca4e4ca6d..6db2890738 100644
--- a/source4/dsdb/config.mk
+++ b/source4/dsdb/config.mk
@@ -37,7 +37,8 @@ SAMDB_SCHEMA_OBJ_FILES = $(addprefix $(dsdbsrcdir)/schema/, \
 		schema_set.o \
 		schema_query.o \
 		schema_syntax.o \
-		schema_description.o)
+		schema_description.o \
+		schema_convert_to_ol.o)
 
 $(eval $(call proto_header_template,$(dsdbsrcdir)/schema/proto.h,$(SAMDB_SCHEMA_OBJ_FILES:.o=.c)))
 # PUBLIC_HEADERS += dsdb/schema/schema.h
diff --git a/source4/utils/ad2oLschema.c b/source4/dsdb/schema/schema_convert_to_ol.c
index 236b1fa350..ebcb7ade59 100644
--- a/source4/utils/ad2oLschema.c
+++ b/source4/dsdb/schema/schema_convert_to_ol.c
@@ -1,151 +1,208 @@
 /* 
-   ldb database library
+   schema conversion routines
 
    Copyright (C) Andrew Bartlett 2006-2008
-
-     ** NOTE! The following LGPL license applies to the ldb
-     ** library. This does NOT imply that all of Samba is released
-     ** under the LGPL
+  
+   This program is free software; you can redistribute it and/or modify
+   it under the terms of the GNU General Public License as published by
+   the Free Software Foundation; either version 3 of the License, or
+   (at your option) any later version.
    
-   This library is free software; you can redistribute it and/or
-   modify it under the terms of the GNU Lesser General Public
-   License as published by the Free Software Foundation; either
-   version 3 of the License, or (at your option) any later version.
-
-   This library is distributed in the hope that it will be useful,
+   This program is distributed in the hope that it will be useful,
    but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-   Lesser General Public License for more details.
-
-   You should have received a copy of the GNU Lesser General Public
-   License along with this library; if not, see <http://www.gnu.org/licenses/>.
+   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+   GNU General Public License for more details.
+   
+   You should have received a copy of the GNU General Public License
+   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+   
 */
 
-/*
- *  Name: ldb
- *
- *  Component: ad2oLschema
- *
- *  Description: utility to convert an AD schema into the format required by OpenLDAP
- *
- *  Author: Andrew Bartlett
- */
-
 #include "includes.h"
 #include "ldb.h"
-#include "system/locale.h"
-#include "lib/ldb/tools/cmdline.h"
-#include "param/param.h"
-#include "lib/cmdline/popt_common.h"
 #include "dsdb/samdb/samdb.h"
+#include "system/locale.h"
+
+#define SEPERATOR "\n  "
 
-struct schema_conv {
-	int count;
-	int skipped;
-	int failures;
+struct attr_map {
+	char *old_attr;
+	char *new_attr;
 };
-	
 
-static void usage(void)
-{
-	printf("Usage: ad2oLschema <options>\n");
-	printf("\nConvert AD-like LDIF to OpenLDAP schema format\n\n");
-	printf("Options:\n");
-	printf("  -I inputfile     inputfile of mapped OIDs and skipped attributes/ObjectClasses");
-	printf("  -H url           LDB or LDAP server to read schmea from\n");
-	printf("  -O outputfile    outputfile otherwise STDOUT\n");
-	printf("  -o options       pass options like modules to activate\n");
-	printf("              e.g: -o modules:timestamps\n");
-	printf("\n");
-	printf("Converts records from an AD-like LDIF schema into an openLdap formatted schema\n\n");
-	exit(1);
-}
+struct oid_map {
+	char *old_oid;
+	char *new_oid;
+};
 
-static struct ldb_dn *find_schema_dn(struct ldb_context *ldb, TALLOC_CTX *mem_ctx) 
+static char *print_schema_recursive(char *append_to_string, struct dsdb_schema *schema, const char *print_class,
+				    enum dsdb_schema_convert_target target, 
+				    const char **attrs_skip, const struct attr_map *attr_map, const struct oid_map *oid_map) 
 {
-	const char *rootdse_attrs[] = {"schemaNamingContext", NULL};
-	struct ldb_dn *schemadn;
-	struct ldb_dn *basedn = ldb_dn_new(mem_ctx, ldb, NULL);
-	struct ldb_result *rootdse_res;
-	struct ldb_result *schema_res;
-	int ldb_ret;
-	
-	if (!basedn) {
+	char *out = append_to_string;
+	const struct dsdb_class *objectclass;
+	objectclass = dsdb_class_by_lDAPDisplayName(schema, print_class);
+	if (!objectclass) {
+		DEBUG(0, ("Cannot find class %s in schema\n", print_class));
 		return NULL;
 	}
-	
-	/* Search for rootdse */
-	ldb_ret = ldb_search(ldb, mem_ctx, &rootdse_res,
-			     basedn, LDB_SCOPE_BASE, rootdse_attrs, NULL);
-	if (ldb_ret != LDB_SUCCESS) {
-		ldb_ret = ldb_search(ldb, mem_ctx, &schema_res, basedn, LDB_SCOPE_SUBTREE,
-				     NULL, "(&(objectClass=dMD)(cn=Schema))");
-		if (ldb_ret) {
-			printf("cn=Schema Search failed: %s\n", ldb_errstring(ldb));
+
+	do {
+		TALLOC_CTX *mem_ctx = talloc_new(append_to_string);
+		const char *name = objectclass->lDAPDisplayName;
+		const char *oid = objectclass->governsID_oid;
+		const char *subClassOf = objectclass->subClassOf;
+		int objectClassCategory = objectclass->objectClassCategory;
+		const char **must;
+		const char **may;
+		char *schema_entry = NULL;
+		const char *objectclass_name_as_list[] = {
+			objectclass->lDAPDisplayName,
+			NULL
+		};
+		int j;
+		int attr_idx;
+		
+		if (!mem_ctx) {
+			DEBUG(0, ("Failed to create new talloc context\n"));
 			return NULL;
 		}
 
-		if (schema_res->count != 1) {
-			talloc_free(schema_res);
-			printf("Failed to find rootDSE");
-			return NULL;
+		/* We have been asked to skip some attributes/objectClasses */
+		if (attrs_skip && str_list_check_ci(attrs_skip, name)) {
+			continue;
+		}
+
+		/* We might have been asked to remap this oid, due to a conflict */
+		for (j=0; oid_map && oid_map[j].old_oid; j++) {
+			if (strcasecmp(oid, oid_map[j].old_oid) == 0) {
+				oid =  oid_map[j].new_oid;
+				break;
+			}
 		}
 		
-		schemadn = talloc_steal(mem_ctx, schema_res->msgs[0]->dn);
-		talloc_free(schema_res);
-		return schemadn;
-	}
+		/* We might have been asked to remap this name, due to a conflict */
+		for (j=0; name && attr_map && attr_map[j].old_attr; j++) {
+			if (strcasecmp(name, attr_map[j].old_attr) == 0) {
+				name =  attr_map[j].new_attr;
+				break;
+			}
+		}
+		
+		may = dsdb_full_attribute_list(mem_ctx, schema, objectclass_name_as_list, DSDB_SCHEMA_ALL_MAY);
+
+		for (j=0; may && may[j]; j++) {
+			/* We might have been asked to remap this name, due to a conflict */ 
+			for (attr_idx=0; attr_map && attr_map[attr_idx].old_attr; attr_idx++) { 
+				if (strcasecmp(may[j], attr_map[attr_idx].old_attr) == 0) { 
+					may[j] =  attr_map[attr_idx].new_attr; 
+					break;				
+				}					
+			}						
+		}
+
+		must = dsdb_full_attribute_list(mem_ctx, schema, objectclass_name_as_list, DSDB_SCHEMA_ALL_MUST);
+
+		for (j=0; must && must[j]; j++) {
+			/* We might have been asked to remap this name, due to a conflict */ 
+			for (attr_idx=0; attr_map && attr_map[attr_idx].old_attr; attr_idx++) { 
+				if (strcasecmp(must[j], attr_map[attr_idx].old_attr) == 0) { 
+					must[j] =  attr_map[attr_idx].new_attr; 
+					break;				
+				}					
+			}						
+		}
+
+		schema_entry = schema_class_description(mem_ctx, target, 
+							SEPERATOR,
+							oid, 
+							name,
+							NULL, 
+							subClassOf,
+							objectClassCategory,
+							must,
+							may,
+							NULL);
+		if (schema_entry == NULL) {
+			DEBUG(0, ("failed to generate schema description for %s\n", name));
+			return NULL;
+		}
+
+		switch (target) {
+		case TARGET_OPENLDAP:
+			out = talloc_asprintf_append(out, "objectclass %s\n\n", schema_entry);
+			break;
+		case TARGET_FEDORA_DS:
+			out = talloc_asprintf_append(out, "objectClasses: %s\n", schema_entry);
+			break;
+		}
+		talloc_free(mem_ctx);
+	} while (0);
+
 	
-	if (rootdse_res->count != 1) {
-		printf("Failed to find rootDSE");
-		talloc_free(rootdse_res);
-		return NULL;
+	for (objectclass=schema->classes; objectclass; objectclass = objectclass->next) {
+		if (ldb_attr_cmp(objectclass->subClassOf, print_class) == 0 
+		    && ldb_attr_cmp(objectclass->lDAPDisplayName, print_class) != 0) {
+			out = print_schema_recursive(out, schema, objectclass->lDAPDisplayName, 
+						     target, attrs_skip, attr_map, oid_map);
+		}
 	}
-	
-	/* Locate schema */
-	schemadn = ldb_msg_find_attr_as_dn(ldb, mem_ctx, rootdse_res->msgs[0], "schemaNamingContext");
-	talloc_free(rootdse_res);
+	return out;
+}
 
-	if (!schemadn) {
-		return NULL;
-	}
+/* Routine to linearise our internal schema into the format that
+   OpenLDAP and Fedora DS use for their backend.  
 
-	return schemadn;
-}
+   The 'mappings' are of a format like:
+
+#Standard OpenLDAP attributes
+labeledURI
+#The memberOf plugin provides this attribute
+memberOf
+#These conflict with OpenLDAP builtins
+attributeTypes:samba4AttributeTypes
+2.5.21.5:1.3.6.1.4.1.7165.4.255.7
+
+*/
 
 
-static struct schema_conv process_convert(struct ldb_context *ldb, enum dsdb_schema_convert_target target, FILE *in, FILE *out) 
+char *dsdb_convert_schema_to_openldap(struct ldb_context *ldb, char *target_str, const char *mappings) 
 {
 	/* Read list of attributes to skip, OIDs to map */
 	TALLOC_CTX *mem_ctx = talloc_new(ldb);
 	char *line;
+	char *out;
 	const char **attrs_skip = NULL;
 	int num_skip = 0;
-	struct oid_map {
-		char *old_oid;
-		char *new_oid;
-	} *oid_map = NULL;
+	struct oid_map *oid_map = NULL;
 	int num_oid_maps = 0;
-	struct attr_map {
-		char *old_attr;
-		char *new_attr;
-	} *attr_map = NULL;
+	struct attr_map *attr_map = NULL;
 	int num_attr_maps = 0;	
-	struct dsdb_class *objectclass;
 	struct dsdb_attribute *attribute;
-	struct ldb_dn *schemadn;
-	struct schema_conv ret;
 	struct dsdb_schema *schema;
-	const char *seperator;
-	char *error_string;
+	enum dsdb_schema_convert_target target;
 
-	int ldb_ret;
+	char *next_line = talloc_strdup(mem_ctx, mappings);
 
-	ret.count = 0;
-	ret.skipped = 0;
-	ret.failures = 0;
+	if (!target_str || strcasecmp(target_str, "openldap") == 0) {
+		target = TARGET_OPENLDAP;
+	} else if (strcasecmp(target_str, "fedora-ds") == 0) {
+		target = TARGET_FEDORA_DS;
+	} else {
+		DEBUG(0, ("Invalid target type for schema conversion %s\n", target_str));
+		return NULL;
+	}
+
+	/* The mappings are line-seperated, and specify details such as OIDs to skip etc */
+	while (1) {
+		line = next_line;
+		next_line = strchr(line, '\n');
+		if (!next_line) {
+			break;
+		}
+		next_line[0] = '\0';
+		next_line++;
 
-	while ((line = afdgets(fileno(in), mem_ctx, 0))) {
 		/* Blank Line */
 		if (line[0] == '\0') {
 			continue;
@@ -154,17 +211,18 @@ static struct schema_conv process_convert(struct ldb_context *ldb, enum dsdb_sch
 		if (line[0] == '#') {
 			continue;
 		}
+
 		if (isdigit(line[0])) {
 			char *p = strchr(line, ':');
 			if (!p) {
-				ret.failures++;
-				return ret;
+				DEBUG(0, ("schema mapping file line has OID but no OID to map to: %s\n", line));
+				return NULL;
 			}
 			p[0] = '\0';
 			p++;
 			oid_map = talloc_realloc(mem_ctx, oid_map, struct oid_map, num_oid_maps + 2);
 			trim_string(line, " ", " ");
-			oid_map[num_oid_maps].old_oid = talloc_move(oid_map, &line);
+			oid_map[num_oid_maps].old_oid = talloc_strdup(oid_map, line);
 			trim_string(p, " ", " ");
 			oid_map[num_oid_maps].new_oid = p;
 			num_oid_maps++;
@@ -177,7 +235,7 @@ static struct schema_conv process_convert(struct ldb_context *ldb, enum dsdb_sch
 				p++;
 				attr_map = talloc_realloc(mem_ctx, attr_map, struct attr_map, num_attr_maps + 2);
 				trim_string(line, " ", " ");
-				attr_map[num_attr_maps].old_attr = talloc_move(attr_map, &line);
+				attr_map[num_attr_maps].old_attr = talloc_strdup(attr_map, line);
 				trim_string(p, " ", " ");
 				attr_map[num_attr_maps].new_attr = p;
 				num_attr_maps++;
@@ -186,36 +244,25 @@ static struct schema_conv process_convert(struct ldb_context *ldb, enum dsdb_sch
 				/* skip attribute/objectClass */
 				attrs_skip = talloc_realloc(mem_ctx, attrs_skip, const char *, num_skip + 2);
 				trim_string(line, " ", " ");
-				attrs_skip[num_skip] = talloc_move(attrs_skip, &line);
+				attrs_skip[num_skip] = talloc_strdup(attrs_skip, line);
 				num_skip++;
 				attrs_skip[num_skip] = NULL;
 			}
 		}
 	}
 
-	schemadn = find_schema_dn(ldb, mem_ctx);
-	if (!schemadn) {
-		printf("Failed to find schema DN: %s\n", ldb_errstring(ldb));
-		ret.failures = 1;
-		return ret;
-	}
-	
-	ldb_ret = dsdb_schema_from_schema_dn(mem_ctx, ldb,
-					     lp_iconv_convenience(cmdline_lp_ctx),
-					     schemadn, &schema, &error_string);
-	if (ldb_ret != LDB_SUCCESS) {
-		printf("Failed to load schema: %s\n", error_string);
-		ret.failures = 1;
-		return ret;
+	schema = dsdb_get_schema(ldb);
+	if (!schema) {
+		DEBUG(0, ("No schema on ldb to convert!\n"));
+		return NULL;
 	}
 
 	switch (target) {
 	case TARGET_OPENLDAP:
-		seperator = "\n  ";
+		out = talloc_strdup(mem_ctx, "");
 		break;
 	case TARGET_FEDORA_DS:
-		seperator = "\n  ";
-		fprintf(out, "dn: cn=schema\n");
+		out = talloc_strdup(mem_ctx, "dn: cn=schema\n");
 		break;
 	}
 
@@ -231,7 +278,6 @@ static struct schema_conv process_convert(struct ldb_context *ldb, enum dsdb_sch
 
 		/* We have been asked to skip some attributes/objectClasses */
 		if (attrs_skip && str_list_check_ci(attrs_skip, name)) {
-			ret.skipped++;
 			continue;
 		}
 
@@ -270,7 +316,7 @@ static struct schema_conv process_convert(struct ldb_context *ldb, enum dsdb_sch
 		
 		schema_entry = schema_attribute_description(mem_ctx, 
 							    target, 
-							    seperator, 
+							    SEPERATOR, 
 							    oid, 
 							    name, 
 							    equality, 
@@ -283,160 +329,22 @@ static struct schema_conv process_convert(struct ldb_context *ldb, enum dsdb_sch
 							    false, false);
 
 		if (schema_entry == NULL) {
-			ret.failures++;
-			return ret;
+			DEBUG(0, ("failed to generate attribute description for %s\n", name));
+			return NULL;
 		}
 
 		switch (target) {
 		case TARGET_OPENLDAP:
-			fprintf(out, "attributetype %s\n\n", schema_entry);
+			out = talloc_asprintf_append(out, "attributetype %s\n\n", schema_entry);
 			break;
 		case TARGET_FEDORA_DS:
-			fprintf(out, "attributeTypes: %s\n", schema_entry);
+			out = talloc_asprintf_append(out, "attributeTypes: %s\n", schema_entry);
 			break;
 		}
-		ret.count++;
 	}
 
-	/* This is already sorted to have 'top' and similar classes first */
-	for (objectclass=schema->classes; objectclass; objectclass = objectclass->next) {
-		const char *name = objectclass->lDAPDisplayName;
-		const char *oid = objectclass->governsID_oid;
-		const char *subClassOf = objectclass->subClassOf;
-		int objectClassCategory = objectclass->objectClassCategory;
-		const char **must;
-		const char **may;
-		char *schema_entry = NULL;
-		const char *objectclass_name_as_list[] = {
-			objectclass->lDAPDisplayName,
-			NULL
-		};
-		int j;
-		int attr_idx;
-		
-		/* We have been asked to skip some attributes/objectClasses */
-		if (attrs_skip && str_list_check_ci(attrs_skip, name)) {
-			ret.skipped++;
-			continue;
-		}
-
-		/* We might have been asked to remap this oid, due to a conflict */
-		for (j=0; oid_map && oid_map[j].old_oid; j++) {
-			if (strcasecmp(oid, oid_map[j].old_oid) == 0) {
-				oid =  oid_map[j].new_oid;
-				break;
-			}
-		}
-		
-		/* We might have been asked to remap this name, due to a conflict */
-		for (j=0; name && attr_map && attr_map[j].old_attr; j++) {
-			if (strcasecmp(name, attr_map[j].old_attr) == 0) {
-				name =  attr_map[j].new_attr;
-				break;
-			}
-		}
-		
-		may = dsdb_full_attribute_list(mem_ctx, schema, objectclass_name_as_list, DSDB_SCHEMA_ALL_MAY);
+	out = print_schema_recursive(out, schema, "top", target, attrs_skip, attr_map, oid_map);
 
-		for (j=0; may && may[j]; j++) {
-			/* We might have been asked to remap this name, due to a conflict */ 
-			for (attr_idx=0; attr_map && attr_map[attr_idx].old_attr; attr_idx++) { 
-				if (strcasecmp(may[j], attr_map[attr_idx].old_attr) == 0) { 
-					may[j] =  attr_map[attr_idx].new_attr; 
-					break;				
-				}					
-			}						
-		}
-
-		must = dsdb_full_attribute_list(mem_ctx, schema, objectclass_name_as_list, DSDB_SCHEMA_ALL_MUST);
-
-		for (j=0; must && must[j]; j++) {
-			/* We might have been asked to remap this name, due to a conflict */ 
-			for (attr_idx=0; attr_map && attr_map[attr_idx].old_attr; attr_idx++) { 
-				if (strcasecmp(must[j], attr_map[attr_idx].old_attr) == 0) { 
-					must[j] =  attr_map[attr_idx].new_attr; 
-					break;				
-				}					
-			}						
-		}
-
-		schema_entry = schema_class_description(mem_ctx, target, 
-							seperator,
-							oid, 
-							name,
-							NULL, 
-							subClassOf,
-							objectClassCategory,
-							must,
-							may,
-							NULL);
-		if (schema_entry == NULL) {
-			ret.failures++;
-			return ret;
-		}
-
-		switch (target) {
-		case TARGET_OPENLDAP:
-			fprintf(out, "objectclass %s\n\n", schema_entry);
-			break;
-		case TARGET_FEDORA_DS:
-			fprintf(out, "objectClasses: %s\n", schema_entry);
-			break;
-		}
-		ret.count++;
-	}
-
-	return ret;
+	return out;
 }
 
- int main(int argc, const char **argv)
-{
-	TALLOC_CTX *ctx;
-	struct ldb_cmdline *options;
-	FILE *in = stdin;
-	FILE *out = stdout;
-	struct ldb_context *ldb;
-	struct schema_conv ret;
-	const char *target_str;
-	enum dsdb_schema_convert_target target;
-
-	ctx = talloc_new(NULL);
-	ldb = ldb_init(ctx, NULL);
-
-	options = ldb_cmdline_process(ldb, argc, argv, usage);
-
-	if (options->input) {
-		in = fopen(options->input, "r");
-		if (!in) {
-			perror(options->input);
-			exit(1);
-		}
-	}
-	if (options->output) {
-		out = fopen(options->output, "w");
-		if (!out) {
-			perror(options->output);
-			exit(1);
-		}
-	}
-
-	target_str = lp_parm_string(cmdline_lp_ctx, NULL, "convert", "target");
-
-	if (!target_str || strcasecmp(target_str, "openldap") == 0) {
-		target = TARGET_OPENLDAP;
-	} else if (strcasecmp(target_str, "fedora-ds") == 0) {
-		target = TARGET_FEDORA_DS;
-	} else {
-		printf("Unsupported target: %s\n", target_str);
-		exit(1);
-	}
-
-	ret = process_convert(ldb, target, in, out);
-
-	fclose(in);
-	fclose(out);
-
-	printf("Converted %d records (skipped %d) with %d failures\n", ret.count, ret.skipped, ret.failures);
-
-	return 0;
-}
diff --git a/source4/dsdb/schema/schema_init.c b/source4/dsdb/schema/schema_init.c
index a67aecd1e8..e619e1ffac 100644
--- a/source4/dsdb/schema/schema_init.c
+++ b/source4/dsdb/schema/schema_init.c
@@ -788,7 +788,6 @@ WERROR dsdb_class_from_ldb(const struct dsdb_schema *schema,
 
 	GET_STRING_LIST_LDB(msg, "systemPossSuperiors", mem_ctx, obj, systemPossSuperiors, false);
 	GET_STRING_LIST_LDB(msg, "possSuperiors", mem_ctx, obj, possSuperiors, false);
-	GET_STRING_LIST_LDB(msg, "possibleInferiors", mem_ctx, obj, possibleInferiors, false);
 
 	GET_STRING_LDB(msg, "defaultSecurityDescriptor", mem_ctx, obj, defaultSecurityDescriptor, false);
 
@@ -808,6 +807,12 @@ WERROR dsdb_class_from_ldb(const struct dsdb_schema *schema,
 
 #define dsdb_oom(error_string, mem_ctx) *error_string = talloc_asprintf(mem_ctx, "dsdb out of memory at %s:%d\n", __FILE__, __LINE__)
 
+/* 
+ Create a DSDB schema from the ldb results provided.  This is called
+ directly when the schema is provisioned from an on-disk LDIF file, or
+ from dsdb_schema_from_schema_dn below
+*/
+
 int dsdb_schema_from_ldb_results(TALLOC_CTX *mem_ctx, struct ldb_context *ldb,
 				 struct smb_iconv_convenience *iconv_convenience, 
 				 struct ldb_result *schema_res,
@@ -908,96 +913,9 @@ int dsdb_schema_from_ldb_results(TALLOC_CTX *mem_ctx, struct ldb_context *ldb,
 	return LDB_SUCCESS;
 }
 
-/* This recursive load of the objectClasses presumes that they
- * everything is in a strict subClassOf hirarchy.  
- *
- * We load this in order so we produce certain outputs (such as the
- * exported schema for openldap, and sorted objectClass attribute) 'in
- * order' */
-
-static int fetch_oc_recursive(struct ldb_context *ldb, struct ldb_dn *schemadn, 
-			      TALLOC_CTX *mem_ctx, 
-			      struct ldb_result *search_from,
-			      struct ldb_result *res_list)
-{
-	int i;
-	int ret = 0;
-	for (i=0; i < search_from->count; i++) {
-		struct ldb_result *res;
-		const char *name = ldb_msg_find_attr_as_string(search_from->msgs[i], 
-							       "lDAPDisplayname", NULL);
-
-		ret = ldb_search(ldb, mem_ctx, &res,
-					schemadn, LDB_SCOPE_SUBTREE, NULL,
-					"(&(&(objectClass=classSchema)(subClassOf=%s))(!(lDAPDisplayName=%s)))",
-					name, name);
-		if (ret != LDB_SUCCESS) {
-			return ret;
-		}
-		
-		res_list->msgs = talloc_realloc(res_list, res_list->msgs, 
-						struct ldb_message *, res_list->count + 2);
-		if (!res_list->msgs) {
-			return LDB_ERR_OPERATIONS_ERROR;
-		}
-		res_list->msgs[res_list->count] = talloc_move(res_list, 
-							      &search_from->msgs[i]);
-		res_list->count++;
-		res_list->msgs[res_list->count] = NULL;
-
-		if (res->count > 0) {
-			ret = fetch_oc_recursive(ldb, schemadn, mem_ctx, res, res_list); 
-		}
-		if (ret != LDB_SUCCESS) {
-			return ret;
-		}
-	}
-	return ret;
-}
-
-static int fetch_objectclass_schema(struct ldb_context *ldb, struct ldb_dn *schemadn, 
-				    TALLOC_CTX *mem_ctx, 
-				    struct ldb_result **objectclasses_res,
-				    char **error_string)
-{
-	TALLOC_CTX *local_ctx = talloc_new(mem_ctx);
-	struct ldb_result *top_res, *ret_res;
-	int ret;
-	if (!local_ctx) {
-		return LDB_ERR_OPERATIONS_ERROR;
-	}
-	
-	/* Download 'top' */
-	ret = ldb_search(ldb, local_ctx, &top_res,
-			 schemadn, LDB_SCOPE_SUBTREE, NULL,
-			 "(&(objectClass=classSchema)(lDAPDisplayName=top))");
-	if (ret != LDB_SUCCESS) {
-		*error_string = talloc_asprintf(mem_ctx, 
-						"dsdb_schema: failed to search for top classSchema object: %s",
-						ldb_errstring(ldb));
-		return ret;
-	}
-
-	if (top_res->count != 1) {
-		*error_string = talloc_asprintf(mem_ctx, 
-						"dsdb_schema: failed to find top classSchema object");
-		return LDB_ERR_NO_SUCH_OBJECT;
-	}
-
-	ret_res = talloc_zero(local_ctx, struct ldb_result);
-	if (!ret_res) {
-		return LDB_ERR_OPERATIONS_ERROR;
-	}
-
-	ret = fetch_oc_recursive(ldb, schemadn, local_ctx, top_res, ret_res); 
-
-	if (ret != LDB_SUCCESS) {
-		return ret;
-	}
-
-	*objectclasses_res = talloc_move(mem_ctx, &ret_res);
-	return ret;
-}
+/*
+  Given an LDB, and the DN, return a populated schema
+*/
 
 int dsdb_schema_from_schema_dn(TALLOC_CTX *mem_ctx, struct ldb_context *ldb,
 			       struct smb_iconv_convenience *iconv_convenience, 
@@ -1065,10 +983,13 @@ int dsdb_schema_from_schema_dn(TALLOC_CTX *mem_ctx, struct ldb_context *ldb,
 	/*
 	 * load the objectClass definitions
 	 */
-	ret = fetch_objectclass_schema(ldb, schema_dn, tmp_ctx, &c_res, &error_string);
+	ret = ldb_search(ldb, tmp_ctx, &c_res,
+			 schema_dn, LDB_SCOPE_ONELEVEL, NULL,
+			 "(objectClass=classSchema)");
 	if (ret != LDB_SUCCESS) {
 		*error_string_out = talloc_asprintf(mem_ctx, 
-				       "Failed to fetch objectClass schema elements: %s", error_string);
+				       "dsdb_schema: failed to search attributeSchema objects: %s",
+				       ldb_errstring(ldb));
 		talloc_free(tmp_ctx);
 		return ret;
 	}
@@ -1451,7 +1372,6 @@ WERROR dsdb_class_from_drsuapi(struct dsdb_schema *schema,
 
 	GET_STRING_LIST_DS(schema, r, "systemPossSuperiors", mem_ctx, obj, systemPossSuperiors, false);
 	GET_STRING_LIST_DS(schema, r, "possSuperiors", mem_ctx, obj, possSuperiors, false);
-	GET_STRING_LIST_DS(schema, r, "possibleInferiors", mem_ctx, obj, possibleInferiors, false);
 
 	GET_STRING_DS(schema, r, "defaultSecurityDescriptor", mem_ctx, obj, defaultSecurityDescriptor, false);
 
diff --git a/source4/dsdb/schema/schema_set.c b/source4/dsdb/schema/schema_set.c
index 6abd8a8f88..d52976958d 100644
--- a/source4/dsdb/schema/schema_set.c
+++ b/source4/dsdb/schema/schema_set.c
@@ -277,7 +277,7 @@ void dsdb_make_schema_global(struct ldb_context *ldb)
  * schema itself to the directory.
  */
 
-WERROR dsdb_attach_schema_from_ldif_file(struct ldb_context *ldb, const char *pf, const char *df)
+WERROR dsdb_attach_schema_from_ldif(struct ldb_context *ldb, const char *pf, const char *df)
 {
 	struct ldb_ldif *ldif;
 	struct ldb_message *msg;
diff --git a/source4/scripting/python/pyglue.c b/source4/scripting/python/pyglue.c
index a2c4790611..1480e54403 100644
--- a/source4/scripting/python/pyglue.c
+++ b/source4/scripting/python/pyglue.c
@@ -212,7 +212,7 @@ static PyObject *py_dsdb_set_global_schema(PyObject *self, PyObject *args)
 	Py_RETURN_NONE;
 }
 
-static PyObject *py_dsdb_attach_schema_from_ldif_file(PyObject *self, PyObject *args)
+static PyObject *py_dsdb_attach_schema_from_ldif(PyObject *self, PyObject *args)
 {
 	WERROR result;
 	char *pf, *df;
@@ -224,12 +224,35 @@ static PyObject *py_dsdb_attach_schema_from_ldif_file(PyObject *self, PyObject *
 
 	PyErr_LDB_OR_RAISE(py_ldb, ldb);
 
-	result = dsdb_attach_schema_from_ldif_file(ldb, pf, df);
+	result = dsdb_attach_schema_from_ldif(ldb, pf, df);
 	PyErr_WERROR_IS_ERR_RAISE(result);
 
 	Py_RETURN_NONE;
 }
 
+static PyObject *py_dsdb_convert_schema_to_openldap(PyObject *self, PyObject *args)
+{
+	char *target_str, *mapping;
+	PyObject *py_ldb;
+	struct ldb_context *ldb;
+	PyObject *ret;
+	char *retstr;
+
+	if (!PyArg_ParseTuple(args, "Oss", &py_ldb, &target_str, &mapping))
+		return NULL;
+
+	PyErr_LDB_OR_RAISE(py_ldb, ldb);
+
+	retstr = dsdb_convert_schema_to_openldap(ldb, target_str, mapping);
+	if (!retstr) {
+		PyErr_SetString(PyExc_RuntimeError, "dsdb_convert_schema_to_openldap failed");
+		return NULL;
+	} 
+	ret = PyString_FromString(retstr);
+	talloc_free(retstr);
+	return ret;
+}
+
 static PyMethodDef py_misc_methods[] = {
 	{ "generate_random_str", (PyCFunction)py_generate_random_str, METH_VARARGS,
 		"random_password(len) -> string\n"
@@ -255,7 +278,9 @@ static PyMethodDef py_misc_methods[] = {
 		NULL },
 	{ "dsdb_set_global_schema", (PyCFunction)py_dsdb_set_global_schema, METH_VARARGS,
 		NULL },
-	{ "dsdb_attach_schema_from_ldif_file", (PyCFunction)py_dsdb_attach_schema_from_ldif_file, METH_VARARGS,
+	{ "dsdb_attach_schema_from_ldif", (PyCFunction)py_dsdb_attach_schema_from_ldif, METH_VARARGS,
+		NULL },
+	{ "dsdb_convert_schema_to_openldap", (PyCFunction)py_dsdb_convert_schema_to_openldap, METH_VARARGS,
 		NULL },
 	{ NULL }
 };
diff --git a/source4/scripting/python/samba/ms_schema.py b/source4/scripting/python/samba/ms_schema.py
new file mode 100644
index 0000000000..2e8050e503
--- /dev/null
+++ b/source4/scripting/python/samba/ms_schema.py
@@ -0,0 +1,275 @@
+#!/usr/bin/env python
+#
+# create schema.ldif (as a string) from WSPP documentation
+#
+# based on minschema.py and minschema_wspp
+#
+
+import re
+import base64
+
+bitFields = {}
+
+# ADTS: 2.2.9
+# bit positions as labeled in the docs
+bitFields["searchflags"] = {
+    'fATTINDEX': 31,         # IX
+    'fPDNTATTINDEX': 30,     # PI
+    'fANR': 29, #AR
+    'fPRESERVEONDELETE': 28,         # PR
+    'fCOPY': 27,     # CP
+    'fTUPLEINDEX': 26,       # TP
+    'fSUBTREEATTINDEX': 25,  # ST
+    'fCONFIDENTIAL': 24,     # CF
+    'fNEVERVALUEAUDIT': 23,  # NV
+    'fRODCAttribute': 22,    # RO
+
+
+    # missing in ADTS but required by LDIF
+    'fRODCFilteredAttribute': 22,    # RO ?
+    'fCONFIDENTAIL': 24, # typo
+    'fRODCFILTEREDATTRIBUTE': 22 # case
+    }
+
+# ADTS: 2.2.10
+bitFields["systemflags"] = {
+    'FLAG_ATTR_NOT_REPLICATED': 31, 'FLAG_CR_NTDS_NC': 31, 	# NR
+    'FLAG_ATTR_REQ_PARTIAL_SET_MEMBER': 30, 'FLAG_CR_NTDS_DOMAIN': 30, 	# PS
+    'FLAG_ATTR_IS_CONSTRUCTED': 29, 'FLAG_CR_NTDS_NOT_GC_REPLICATED': 29, 	# CS
+    'FLAG_ATTR_IS_OPERATIONAL': 28, 	# OP
+    'FLAG_SCHEMA_BASE_OBJECT': 27, 	# BS
+    'FLAG_ATTR_IS_RDN': 26, 	# RD
+    'FLAG_DISALLOW_MOVE_ON_DELETE': 6, 	# DE
+    'FLAG_DOMAIN_DISALLOW_MOVE': 5, 	# DM
+    'FLAG_DOMAIN_DISALLOW_RENAME': 4, 	# DR
+    'FLAG_CONFIG_ALLOW_LIMITED_MOVE': 3, 	# AL
+    'FLAG_CONFIG_ALLOW_MOVE': 2, 	# AM
+    'FLAG_CONFIG_ALLOW_RENAME': 1, 	# AR
+    'FLAG_DISALLOW_DELETE': 0 	# DD
+    }
+
+# ADTS: 2.2.11
+bitFields["schemaflagsex"] = {
+    'FLAG_ATTR_IS_CRITICAL': 31
+    }
+
+# ADTS: 3.1.1.2.2.2
+oMObjectClassBER = {
+    '1.3.12.2.1011.28.0.702' : base64.b64encode('\x2B\x0C\x02\x87\x73\x1C\x00\x85\x3E'),
+    '1.2.840.113556.1.1.1.12': base64.b64encode('\x2A\x86\x48\x86\xF7\x14\x01\x01\x01\x0C'),
+    '2.6.6.1.2.5.11.29'      : base64.b64encode('\x56\x06\x01\x02\x05\x0B\x1D'),
+    '1.2.840.113556.1.1.1.11': base64.b64encode('\x2A\x86\x48\x86\xF7\x14\x01\x01\x01\x0B'),
+    '1.3.12.2.1011.28.0.714' : base64.b64encode('\x2B\x0C\x02\x87\x73\x1C\x00\x85\x4A'),
+    '1.3.12.2.1011.28.0.732' : base64.b64encode('\x2B\x0C\x02\x87\x73\x1C\x00\x85\x5C'),
+    '1.2.840.113556.1.1.1.6' : base64.b64encode('\x2A\x86\x48\x86\xF7\x14\x01\x01\x01\x06')
+}
+
+# separated by commas in docs, and must be broken up
+multivalued_attrs = set(["auxiliaryclass","maycontain","mustcontain","posssuperiors",
+                         "systemauxiliaryclass","systemmaycontain","systemmustcontain",
+                         "systemposssuperiors"])
+
+def __read_folded_line(f, buffer):
+    """ reads a line from an LDIF file, unfolding it"""
+    line = buffer
+    
+    while True:
+        l = f.readline()
+
+        if l[:1] == " ":
+            # continued line
+
+            # cannot fold an empty line
+            assert(line != "" and line != "\n")
+
+            # preserves '\n '
+            line = line + l
+        else:
+            # non-continued line            
+            if line == "":
+                line = l
+
+                if l == "":
+                    # eof, definitely won't be folded
+                    break
+            else:
+                # marks end of a folded line
+                # line contains the now unfolded line
+                # buffer contains the start of the next possibly folded line
+                buffer = l
+                break
+        
+    return (line, buffer)
+
+
+def __read_raw_entries(f):
+    """reads an LDIF entry, only unfolding lines"""
+
+    # will not match options after the attribute type
+    attr_type_re = re.compile("^([A-Za-z]+[A-Za-z0-9-]*):")
+
+    buffer = ""
+    
+    while True:
+        entry = []
+        
+        while True:
+            (l, buffer) = __read_folded_line(f, buffer)
+                        
+            if l[:1] == "#":
+                continue
+
+            if l == "\n" or l == "":
+                break
+
+            m = attr_type_re.match(l)
+
+            if m:
+                if l[-1:] == "\n":
+                    l = l[:-1]
+                    
+                entry.append(l)
+            else:
+                print >>sys.stderr, "Invalid line: %s" % l,
+                sys.exit(1)
+
+        if len(entry):
+            yield entry
+
+        if l == "":
+            break
+
+
+def fix_dn(dn):
+    """fix a string DN to use ${SCHEMADN}"""
+
+    # folding?
+    if dn.find("<RootDomainDN>") != -1:
+        dn = dn.replace("\n ", "")
+        dn = dn.replace(" ", "")
+        return dn.replace("CN=Schema,CN=Configuration,<RootDomainDN>", "${SCHEMADN}")
+    else:
+        return dn
+
+def __convert_bitfield(key, value):
+    """Evaluate the OR expression in 'value'"""
+    assert(isinstance(value, str))
+
+    value = value.replace("\n ", "")
+    value = value.replace(" ", "")
+    
+    try:
+        # some attributes already have numeric values
+        o = int(value)
+    except ValueError:
+        o = 0
+        flags = value.split("|")
+        for f in flags:
+            bitpos = bitFields[key][f]
+            o = o | (1 << (31 - bitpos))
+
+    return str(o)
+
+def __write_ldif_one(entry):
+    """Write out entry as LDIF"""
+    out = []
+    
+    for l in entry:
+        if isinstance(l[1], str):
+            vl = [l[1]]
+        else:
+            vl = l[1]
+
+        if l[0].lower() == 'omobjectclass':
+            out.append("%s:: %s" % (l[0], l[1]))
+            continue
+            
+        for v in vl:
+            out.append("%s: %s" % (l[0], v))
+
+
+    return "\n".join(out)
+    
+def __transform_entry(entry, objectClass):
+    """Perform transformations required to convert the LDIF-like schema
+       file entries to LDIF, including Samba-specific stuff."""
+    
+    entry = [l.split(":", 1) for l in entry]
+
+    cn = ""
+    
+    for l in entry:
+        key = l[0].lower()
+        l[1] = l[1].lstrip()
+        l[1] = l[1].rstrip()
+
+        if not cn and key == "cn":
+            cn = l[1]
+        
+        if key in multivalued_attrs:
+            # unlike LDIF, these are comma-separated
+            l[1] = l[1].replace("\n ", "")
+            l[1] = l[1].replace(" ", "")
+
+            l[1] = l[1].split(",")
+            
+        if key in bitFields:
+            l[1] = __convert_bitfield(key, l[1])
+
+        if key == "omobjectclass":
+            l[1] = oMObjectClassBER[l[1].strip()]
+
+        if isinstance(l[1], str):
+            l[1] = fix_dn(l[1])
+
+
+    assert(cn)
+    entry.insert(0, ["dn", "CN=%s,${SCHEMADN}" % cn])
+    entry.insert(1, ["objectClass", ["top", objectClass]])
+    
+    for l in entry:
+        key = l[0].lower()
+
+        if key == "cn":
+            entry.remove(l)
+
+    return entry
+
+def __parse_schema_file(filename, objectClass):
+    """Load and transform a schema file."""
+
+    out = []
+    
+    f = open(filename, "rU")
+    for entry in __read_raw_entries(f):
+        out.append(__write_ldif_one(__transform_entry(entry, objectClass)))
+
+    return "\n\n".join(out)
+
+
+def read_ms_schema(attr_file, classes_file, dump_attributes = True, dump_classes = True, debug = False):
+    """Read WSPP documentation-derived schema files."""
+
+    attr_ldif = ""
+    classes_ldif = ""
+    
+    if dump_attributes:
+        attr_ldif =  __parse_schema_file(attr_file, "attributeSchema")
+    if dump_classes:
+        classes_ldif = __parse_schema_file(classes_file, "classSchema")
+
+    return attr_ldif + "\n\n" + classes_ldif + "\n\n"
+
+if __name__ == '__main__':
+    import sys
+
+    try:
+        attr_file = sys.argv[1]
+        classes_file = sys.argv[2]
+    except IndexError:
+        print >>sys.stderr, "Usage: %s attr-file.txt classes-file.txt" % (sys.argv[0])
+        sys.exit(1)
+        
+    print read_ms_schema(attr_file, classes_file)
+
+        
diff --git a/source4/scripting/python/samba/provision.py b/source4/scripting/python/samba/provision.py
index 896f237bd7..64908ccb4d 100644
--- a/source4/scripting/python/samba/provision.py
+++ b/source4/scripting/python/samba/provision.py
@@ -44,6 +44,7 @@ from samba.dcerpc import security
 import urllib
 from ldb import SCOPE_SUBTREE, SCOPE_ONELEVEL, SCOPE_BASE, LdbError, \
         timestring, CHANGETYPE_MODIFY, CHANGETYPE_NONE
+from ms_schema import read_ms_schema
 
 __docformat__ = "restructuredText"
 
@@ -783,10 +784,8 @@ def setup_samdb(path, setup_path, session_info, credentials, lp,
     if serverrole == "domain controller":
         samdb.set_invocation_id(invocationid)
 
-    load_schema(setup_path, samdb, names.schemadn, names.netbiosname, 
-                names.configdn, names.sitename, names.serverdn,
-                names.hostname)
-
+    schema_data = load_schema(setup_path, samdb, names.schemadn, names.netbiosname, 
+                              names.configdn, names.sitename, names.serverdn)
     samdb.transaction_start()
         
     try:
@@ -851,12 +850,8 @@ def setup_samdb(path, setup_path, session_info, credentials, lp,
             "PREFIXMAP_B64": b64encode(prefixmap)
             })
 
-        message("Setting up sam.ldb Samba4 schema")
-        setup_add_ldif(samdb, setup_path("schema_samba4.ldif"), 
-                       {"SCHEMADN": names.schemadn })
-        message("Setting up sam.ldb AD schema")
-        setup_add_ldif(samdb, setup_path("schema.ldif"), 
-                       {"SCHEMADN": names.schemadn})
+        message("Setting up sam.ldb schema")
+        samdb.add_ldif(schema_data)
         setup_add_ldif(samdb, setup_path("aggregate_schema.ldif"), 
                        {"SCHEMADN": names.schemadn})
 
@@ -1249,28 +1244,33 @@ def provision_backend(setup_dir=None, message=None,
     except OSError:
         pass
 
-    schemadb = Ldb(schemadb_path, lp=lp)
+    schemadb = SamDB(schemadb_path, lp=lp)
+    schemadb.transaction_start()
+    try:
  
-    prefixmap = open(setup_path("prefixMap.txt"), 'r').read()
+        prefixmap = open(setup_path("prefixMap.txt"), 'r').read()
 
-    setup_add_ldif(schemadb, setup_path("provision_schema_basedn.ldif"), 
-                   {"SCHEMADN": names.schemadn,
-                    "ACI": "#",
-                    })
-    setup_modify_ldif(schemadb, 
-                      setup_path("provision_schema_basedn_modify.ldif"), \
-                          {"SCHEMADN": names.schemadn,
-                           "NETBIOSNAME": names.netbiosname,
-                           "DEFAULTSITE": DEFAULTSITE,
-                           "CONFIGDN": names.configdn,
-                           "SERVERDN": names.serverdn,
-                           "PREFIXMAP_B64": b64encode(prefixmap)
-                           })
-    
-    setup_add_ldif(schemadb, setup_path("schema_samba4.ldif"), 
-                   {"SCHEMADN": names.schemadn })
-    setup_add_ldif(schemadb, setup_path("schema.ldif"), 
-                   {"SCHEMADN": names.schemadn})
+        setup_add_ldif(schemadb, setup_path("provision_schema_basedn.ldif"), 
+                       {"SCHEMADN": names.schemadn,
+                        "ACI": "#",
+                        })
+        setup_modify_ldif(schemadb, 
+                          setup_path("provision_schema_basedn_modify.ldif"), \
+                              {"SCHEMADN": names.schemadn,
+                               "NETBIOSNAME": names.netbiosname,
+                               "DEFAULTSITE": DEFAULTSITE,
+                               "CONFIGDN": names.configdn,
+                               "SERVERDN": names.serverdn,
+                               "PREFIXMAP_B64": b64encode(prefixmap)
+                               })
+        
+        data = load_schema(setup_path, schemadb, names.schemadn, names.netbiosname, 
+                           names.configdn, DEFAULTSITE, names.serverdn)
+        schemadb.add_ldif(data)
+    except:
+        schemadb.transaction_cancel()
+        raise
+    schemadb.transaction_commit()
 
     if ldap_backend_type == "fedora-ds":
         if ldap_backend_port is not None:
@@ -1483,10 +1483,10 @@ def provision_backend(setup_dir=None, message=None,
 
         ldapuser = "--username=samba-admin"
 
-            
-    schema_command = "bin/ad2oLschema --option=convert:target=" + ldap_backend_type + " -I " + setup_path(mapping) + " -H tdb://" + schemadb_path + " -O " + os.path.join(paths.ldapdir, backend_schema)
-            
-    os.system(schema_command)
+
+    backend_schema_data = schemadb.convert_schema_to_openldap(ldap_backend_type, open(setup_path(mapping), 'r').read())
+    assert backend_schema_data is not None
+    open(os.path.join(paths.ldapdir, backend_schema), 'w').write(backend_schema_data)
 
     message("Your %s Backend for Samba4 is now configured, and is ready to be started" % ldap_backend_type)
     message("Server Role:         %s" % serverrole)
@@ -1649,7 +1649,7 @@ def create_krb5_conf(path, setup_path, dnsdomain, hostname, realm):
 
 
 def load_schema(setup_path, samdb, schemadn, netbiosname, configdn, sitename,
-                serverdn, servername):
+                serverdn):
     """Load schema for the SamDB.
     
     :param samdb: Load a schema into a SamDB.
@@ -1658,9 +1658,10 @@ def load_schema(setup_path, samdb, schemadn, netbiosname, configdn, sitename,
     :param netbiosname: NetBIOS name of the host.
     :param configdn: DN of the configuration
     :param serverdn: DN of the server
-    :param servername: Host name of the server
+
+    Returns the schema data loaded, to avoid double-parsing when then needing to add it to the db
     """
-    schema_data = open(setup_path("schema.ldif"), 'r').read()
+    schema_data = get_schema_data(setup_path, {"SCHEMADN": schemadn})
     schema_data += open(setup_path("schema_samba4.ldif"), 'r').read()
     schema_data = substitute_var(schema_data, {"SCHEMADN": schemadn})
     check_all_substituted(schema_data)
@@ -1675,8 +1676,26 @@ def load_schema(setup_path, samdb, schemadn, netbiosname, configdn, sitename,
                     "DEFAULTSITE": sitename,
                     "PREFIXMAP_B64": prefixmap,
                     "SERVERDN": serverdn,
-                    "SERVERNAME": servername,
     })
     check_all_substituted(head_data)
     samdb.attach_schema_from_ldif(head_data, schema_data)
+    return schema_data;
+
+def get_schema_data(setup_path, subst_vars = None):
+    """Get schema data from the AD schema files instead of schema.ldif.
+
+    :param setup_path: Setup path function.
+    :param subst_vars: Optional variables to substitute in the file.
+
+    Returns the schema data after substitution
+    """ 
 
+    # this data used to be read from schema.ldif
+    
+    data = read_ms_schema(setup_path('ad-schema/MS-AD_Schema_2K8Attributes.txt'),
+                          setup_path('ad-schema/MS-AD_Schema_2K8Classes.txt'))
+
+    if subst_vars is not None:
+        data = substitute_var(data, subst_vars)
+    check_all_substituted(data)
+    return data    
diff --git a/source4/scripting/python/samba/samdb.py b/source4/scripting/python/samba/samdb.py
index b92a91e2ef..17b5450a3e 100644
--- a/source4/scripting/python/samba/samdb.py
+++ b/source4/scripting/python/samba/samdb.py
@@ -199,7 +199,10 @@ userPassword:: %s
         glue.samdb_set_domain_sid(self, sid)
 
     def attach_schema_from_ldif(self, pf, df):
-        glue.dsdb_attach_schema_from_ldif_file(self, pf, df)
+        glue.dsdb_attach_schema_from_ldif(self, pf, df)
+
+    def convert_schema_to_openldap(self, target, mapping):
+        return glue.dsdb_convert_schema_to_openldap(self, target, mapping)
 
     def set_invocation_id(self, invocation_id):
         """Set the invocation id for this SamDB handle.
diff --git a/source4/setup/ad-schema/MS-AD_Schema_Attributes_v20080618.txt b/source4/setup/ad-schema/MS-AD_Schema_2K8Attributes.txt
index ab4f3999bd..c4c1a6ac7b 100644
--- a/source4/setup/ad-schema/MS-AD_Schema_Attributes_v20080618.txt
+++ b/source4/setup/ad-schema/MS-AD_Schema_2K8Attributes.txt
@@ -1,51 +1,13 @@
-# © 2008 Microsoft Corporation. All rights reserved

+#Intellectual Property Rights Notice for Protocol Documentation

+#•	Copyrights. This protocol documentation is covered by Microsoft copyrights. Regardless of any other terms that are contained in the terms of use for the Microsoft website that hosts this documentation, you may make copies of it in order to develop implementations of the protocols, and may distribute portions of it in your implementations of the protocols or your documentation as necessary to properly document the implementation. You may also distribute in your implementation, with or without modification, any schema, IDL’s, or code samples that are included in the documentation. This permission also applies to any documents that are referenced in the protocol documentation. 

+#•	No Trade Secrets. Microsoft does not claim any trade secret rights in this documentation. 

+#•	Patents. Microsoft has patents that may cover your implementations of the protocols. Neither this notice nor Microsoft's delivery of the documentation grants any licenses under those or any other Microsoft patents. However, the protocols may be covered by Microsoft’s Open Specification Promise (available here: http://www.microsoft.com/interop/osp). If you would prefer a written license, or if the protocols are not covered by the OSP, patent licenses are available by contacting protocol@microsoft.com. 

+#•	Trademarks. The names of companies and products contained in this documentation may be covered by trademarks or similar intellectual property rights. This notice does not grant any licenses under those rights. 

+#Reservation of Rights. All other rights are reserved, and this notice does not grant any rights other than specifically described above, whether by implication, estoppel, or otherwise. 

+#Tools. This protocol documentation is intended for use in conjunction with publicly available standard specifications and network programming art, and assumes that the reader either is familiar with the aforementioned material or has immediate access to it. A protocol specification does not require the use of Microsoft programming tools or programming environments in order for you to develop an implementation. If you have access to Microsoft programming tools and environments you are free to take advantage of them.

 #

-# Intellectual Property Rights Notice for Protocol Documentation

-#

-# Copyrights. 

-# This protocol documentation is covered by Microsoft

-# copyrights. Regardless of any other terms that are contained in the

-# terms of use for the Microsoft website that hosts this documentation,

-# you may make copies of it in order to develop implementations of the

-# protocols, and may distribute portions of it in your implementations

-# of the protocols or your documentation as necessary to properly

-# document the implementation. You may also distribute in your

-# implementation, with or without modification, any schema, IDL's, or

-# code samples that are included in the documentation. This permission

-# also applies to any documents that are referenced in the protocol

-# documentation.

-# 

-# No Trade Secrets. 

-# Microsoft does not claim any trade secret rights in this documentation.

-# 

-# Patents. 

-# Microsoft has patents that may cover your implementations of the

-# protocols.  Neither this notice nor Microsoft's delivery of the

-# documentation grants any licenses under those or any other Microsoft

-# patents.  However, the protocols may be covered by MicrosoftÂ’s Open

-# Specification Promise (available here:

-# http://www.microsoft.com/interop/osp).  If you would prefer a written

-# license, or if the protocols are not covered by the OSP, patent

-# licenses are available by contacting protocol@microsoft.com.

-# 

-# Trademarks. 

-# The names of companies and products contained in this documentation

-# may be covered by trademarks or similar intellectual property

-# rights. This notice does not grant any licenses under those

-# rights.Reservation of Rights.  All other rights are reserved, and this

-# notice does not grant any rights other than specifically described

-# above, whether by implication, estoppel, or otherwise.

-# 

-# Tools. 

-# This protocol documentation is intended for use in conjunction with

-# publicly available standard specifications and network programming

-# art, and assumes that the reader either is familiar with the

-# aforementioned material or has immediate access to it.  A protocol

-# specification does not require the use of Microsoft programming tools

-# or programming environments in order for you to develop an

-# implementation.  If you have access to Microsoft programming tools and

-# environments you are free to take advantage of them.

-

+#AD Schema Attributes

+#____________________

 cn: Account-Expires

 ldapDisplayName: accountExpires

 attributeId: 1.2.840.113556.1.4.159

@@ -70,6 +32,17 @@ systemOnly: FALSE
 searchFlags: 0

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

+cn: carLicense

+ldapDisplayName: carLicense

+attributeId: 2.16.840.1.113730.3.1.1

+attributeSyntax: 2.5.5.12

+omSyntax: 64

+isSingleValued: FALSE

+schemaIdGuid: d4159c92-957d-4a87-8a67-8d2934e01649

+systemOnly: FALSE

+searchFlags: 0

+showInAdvancedViewOnly: FALSE

+

 cn: Catalogs

 ldapDisplayName: catalogs

 attributeId: 1.2.840.113556.1.4.675

@@ -177,6 +150,17 @@ systemOnly: FALSE
 searchFlags: 0

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

+cn: ACS-Enable-RSVP-Accounting

+ldapDisplayName: aCSEnableRSVPAccounting

+attributeId: 1.2.840.113556.1.4.899

+attributeSyntax: 2.5.5.8

+omSyntax: 1

+isSingleValued: TRUE

+schemaIdGuid: f072230e-aef5-11d1-bdcf-0000f80367c1

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: Common-Name

 ldapDisplayName: cn

 attributeId: 2.5.4.3

@@ -194,17 +178,6 @@ isMemberOfPartialAttributeSet: TRUE
 systemFlags: FLAG_SCHEMA_BASE_OBJECT |FLAG_ATTR_REQ_PARTIAL_SET_MEMBER

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

-cn: ACS-Enable-RSVP-Accounting

-ldapDisplayName: aCSEnableRSVPAccounting

-attributeId: 1.2.840.113556.1.4.899

-attributeSyntax: 2.5.5.8

-omSyntax: 1

-isSingleValued: TRUE

-schemaIdGuid: f072230e-aef5-11d1-bdcf-0000f80367c1

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: Text-Country

 ldapDisplayName: co

 attributeId: 1.2.840.113556.1.2.131

@@ -322,6 +295,17 @@ systemOnly: FALSE
 searchFlags: 0

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

+cn: ACS-Enable-RSVP-Message-Logging

+ldapDisplayName: aCSEnableRSVPMessageLogging

+attributeId: 1.2.840.113556.1.4.768

+attributeSyntax: 2.5.5.8

+omSyntax: 1

+isSingleValued: TRUE

+schemaIdGuid: 7f561285-5301-11d1-a9c5-0000f80367c1

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: COM-Treat-As-Class-Id

 ldapDisplayName: cOMTreatAsClassId

 attributeId: 1.2.840.113556.1.4.251

@@ -335,17 +319,6 @@ rangeLower: 36
 rangeUpper: 36

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: ACS-Enable-RSVP-Message-Logging

-ldapDisplayName: aCSEnableRSVPMessageLogging

-attributeId: 1.2.840.113556.1.4.768

-attributeSyntax: 2.5.5.8

-omSyntax: 1

-isSingleValued: TRUE

-schemaIdGuid: 7f561285-5301-11d1-a9c5-0000f80367c1

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: COM-Typelib-Id

 ldapDisplayName: cOMTypelibId

 attributeId: 1.2.840.113556.1.4.254

@@ -454,20 +427,9 @@ isSingleValued: TRUE
 schemaIdGuid: 2df90d73-009f-11d2-aa4c-00c04fd7d83a

 systemOnly: TRUE

 searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED

+systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED |FLAG_DOMAIN_DISALLOW_RENAME

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

-cn: Create-Wizard-Ext

-ldapDisplayName: createWizardExt

-attributeId: 1.2.840.113556.1.4.812

-attributeSyntax: 2.5.5.12

-omSyntax: 64

-isSingleValued: FALSE

-schemaIdGuid: 2b09958b-8931-11d1-aebc-0000f80367c1

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: ACS-Event-Log-Level

 ldapDisplayName: aCSEventLogLevel

 attributeId: 1.2.840.113556.1.4.769

@@ -479,6 +441,17 @@ systemOnly: FALSE
 searchFlags: 0

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

+cn: Create-Wizard-Ext

+ldapDisplayName: createWizardExt

+attributeId: 1.2.840.113556.1.4.812

+attributeSyntax: 2.5.5.12

+omSyntax: 64

+isSingleValued: FALSE

+schemaIdGuid: 2b09958b-8931-11d1-aebc-0000f80367c1

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: Creation-Time

 ldapDisplayName: creationTime

 attributeId: 1.2.840.113556.1.4.26

@@ -587,6 +560,17 @@ searchFlags: 0
 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

+cn: ACS-Identity-Name

+ldapDisplayName: aCSIdentityName

+attributeId: 1.2.840.113556.1.4.784

+attributeSyntax: 2.5.5.12

+omSyntax: 64

+isSingleValued: FALSE

+schemaIdGuid: dab029b6-ddf7-11d1-90a5-00c04fd91ab1

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: Curr-Machine-Id

 ldapDisplayName: currMachineId

 attributeId: 1.2.840.113556.1.4.337

@@ -600,17 +584,6 @@ rangeLower: 16
 rangeUpper: 16

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: ACS-Identity-Name

-ldapDisplayName: aCSIdentityName

-attributeId: 1.2.840.113556.1.4.784

-attributeSyntax: 2.5.5.12

-omSyntax: 64

-isSingleValued: FALSE

-schemaIdGuid: dab029b6-ddf7-11d1-90a5-00c04fd91ab1

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: DBCS-Pwd

 ldapDisplayName: dBCSPwd

 attributeId: 1.2.840.113556.1.4.55

@@ -724,6 +697,17 @@ rangeUpper: 32767
 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

+cn: ACS-Max-Aggregate-Peak-Rate-Per-User

+ldapDisplayName: aCSMaxAggregatePeakRatePerUser

+attributeId: 1.2.840.113556.1.4.897

+attributeSyntax: 2.5.5.16

+omSyntax: 65

+isSingleValued: TRUE

+schemaIdGuid: f072230c-aef5-11d1-bdcf-0000f80367c1

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: Delta-Revocation-List

 ldapDisplayName: deltaRevocationList

 attributeId: 2.5.4.53

@@ -736,17 +720,6 @@ searchFlags: 0
 rangeUpper: 10485760

 mapiID: 35910

 

-cn: ACS-Max-Aggregate-Peak-Rate-Per-User

-ldapDisplayName: aCSMaxAggregatePeakRatePerUser

-attributeId: 1.2.840.113556.1.4.897

-attributeSyntax: 2.5.5.16

-omSyntax: 65

-isSingleValued: TRUE

-schemaIdGuid: f072230c-aef5-11d1-bdcf-0000f80367c1

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: Department

 ldapDisplayName: department

 attributeId: 1.2.840.113556.1.2.141

@@ -859,17 +832,6 @@ systemOnly: FALSE
 searchFlags: 0

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: dhcp-MaxKey

-ldapDisplayName: dhcpMaxKey

-attributeId: 1.2.840.113556.1.4.719

-attributeSyntax: 2.5.5.16

-omSyntax: 65

-isSingleValued: TRUE

-schemaIdGuid: 963d2754-48be-11d1-a9c3-0000f80367c1

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: ACS-Max-Duration-Per-Flow

 ldapDisplayName: aCSMaxDurationPerFlow

 attributeId: 1.2.840.113556.1.4.761

@@ -881,6 +843,17 @@ systemOnly: FALSE
 searchFlags: 0

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

+cn: dhcp-MaxKey

+ldapDisplayName: dhcpMaxKey

+attributeId: 1.2.840.113556.1.4.719

+attributeSyntax: 2.5.5.16

+omSyntax: 65

+isSingleValued: TRUE

+schemaIdGuid: 963d2754-48be-11d1-a9c3-0000f80367c1

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: dhcp-Obj-Description

 ldapDisplayName: dhcpObjDescription

 attributeId: 1.2.840.113556.1.4.703

@@ -981,17 +954,6 @@ systemOnly: FALSE
 searchFlags: 0

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: dhcp-Subnets

-ldapDisplayName: dhcpSubnets

-attributeId: 1.2.840.113556.1.4.705

-attributeSyntax: 2.5.5.5

-omSyntax: 19

-isSingleValued: FALSE

-schemaIdGuid: 963d2746-48be-11d1-a9c3-0000f80367c1

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: ACS-Maximum-SDU-Size

 ldapDisplayName: aCSMaximumSDUSize

 attributeId: 1.2.840.113556.1.4.1314

@@ -1003,6 +965,17 @@ systemOnly: FALSE
 searchFlags: 0

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

+cn: dhcp-Subnets

+ldapDisplayName: dhcpSubnets

+attributeId: 1.2.840.113556.1.4.705

+attributeSyntax: 2.5.5.5

+omSyntax: 19

+isSingleValued: FALSE

+schemaIdGuid: 963d2746-48be-11d1-a9c3-0000f80367c1

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: dhcp-Type

 ldapDisplayName: dhcpType

 attributeId: 1.2.840.113556.1.4.699

@@ -1108,7 +1081,7 @@ isSingleValued: FALSE
 schemaIdGuid: 9a7ad946-ca53-11d1-bbd0-0080c76670c0

 systemOnly: TRUE

 searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED

+systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED |FLAG_DOMAIN_DISALLOW_RENAME

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

 cn: Division

@@ -1125,6 +1098,17 @@ rangeUpper: 256
 attributeSecurityGuid: e48d0154-bcf8-11d1-8702-00c04fb96050

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

+cn: ACS-Max-No-Of-Account-Files

+ldapDisplayName: aCSMaxNoOfAccountFiles

+attributeId: 1.2.840.113556.1.4.901

+attributeSyntax: 2.5.5.9

+omSyntax: 2

+isSingleValued: TRUE

+schemaIdGuid: f0722310-aef5-11d1-bdcf-0000f80367c1

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: DMD-Location

 ldapDisplayName: dMDLocation

 attributeId: 1.2.840.113556.1.2.36

@@ -1138,17 +1122,6 @@ searchFlags: 0
 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

-cn: ACS-Max-No-Of-Account-Files

-ldapDisplayName: aCSMaxNoOfAccountFiles

-attributeId: 1.2.840.113556.1.4.901

-attributeSyntax: 2.5.5.9

-omSyntax: 2

-isSingleValued: TRUE

-schemaIdGuid: f0722310-aef5-11d1-bdcf-0000f80367c1

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: DMD-Name

 ldapDisplayName: dmdName

 attributeId: 1.2.840.113556.1.2.598

@@ -1261,24 +1234,24 @@ rangeUpper: 255
 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

-cn: Dns-Secure-Secondaries

-ldapDisplayName: dnsSecureSecondaries

-attributeId: 1.2.840.113556.1.4.380

+cn: ACS-Max-No-Of-Log-Files

+ldapDisplayName: aCSMaxNoOfLogFiles

+attributeId: 1.2.840.113556.1.4.774

 attributeSyntax: 2.5.5.9

 omSyntax: 2

-isSingleValued: FALSE

-schemaIdGuid: e0fa1e67-9b45-11d0-afdd-00c04fd930c9

+isSingleValued: TRUE

+schemaIdGuid: 1cb3559c-56d0-11d1-a9c6-0000f80367c1

 systemOnly: FALSE

 searchFlags: 0

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: ACS-Max-No-Of-Log-Files

-ldapDisplayName: aCSMaxNoOfLogFiles

-attributeId: 1.2.840.113556.1.4.774

+cn: Dns-Secure-Secondaries

+ldapDisplayName: dnsSecureSecondaries

+attributeId: 1.2.840.113556.1.4.380

 attributeSyntax: 2.5.5.9

 omSyntax: 2

-isSingleValued: TRUE

-schemaIdGuid: 1cb3559c-56d0-11d1-a9c6-0000f80367c1

+isSingleValued: FALSE

+schemaIdGuid: e0fa1e67-9b45-11d0-afdd-00c04fd930c9

 systemOnly: FALSE

 searchFlags: 0

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

@@ -1390,18 +1363,6 @@ searchFlags: 0
 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

-cn: Domain-ID

-ldapDisplayName: domainID

-attributeId: 1.2.840.113556.1.4.686

-attributeSyntax: 2.5.5.1

-omSyntax: 127

-omObjectClass: 1.3.12.2.1011.28.0.714

-isSingleValued: TRUE

-schemaIdGuid: 963d2734-48be-11d1-a9c3-0000f80367c1

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: Account-Name-History

 ldapDisplayName: accountNameHistory

 attributeId: 1.2.840.113556.1.4.1307

@@ -1424,6 +1385,18 @@ systemOnly: FALSE
 searchFlags: 0

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

+cn: Domain-ID

+ldapDisplayName: domainID

+attributeId: 1.2.840.113556.1.4.686

+attributeSyntax: 2.5.5.1

+omSyntax: 127

+omObjectClass: 1.3.12.2.1011.28.0.714

+isSingleValued: TRUE

+schemaIdGuid: 963d2734-48be-11d1-a9c3-0000f80367c1

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: Domain-Identifier

 ldapDisplayName: domainIdentifier

 attributeId: 1.2.840.113556.1.4.755

@@ -1535,6 +1508,17 @@ mapiID: 32887
 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

+cn: ACS-Max-Peak-Bandwidth-Per-Flow

+ldapDisplayName: aCSMaxPeakBandwidthPerFlow

+attributeId: 1.2.840.113556.1.4.759

+attributeSyntax: 2.5.5.16

+omSyntax: 65

+isSingleValued: TRUE

+schemaIdGuid: 7f56127c-5301-11d1-a9c5-0000f80367c1

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: DS-Core-Propagation-Data

 ldapDisplayName: dSCorePropagationData

 attributeId: 1.2.840.113556.1.4.1357

@@ -1548,17 +1532,6 @@ isMemberOfPartialAttributeSet: TRUE
 systemFlags: FLAG_SCHEMA_BASE_OBJECT |FLAG_ATTR_REQ_PARTIAL_SET_MEMBER | FLAG_ATTR_NOT_REPLICATED

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

-cn: ACS-Max-Peak-Bandwidth-Per-Flow

-ldapDisplayName: aCSMaxPeakBandwidthPerFlow

-attributeId: 1.2.840.113556.1.4.759

-attributeSyntax: 2.5.5.16

-omSyntax: 65

-isSingleValued: TRUE

-schemaIdGuid: 7f56127c-5301-11d1-a9c5-0000f80367c1

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: DS-Heuristics

 ldapDisplayName: dSHeuristics

 attributeId: 1.2.840.113556.1.2.212

@@ -1654,7 +1627,6 @@ searchFlags: 0
 rangeLower: 1

 rangeUpper: 512

 mapiID: 35943

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

 cn: Employee-Type

 ldapDisplayName: employeeType

@@ -1668,6 +1640,16 @@ searchFlags: fCOPY
 rangeLower: 1

 rangeUpper: 256

 mapiID: 35945

+

+cn: ACS-Max-Size-Of-RSVP-Account-File

+ldapDisplayName: aCSMaxSizeOfRSVPAccountFile

+attributeId: 1.2.840.113556.1.4.902

+attributeSyntax: 2.5.5.9

+omSyntax: 2

+isSingleValued: TRUE

+schemaIdGuid: f0722311-aef5-11d1-bdcf-0000f80367c1

+systemOnly: FALSE

+searchFlags: 0

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

 cn: Enabled

@@ -1683,17 +1665,6 @@ mapiID: 35873
 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

-cn: ACS-Max-Size-Of-RSVP-Account-File

-ldapDisplayName: aCSMaxSizeOfRSVPAccountFile

-attributeId: 1.2.840.113556.1.4.902

-attributeSyntax: 2.5.5.9

-omSyntax: 2

-isSingleValued: TRUE

-schemaIdGuid: f0722311-aef5-11d1-bdcf-0000f80367c1

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: Enabled-Connection

 ldapDisplayName: enabledConnection

 attributeId: 1.2.840.113556.1.4.36

@@ -1739,7 +1710,7 @@ isSingleValued: FALSE
 schemaIdGuid: 9a7ad947-ca53-11d1-bbd0-0080c76670c0

 systemOnly: TRUE

 searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED

+systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED |FLAG_DOMAIN_DISALLOW_RENAME

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

 cn: Extended-Chars-Allowed

@@ -1754,7 +1725,6 @@ searchFlags: 0
 mapiID: 32935

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

-systemOnly: TRUE

 

 cn: Extended-Class-Info

 ldapDisplayName: extendedClassInfo

@@ -1765,7 +1735,7 @@ isSingleValued: FALSE
 schemaIdGuid: 9a7ad948-ca53-11d1-bbd0-0080c76670c0

 systemOnly: TRUE

 searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED

+systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED |FLAG_DOMAIN_DISALLOW_RENAME

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

 cn: Extension-Name

@@ -1808,17 +1778,6 @@ attributeSecurityGuid: 77b5b886-944a-11d1-aebd-0000f80367c1
 mapiID: 14883

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: File-Ext-Priority

-ldapDisplayName: fileExtPriority

-attributeId: 1.2.840.113556.1.4.816

-attributeSyntax: 2.5.5.12

-omSyntax: 64

-isSingleValued: FALSE

-schemaIdGuid: d9e18315-8939-11d1-aebc-0000f80367c1

-systemOnly: FALSE

-searchFlags: fATTINDEX

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: ACS-Max-Size-Of-RSVP-Log-File

 ldapDisplayName: aCSMaxSizeOfRSVPLogFile

 attributeId: 1.2.840.113556.1.4.775

@@ -1830,6 +1789,17 @@ systemOnly: FALSE
 searchFlags: 0

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

+cn: File-Ext-Priority

+ldapDisplayName: fileExtPriority

+attributeId: 1.2.840.113556.1.4.816

+attributeSyntax: 2.5.5.12

+omSyntax: 64

+isSingleValued: FALSE

+schemaIdGuid: d9e18315-8939-11d1-aebc-0000f80367c1

+systemOnly: FALSE

+searchFlags: fATTINDEX

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: Flags

 ldapDisplayName: flags

 attributeId: 1.2.840.113556.1.4.38

@@ -1898,7 +1868,7 @@ isSingleValued: FALSE
 schemaIdGuid: 9a7ad949-ca53-11d1-bbd0-0080c76670c0

 systemOnly: TRUE

 searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED

+systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED |FLAG_DOMAIN_DISALLOW_RENAME

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

 cn: From-Server

@@ -1941,6 +1911,17 @@ searchFlags: 0
 linkID: 103

 systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_NOT_REPLICATED

 

+cn: ACS-Max-Token-Bucket-Per-Flow

+ldapDisplayName: aCSMaxTokenBucketPerFlow

+attributeId: 1.2.840.113556.1.4.1313

+attributeSyntax: 2.5.5.16

+omSyntax: 65

+isSingleValued: TRUE

+schemaIdGuid: 81f6e0df-3b90-11d2-90cc-00c04fd91ab1

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: FRS-Control-Data-Creation

 ldapDisplayName: fRSControlDataCreation

 attributeId: 1.2.840.113556.1.4.871

@@ -1954,17 +1935,6 @@ rangeLower: 0
 rangeUpper: 32

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: ACS-Max-Token-Bucket-Per-Flow

-ldapDisplayName: aCSMaxTokenBucketPerFlow

-attributeId: 1.2.840.113556.1.4.1313

-attributeSyntax: 2.5.5.16

-omSyntax: 65

-isSingleValued: TRUE

-schemaIdGuid: 81f6e0df-3b90-11d2-90cc-00c04fd91ab1

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: FRS-Control-Inbound-Backlog

 ldapDisplayName: fRSControlInboundBacklog

 attributeId: 1.2.840.113556.1.4.872

@@ -2076,6 +2046,17 @@ systemOnly: FALSE
 searchFlags: 0

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

+cn: ACS-Max-Token-Rate-Per-Flow

+ldapDisplayName: aCSMaxTokenRatePerFlow

+attributeId: 1.2.840.113556.1.4.758

+attributeSyntax: 2.5.5.16

+omSyntax: 65

+isSingleValued: TRUE

+schemaIdGuid: 7f56127b-5301-11d1-a9c5-0000f80367c1

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: FRS-Member-Reference

 ldapDisplayName: fRSMemberReference

 attributeId: 1.2.840.113556.1.4.875

@@ -2090,17 +2071,6 @@ linkID: 104
 isMemberOfPartialAttributeSet: TRUE

 systemFlags: FLAG_SCHEMA_BASE_OBJECT |FLAG_ATTR_REQ_PARTIAL_SET_MEMBER

 

-cn: ACS-Max-Token-Rate-Per-Flow

-ldapDisplayName: aCSMaxTokenRatePerFlow

-attributeId: 1.2.840.113556.1.4.758

-attributeSyntax: 2.5.5.16

-omSyntax: 65

-isSingleValued: TRUE

-schemaIdGuid: 7f56127b-5301-11d1-a9c5-0000f80367c1

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: FRS-Member-Reference-BL

 ldapDisplayName: fRSMemberReferenceBL

 attributeId: 1.2.840.113556.1.4.876

@@ -2214,6 +2184,17 @@ rangeLower: 0
 rangeUpper: 512

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

+cn: ACS-Minimum-Delay-Variation

+ldapDisplayName: aCSMinimumDelayVariation

+attributeId: 1.2.840.113556.1.4.1317

+attributeSyntax: 2.5.5.16

+omSyntax: 65

+isSingleValued: TRUE

+schemaIdGuid: 9c65329b-3b90-11d2-90cc-00c04fd91ab1

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: FRS-Staging-Path

 ldapDisplayName: fRSStagingPath

 attributeId: 1.2.840.113556.1.4.488

@@ -2227,17 +2208,6 @@ rangeLower: 0
 rangeUpper: 2048

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: ACS-Minimum-Delay-Variation

-ldapDisplayName: aCSMinimumDelayVariation

-attributeId: 1.2.840.113556.1.4.1317

-attributeSyntax: 2.5.5.16

-omSyntax: 65

-isSingleValued: TRUE

-schemaIdGuid: 9c65329b-3b90-11d2-90cc-00c04fd91ab1

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: FRS-Time-Last-Command

 ldapDisplayName: fRSTimeLastCommand

 attributeId: 1.2.840.113556.1.4.880

@@ -2347,17 +2317,6 @@ systemOnly: FALSE
 searchFlags: 0

 rangeUpper: 10240

 

-cn: Generated-Connection

-ldapDisplayName: generatedConnection

-attributeId: 1.2.840.113556.1.4.41

-attributeSyntax: 2.5.5.8

-omSyntax: 1

-isSingleValued: TRUE

-schemaIdGuid: bf96797a-0de6-11d0-a285-00aa003049e2

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: ACS-Minimum-Latency

 ldapDisplayName: aCSMinimumLatency

 attributeId: 1.2.840.113556.1.4.1316

@@ -2369,6 +2328,17 @@ systemOnly: FALSE
 searchFlags: 0

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

+cn: Generated-Connection

+ldapDisplayName: generatedConnection

+attributeId: 1.2.840.113556.1.4.41

+attributeSyntax: 2.5.5.8

+omSyntax: 1

+isSingleValued: TRUE

+schemaIdGuid: bf96797a-0de6-11d0-a285-00aa003049e2

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: Generation-Qualifier

 ldapDisplayName: generationQualifier

 attributeId: 2.5.4.44

@@ -2482,6 +2452,17 @@ systemOnly: FALSE
 searchFlags: 0

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

+cn: ACS-Minimum-Policed-Size

+ldapDisplayName: aCSMinimumPolicedSize

+attributeId: 1.2.840.113556.1.4.1315

+attributeSyntax: 2.5.5.16

+omSyntax: 65

+isSingleValued: TRUE

+schemaIdGuid: 8d0e7195-3b90-11d2-90cc-00c04fd91ab1

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: GPC-User-Extension-Names

 ldapDisplayName: gPCUserExtensionNames

 attributeId: 1.2.840.113556.1.4.1349

@@ -2504,17 +2485,6 @@ systemOnly: FALSE
 searchFlags: 0

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: ACS-Minimum-Policed-Size

-ldapDisplayName: aCSMinimumPolicedSize

-attributeId: 1.2.840.113556.1.4.1315

-attributeSyntax: 2.5.5.16

-omSyntax: 65

-isSingleValued: TRUE

-schemaIdGuid: 8d0e7195-3b90-11d2-90cc-00c04fd91ab1

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: GP-Link

 ldapDisplayName: gPLink

 attributeId: 1.2.840.113556.1.4.891

@@ -2610,6 +2580,17 @@ mapiID: 32950
 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

+cn: ACS-Non-Reserved-Max-SDU-Size

+ldapDisplayName: aCSNonReservedMaxSDUSize

+attributeId: 1.2.840.113556.1.4.1320

+attributeSyntax: 2.5.5.16

+omSyntax: 65

+isSingleValued: TRUE

+schemaIdGuid: aec2cfe3-3b90-11d2-90cc-00c04fd91ab1

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: Has-Partial-Replica-NCs

 ldapDisplayName: hasPartialReplicaNCs

 attributeId: 1.2.840.113556.1.2.15

@@ -2640,17 +2621,6 @@ mapiID: 32826
 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

-cn: ACS-Non-Reserved-Max-SDU-Size

-ldapDisplayName: aCSNonReservedMaxSDUSize

-attributeId: 1.2.840.113556.1.4.1320

-attributeSyntax: 2.5.5.16

-omSyntax: 65

-isSingleValued: TRUE

-schemaIdGuid: aec2cfe3-3b90-11d2-90cc-00c04fd91ab1

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: Help-Data32

 ldapDisplayName: helpData32

 attributeId: 1.2.840.113556.1.2.9

@@ -2746,7 +2716,6 @@ rangeLower: 1
 rangeUpper: 4096

 attributeSecurityGuid: 77b5b886-944a-11d1-aebd-0000f80367c1

 mapiID: 14941

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

 cn: host

 ldapDisplayName: host

@@ -2760,6 +2729,28 @@ searchFlags: 0
 rangeLower: 1

 rangeUpper: 256

 

+cn: ACS-Aggregate-Token-Rate-Per-User

+ldapDisplayName: aCSAggregateTokenRatePerUser

+attributeId: 1.2.840.113556.1.4.760

+attributeSyntax: 2.5.5.16

+omSyntax: 65

+isSingleValued: TRUE

+schemaIdGuid: 7f56127d-5301-11d1-a9c5-0000f80367c1

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

+cn: ACS-Non-Reserved-Min-Policed-Size

+ldapDisplayName: aCSNonReservedMinPolicedSize

+attributeId: 1.2.840.113556.1.4.1321

+attributeSyntax: 2.5.5.16

+omSyntax: 65

+isSingleValued: TRUE

+schemaIdGuid: b6873917-3b90-11d2-90cc-00c04fd91ab1

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: houseIdentifier

 ldapDisplayName: houseIdentifier

 attributeId: 2.5.4.51

@@ -2785,28 +2776,6 @@ rangeLower: 0
 rangeUpper: 2048

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: ACS-Aggregate-Token-Rate-Per-User

-ldapDisplayName: aCSAggregateTokenRatePerUser

-attributeId: 1.2.840.113556.1.4.760

-attributeSyntax: 2.5.5.16

-omSyntax: 65

-isSingleValued: TRUE

-schemaIdGuid: 7f56127d-5301-11d1-a9c5-0000f80367c1

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

-cn: ACS-Non-Reserved-Min-Policed-Size

-ldapDisplayName: aCSNonReservedMinPolicedSize

-attributeId: 1.2.840.113556.1.4.1321

-attributeSyntax: 2.5.5.16

-omSyntax: 65

-isSingleValued: TRUE

-schemaIdGuid: b6873917-3b90-11d2-90cc-00c04fd91ab1

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: Implemented-Categories

 ldapDisplayName: implementedCategories

 attributeId: 1.2.840.113556.1.4.320

@@ -2910,6 +2879,17 @@ isMemberOfPartialAttributeSet: TRUE
 systemFlags: FLAG_SCHEMA_BASE_OBJECT |FLAG_ATTR_REQ_PARTIAL_SET_MEMBER

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

+cn: ACS-Non-Reserved-Peak-Rate

+ldapDisplayName: aCSNonReservedPeakRate

+attributeId: 1.2.840.113556.1.4.1318

+attributeSyntax: 2.5.5.16

+omSyntax: 65

+isSingleValued: TRUE

+schemaIdGuid: a331a73f-3b90-11d2-90cc-00c04fd91ab1

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: International-ISDN-Number

 ldapDisplayName: internationalISDNNumber

 attributeId: 2.5.4.25

@@ -2937,17 +2917,6 @@ searchFlags: 0
 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

-cn: ACS-Non-Reserved-Peak-Rate

-ldapDisplayName: aCSNonReservedPeakRate

-attributeId: 1.2.840.113556.1.4.1318

-attributeSyntax: 2.5.5.16

-omSyntax: 65

-isSingleValued: TRUE

-schemaIdGuid: a331a73f-3b90-11d2-90cc-00c04fd91ab1

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: Inter-Site-Topology-Generator

 ldapDisplayName: interSiteTopologyGenerator

 attributeId: 1.2.840.113556.1.4.1246

@@ -3043,6 +3012,17 @@ schemaIdGuid: ebf5c6eb-0e2d-4415-9670-1081993b4211
 systemOnly: FALSE

 searchFlags: 0

 

+cn: ACS-Non-Reserved-Token-Size

+ldapDisplayName: aCSNonReservedTokenSize

+attributeId: 1.2.840.113556.1.4.1319

+attributeSyntax: 2.5.5.16

+omSyntax: 65

+isSingleValued: TRUE

+schemaIdGuid: a916d7c9-3b90-11d2-90cc-00c04fd91ab1

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: Ipsec-Data

 ldapDisplayName: ipsecData

 attributeId: 1.2.840.113556.1.4.623

@@ -3065,17 +3045,6 @@ systemOnly: FALSE
 searchFlags: 0

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: ACS-Non-Reserved-Token-Size

-ldapDisplayName: aCSNonReservedTokenSize

-attributeId: 1.2.840.113556.1.4.1319

-attributeSyntax: 2.5.5.16

-omSyntax: 65

-isSingleValued: TRUE

-schemaIdGuid: a916d7c9-3b90-11d2-90cc-00c04fd91ab1

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: Ipsec-Filter-Reference

 ldapDisplayName: ipsecFilterReference

 attributeId: 1.2.840.113556.1.4.629

@@ -3168,6 +3137,17 @@ systemOnly: FALSE
 searchFlags: 0

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

+cn: ACS-Non-Reserved-Tx-Limit

+ldapDisplayName: aCSNonReservedTxLimit

+attributeId: 1.2.840.113556.1.4.780

+attributeSyntax: 2.5.5.16

+omSyntax: 65

+isSingleValued: TRUE

+schemaIdGuid: 1cb355a2-56d0-11d1-a9c6-0000f80367c1

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: Ipsec-Owners-Reference

 ldapDisplayName: ipsecOwnersReference

 attributeId: 1.2.840.113556.1.4.624

@@ -3192,17 +3172,6 @@ systemOnly: FALSE
 searchFlags: 0

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: ACS-Non-Reserved-Tx-Limit

-ldapDisplayName: aCSNonReservedTxLimit

-attributeId: 1.2.840.113556.1.4.780

-attributeSyntax: 2.5.5.16

-omSyntax: 65

-isSingleValued: TRUE

-schemaIdGuid: 1cb355a2-56d0-11d1-a9c6-0000f80367c1

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: IpServicePort

 ldapDisplayName: ipServicePort

 attributeId: 1.3.6.1.1.1.1.15

@@ -3298,6 +3267,17 @@ searchFlags: 0
 linkID: 71

 systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_NOT_REPLICATED

 

+cn: ACS-Non-Reserved-Tx-Size

+ldapDisplayName: aCSNonReservedTxSize

+attributeId: 1.2.840.113556.1.4.898

+attributeSyntax: 2.5.5.16

+omSyntax: 65

+isSingleValued: TRUE

+schemaIdGuid: f072230d-aef5-11d1-bdcf-0000f80367c1

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: Is-Single-Valued

 ldapDisplayName: isSingleValued

 attributeId: 1.2.840.113556.1.2.33

@@ -3322,17 +3302,6 @@ systemOnly: FALSE
 searchFlags: 0

 showInAdvancedViewOnly: FALSE

 

-cn: ACS-Non-Reserved-Tx-Size

-ldapDisplayName: aCSNonReservedTxSize

-attributeId: 1.2.840.113556.1.4.898

-attributeSyntax: 2.5.5.16

-omSyntax: 65

-isSingleValued: TRUE

-schemaIdGuid: f072230d-aef5-11d1-bdcf-0000f80367c1

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: Keywords

 ldapDisplayName: keywords

 attributeId: 1.2.840.113556.1.4.48

@@ -3422,6 +3391,17 @@ searchFlags: 0
 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

+cn: ACS-Permission-Bits

+ldapDisplayName: aCSPermissionBits

+attributeId: 1.2.840.113556.1.4.765

+attributeSyntax: 2.5.5.16

+omSyntax: 65

+isSingleValued: TRUE

+schemaIdGuid: 7f561282-5301-11d1-a9c5-0000f80367c1

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: Last-Logoff

 ldapDisplayName: lastLogoff

 attributeId: 1.2.840.113556.1.4.51

@@ -3456,22 +3436,11 @@ omSyntax: 65
 isSingleValued: TRUE

 schemaIdGuid: c0e20a04-0e5a-4ff3-9482-5efeaecd7060

 systemOnly: FALSE

-searchFlags: 0

+searchFlags: fATTINDEX

 attributeSecurityGuid: 5f202010-79a5-11d0-9020-00c04fc2d4cf

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

-cn: ACS-Permission-Bits

-ldapDisplayName: aCSPermissionBits

-attributeId: 1.2.840.113556.1.4.765

-attributeSyntax: 2.5.5.16

-omSyntax: 65

-isSingleValued: TRUE

-schemaIdGuid: 7f561282-5301-11d1-a9c5-0000f80367c1

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: Last-Set-Time

 ldapDisplayName: lastSetTime

 attributeId: 1.2.840.113556.1.4.53

@@ -3557,6 +3526,17 @@ systemOnly: FALSE
 searchFlags: 0

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

+cn: ACS-Policy-Name

+ldapDisplayName: aCSPolicyName

+attributeId: 1.2.840.113556.1.4.772

+attributeSyntax: 2.5.5.12

+omSyntax: 64

+isSingleValued: TRUE

+schemaIdGuid: 1cb3559a-56d0-11d1-a9c6-0000f80367c1

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: Legacy-Exchange-DN

 ldapDisplayName: legacyExchangeDN

 attributeId: 1.2.840.113556.1.4.655

@@ -3597,17 +3577,6 @@ rangeLower: 0
 rangeUpper: 16

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: ACS-Policy-Name

-ldapDisplayName: aCSPolicyName

-attributeId: 1.2.840.113556.1.4.772

-attributeSyntax: 2.5.5.12

-omSyntax: 64

-isSingleValued: TRUE

-schemaIdGuid: 1cb3559a-56d0-11d1-a9c6-0000f80367c1

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: Lm-Pwd-History

 ldapDisplayName: lmPwdHistory

 attributeId: 1.2.840.113556.1.4.160

@@ -3692,6 +3661,17 @@ rangeUpper: 1024
 isMemberOfPartialAttributeSet: TRUE

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

+cn: ACS-Priority

+ldapDisplayName: aCSPriority

+attributeId: 1.2.840.113556.1.4.764

+attributeSyntax: 2.5.5.9

+omSyntax: 2

+isSingleValued: TRUE

+schemaIdGuid: 7f561281-5301-11d1-a9c5-0000f80367c1

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: Lockout-Duration

 ldapDisplayName: lockoutDuration

 attributeId: 1.2.840.113556.1.4.60

@@ -3732,17 +3712,6 @@ attributeSecurityGuid: c7407360-20bf-11d0-a768-00aa006e0529
 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

-cn: ACS-Priority

-ldapDisplayName: aCSPriority

-attributeId: 1.2.840.113556.1.4.764

-attributeSyntax: 2.5.5.9

-omSyntax: 2

-isSingleValued: TRUE

-schemaIdGuid: 7f561281-5301-11d1-a9c5-0000f80367c1

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: Lockout-Time

 ldapDisplayName: lockoutTime

 attributeId: 1.2.840.113556.1.4.662

@@ -3964,6 +3933,17 @@ mapiID: 32792
 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

+cn: ACS-Cache-Timeout

+ldapDisplayName: aCSCacheTimeout

+attributeId: 1.2.840.113556.1.4.779

+attributeSyntax: 2.5.5.9

+omSyntax: 2

+isSingleValued: TRUE

+schemaIdGuid: 1cb355a1-56d0-11d1-a9c6-0000f80367c1

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: Address-Type

 ldapDisplayName: addressType

 attributeId: 1.2.840.113556.1.2.350

@@ -3979,17 +3959,6 @@ mapiID: 32840
 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

-cn: ACS-Cache-Timeout

-ldapDisplayName: aCSCacheTimeout

-attributeId: 1.2.840.113556.1.4.779

-attributeSyntax: 2.5.5.9

-omSyntax: 2

-isSingleValued: TRUE

-schemaIdGuid: 1cb355a1-56d0-11d1-a9c6-0000f80367c1

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: Admin-Context-Menu

 ldapDisplayName: adminContextMenu

 attributeId: 1.2.840.113556.1.4.614

@@ -4075,7 +4044,7 @@ schemaIdGuid: 9a7ad940-ca53-11d1-bbd0-0080c76670c0
 systemOnly: TRUE

 searchFlags: 0

 attributeSecurityGuid: e48d0154-bcf8-11d1-8702-00c04fb96050

-systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED

+systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED |FLAG_DOMAIN_DISALLOW_RENAME

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

 cn: Allowed-Attributes-Effective

@@ -4088,7 +4057,7 @@ schemaIdGuid: 9a7ad941-ca53-11d1-bbd0-0080c76670c0
 systemOnly: TRUE

 searchFlags: 0

 attributeSecurityGuid: e48d0154-bcf8-11d1-8702-00c04fb96050

-systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED

+systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED |FLAG_DOMAIN_DISALLOW_RENAME

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

 cn: Allowed-Child-Classes

@@ -4101,9 +4070,20 @@ schemaIdGuid: 9a7ad942-ca53-11d1-bbd0-0080c76670c0
 systemOnly: TRUE

 searchFlags: 0

 attributeSecurityGuid: e48d0154-bcf8-11d1-8702-00c04fb96050

-systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED

+systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED |FLAG_DOMAIN_DISALLOW_RENAME

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

+cn: ACS-Direction

+ldapDisplayName: aCSDirection

+attributeId: 1.2.840.113556.1.4.757

+attributeSyntax: 2.5.5.9

+omSyntax: 2

+isSingleValued: TRUE

+schemaIdGuid: 7f56127a-5301-11d1-a9c5-0000f80367c1

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: Allowed-Child-Classes-Effective

 ldapDisplayName: allowedChildClassesEffective

 attributeId: 1.2.840.113556.1.4.912

@@ -4114,20 +4094,9 @@ schemaIdGuid: 9a7ad943-ca53-11d1-bbd0-0080c76670c0
 systemOnly: TRUE

 searchFlags: 0

 attributeSecurityGuid: e48d0154-bcf8-11d1-8702-00c04fb96050

-systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED

+systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED |FLAG_DOMAIN_DISALLOW_RENAME

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

-cn: ACS-Direction

-ldapDisplayName: aCSDirection

-attributeId: 1.2.840.113556.1.4.757

-attributeSyntax: 2.5.5.9

-omSyntax: 2

-isSingleValued: TRUE

-schemaIdGuid: 7f56127a-5301-11d1-a9c5-0000f80367c1

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: Alt-Security-Identities

 ldapDisplayName: altSecurityIdentities

 attributeId: 1.2.840.113556.1.4.867

@@ -4151,7 +4120,7 @@ isSingleValued: TRUE
 schemaIdGuid: 45b01500-c419-11d1-bbc9-0080c76670c0

 systemOnly: FALSE

 searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED

+systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED |FLAG_DOMAIN_DISALLOW_RENAME

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

 cn: Application-Name

@@ -4237,16 +4206,6 @@ schemaIdGuid: f7fbfc45-85ab-42a4-a435-780e62f7858b
 systemOnly: FALSE

 searchFlags: 0

 

-cn: Assoc-NT-Account

-ldapDisplayName: assocNTAccount

-attributeId: 1.2.840.113556.1.4.1213

-attributeSyntax: 2.5.5.10

-omSyntax: 4

-isSingleValued: TRUE

-schemaIdGuid: 398f63c0-ca60-11d1-bbd1-0000f81f10c0

-systemOnly: FALSE

-searchFlags: 0

-

 cn: ACS-DSBM-DeadTime

 ldapDisplayName: aCSDSBMDeadTime

 attributeId: 1.2.840.113556.1.4.778

@@ -4258,6 +4217,16 @@ systemOnly: FALSE
 searchFlags: 0

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

+cn: Assoc-NT-Account

+ldapDisplayName: assocNTAccount

+attributeId: 1.2.840.113556.1.4.1213

+attributeSyntax: 2.5.5.10

+omSyntax: 4

+isSingleValued: TRUE

+schemaIdGuid: 398f63c0-ca60-11d1-bbd1-0000f81f10c0

+systemOnly: FALSE

+searchFlags: 0

+

 cn: attributeCertificateAttribute

 ldapDisplayName: attributeCertificateAttribute

 attributeId: 2.5.4.58

@@ -4326,7 +4295,7 @@ isSingleValued: FALSE
 schemaIdGuid: 9a7ad944-ca53-11d1-bbd0-0080c76670c0

 systemOnly: TRUE

 searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED

+systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED |FLAG_DOMAIN_DISALLOW_RENAME

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

 cn: audio

@@ -4365,6 +4334,17 @@ searchFlags: 0
 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

+cn: ACS-DSBM-Priority

+ldapDisplayName: aCSDSBMPriority

+attributeId: 1.2.840.113556.1.4.776

+attributeSyntax: 2.5.5.9

+omSyntax: 2

+isSingleValued: TRUE

+schemaIdGuid: 1cb3559e-56d0-11d1-a9c6-0000f80367c1

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: Authority-Revocation-List

 ldapDisplayName: authorityRevocationList

 attributeId: 2.5.4.38

@@ -4378,17 +4358,6 @@ rangeUpper: 10485760
 mapiID: 32806

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: ACS-DSBM-Priority

-ldapDisplayName: aCSDSBMPriority

-attributeId: 1.2.840.113556.1.4.776

-attributeSyntax: 2.5.5.9

-omSyntax: 2

-isSingleValued: TRUE

-schemaIdGuid: 1cb3559e-56d0-11d1-a9c6-0000f80367c1

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: Auxiliary-Class

 ldapDisplayName: auxiliaryClass

 attributeId: 1.2.840.113556.1.2.351

@@ -4500,17 +4469,6 @@ searchFlags: 0
 rangeLower: 1

 rangeUpper: 256

 

-cn: Builtin-Creation-Time

-ldapDisplayName: builtinCreationTime

-attributeId: 1.2.840.113556.1.4.13

-attributeSyntax: 2.5.5.16

-omSyntax: 65

-isSingleValued: TRUE

-schemaIdGuid: bf96792f-0de6-11d0-a285-00aa003049e2

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: ACS-DSBM-Refresh

 ldapDisplayName: aCSDSBMRefresh

 attributeId: 1.2.840.113556.1.4.777

@@ -4522,6 +4480,17 @@ systemOnly: FALSE
 searchFlags: 0

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

+cn: Builtin-Creation-Time

+ldapDisplayName: builtinCreationTime

+attributeId: 1.2.840.113556.1.4.13

+attributeSyntax: 2.5.5.16

+omSyntax: 65

+isSingleValued: TRUE

+schemaIdGuid: bf96792f-0de6-11d0-a285-00aa003049e2

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: Builtin-Modified-Count

 ldapDisplayName: builtinModifiedCount

 attributeId: 1.2.840.113556.1.4.14

@@ -4622,7 +4591,7 @@ isSingleValued: FALSE
 schemaIdGuid: 9a7ad945-ca53-11d1-bbd0-0080c76670c0

 systemOnly: TRUE

 searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED

+systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED |FLAG_DOMAIN_DISALLOW_RENAME

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

 cn: Can-Upgrade-Script

@@ -4636,17 +4605,6 @@ systemOnly: FALSE
 searchFlags: 0

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: carLicense

-ldapDisplayName: carLicense

-attributeId: 2.16.840.1.113730.3.1.1

-attributeSyntax: 2.5.5.12

-omSyntax: 64

-isSingleValued: FALSE

-schemaIdGuid: d4159c92-957d-4a87-8a67-8d2934e01649

-systemOnly: FALSE

-searchFlags: 0

-showInAdvancedViewOnly: FALSE

-

 cn: MacAddress

 ldapDisplayName: macAddress

 attributeId: 1.3.6.1.1.1.1.22

@@ -4950,6 +4908,170 @@ systemOnly: FALSE
 searchFlags: 0

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

+cn: ms-DFS-Comment-v2

+ldapDisplayName: msDFS-Commentv2

+attributeId: 1.2.840.113556.1.4.2036

+attributeSyntax: 2.5.5.12

+omSyntax: 64

+isSingleValued: TRUE

+schemaIdGuid: b786cec9-61fd-4523-b2c1-5ceb3860bb32

+isMemberOfPartialAttributeSet: FALSE

+searchFlags: 0

+rangeLower: 0

+rangeUpper: 32766

+

+cn: ms-DFS-Generation-GUID-v2

+ldapDisplayName: msDFS-GenerationGUIDv2

+attributeId: 1.2.840.113556.1.4.2032

+attributeSyntax: 2.5.5.10

+omSyntax: 4

+isSingleValued: TRUE

+schemaIdGuid: 35b8b3d9-c58f-43d6-930e-5040f2f1a781

+isMemberOfPartialAttributeSet: FALSE

+searchFlags: 0

+rangeLower: 16

+rangeUpper: 16

+

+cn: ms-DFS-Last-Modified-v2

+ldapDisplayName: msDFS-LastModifiedv2

+attributeId: 1.2.840.113556.1.4.2034

+attributeSyntax: 2.5.5.11

+omSyntax: 24

+isSingleValued: TRUE

+schemaIdGuid: 3c095e8a-314e-465b-83f5-ab8277bcf29b

+isMemberOfPartialAttributeSet: FALSE

+searchFlags: 0

+

+cn: ms-DFS-Link-Identity-GUID-v2

+ldapDisplayName: msDFS-LinkIdentityGUIDv2

+attributeId: 1.2.840.113556.1.4.2041

+attributeSyntax: 2.5.5.10

+omSyntax: 4

+isSingleValued: TRUE

+schemaIdGuid: edb027f3-5726-4dee-8d4e-dbf07e1ad1f1

+isMemberOfPartialAttributeSet: FALSE

+searchFlags: 0

+rangeLower:16

+rangeUpper: 16

+

+cn: ms-DFS-Link-Path-v2

+ldapDisplayName: msDFS-LinkPathv2

+attributeId: 1.2.840.113556.1.4.2039

+attributeSyntax: 2.5.5.12

+omSyntax: 64

+isSingleValued: TRUE

+schemaIdGuid: 86b021f6-10ab-40a2-a252-1dc0cc3be6a9

+isMemberOfPartialAttributeSet: FALSE

+searchFlags: 0

+rangeLower: 0

+rangeUpper: 32766

+

+cn: ms-DFS-Link-Security-Descriptor-v2

+ldapDisplayName: msDFS-LinkSecurityDescriptorv2

+attributeId: 1.2.840.113556.1.4.2040

+attributeSyntax: 2.5.5.15

+omSyntax: 66

+isSingleValued: TRUE

+schemaIdGuid: 57cf87f7-3426-4841-b322-02b3b6e9eba8

+isMemberOfPartialAttributeSet: FALSE

+searchFlags: 0

+

+cn: ms-DFS-Namespace-Identity-GUID-v2

+ldapDisplayName: msDFS-NamespaceIdentityGUIDv2

+attributeId: 1.2.840.113556.1.4.2033

+attributeSyntax: 2.5.5.10

+omSyntax: 4

+isSingleValued: TRUE

+schemaIdGuid: 200432ce-ec5f-4931-a525-d7f4afe34e68

+isMemberOfPartialAttributeSet: FALSE

+searchFlags: 0

+rangeLower: 16

+rangeUpper: 16

+

+cn: ms-DFS-Properties-v2

+ldapDisplayName: msDFS-Propertiesv2

+attributeId: 1.2.840.113556.1.4.2037

+attributeSyntax: 2.5.5.12

+omSyntax: 64

+isSingleValued: FALSE

+schemaIdGuid: 0c3e5bc5-eb0e-40f5-9b53-334e958dffdb

+isMemberOfPartialAttributeSet: FALSE

+searchFlags: 0

+rangeLower: 0

+rangeUpper: 1024

+

+cn: Mastered-By

+ldapDisplayName: masteredBy

+attributeId: 1.2.840.113556.1.4.1409

+attributeSyntax: 2.5.5.1

+omSyntax: 127

+omObjectClass: 1.3.12.2.1011.28.0.714

+isSingleValued: FALSE

+schemaIdGuid: e48e64e0-12c9-11d3-9102-00c04fd91ab1

+systemOnly: TRUE

+searchFlags: 0

+linkID: 77

+systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_NOT_REPLICATED

+schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

+

+cn: ms-DFS-Schema-Major-Version

+ldapDisplayName: msDFS-SchemaMajorVersion

+attributeId: 1.2.840.113556.1.4.2030

+attributeSyntax: 2.5.5.9

+omSyntax: 2

+isSingleValued: TRUE

+schemaIdGuid: ec6d7855-704a-4f61-9aa6-c49a7c1d54c7

+isMemberOfPartialAttributeSet: FALSE

+searchFlags: 0

+rangeLower: 2

+rangeUpper: 2

+

+cn: ms-DFS-Schema-Minor-Version

+ldapDisplayName: msDFS-SchemaMinorVersion

+attributeId: 1.2.840.113556.1.4.2031

+attributeSyntax: 2.5.5.9

+omSyntax: 2

+isSingleValued: TRUE

+schemaIdGuid: fef9a725-e8f1-43ab-bd86-6a0115ce9e38

+isMemberOfPartialAttributeSet: FALSE

+searchFlags: 0

+rangeLower: 0

+rangeUpper: 0

+

+cn: ms-DFS-Short-Name-Link-Path-v2

+ldapDisplayName: msDFS-ShortNameLinkPathv2

+attributeId: 1.2.840.113556.1.4.2042

+attributeSyntax: 2.5.5.12

+omSyntax: 64

+isSingleValued: TRUE

+schemaIdGuid: 2d7826f0-4cf7-42e9-a039-1110e0d9ca99

+isMemberOfPartialAttributeSet: FALSE

+searchFlags: 0

+rangeLower: 0

+rangeUpper: 32766

+

+cn: ms-DFS-Target-List-v2

+ldapDisplayName: msDFS-TargetListv2

+attributeId: 1.2.840.113556.1.4.2038

+attributeSyntax: 2.5.5.10

+omSyntax: 4

+isSingleValued: TRUE

+schemaIdGuid: 6ab126c6-fa41-4b36-809e-7ca91610d48f

+isMemberOfPartialAttributeSet: FALSE

+searchFlags: 0

+rangeLower: 0

+rangeUpper: 2097152

+

+cn: ms-DFS-Ttl-v2

+ldapDisplayName: msDFS-Ttlv2

+attributeId: 1.2.840.113556.1.4.2035

+attributeSyntax: 2.5.5.9

+omSyntax: 2

+isSingleValued: TRUE

+schemaIdGuid: ea944d31-864a-4349-ada5-062e2c614f5e

+isMemberOfPartialAttributeSet: FALSE

+searchFlags: 0

+

 cn: ms-DFSR-CachePolicy

 ldapDisplayName: msDFSR-CachePolicy

 attributeId: 1.2.840.113556.1.6.13.3.29

@@ -5004,6 +5126,19 @@ searchFlags: 0
 linkID: 2051

 systemFlags: FLAG_ATTR_NOT_REPLICATED

 

+cn: Max-Pwd-Age

+ldapDisplayName: maxPwdAge

+attributeId: 1.2.840.113556.1.4.74

+attributeSyntax: 2.5.5.16

+omSyntax: 65

+isSingleValued: TRUE

+schemaIdGuid: bf9679bb-0de6-11d0-a285-00aa003049e2

+systemOnly: FALSE

+searchFlags: 0

+attributeSecurityGuid: c7407360-20bf-11d0-a768-00aa006e0529

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

+

 cn: ms-DFSR-ConflictPath

 ldapDisplayName: msDFSR-ConflictPath

 attributeId: 1.2.840.113556.1.6.13.3.7

@@ -5037,20 +5172,6 @@ searchFlags: 0
 rangeLower: 16

 rangeUpper: 16

 

-cn: Mastered-By

-ldapDisplayName: masteredBy

-attributeId: 1.2.840.113556.1.4.1409

-attributeSyntax: 2.5.5.1

-omSyntax: 127

-omObjectClass: 1.3.12.2.1011.28.0.714

-isSingleValued: FALSE

-schemaIdGuid: e48e64e0-12c9-11d3-9102-00c04fd91ab1

-systemOnly: TRUE

-searchFlags: 0

-linkID: 77

-systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_NOT_REPLICATED

-schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

-

 cn: ms-DFSR-DefaultCompressionExclusionFilter

 ldapDisplayName: msDFSR-DefaultCompressionExclusionFilter

 attributeId: 1.2.840.113556.1.6.13.3.34

@@ -5124,6 +5245,18 @@ isSingleValued: TRUE
 schemaIdGuid: 6a84ede5-741e-43fd-9dd6-aa0f61578621

 searchFlags: 0

 

+cn: Max-Renew-Age

+ldapDisplayName: maxRenewAge

+attributeId: 1.2.840.113556.1.4.75

+attributeSyntax: 2.5.5.16

+omSyntax: 65

+isSingleValued: TRUE

+schemaIdGuid: bf9679bc-0de6-11d0-a285-00aa003049e2

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

+

 cn: ms-DFSR-Enabled

 ldapDisplayName: msDFSR-Enabled

 attributeId: 1.2.840.113556.1.6.13.3.9

@@ -5155,19 +5288,6 @@ searchFlags: 0
 rangeLower: 0

 rangeUpper: 32767

 

-cn: Max-Pwd-Age

-ldapDisplayName: maxPwdAge

-attributeId: 1.2.840.113556.1.4.74

-attributeSyntax: 2.5.5.16

-omSyntax: 65

-isSingleValued: TRUE

-schemaIdGuid: bf9679bb-0de6-11d0-a285-00aa003049e2

-systemOnly: FALSE

-searchFlags: 0

-attributeSecurityGuid: c7407360-20bf-11d0-a768-00aa006e0529

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

-

 cn: ms-DFSR-Flags

 ldapDisplayName: msDFSR-Flags

 attributeId: 1.2.840.113556.1.6.13.3.16

@@ -5242,6 +5362,17 @@ searchFlags: 0
 rangeLower: 0

 rangeUpper: 32767

 

+cn: Max-Storage

+ldapDisplayName: maxStorage

+attributeId: 1.2.840.113556.1.4.76

+attributeSyntax: 2.5.5.16

+omSyntax: 65

+isSingleValued: TRUE

+schemaIdGuid: bf9679bd-0de6-11d0-a285-00aa003049e2

+systemOnly: FALSE

+searchFlags: fCOPY

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: ms-DFSR-OnDemandExclusionFileFilter

 ldapDisplayName: msDFSR-OnDemandExclusionFileFilter

 attributeId: 1.2.840.113556.1.6.13.3.35

@@ -5271,18 +5402,6 @@ isSingleValued: TRUE
 schemaIdGuid: 11e24318-4ca6-4f49-9afe-e5eb1afa3473

 searchFlags: 0

 

-cn: Max-Renew-Age

-ldapDisplayName: maxRenewAge

-attributeId: 1.2.840.113556.1.4.75

-attributeSyntax: 2.5.5.16

-omSyntax: 65

-isSingleValued: TRUE

-schemaIdGuid: bf9679bc-0de6-11d0-a285-00aa003049e2

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

-

 cn: ms-DFSR-Priority

 ldapDisplayName: msDFSR-Priority

 attributeId: 1.2.840.113556.1.6.13.3.25

@@ -5321,15 +5440,6 @@ isSingleValued: TRUE
 schemaIdGuid: 5ac48021-e447-46e7-9d23-92c0c6a90dfb

 searchFlags: 0

 

-cn: ms-DFSR-StagingCleanupTriggerInPercent

-ldapDisplayName: msDFSR-StagingCleanupTriggerInPercent

-attributeId: 1.2.840.113556.1.6.13.3.40

-attributeSyntax: 2.5.5.9

-omSyntax: 2

-isSingleValued: TRUE

-schemaIdGuid: d64b9c23-e1fa-467b-b317-6964d744d633

-searchFlags: 0

-

 cn: ms-DFSR-ReplicationGroupGuid

 ldapDisplayName: msDFSR-ReplicationGroupGuid

 attributeId: 1.2.840.113556.1.6.13.3.23

@@ -5359,6 +5469,18 @@ isSingleValued: TRUE
 schemaIdGuid: 51928e94-2cd8-4abe-b552-e50412444370

 searchFlags: 0

 

+cn: Max-Ticket-Age

+ldapDisplayName: maxTicketAge

+attributeId: 1.2.840.113556.1.4.77

+attributeSyntax: 2.5.5.16

+omSyntax: 65

+isSingleValued: TRUE

+schemaIdGuid: bf9679be-0de6-11d0-a285-00aa003049e2

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

+

 cn: ms-DFSR-RootPath

 ldapDisplayName: msDFSR-RootPath

 attributeId: 1.2.840.113556.1.6.13.3.3

@@ -5381,17 +5503,6 @@ searchFlags: 0
 rangeLower: 0

 rangeUpper: -1

 

-cn: Max-Storage

-ldapDisplayName: maxStorage

-attributeId: 1.2.840.113556.1.4.76

-attributeSyntax: 2.5.5.16

-omSyntax: 65

-isSingleValued: TRUE

-schemaIdGuid: bf9679bd-0de6-11d0-a285-00aa003049e2

-systemOnly: FALSE

-searchFlags: fCOPY

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: ms-DFSR-Schedule

 ldapDisplayName: msDFSR-Schedule

 attributeId: 1.2.840.113556.1.6.13.3.14

@@ -5403,6 +5514,15 @@ searchFlags: 0
 rangeLower: 336

 rangeUpper: 336

 

+cn: ms-DFSR-StagingCleanupTriggerInPercent

+ldapDisplayName: msDFSR-StagingCleanupTriggerInPercent

+attributeId: 1.2.840.113556.1.6.13.3.40

+attributeSyntax: 2.5.5.9

+omSyntax: 2

+isSingleValued: TRUE

+schemaIdGuid: d64b9c23-e1fa-467b-b317-6964d744d633

+searchFlags: 0

+

 cn: ms-DFSR-StagingPath

 ldapDisplayName: msDFSR-StagingPath

 attributeId: 1.2.840.113556.1.6.13.3.5

@@ -5473,6 +5593,18 @@ attributeSecurityGuid: 72e39547-7b18-11d1-adef-00c04fd8d5cd
 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

+cn: May-Contain

+ldapDisplayName: mayContain

+attributeId: 1.2.840.113556.1.2.25

+attributeSyntax: 2.5.5.2

+omSyntax: 6

+isSingleValued: FALSE

+schemaIdGuid: bf9679bf-0de6-11d0-a285-00aa003049e2

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

+

 cn: ms-DS-Additional-Sam-Account-Name

 ldapDisplayName: msDS-AdditionalSamAccountName

 attributeId: 1.2.840.113556.1.4.1718

@@ -5514,18 +5646,6 @@ attributeSecurityGuid: e48d0154-bcf8-11d1-8702-00c04fb96050
 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

-cn: Max-Ticket-Age

-ldapDisplayName: maxTicketAge

-attributeId: 1.2.840.113556.1.4.77

-attributeSyntax: 2.5.5.16

-omSyntax: 65

-isSingleValued: TRUE

-schemaIdGuid: bf9679be-0de6-11d0-a285-00aa003049e2

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

-

 cn: MS-DS-All-Users-Trust-Quota

 ldapDisplayName: msDS-AllUsersTrustQuota

 attributeId: 1.2.840.113556.1.4.1789

@@ -5617,6 +5737,17 @@ rangeLower: 0
 rangeUpper: 512

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

+cn: meetingAdvertiseScope

+ldapDisplayName: meetingAdvertiseScope

+attributeId: 1.2.840.113556.1.4.582

+attributeSyntax: 2.5.5.12

+omSyntax: 64

+isSingleValued: TRUE

+schemaIdGuid: 11b6cc8b-48c4-11d1-a9c3-0000f80367c1

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: ms-DS-Az-Application-Version

 ldapDisplayName: msDS-AzApplicationVersion

 attributeId: 1.2.840.113556.1.4.1817

@@ -5655,18 +5786,6 @@ rangeLower: 0
 rangeUpper: 64

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: May-Contain

-ldapDisplayName: mayContain

-attributeId: 1.2.840.113556.1.2.25

-attributeSyntax: 2.5.5.2

-omSyntax: 6

-isSingleValued: FALSE

-schemaIdGuid: bf9679bf-0de6-11d0-a285-00aa003049e2

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

-

 cn: ms-DS-Az-Class-ID

 ldapDisplayName: msDS-AzClassId

 attributeId: 1.2.840.113556.1.4.1816

@@ -5754,6 +5873,28 @@ searchFlags: 0
 rangeLower: 1

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

+cn: Machine-Architecture

+ldapDisplayName: machineArchitecture

+attributeId: 1.2.840.113556.1.4.68

+attributeSyntax: 2.5.5.9

+omSyntax: 10

+isSingleValued: FALSE

+schemaIdGuid: bf9679af-0de6-11d0-a285-00aa003049e2

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

+cn: meetingApplication

+ldapDisplayName: meetingApplication

+attributeId: 1.2.840.113556.1.4.573

+attributeSyntax: 2.5.5.12

+omSyntax: 64

+isSingleValued: FALSE

+schemaIdGuid: 11b6cc83-48c4-11d1-a9c3-0000f80367c1

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: ms-DS-Az-Minor-Version

 ldapDisplayName: msDS-AzMinorVersion

 attributeId: 1.2.840.113556.1.4.1825

@@ -5791,17 +5932,6 @@ searchFlags: 0
 rangeLower: 0

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: meetingAdvertiseScope

-ldapDisplayName: meetingAdvertiseScope

-attributeId: 1.2.840.113556.1.4.582

-attributeSyntax: 2.5.5.12

-omSyntax: 64

-isSingleValued: TRUE

-schemaIdGuid: 11b6cc8b-48c4-11d1-a9c3-0000f80367c1

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: ms-DS-Az-Scope-Name

 ldapDisplayName: msDS-AzScopeName

 attributeId: 1.2.840.113556.1.4.1799

@@ -5874,7 +6004,7 @@ isSingleValued: FALSE
 showInAdvancedViewOnly: TRUE

 schemaIdGuid: 3ced1465-7b71-2541-8780-1e1ea6243a82

 searchFlags: 0

-systemFlags: FLAG_ATTR_NOT_REPLICATED | FLAG_ATTR_IS_OPERATIONAL | FLAG_SCHEMA_BASE_OBJECT

+systemFlags: FLAG_ATTR_NOT_REPLICATED | FLAG_ATTR_IS_OPERATIONAL |FLAG_SCHEMA_BASE_OBJECT

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

 cn: ms-DS-Byte-Array

@@ -5888,6 +6018,17 @@ systemOnly: FALSE
 searchFlags: 0

 rangeUpper: 1000000

 

+cn: meetingBandwidth

+ldapDisplayName: meetingBandwidth

+attributeId: 1.2.840.113556.1.4.589

+attributeSyntax: 2.5.5.9

+omSyntax: 2

+isSingleValued: FALSE

+schemaIdGuid: 11b6cc92-48c4-11d1-a9c3-0000f80367c1

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: ms-DS-Cached-Membership

 ldapDisplayName: msDS-Cached-Membership

 attributeId: 1.2.840.113556.1.4.1441

@@ -5934,28 +6075,6 @@ searchFlags: 0
 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

-cn: Machine-Architecture

-ldapDisplayName: machineArchitecture

-attributeId: 1.2.840.113556.1.4.68

-attributeSyntax: 2.5.5.9

-omSyntax: 10

-isSingleValued: FALSE

-schemaIdGuid: bf9679af-0de6-11d0-a285-00aa003049e2

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

-cn: meetingApplication

-ldapDisplayName: meetingApplication

-attributeId: 1.2.840.113556.1.4.573

-attributeSyntax: 2.5.5.12

-omSyntax: 64

-isSingleValued: FALSE

-schemaIdGuid: 11b6cc83-48c4-11d1-a9c3-0000f80367c1

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: ms-DS-DnsRootAlias

 ldapDisplayName: msDS-DnsRootAlias

 attributeId: 1.2.840.113556.1.4.1719

@@ -5997,6 +6116,18 @@ rangeUpper: 64
 systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_NOT_REPLICATED

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

+cn: meetingBlob

+ldapDisplayName: meetingBlob

+attributeId: 1.2.840.113556.1.4.590

+attributeSyntax: 2.5.5.10

+omSyntax: 4

+isSingleValued: TRUE

+schemaIdGuid: 11b6cc93-48c4-11d1-a9c3-0000f80367c1

+systemOnly: FALSE

+searchFlags: 0

+isMemberOfPartialAttributeSet: TRUE

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: ms-DS-External-Key

 ldapDisplayName: msDS-ExternalKey

 attributeId: 1.2.840.113556.1.4.1833

@@ -6087,17 +6218,6 @@ linkID: 2026
 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

-cn: meetingBandwidth

-ldapDisplayName: meetingBandwidth

-attributeId: 1.2.840.113556.1.4.589

-attributeSyntax: 2.5.5.9

-omSyntax: 2

-isSingleValued: FALSE

-schemaIdGuid: 11b6cc92-48c4-11d1-a9c3-0000f80367c1

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: ms-DS-Has-Full-Replica-NCs

 ldapDisplayName: msDS-hasFullReplicaNCs

 attributeId: 1.2.840.113556.1.4.1925

@@ -6142,6 +6262,17 @@ linkID: 2036
 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

+cn: meetingContactInfo

+ldapDisplayName: meetingContactInfo

+attributeId: 1.2.840.113556.1.4.578

+attributeSyntax: 2.5.5.12

+omSyntax: 64

+isSingleValued: TRUE

+schemaIdGuid: 11b6cc87-48c4-11d1-a9c3-0000f80367c1

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: ms-DS-Integer

 ldapDisplayName: msDS-Integer

 attributeId: 1.2.840.113556.1.4.1835

@@ -6227,13 +6358,25 @@ searchFlags: 0
 systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

-cn: meetingBlob

-ldapDisplayName: meetingBlob

-attributeId: 1.2.840.113556.1.4.590

-attributeSyntax: 2.5.5.10

-omSyntax: 4

+cn: ms-DS-Is-User-Cachable-At-Rodc

+ldapDisplayName: msDS-IsUserCachableAtRodc

+attributeId: 1.2.840.113556.1.4.2025

+attributeSyntax: 2.5.5.9

+omSyntax: 2

 isSingleValued: TRUE

-schemaIdGuid: 11b6cc93-48c4-11d1-a9c3-0000f80367c1

+schemaIdGuid: fe01245a-341f-4556-951f-48c033a89050

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED

+schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

+

+cn: meetingDescription

+ldapDisplayName: meetingDescription

+attributeId: 1.2.840.113556.1.4.567

+attributeSyntax: 2.5.5.12

+omSyntax: 64

+isSingleValued: TRUE

+schemaIdGuid: 11b6cc7e-48c4-11d1-a9c3-0000f80367c1

 systemOnly: FALSE

 searchFlags: 0

 isMemberOfPartialAttributeSet: TRUE

@@ -6313,7 +6456,7 @@ omSyntax: 65
 isSingleValued: TRUE

 systemOnly: FALSE

 searchFlags: 0

-rangeLower: 0

+rangeUpper: 0

 schemaIdGuid: 421f889a-472e-4fe4-8eb9-e1d0bc6071b2

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

@@ -6332,6 +6475,17 @@ schemaIdGuid: b8c8c35e-4a19-4a95-99d0-69fe4446286f
 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

+cn: meetingEndTime

+ldapDisplayName: meetingEndTime

+attributeId: 1.2.840.113556.1.4.588

+attributeSyntax: 2.5.5.11

+omSyntax: 23

+isSingleValued: FALSE

+schemaIdGuid: 11b6cc91-48c4-11d1-a9c3-0000f80367c1

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: ms-DS-Lockout-Observation-Window

 ldapDisplayName: msDS-LockoutObservationWindow

 attributeId: 1.2.840.113556.1.4.2017

@@ -6340,7 +6494,7 @@ omSyntax: 65
 isSingleValued: TRUE

 systemOnly: FALSE

 searchFlags: 0

-rangeLower: 0

+rangeUpper: 0

 schemaIdGuid: b05bda89-76af-468a-b892-1be55558ecc8

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

@@ -6372,17 +6526,6 @@ linkID: 2037
 systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_NOT_REPLICATED

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

-cn: meetingContactInfo

-ldapDisplayName: meetingContactInfo

-attributeId: 1.2.840.113556.1.4.578

-attributeSyntax: 2.5.5.12

-omSyntax: 64

-isSingleValued: TRUE

-schemaIdGuid: 11b6cc87-48c4-11d1-a9c3-0000f80367c1

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: ms-DS-Maximum-Password-Age

 ldapDisplayName: msDS-MaximumPasswordAge

 attributeId: 1.2.840.113556.1.4.2011

@@ -6391,7 +6534,7 @@ omSyntax: 65
 isSingleValued: TRUE

 systemOnly: FALSE

 searchFlags: 0

-rangeLower: 0

+rangeUpper: 0

 schemaIdGuid: fdd337f5-4999-4fce-b252-8ff9c9b43875

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

@@ -6443,7 +6586,7 @@ omSyntax: 65
 isSingleValued: TRUE

 systemOnly: FALSE

 searchFlags: 0

-rangeLower: 0

+rangeUpper: 0

 schemaIdGuid: 2a74f878-4d9c-49f9-97b3-6767d1cbd9a3

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

@@ -6476,6 +6619,17 @@ linkID: 1044
 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

+cn: meetingID

+ldapDisplayName: meetingID

+attributeId: 1.2.840.113556.1.4.565

+attributeSyntax: 2.5.5.12

+omSyntax: 64

+isSingleValued: TRUE

+schemaIdGuid: 11b6cc7c-48c4-11d1-a9c3-0000f80367c1

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: ms-DS-NC-RO-Replica-Locations

 ldapDisplayName: msDS-NC-RO-Replica-Locations

 attributeId: 1.2.840.113556.1.4.1967

@@ -6517,18 +6671,6 @@ isMemberOfPartialAttributeSet: TRUE
 systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_NOT_REPLICATED

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

-cn: meetingDescription

-ldapDisplayName: meetingDescription

-attributeId: 1.2.840.113556.1.4.567

-attributeSyntax: 2.5.5.12

-omSyntax: 64

-isSingleValued: TRUE

-schemaIdGuid: 11b6cc7e-48c4-11d1-a9c3-0000f80367c1

-systemOnly: FALSE

-searchFlags: 0

-isMemberOfPartialAttributeSet: TRUE

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: ms-DS-NC-Repl-Cursors

 ldapDisplayName: msDS-NCReplCursors

 attributeId: 1.2.840.113556.1.4.1704

@@ -6617,6 +6759,17 @@ searchFlags: 0
 linkID: 2015

 systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_NOT_REPLICATED

 

+cn: meetingIP

+ldapDisplayName: meetingIP

+attributeId: 1.2.840.113556.1.4.580

+attributeSyntax: 2.5.5.12

+omSyntax: 64

+isSingleValued: TRUE

+schemaIdGuid: 11b6cc89-48c4-11d1-a9c3-0000f80367c1

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: ms-DS-Object-Reference

 ldapDisplayName: msDS-ObjectReference

 attributeId: 1.2.840.113556.1.4.1840

@@ -6655,17 +6808,6 @@ searchFlags: 0
 linkID: 2022

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: meetingEndTime

-ldapDisplayName: meetingEndTime

-attributeId: 1.2.840.113556.1.4.588

-attributeSyntax: 2.5.5.11

-omSyntax: 23

-isSingleValued: FALSE

-schemaIdGuid: 11b6cc91-48c4-11d1-a9c3-0000f80367c1

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: ms-DS-Operations-For-Az-Role-BL

 ldapDisplayName: msDS-OperationsForAzRoleBL

 attributeId: 1.2.840.113556.1.4.1813

@@ -6705,6 +6847,17 @@ searchFlags: 0
 linkID: 2019

 systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_NOT_REPLICATED

 

+cn: meetingIsEncrypted

+ldapDisplayName: meetingIsEncrypted

+attributeId: 1.2.840.113556.1.4.585

+attributeSyntax: 2.5.5.12

+omSyntax: 64

+isSingleValued: TRUE

+schemaIdGuid: 11b6cc8e-48c4-11d1-a9c3-0000f80367c1

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: ms-DS-Other-Settings

 ldapDisplayName: msDS-Other-Settings

 attributeId: 1.2.840.113556.1.4.1621

@@ -6763,7 +6916,7 @@ omSyntax: 2
 isSingleValued: TRUE

 systemOnly: FALSE

 searchFlags: 0

-rangeLower: 0

+rangeLower: 1

 schemaIdGuid: 456374ac-1f0a-4617-93cf-bc55a7c9d341

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

@@ -6792,17 +6945,6 @@ searchFlags: 0
 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

-cn: meetingID

-ldapDisplayName: meetingID

-attributeId: 1.2.840.113556.1.4.565

-attributeSyntax: 2.5.5.12

-omSyntax: 64

-isSingleValued: TRUE

-schemaIdGuid: 11b6cc7c-48c4-11d1-a9c3-0000f80367c1

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: ms-DS-Phonetic-Company-Name

 ldapDisplayName: msDS-PhoneticCompanyName

 attributeId: 1.2.840.113556.1.4.1945

@@ -6849,6 +6991,17 @@ mapiID: 35986
 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

+cn: meetingKeyword

+ldapDisplayName: meetingKeyword

+attributeId: 1.2.840.113556.1.4.568

+attributeSyntax: 2.5.5.12

+omSyntax: 64

+isSingleValued: FALSE

+schemaIdGuid: 11b6cc7f-48c4-11d1-a9c3-0000f80367c1

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: ms-DS-Phonetic-First-Name

 ldapDisplayName: msDS-PhoneticFirstName

 attributeId: 1.2.840.113556.1.4.1942

@@ -6923,7 +7076,7 @@ attributeSyntax: 2.5.5.1
 omSyntax: 127

 isSingleValued: FALSE

 systemOnly: TRUE

-searchFlags: 0

+searchFlags: fCOPY

 omObjectClass: 1.3.12.2.1011.28.0.714

 schemaIdGuid: 5e6cf031-bda8-43c8-aca4-8fee4127005b

 linkID: 2119

@@ -6943,17 +7096,6 @@ schemaIdGuid: 64c80f48-cdd2-4881-a86d-4e97b6f561fc
 linkID: 2118

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: meetingIP

-ldapDisplayName: meetingIP

-attributeId: 1.2.840.113556.1.4.580

-attributeSyntax: 2.5.5.12

-omSyntax: 64

-isSingleValued: TRUE

-schemaIdGuid: 11b6cc89-48c4-11d1-a9c3-0000f80367c1

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: ms-DS-Quota-Amount

 ldapDisplayName: msDS-QuotaAmount

 attributeId: 1.2.840.113556.1.4.1845

@@ -6992,6 +7134,29 @@ rangeUpper: 28
 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

+cn: Machine-Password-Change-Interval

+ldapDisplayName: machinePasswordChangeInterval

+attributeId: 1.2.840.113556.1.4.520

+attributeSyntax: 2.5.5.16

+omSyntax: 65

+isSingleValued: TRUE

+schemaIdGuid: c9b6358e-bb38-11d0-afef-0000f80367c1

+systemOnly: FALSE

+searchFlags: 0

+attributeSecurityGuid: a29b89fe-c7e8-11d0-9bae-00c04fd92ef5

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

+cn: meetingLanguage

+ldapDisplayName: meetingLanguage

+attributeId: 1.2.840.113556.1.4.574

+attributeSyntax: 2.5.5.12

+omSyntax: 64

+isSingleValued: FALSE

+schemaIdGuid: 11b6cc84-48c4-11d1-a9c3-0000f80367c1

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: ms-DS-Quota-Used

 ldapDisplayName: msDS-QuotaUsed

 attributeId: 1.2.840.113556.1.4.1849

@@ -7071,23 +7236,12 @@ attributeSyntax: 2.5.5.1
 omSyntax: 127

 isSingleValued: TRUE

 systemOnly: TRUE

-searchFlags: 0

+searchFlags: fCOPY

 omObjectClass: 1.3.12.2.1011.28.0.714

 schemaIdGuid: b77ea093-88d0-4780-9a98-911f8e8b1dca

 systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

-cn: meetingIsEncrypted

-ldapDisplayName: meetingIsEncrypted

-attributeId: 1.2.840.113556.1.4.585

-attributeSyntax: 2.5.5.12

-omSyntax: 64

-isSingleValued: TRUE

-schemaIdGuid: 11b6cc8e-48c4-11d1-a9c3-0000f80367c1

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: ms-DS-Retired-Repl-NC-Signatures

 ldapDisplayName: msDS-RetiredReplNCSignatures

 attributeId: 1.2.840.113556.1.4.1826

@@ -7100,6 +7254,17 @@ searchFlags: 0
 systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_NOT_REPLICATED

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

+cn: meetingLocation

+ldapDisplayName: meetingLocation

+attributeId: 1.2.840.113556.1.4.569

+attributeSyntax: 2.5.5.12

+omSyntax: 64

+isSingleValued: FALSE

+schemaIdGuid: 11b6cc80-48c4-11d1-a9c3-0000f80367c1

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: ms-DS-Revealed-DSAs

 ldapDisplayName: msDS-RevealedDSAs

 attributeId: 1.2.840.113556.1.4.1930

@@ -7218,17 +7383,6 @@ systemOnly: FALSE
 searchFlags: 0

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: meetingKeyword

-ldapDisplayName: meetingKeyword

-attributeId: 1.2.840.113556.1.4.568

-attributeSyntax: 2.5.5.12

-omSyntax: 64

-isSingleValued: FALSE

-schemaIdGuid: 11b6cc7f-48c4-11d1-a9c3-0000f80367c1

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: ms-DS-Settings

 ldapDisplayName: msDS-Settings

 attributeId: 1.2.840.113556.1.4.1697

@@ -7240,6 +7394,17 @@ systemOnly: FALSE
 searchFlags: 0

 rangeUpper: 1000000

 

+cn: meetingMaxParticipants

+ldapDisplayName: meetingMaxParticipants

+attributeId: 1.2.840.113556.1.4.576

+attributeSyntax: 2.5.5.9

+omSyntax: 2

+isSingleValued: TRUE

+schemaIdGuid: 11b6cc85-48c4-11d1-a9c3-0000f80367c1

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: ms-DS-SiteName

 ldapDisplayName: msDS-SiteName

 attributeId: 1.2.840.113556.1.4.1961

@@ -7342,29 +7507,6 @@ searchFlags: 0
 linkID: 2020

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: Machine-Password-Change-Interval

-ldapDisplayName: machinePasswordChangeInterval

-attributeId: 1.2.840.113556.1.4.520

-attributeSyntax: 2.5.5.16

-omSyntax: 65

-isSingleValued: TRUE

-schemaIdGuid: c9b6358e-bb38-11d0-afef-0000f80367c1

-systemOnly: FALSE

-searchFlags: 0

-attributeSecurityGuid: a29b89fe-c7e8-11d0-9bae-00c04fd92ef5

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

-cn: meetingLanguage

-ldapDisplayName: meetingLanguage

-attributeId: 1.2.840.113556.1.4.574

-attributeSyntax: 2.5.5.12

-omSyntax: 64

-isSingleValued: FALSE

-schemaIdGuid: 11b6cc84-48c4-11d1-a9c3-0000f80367c1

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: ms-DS-Tasks-For-Az-Task-BL

 ldapDisplayName: msDS-TasksForAzTaskBL

 attributeId: 1.2.840.113556.1.4.1811

@@ -7392,6 +7534,18 @@ rangeUpper: 100
 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

+cn: meetingName

+ldapDisplayName: meetingName

+attributeId: 1.2.840.113556.1.4.566

+attributeSyntax: 2.5.5.12

+omSyntax: 64

+isSingleValued: TRUE

+schemaIdGuid: 11b6cc7d-48c4-11d1-a9c3-0000f80367c1

+systemOnly: FALSE

+searchFlags: 0

+isMemberOfPartialAttributeSet: TRUE

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: ms-DS-Top-Quota-Usage

 ldapDisplayName: msDS-TopQuotaUsage

 attributeId: 1.2.840.113556.1.4.1850

@@ -7491,17 +7645,6 @@ rangeLower: 1
 rangeUpper: 1024

 mapiID: 35921

 

-cn: meetingLocation

-ldapDisplayName: meetingLocation

-attributeId: 1.2.840.113556.1.4.569

-attributeSyntax: 2.5.5.12

-omSyntax: 64

-isSingleValued: FALSE

-schemaIdGuid: 11b6cc80-48c4-11d1-a9c3-0000f80367c1

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: ms-FRS-Hub-Member

 ldapDisplayName: msFRS-Hub-Member

 attributeId: 1.2.840.113556.1.4.1693

@@ -7513,6 +7656,17 @@ schemaIdGuid: 5643ff81-35b6-4ca9-9512-baf0bd0a2772
 searchFlags: 0

 linkID: 1046

 

+cn: meetingOriginator

+ldapDisplayName: meetingOriginator

+attributeId: 1.2.840.113556.1.4.577

+attributeSyntax: 2.5.5.12

+omSyntax: 64

+isSingleValued: TRUE

+schemaIdGuid: 11b6cc86-48c4-11d1-a9c3-0000f80367c1

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: ms-FRS-Topology-Pref

 ldapDisplayName: msFRS-Topology-Pref

 attributeId: 1.2.840.113556.1.4.1692

@@ -7607,17 +7761,6 @@ systemOnly: FALSE
 searchFlags: 0

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: meetingMaxParticipants

-ldapDisplayName: meetingMaxParticipants

-attributeId: 1.2.840.113556.1.4.576

-attributeSyntax: 2.5.5.9

-omSyntax: 2

-isSingleValued: TRUE

-schemaIdGuid: 11b6cc85-48c4-11d1-a9c3-0000f80367c1

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: ms-IIS-FTP-Dir

 ldapDisplayName: msIIS-FTPDir

 attributeId: 1.2.840.113556.1.4.1786

@@ -7631,6 +7774,17 @@ rangeLower: 1
 rangeUpper: 256

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

+cn: meetingOwner

+ldapDisplayName: meetingOwner

+attributeId: 1.2.840.113556.1.4.579

+attributeSyntax: 2.5.5.12

+omSyntax: 64

+isSingleValued: TRUE

+schemaIdGuid: 11b6cc88-48c4-11d1-a9c3-0000f80367c1

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: ms-IIS-FTP-Root

 ldapDisplayName: msIIS-FTPRoot

 attributeId: 1.2.840.113556.1.4.1785

@@ -7726,6 +7880,18 @@ searchFlags: 0
 isMemberOfPartialAttributeSet: TRUE

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

+cn: meetingProtocol

+ldapDisplayName: meetingProtocol

+attributeId: 1.2.840.113556.1.4.570

+attributeSyntax: 2.5.5.12

+omSyntax: 64

+isSingleValued: FALSE

+schemaIdGuid: 11b6cc81-48c4-11d1-a9c3-0000f80367c1

+systemOnly: FALSE

+searchFlags: 0

+isMemberOfPartialAttributeSet: TRUE

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: MSMQ-Authenticate

 ldapDisplayName: mSMQAuthenticate

 attributeId: 1.2.840.113556.1.4.923

@@ -7738,18 +7904,6 @@ searchFlags: 0
 isMemberOfPartialAttributeSet: TRUE

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: meetingName

-ldapDisplayName: meetingName

-attributeId: 1.2.840.113556.1.4.566

-attributeSyntax: 2.5.5.12

-omSyntax: 64

-isSingleValued: TRUE

-schemaIdGuid: 11b6cc7d-48c4-11d1-a9c3-0000f80367c1

-systemOnly: FALSE

-searchFlags: 0

-isMemberOfPartialAttributeSet: TRUE

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: MSMQ-Base-Priority

 ldapDisplayName: mSMQBasePriority

 attributeId: 1.2.840.113556.1.4.920

@@ -7856,6 +8010,17 @@ searchFlags: 0
 isMemberOfPartialAttributeSet: TRUE

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

+cn: meetingRating

+ldapDisplayName: meetingRating

+attributeId: 1.2.840.113556.1.4.584

+attributeSyntax: 2.5.5.12

+omSyntax: 64

+isSingleValued: FALSE

+schemaIdGuid: 11b6cc8d-48c4-11d1-a9c3-0000f80367c1

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: MSMQ-Ds-Service

 ldapDisplayName: mSMQDsService

 attributeId: 1.2.840.113556.1.4.1238

@@ -7867,17 +8032,6 @@ systemOnly: FALSE
 searchFlags: 0

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: meetingOriginator

-ldapDisplayName: meetingOriginator

-attributeId: 1.2.840.113556.1.4.577

-attributeSyntax: 2.5.5.12

-omSyntax: 64

-isSingleValued: TRUE

-schemaIdGuid: 11b6cc86-48c4-11d1-a9c3-0000f80367c1

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: MSMQ-Ds-Services

 ldapDisplayName: mSMQDsServices

 attributeId: 1.2.840.113556.1.4.1228

@@ -7986,6 +8140,17 @@ rangeUpper: 124
 isMemberOfPartialAttributeSet: TRUE

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

+cn: meetingRecurrence

+ldapDisplayName: meetingRecurrence

+attributeId: 1.2.840.113556.1.4.586

+attributeSyntax: 2.5.5.12

+omSyntax: 64

+isSingleValued: TRUE

+schemaIdGuid: 11b6cc8f-48c4-11d1-a9c3-0000f80367c1

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: MSMQ-Label-Ex

 ldapDisplayName: mSMQLabelEx

 attributeId: 1.2.840.113556.1.4.1415

@@ -8000,17 +8165,6 @@ rangeUpper: 124
 isMemberOfPartialAttributeSet: TRUE

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: meetingOwner

-ldapDisplayName: meetingOwner

-attributeId: 1.2.840.113556.1.4.579

-attributeSyntax: 2.5.5.12

-omSyntax: 64

-isSingleValued: TRUE

-schemaIdGuid: 11b6cc88-48c4-11d1-a9c3-0000f80367c1

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: MSMQ-Long-Lived

 ldapDisplayName: mSMQLongLived

 attributeId: 1.2.840.113556.1.4.941

@@ -8118,6 +8272,17 @@ systemOnly: FALSE
 searchFlags: 0

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

+cn: meetingScope

+ldapDisplayName: meetingScope

+attributeId: 1.2.840.113556.1.4.581

+attributeSyntax: 2.5.5.12

+omSyntax: 64

+isSingleValued: FALSE

+schemaIdGuid: 11b6cc8a-48c4-11d1-a9c3-0000f80367c1

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: MSMQ-Privacy-Level

 ldapDisplayName: mSMQPrivacyLevel

 attributeId: 1.2.840.113556.1.4.924

@@ -8132,18 +8297,6 @@ rangeUpper: 2
 isMemberOfPartialAttributeSet: TRUE

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: meetingProtocol

-ldapDisplayName: meetingProtocol

-attributeId: 1.2.840.113556.1.4.570

-attributeSyntax: 2.5.5.12

-omSyntax: 64

-isSingleValued: FALSE

-schemaIdGuid: 11b6cc81-48c4-11d1-a9c3-0000f80367c1

-systemOnly: FALSE

-searchFlags: 0

-isMemberOfPartialAttributeSet: TRUE

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: MSMQ-QM-ID

 ldapDisplayName: mSMQQMID

 attributeId: 1.2.840.113556.1.4.951

@@ -8254,6 +8407,29 @@ systemOnly: FALSE
 searchFlags: 0

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

+cn: Machine-Role

+ldapDisplayName: machineRole

+attributeId: 1.2.840.113556.1.4.71

+attributeSyntax: 2.5.5.9

+omSyntax: 10

+isSingleValued: TRUE

+schemaIdGuid: bf9679b2-0de6-11d0-a285-00aa003049e2

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

+

+cn: meetingStartTime

+ldapDisplayName: meetingStartTime

+attributeId: 1.2.840.113556.1.4.587

+attributeSyntax: 2.5.5.11

+omSyntax: 23

+isSingleValued: FALSE

+schemaIdGuid: 11b6cc90-48c4-11d1-a9c3-0000f80367c1

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: MSMQ-Service-Type

 ldapDisplayName: mSMQServiceType

 attributeId: 1.2.840.113556.1.4.930

@@ -8266,17 +8442,6 @@ searchFlags: 0
 isMemberOfPartialAttributeSet: TRUE

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: meetingRating

-ldapDisplayName: meetingRating

-attributeId: 1.2.840.113556.1.4.584

-attributeSyntax: 2.5.5.12

-omSyntax: 64

-isSingleValued: FALSE

-schemaIdGuid: 11b6cc8d-48c4-11d1-a9c3-0000f80367c1

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: MSMQ-Sign-Certificates

 ldapDisplayName: mSMQSignCertificates

 attributeId: 1.2.840.113556.1.4.947

@@ -8386,6 +8551,17 @@ systemOnly: FALSE
 searchFlags: 0

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

+cn: meetingType

+ldapDisplayName: meetingType

+attributeId: 1.2.840.113556.1.4.571

+attributeSyntax: 2.5.5.12

+omSyntax: 64

+isSingleValued: TRUE

+schemaIdGuid: 11b6cc82-48c4-11d1-a9c3-0000f80367c1

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: MSMQ-Site-Name

 ldapDisplayName: mSMQSiteName

 attributeId: 1.2.840.113556.1.4.965

@@ -8397,17 +8573,6 @@ systemOnly: FALSE
 searchFlags: 0

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: meetingRecurrence

-ldapDisplayName: meetingRecurrence

-attributeId: 1.2.840.113556.1.4.586

-attributeSyntax: 2.5.5.12

-omSyntax: 64

-isSingleValued: TRUE

-schemaIdGuid: 11b6cc8f-48c4-11d1-a9c3-0000f80367c1

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: MSMQ-Site-Name-Ex

 ldapDisplayName: mSMQSiteNameEx

 attributeId: 1.2.840.113556.1.4.1416

@@ -8516,26 +8681,26 @@ systemOnly: FALSE
 searchFlags: fCOPY

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: ms-PKI-Cert-Template-OID

-ldapDisplayName: msPKI-Cert-Template-OID

-attributeId: 1.2.840.113556.1.4.1436

+cn: meetingURL

+ldapDisplayName: meetingURL

+attributeId: 1.2.840.113556.1.4.583

 attributeSyntax: 2.5.5.12

 omSyntax: 64

-isSingleValued: TRUE

-schemaIdGuid: 3164c36a-ba26-468c-8bda-c1e5cc256728

+isSingleValued: FALSE

+schemaIdGuid: 11b6cc8c-48c4-11d1-a9c3-0000f80367c1

 systemOnly: FALSE

 searchFlags: 0

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: meetingScope

-ldapDisplayName: meetingScope

-attributeId: 1.2.840.113556.1.4.581

+cn: ms-PKI-Cert-Template-OID

+ldapDisplayName: msPKI-Cert-Template-OID

+attributeId: 1.2.840.113556.1.4.1436

 attributeSyntax: 2.5.5.12

 omSyntax: 64

-isSingleValued: FALSE

-schemaIdGuid: 11b6cc8a-48c4-11d1-a9c3-0000f80367c1

+isSingleValued: TRUE

+schemaIdGuid: 3164c36a-ba26-468c-8bda-c1e5cc256728

 systemOnly: FALSE

-searchFlags: 0

+searchFlags: 1

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

 cn: ms-PKI-Certificate-Application-Policy

@@ -8616,6 +8781,23 @@ searchFlags: 0
 rangeUpper: 32768

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

+cn: Member

+ldapDisplayName: member

+attributeId: 2.5.4.31

+attributeSyntax: 2.5.5.1

+omSyntax: 127

+omObjectClass: 1.3.12.2.1011.28.0.714

+isSingleValued: FALSE

+schemaIdGuid: bf9679c0-0de6-11d0-a285-00aa003049e2

+systemOnly: FALSE

+searchFlags: 0

+attributeSecurityGuid: bc0ac240-79a9-11d0-9020-00c04fc2d4cf

+linkID: 2

+mapiID: 32777

+isMemberOfPartialAttributeSet: TRUE

+systemFlags: FLAG_SCHEMA_BASE_OBJECT |FLAG_ATTR_REQ_PARTIAL_SET_MEMBER

+schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

+

 cn: ms-PKI-OID-User-Notice

 ldapDisplayName: msPKI-OID-User-Notice

 attributeId: 1.2.840.113556.1.4.1673

@@ -8651,29 +8833,6 @@ systemOnly: FALSE
 searchFlags: 0

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: Machine-Role

-ldapDisplayName: machineRole

-attributeId: 1.2.840.113556.1.4.71

-attributeSyntax: 2.5.5.9

-omSyntax: 10

-isSingleValued: TRUE

-schemaIdGuid: bf9679b2-0de6-11d0-a285-00aa003049e2

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

-

-cn: meetingStartTime

-ldapDisplayName: meetingStartTime

-attributeId: 1.2.840.113556.1.4.587

-attributeSyntax: 2.5.5.11

-omSyntax: 23

-isSingleValued: FALSE

-schemaIdGuid: 11b6cc90-48c4-11d1-a9c3-0000f80367c1

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: ms-PKI-RA-Application-Policies

 ldapDisplayName: msPKI-RA-Application-Policies

 attributeId: 1.2.840.113556.1.4.1675

@@ -8740,6 +8899,17 @@ systemOnly: FALSE
 searchFlags: 0

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

+cn: MemberNisNetgroup

+ldapDisplayName: memberNisNetgroup

+attributeId: 1.3.6.1.1.1.1.13

+attributeSyntax: 2.5.5.5

+omSyntax: 22

+isSingleValued: FALSE

+schemaIdGuid: 0f6a17dc-53e5-4be8-9442-8f3ce2f9012a

+systemOnly: FALSE

+searchFlags: 0

+rangeUpper: 153600

+

 cn: ms-PKI-AccountCredentials

 ldapDisplayName: msPKIAccountCredentials

 attributeId: 1.2.840.113556.1.4.1894

@@ -8763,7 +8933,7 @@ omObjectClass: 1.2.840.113556.1.1.1.11
 isSingleValued: FALSE

 schemaIdGuid: b3f93023-9239-4f7c-b99c-6745d87adbc2

 systemOnly: FALSE

-searchFlags: fCONFIDENTAIL | fRODCFilteredAttribute

+searchFlags: fCONFIDENTIAL | fRODCFilteredAttribute

 attributeSecurityGuid: 91e647de-d96f-4b70-9557-d63ff4f3ccd8

 linkID: 2046

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

@@ -8792,17 +8962,6 @@ searchFlags: fCOPY
 attributeSecurityGuid: 037088f8-0ae1-11d2-b422-00a0c968f939

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: meetingType

-ldapDisplayName: meetingType

-attributeId: 1.2.840.113556.1.4.571

-attributeSyntax: 2.5.5.12

-omSyntax: 64

-isSingleValued: TRUE

-schemaIdGuid: 11b6cc82-48c4-11d1-a9c3-0000f80367c1

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: ms-RADIUS-FramedInterfaceId

 ldapDisplayName: msRADIUS-FramedInterfaceId

 attributeId: 1.2.840.113556.1.4.1913

@@ -8874,6 +9033,22 @@ searchFlags: fCOPY
 rangeUpper: 8

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

+cn: Is-Member-Of-DL

+ldapDisplayName: memberOf

+attributeId: 1.2.840.113556.1.2.102

+attributeSyntax: 2.5.5.1

+omSyntax: 127

+omObjectClass: 1.3.12.2.1011.28.0.714

+isSingleValued: FALSE

+schemaIdGuid: bf967991-0de6-11d0-a285-00aa003049e2

+systemOnly: TRUE

+searchFlags: fCOPY

+attributeSecurityGuid: bc0ac240-79a9-11d0-9020-00c04fc2d4cf

+linkID: 3

+mapiID: 32776

+systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_NOT_REPLICATED

+schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

+

 cn: ms-RADIUS-SavedFramedIpv6Prefix

 ldapDisplayName: msRADIUS-SavedFramedIpv6Prefix

 attributeId: 1.2.840.113556.1.4.1916

@@ -8920,17 +9095,6 @@ systemOnly: FALSE
 searchFlags: fCOPY

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: meetingURL

-ldapDisplayName: meetingURL

-attributeId: 1.2.840.113556.1.4.583

-attributeSyntax: 2.5.5.12

-omSyntax: 64

-isSingleValued: FALSE

-schemaIdGuid: 11b6cc8c-48c4-11d1-a9c3-0000f80367c1

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: msRASSavedFramedIPAddress

 ldapDisplayName: msRASSavedFramedIPAddress

 attributeId: 1.2.840.113556.1.4.1190

@@ -8998,6 +9162,17 @@ systemOnly: FALSE
 searchFlags: 0

 rangeUpper: 1024

 

+cn: MemberUid

+ldapDisplayName: memberUid

+attributeId: 1.3.6.1.1.1.1.12

+attributeSyntax: 2.5.5.5

+omSyntax: 22

+isSingleValued: FALSE

+schemaIdGuid: 03dab236-672e-4f61-ab64-f77d2dc2ffab

+systemOnly: FALSE

+searchFlags: 0

+rangeUpper: 256000

+

 cn: msSFU-30-Domains

 ldapDisplayName: msSFU30Domains

 attributeId: 1.2.840.113556.1.6.18.1.340

@@ -9041,23 +9216,6 @@ schemaIdGuid: 0dea42f5-278d-4157-b4a7-49b59664915b
 systemOnly: FALSE

 searchFlags: fATTINDEX

 

-cn: Member

-ldapDisplayName: member

-attributeId: 2.5.4.31

-attributeSyntax: 2.5.5.1

-omSyntax: 127

-omObjectClass: 1.3.12.2.1011.28.0.714

-isSingleValued: FALSE

-schemaIdGuid: bf9679c0-0de6-11d0-a285-00aa003049e2

-systemOnly: FALSE

-searchFlags: 0

-attributeSecurityGuid: bc0ac240-79a9-11d0-9020-00c04fc2d4cf

-linkID: 2

-mapiID: 32777

-isMemberOfPartialAttributeSet: TRUE

-systemFlags: FLAG_SCHEMA_BASE_OBJECT |FLAG_ATTR_REQ_PARTIAL_SET_MEMBER

-schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

-

 cn: msSFU-30-Key-Attributes

 ldapDisplayName: msSFU30KeyAttributes

 attributeId: 1.2.840.113556.1.6.18.1.301

@@ -9122,6 +9280,17 @@ schemaIdGuid: ec998437-d944-4a28-8500-217588adfc75
 systemOnly: FALSE

 searchFlags: fATTINDEX

 

+cn: MHS-OR-Address

+ldapDisplayName: mhsORAddress

+attributeId: 1.2.840.113556.1.4.650

+attributeSyntax: 2.5.5.12

+omSyntax: 64

+isSingleValued: FALSE

+schemaIdGuid: 0296c122-40da-11d1-a9c0-0000f80367c1

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: msSFU-30-Name

 ldapDisplayName: msSFU30Name

 attributeId: 1.2.840.113556.1.6.18.1.309

@@ -9166,17 +9335,6 @@ systemOnly: FALSE
 searchFlags: fPRESERVEONDELETE | fATTINDEX

 rangeUpper: 1024

 

-cn: MemberNisNetgroup

-ldapDisplayName: memberNisNetgroup

-attributeId: 1.3.6.1.1.1.1.13

-attributeSyntax: 2.5.5.5

-omSyntax: 22

-isSingleValued: FALSE

-schemaIdGuid: 0f6a17dc-53e5-4be8-9442-8f3ce2f9012a

-systemOnly: FALSE

-searchFlags: 0

-rangeUpper: 153600

-

 cn: msSFU-30-NSMAP-Field-Position

 ldapDisplayName: msSFU30NSMAPFieldPosition

 attributeId: 1.2.840.113556.1.6.18.1.345

@@ -9246,6 +9404,19 @@ systemOnly: FALSE
 searchFlags: 0

 rangeUpper: 1024

 

+cn: Other-Name

+ldapDisplayName: middleName

+attributeId: 2.16.840.1.113730.3.1.34

+attributeSyntax: 2.5.5.12

+omSyntax: 64

+isSingleValued: TRUE

+schemaIdGuid: bf9679f2-0de6-11d0-a285-00aa003049e2

+systemOnly: FALSE

+searchFlags: 0

+rangeLower: 0

+rangeUpper: 64

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: msSFU-30-Search-Container

 ldapDisplayName: msSFU30SearchContainer

 attributeId: 1.2.840.113556.1.6.18.1.300

@@ -9290,22 +9461,6 @@ systemOnly: FALSE
 searchFlags: 0

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: Is-Member-Of-DL

-ldapDisplayName: memberOf

-attributeId: 1.2.840.113556.1.2.102

-attributeSyntax: 2.5.5.1

-omSyntax: 127

-omObjectClass: 1.3.12.2.1011.28.0.714

-isSingleValued: FALSE

-schemaIdGuid: bf967991-0de6-11d0-a285-00aa003049e2

-systemOnly: TRUE

-searchFlags: fCOPY

-attributeSecurityGuid: bc0ac240-79a9-11d0-9020-00c04fc2d4cf

-linkID: 3

-mapiID: 32776

-systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_NOT_REPLICATED

-schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

-

 cn: ms-TAPI-Protocol-Id

 ldapDisplayName: msTAPI-ProtocolId

 attributeId: 1.2.840.113556.1.4.1699

@@ -9336,7 +9491,7 @@ attributeSyntax: 2.5.5.12
 omSyntax: 64

 isSingleValued: TRUE

 schemaIdGuid: aa4e1a6d-550d-4e05-8c35-4afcb917a9fe

-searchFlags: fRODCFilteredAttribute | fCOPY | fPRESERVEONDELETE |fPDNTATTINDEX | fATTINDEX

+searchFlags: fPRESERVEONDELETE | fCOPY | fCONFIDENTIAL |fRODCFilteredAttribute

 rangeUpper: 128

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

@@ -9373,6 +9528,19 @@ systemOnly: FALSE
 searchFlags: 0

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

+cn: Min-Pwd-Age

+ldapDisplayName: minPwdAge

+attributeId: 1.2.840.113556.1.4.78

+attributeSyntax: 2.5.5.16

+omSyntax: 65

+isSingleValued: TRUE

+schemaIdGuid: bf9679c2-0de6-11d0-a285-00aa003049e2

+systemOnly: FALSE

+searchFlags: 0

+attributeSecurityGuid: c7407360-20bf-11d0-a768-00aa006e0529

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

+

 cn: ms-TS-Connect-Printer-Drives

 ldapDisplayName: msTSConnectPrinterDrives

 attributeId: 1.2.840.113556.1.4.1987

@@ -9421,17 +9589,6 @@ attributeSecurityGuid: 5805bc62-bdc9-4428-a5e2-856a0f4c185e
 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 showInAdvancedViewOnly: TRUE

 

-cn: MemberUid

-ldapDisplayName: memberUid

-attributeId: 1.3.6.1.1.1.1.12

-attributeSyntax: 2.5.5.5

-omSyntax: 22

-isSingleValued: FALSE

-schemaIdGuid: 03dab236-672e-4f61-ab64-f77d2dc2ffab

-systemOnly: FALSE

-searchFlags: 0

-rangeUpper: 256000

-

 cn: MS-TS-ExpireDate3

 ldapDisplayName: msTSExpireDate3

 attributeId: 1.2.840.113556.1.4.2003

@@ -9471,6 +9628,31 @@ rangeLower: 0
 rangeUpper: 32767

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

+cn: Machine-Wide-Policy

+ldapDisplayName: machineWidePolicy

+attributeId: 1.2.840.113556.1.4.459

+attributeSyntax: 2.5.5.10

+omSyntax: 4

+isSingleValued: FALSE

+schemaIdGuid: 80a67e4f-9f22-11d0-afdd-00c04fd930c9

+systemOnly: FALSE

+searchFlags: 0

+attributeSecurityGuid: a29b8a01-c7e8-11d0-9bae-00c04fd92ef5

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

+cn: Min-Pwd-Length

+ldapDisplayName: minPwdLength

+attributeId: 1.2.840.113556.1.4.79

+attributeSyntax: 2.5.5.9

+omSyntax: 2

+isSingleValued: TRUE

+schemaIdGuid: bf9679c3-0de6-11d0-a285-00aa003049e2

+systemOnly: FALSE

+searchFlags: 0

+attributeSecurityGuid: c7407360-20bf-11d0-a768-00aa006e0529

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

+

 cn: ms-TS-Home-Drive

 ldapDisplayName: msTSHomeDrive

 attributeId: 1.2.840.113556.1.4.1978

@@ -9564,17 +9746,6 @@ rangeUpper: 32767
 schemaIdGuid: 87e53590-971d-4a52-955b-4794d15a84ae

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: MHS-OR-Address

-ldapDisplayName: mhsORAddress

-attributeId: 1.2.840.113556.1.4.650

-attributeSyntax: 2.5.5.12

-omSyntax: 64

-isSingleValued: FALSE

-schemaIdGuid: 0296c122-40da-11d1-a9c0-0000f80367c1

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: MS-TSLS-Property02

 ldapDisplayName: msTSLSProperty02

 attributeId: 1.2.840.113556.1.4.2010

@@ -9614,6 +9785,18 @@ searchFlags: fATTINDEX
 attributeSecurityGuid: 5805bc62-bdc9-4428-a5e2-856a0f4c185e

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

+cn: Min-Ticket-Age

+ldapDisplayName: minTicketAge

+attributeId: 1.2.840.113556.1.4.80

+attributeSyntax: 2.5.5.16

+omSyntax: 65

+isSingleValued: TRUE

+schemaIdGuid: bf9679c4-0de6-11d0-a285-00aa003049e2

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

+

 cn: MS-TS-ManagingLS3

 ldapDisplayName: msTSManagingLS3

 attributeId: 1.2.840.113556.1.4.2005

@@ -9701,19 +9884,6 @@ rangeLower: 0
 rangeUpper: 32767

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: Other-Name

-ldapDisplayName: middleName

-attributeId: 2.16.840.1.113730.3.1.34

-attributeSyntax: 2.5.5.12

-omSyntax: 64

-isSingleValued: TRUE

-schemaIdGuid: bf9679f2-0de6-11d0-a285-00aa003049e2

-systemOnly: FALSE

-searchFlags: 0

-rangeLower: 0

-rangeUpper: 64

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: MS-TS-Property02

 ldapDisplayName: msTSProperty02

 attributeId: 1.2.840.113556.1.4.1992

@@ -9727,6 +9897,21 @@ rangeLower: 0
 rangeUpper: 32767

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

+cn: Phone-Mobile-Primary

+ldapDisplayName: mobile

+attributeId: 0.9.2342.19200300.100.1.41

+attributeSyntax: 2.5.5.12

+omSyntax: 64

+isSingleValued: TRUE

+schemaIdGuid: f0f8ffa3-1191-11d0-a060-00aa006c33ed

+systemOnly: FALSE

+searchFlags: 0

+rangeLower: 1

+rangeUpper: 64

+attributeSecurityGuid: 77b5b886-944a-11d1-aebd-0000f80367c1

+mapiID: 14876

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: ms-TS-Reconnection-Action

 ldapDisplayName: msTSReconnectionAction

 attributeId: 1.2.840.113556.1.4.1984

@@ -9817,6 +10002,19 @@ systemOnly: FALSE
 searchFlags: 0

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

+cn: Modified-Count

+ldapDisplayName: modifiedCount

+attributeId: 1.2.840.113556.1.4.168

+attributeSyntax: 2.5.5.16

+omSyntax: 65

+isSingleValued: TRUE

+schemaIdGuid: bf9679c5-0de6-11d0-a285-00aa003049e2

+systemOnly: FALSE

+searchFlags: 0

+attributeSecurityGuid: b8119fd0-04f6-4762-ab7a-4986c76b3f9a

+systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_NOT_REPLICATED

+schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

+

 cn: ms-WMI-Genus

 ldapDisplayName: msWMI-Genus

 attributeId: 1.2.840.113556.1.4.1677

@@ -9828,19 +10026,6 @@ systemOnly: FALSE
 searchFlags: 0

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: Min-Pwd-Age

-ldapDisplayName: minPwdAge

-attributeId: 1.2.840.113556.1.4.78

-attributeSyntax: 2.5.5.16

-omSyntax: 65

-isSingleValued: TRUE

-schemaIdGuid: bf9679c2-0de6-11d0-a285-00aa003049e2

-systemOnly: FALSE

-searchFlags: 0

-attributeSecurityGuid: c7407360-20bf-11d0-a768-00aa006e0529

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

-

 cn: ms-WMI-ID

 ldapDisplayName: msWMI-ID

 attributeId: 1.2.840.113556.1.4.1627

@@ -9940,41 +10125,28 @@ systemOnly: FALSE
 searchFlags: 0

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: ms-WMI-intFlags4

-ldapDisplayName: msWMI-intFlags4

-attributeId: 1.2.840.113556.1.4.1681

-attributeSyntax: 2.5.5.9

-omSyntax: 2

+cn: Modified-Count-At-Last-Prom

+ldapDisplayName: modifiedCountAtLastProm

+attributeId: 1.2.840.113556.1.4.81

+attributeSyntax: 2.5.5.16

+omSyntax: 65

 isSingleValued: TRUE

-schemaIdGuid: bd74a7ac-c493-4c9c-bdfa-5c7b119ca6b2

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

-cn: Machine-Wide-Policy

-ldapDisplayName: machineWidePolicy

-attributeId: 1.2.840.113556.1.4.459

-attributeSyntax: 2.5.5.10

-omSyntax: 4

-isSingleValued: FALSE

-schemaIdGuid: 80a67e4f-9f22-11d0-afdd-00c04fd930c9

+schemaIdGuid: bf9679c6-0de6-11d0-a285-00aa003049e2

 systemOnly: FALSE

 searchFlags: 0

-attributeSecurityGuid: a29b8a01-c7e8-11d0-9bae-00c04fd92ef5

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

+schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

-cn: Min-Pwd-Length

-ldapDisplayName: minPwdLength

-attributeId: 1.2.840.113556.1.4.79

+cn: ms-WMI-intFlags4

+ldapDisplayName: msWMI-intFlags4

+attributeId: 1.2.840.113556.1.4.1681

 attributeSyntax: 2.5.5.9

 omSyntax: 2

 isSingleValued: TRUE

-schemaIdGuid: bf9679c3-0de6-11d0-a285-00aa003049e2

+schemaIdGuid: bd74a7ac-c493-4c9c-bdfa-5c7b119ca6b2

 systemOnly: FALSE

 searchFlags: 0

-attributeSecurityGuid: c7407360-20bf-11d0-a768-00aa006e0529

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

-schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

 cn: ms-WMI-intMax

 ldapDisplayName: msWMI-IntMax

@@ -10075,6 +10247,18 @@ systemOnly: FALSE
 searchFlags: 0

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

+cn: Modify-Time-Stamp

+ldapDisplayName: modifyTimeStamp

+attributeId: 2.5.18.2

+attributeSyntax: 2.5.5.11

+omSyntax: 24

+isSingleValued: TRUE

+schemaIdGuid: 9a7ad94a-ca53-11d1-bbd0-0080c76670c0

+systemOnly: TRUE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED |FLAG_DOMAIN_DISALLOW_RENAME

+schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

+

 cn: ms-WMI-Parm4

 ldapDisplayName: msWMI-Parm4

 attributeId: 1.2.840.113556.1.4.1685

@@ -10086,18 +10270,6 @@ systemOnly: FALSE
 searchFlags: 0

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: Min-Ticket-Age

-ldapDisplayName: minTicketAge

-attributeId: 1.2.840.113556.1.4.80

-attributeSyntax: 2.5.5.16

-omSyntax: 65

-isSingleValued: TRUE

-schemaIdGuid: bf9679c4-0de6-11d0-a285-00aa003049e2

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

-

 cn: ms-WMI-PropertyName

 ldapDisplayName: msWMI-PropertyName

 attributeId: 1.2.840.113556.1.4.1641

@@ -10197,30 +10369,26 @@ systemOnly: FALSE
 searchFlags: 0

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: ms-WMI-TargetObject

-ldapDisplayName: msWMI-TargetObject

-attributeId: 1.2.840.113556.1.4.1647

+cn: Moniker

+ldapDisplayName: moniker

+attributeId: 1.2.840.113556.1.4.82

 attributeSyntax: 2.5.5.10

 omSyntax: 4

 isSingleValued: FALSE

-schemaIdGuid: c44f67a5-7de5-4a1f-92d9-662b57364b77

+schemaIdGuid: bf9679c7-0de6-11d0-a285-00aa003049e2

 systemOnly: FALSE

 searchFlags: 0

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: Phone-Mobile-Primary

-ldapDisplayName: mobile

-attributeId: 0.9.2342.19200300.100.1.41

-attributeSyntax: 2.5.5.12

-omSyntax: 64

-isSingleValued: TRUE

-schemaIdGuid: f0f8ffa3-1191-11d0-a060-00aa006c33ed

+cn: ms-WMI-TargetObject

+ldapDisplayName: msWMI-TargetObject

+attributeId: 1.2.840.113556.1.4.1647

+attributeSyntax: 2.5.5.10

+omSyntax: 4

+isSingleValued: FALSE

+schemaIdGuid: c44f67a5-7de5-4a1f-92d9-662b57364b77

 systemOnly: FALSE

 searchFlags: 0

-rangeLower: 1

-rangeUpper: 64

-attributeSecurityGuid: 77b5b886-944a-11d1-aebd-0000f80367c1

-mapiID: 14876

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

 cn: ms-WMI-TargetPath

@@ -10257,54 +10425,6 @@ searchFlags: 0
 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

-cn: Modified-Count

-ldapDisplayName: modifiedCount

-attributeId: 1.2.840.113556.1.4.168

-attributeSyntax: 2.5.5.16

-omSyntax: 65

-isSingleValued: TRUE

-schemaIdGuid: bf9679c5-0de6-11d0-a285-00aa003049e2

-systemOnly: FALSE

-searchFlags: 0

-attributeSecurityGuid: b8119fd0-04f6-4762-ab7a-4986c76b3f9a

-systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_NOT_REPLICATED

-schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

-

-cn: Modified-Count-At-Last-Prom

-ldapDisplayName: modifiedCountAtLastProm

-attributeId: 1.2.840.113556.1.4.81

-attributeSyntax: 2.5.5.16

-omSyntax: 65

-isSingleValued: TRUE

-schemaIdGuid: bf9679c6-0de6-11d0-a285-00aa003049e2

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

-

-cn: Modify-Time-Stamp

-ldapDisplayName: modifyTimeStamp

-attributeId: 2.5.18.2

-attributeSyntax: 2.5.5.11

-omSyntax: 24

-isSingleValued: TRUE

-schemaIdGuid: 9a7ad94a-ca53-11d1-bbd0-0080c76670c0

-systemOnly: TRUE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED

-schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

-

-cn: Moniker

-ldapDisplayName: moniker

-attributeId: 1.2.840.113556.1.4.82

-attributeSyntax: 2.5.5.10

-omSyntax: 4

-isSingleValued: FALSE

-schemaIdGuid: bf9679c7-0de6-11d0-a285-00aa003049e2

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: Moniker-Display-Name

 ldapDisplayName: monikerDisplayName

 attributeId: 1.2.840.113556.1.4.83

@@ -10848,168 +10968,6 @@ searchFlags: fATTINDEX
 isMemberOfPartialAttributeSet: TRUE

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: ms-DFS-Comment-v2

-ldapDisplayName: msDFS-Commentv2

-attributeId: 1.2.840.113556.1.4.2036

-attributeSyntax: 2.5.5.12

-omSyntax: 64

-isSingleValued: TRUE

-schemaIdGuid: 4fb42f00-29bd-4f82-b94b-07c7fa61e449

-isMemberOfPartialAttributeSet: FALSE

-searchFlags: 0

-rangeLower: 0

-rangeUpper: 32766

-

-cn: ms-DFS-Generation-GUID-v2

-ldapDisplayName: msDFS-GenerationGUIDv2

-attributeId: 1.2.840.113556.1.4.2032

-attributeSyntax: 2.5.5.10

-omSyntax: 4

-isSingleValued: TRUE

-schemaIdGuid: 62a45d41-424c-4905-b728-e5ef1fc4fe42

-isMemberOfPartialAttributeSet: FALSE

-searchFlags: 0

-rangeLower: 16

-rangeUpper: 16

-

-cn: ms-DFS-Last-Modified-v2

-ldapDisplayName: msDFS-LastModifiedv2

-attributeId: 1.2.840.113556.1.4.2034

-attributeSyntax: 2.5.5.11

-omSyntax: 24

-isSingleValued: TRUE

-schemaIdGuid: d6147e9b-b369-4b98-9f7b-1f345bb0680a

-isMemberOfPartialAttributeSet: FALSE

-searchFlags: 0

-

-cn: ms-DFS-Link-Identity-GUID-v2

-ldapDisplayName: msDFS-LinkIdentityGUIDv2

-attributeId: 1.2.840.113556.1.4.2041

-attributeSyntax: 2.5.5.10

-omSyntax: 4

-isSingleValued: TRUE

-schemaIdGuid: 19e2bd91-e8fa-49b2-be2b-7efd5ae5676d

-isMemberOfPartialAttributeSet: FALSE

-searchFlags: 0

-rangeLower:16

-rangeUpper: 16

-

-cn: ms-DFS-Link-Path-v2

-ldapDisplayName: msDFS-LinkPathv2

-attributeId: 1.2.840.113556.1.4.2039

-attributeSyntax: 2.5.5.12

-omSyntax: 64

-isSingleValued: TRUE

-schemaIdGuid: 5882bb1e-3101-4845-a21e-1516e59279f2

-isMemberOfPartialAttributeSet: FALSE

-searchFlags: 0

-rangeLower: 0

-rangeUpper: 32766

-

-cn: ms-DFS-Link-Security-Descriptor-v2

-ldapDisplayName: msDFS-LinkSecurityDescriptorv2

-attributeId: 1.2.840.113556.1.4.2040

-attributeSyntax: 2.5.5.15

-omSyntax: 66

-isSingleValued: TRUE

-schemaIdGuid: d780b945-3caa-4d28-975b-eb3f08e455e1

-isMemberOfPartialAttributeSet: FALSE

-searchFlags: 0

-

-cn: ms-DFS-Namespace-Identity-GUID-v2

-ldapDisplayName: msDFS-NamespaceIdentityGUIDv2

-attributeId: 1.2.840.113556.1.4.2033

-attributeSyntax: 2.5.5.10

-omSyntax: 4

-isSingleValued: TRUE

-schemaIdGuid: 87011f22-e651-4c27-b55b-51daf9f9d364

-isMemberOfPartialAttributeSet: FALSE

-searchFlags: 0

-rangeLower: 16

-rangeUpper: 16

-

-cn: ms-DFS-Properties-v2

-ldapDisplayName: msDFS-Propertiesv2

-attributeId: 1.2.840.113556.1.4.2037

-attributeSyntax: 2.5.5.12

-omSyntax: 64

-isSingleValued: TRUE

-schemaIdGuid: 1c070014-ebf6-4088-95b4-28b16cc31241

-isMemberOfPartialAttributeSet: FALSE

-searchFlags: 0

-rangeLower: 0

-rangeUpper: 1024

-

-cn: ms-DFS-Schema-Major-Version

-ldapDisplayName: msDFS-SchemaMajorVersion

-attributeId: 1.2.840.113556.1.4.2030

-attributeSyntax: 2.5.5.9

-omSyntax: 2

-isSingleValued: TRUE

-schemaIdGuid: 2bcf447b-39d8-4ee8-909a-bb0755cc2f8d

-isMemberOfPartialAttributeSet: FALSE

-searchFlags: 0

-rangeLower: 2

-rangeUpper: 2

-

-cn: ms-DFS-Schema-Minor-Version

-ldapDisplayName: msDFS-SchemaMinorVersion

-attributeId: 1.2.840.113556.1.4.2031

-attributeSyntax: 2.5.5.9

-omSyntax: 2

-isSingleValued: TRUE

-schemaIdGuid: d1e1dafb-8559-4519-866e-89e775557b9c

-isMemberOfPartialAttributeSet: FALSE

-searchFlags: 0

-rangeLower: 0

-rangeUpper: 0

-

-cn: ms-DFS-Short-Name-Link-Path-v2

-ldapDisplayName: msDFS-ShortNameLinkPathv2

-attributeId: 1.2.840.113556.1.4.2042

-attributeSyntax: 2.5.5.12

-omSyntax: 64

-isSingleValued: TRUE

-schemaIdGuid: 52bfc673-9713-4e9b-aafd-56ee72fd16a4

-isMemberOfPartialAttributeSet: FALSE

-searchFlags: 0

-rangeLower: 0

-rangeUpper: 32766

-

-cn: ms-DFS-Target-List-v2

-ldapDisplayName: msDFS-TargetListv2

-attributeId: 1.2.840.113556.1.4.2038

-attributeSyntax: 2.5.5.10

-omSyntax: 4

-isSingleValued: TRUE

-schemaIdGuid: 9649b643-59a7-4791-999d-79100cf871d7

-isMemberOfPartialAttributeSet: FALSE

-searchFlags: 0

-rangeLower: 0

-rangeUpper: 2097152

-

-cn: ms-DFS-Ttl-v2

-ldapDisplayName: msDFS-Ttlv2

-attributeId: 1.2.840.113556.1.4.2035

-attributeSyntax: 2.5.5.9

-omSyntax: 2

-isSingleValued: TRUE

-schemaIdGuid: 81ee1500-467e-4c83-a41a-295d12bdcc23

-isMemberOfPartialAttributeSet: FALSE

-searchFlags: 0

-

-cn: ms-DS-Is-User-Cachable-At-Rodc

-ldapDisplayName: msDS-IsUserCachableAtRodc

-attributeId: 1.2.840.113556.1.4.2025

-attributeSyntax: 2.5.5.9

-omSyntax: 2

-isSingleValued: TRUE

-schemaIdGuid: fe01245a-341f-4556-951f-48c033a89050

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED

-schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

-

 cn: RDN

 ldapDisplayName: name

 attributeId: 1.2.840.113556.1.4.1

@@ -11130,7 +11088,7 @@ isSingleValued: FALSE
 schemaIdGuid: 9a7ad94c-ca53-11d1-bbd0-0080c76670c0

 systemOnly: TRUE

 searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED

+systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED |FLAG_DOMAIN_DISALLOW_RENAME

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

 cn: Poss-Superiors

@@ -12228,7 +12186,6 @@ systemOnly: TRUE
 searchFlags: 0

 linkID: 101

 systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_NOT_REPLICATED

-isSingleValued: TRUE

 

 cn: Repl-Interval

 ldapDisplayName: replInterval

@@ -12711,7 +12668,7 @@ attributeSyntax: 2.5.5.9
 omSyntax: 2

 isSingleValued: TRUE

 schemaIdGuid: bf967a2b-0de6-11d0-a285-00aa003049e2

-systemOnly: FALSE

+systemOnly: TRUE

 searchFlags: 0

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

@@ -12812,7 +12769,7 @@ schemaIdGuid: c3dbafa6-33df-11d2-98b2-0000f87a57d4
 systemOnly: FALSE

 searchFlags: 0

 attributeSecurityGuid: 59ba2f42-79a2-11d0-9020-00c04fc2d3cf

-systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED

+systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED |FLAG_DOMAIN_DISALLOW_RENAME

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

 cn: Search-Flags

@@ -12957,7 +12914,6 @@ searchFlags: 0
 linkID: 95

 systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_NOT_REPLICATED

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

-isSingleValued: TRUE

 

 cn: Server-Role

 ldapDisplayName: serverRole

@@ -13261,7 +13217,6 @@ attributeSecurityGuid: 59ba2f42-79a2-11d0-9020-00c04fc2d3cf
 isMemberOfPartialAttributeSet: TRUE

 systemFlags: FLAG_SCHEMA_BASE_OBJECT |FLAG_ATTR_REQ_PARTIAL_SET_MEMBER

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

-systemOnly: TRUE

 

 cn: Signature-Algorithms

 ldapDisplayName: signatureAlgorithms

@@ -13505,7 +13460,7 @@ isSingleValued: FALSE
 schemaIdGuid: 9a7ad94d-ca53-11d1-bbd0-0080c76670c0

 systemOnly: TRUE

 searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED

+systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED |FLAG_DOMAIN_DISALLOW_RENAME

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

 cn: Superior-DNS-Root

@@ -13804,7 +13759,7 @@ omSyntax: 4
 isSingleValued: TRUE

 schemaIdGuid: 6db69a1c-9422-11d1-aebd-0000f80367c1

 systemOnly: FALSE

-searchFlags: 0

+searchFlags: fATTINDEX

 rangeUpper: 20480

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

@@ -13887,19 +13842,6 @@ attributeSecurityGuid: e48d0154-bcf8-11d1-8702-00c04fb96050
 mapiID: 14871

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: Token-Groups

-ldapDisplayName: tokenGroups

-attributeId: 1.2.840.113556.1.4.1301

-attributeSyntax: 2.5.5.17

-omSyntax: 4

-isSingleValued: FALSE

-schemaIdGuid: b7c69e6d-2cc7-11d2-854e-00a0c983f608

-systemOnly: FALSE

-searchFlags: 0

-attributeSecurityGuid: 037088f8-0ae1-11d2-b422-00a0c968f939

-systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED

-schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

-

 cn: Additional-Information

 ldapDisplayName: notes

 attributeId: 1.2.840.113556.1.4.265

@@ -13913,6 +13855,19 @@ rangeUpper: 32768
 attributeSecurityGuid: e48d0154-bcf8-11d1-8702-00c04fb96050

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

+cn: Token-Groups

+ldapDisplayName: tokenGroups

+attributeId: 1.2.840.113556.1.4.1301

+attributeSyntax: 2.5.5.17

+omSyntax: 4

+isSingleValued: FALSE

+schemaIdGuid: b7c69e6d-2cc7-11d2-854e-00a0c983f608

+systemOnly: FALSE

+searchFlags: 0

+attributeSecurityGuid: 037088f8-0ae1-11d2-b422-00a0c968f939

+systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED |FLAG_DOMAIN_DISALLOW_RENAME

+schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

+

 cn: Token-Groups-Global-And-Universal

 ldapDisplayName: tokenGroupsGlobalAndUniversal

 attributeId: 1.2.840.113556.1.4.1418

@@ -13923,7 +13878,7 @@ schemaIdGuid: 46a9b11d-60ae-405a-b7e8-ff8a58d456d2
 systemOnly: FALSE

 searchFlags: 0

 attributeSecurityGuid: 037088f8-0ae1-11d2-b422-00a0c968f939

-systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED

+systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED |FLAG_DOMAIN_DISALLOW_RENAME

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

 cn: Token-Groups-No-GC-Acceptable

@@ -13936,7 +13891,7 @@ schemaIdGuid: 040fc392-33df-11d2-98b2-0000f87a57d4
 systemOnly: FALSE

 searchFlags: 0

 attributeSecurityGuid: 037088f8-0ae1-11d2-b422-00a0c968f939

-systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED

+systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED |FLAG_DOMAIN_DISALLOW_RENAME

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

 cn: Tombstone-Lifetime

@@ -14026,6 +13981,18 @@ isMemberOfPartialAttributeSet: TRUE
 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

+cn: Notification-List

+ldapDisplayName: notificationList

+attributeId: 1.2.840.113556.1.4.303

+attributeSyntax: 2.5.5.1

+omSyntax: 127

+omObjectClass: 1.3.12.2.1011.28.0.714

+isSingleValued: TRUE

+schemaIdGuid: 19195a56-6da0-11d0-afd3-00c04fd930c9

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: Trust-Auth-Incoming

 ldapDisplayName: trustAuthIncoming

 attributeId: 1.2.840.113556.1.4.129

@@ -14040,18 +14007,6 @@ rangeUpper: 32767
 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

-cn: Notification-List

-ldapDisplayName: notificationList

-attributeId: 1.2.840.113556.1.4.303

-attributeSyntax: 2.5.5.1

-omSyntax: 127

-omObjectClass: 1.3.12.2.1011.28.0.714

-isSingleValued: TRUE

-schemaIdGuid: 19195a56-6da0-11d0-afd3-00c04fd930c9

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: Trust-Auth-Outgoing

 ldapDisplayName: trustAuthOutgoing

 attributeId: 1.2.840.113556.1.4.135

@@ -14166,6 +14121,17 @@ schemaIdGuid: 850fcc8f-9c6b-47e1-b671-7c654be4d5b3
 systemOnly: FALSE

 searchFlags: fATTINDEX

 

+cn: NT-Group-Members

+ldapDisplayName: nTGroupMembers

+attributeId: 1.2.840.113556.1.4.89

+attributeSyntax: 2.5.5.10

+omSyntax: 4

+isSingleValued: FALSE

+schemaIdGuid: bf9679df-0de6-11d0-a285-00aa003049e2

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: UNC-Name

 ldapDisplayName: uNCName

 attributeId: 1.2.840.113556.1.4.137

@@ -14178,17 +14144,6 @@ searchFlags: fATTINDEX
 isMemberOfPartialAttributeSet: TRUE

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: NT-Group-Members

-ldapDisplayName: nTGroupMembers

-attributeId: 1.2.840.113556.1.4.89

-attributeSyntax: 2.5.5.10

-omSyntax: 4

-isSingleValued: FALSE

-schemaIdGuid: bf9679df-0de6-11d0-a285-00aa003049e2

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: Unicode-Pwd

 ldapDisplayName: unicodePwd

 attributeId: 1.2.840.113556.1.4.90

@@ -14294,6 +14249,18 @@ searchFlags: 0
 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

+cn: NT-Mixed-Domain

+ldapDisplayName: nTMixedDomain

+attributeId: 1.2.840.113556.1.4.357

+attributeSyntax: 2.5.5.9

+omSyntax: 2

+isSingleValued: TRUE

+schemaIdGuid: 3e97891f-8c01-11d0-afda-00c04fd930c9

+systemOnly: FALSE

+searchFlags: 0

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

+

 cn: WWW-Page-Other

 ldapDisplayName: url

 attributeId: 1.2.840.113556.1.4.749

@@ -14307,18 +14274,6 @@ attributeSecurityGuid: e45795b3-9455-11d1-aebd-0000f80367c1
 mapiID: 33141

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: NT-Mixed-Domain

-ldapDisplayName: nTMixedDomain

-attributeId: 1.2.840.113556.1.4.357

-attributeSyntax: 2.5.5.9

-omSyntax: 2

-isSingleValued: TRUE

-schemaIdGuid: 3e97891f-8c01-11d0-afda-00c04fd930c9

-systemOnly: FALSE

-searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

-

 cn: User-Account-Control

 ldapDisplayName: userAccountControl

 attributeId: 1.2.840.113556.1.4.8

@@ -14443,18 +14398,6 @@ searchFlags: 0
 attributeSecurityGuid: 77b5b886-944a-11d1-aebd-0000f80367c1

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: User-Shared-Folder-Other

-ldapDisplayName: userSharedFolderOther

-attributeId: 1.2.840.113556.1.4.752

-attributeSyntax: 2.5.5.12

-omSyntax: 64

-isSingleValued: FALSE

-schemaIdGuid: 9a9a0220-4a5b-11d1-a9c3-0000f80367c1

-systemOnly: FALSE

-searchFlags: 0

-attributeSecurityGuid: 77b5b886-944a-11d1-aebd-0000f80367c1

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: Nt-Pwd-History

 ldapDisplayName: ntPwdHistory

 attributeId: 1.2.840.113556.1.4.94

@@ -14467,6 +14410,18 @@ searchFlags: 0
 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

+cn: User-Shared-Folder-Other

+ldapDisplayName: userSharedFolderOther

+attributeId: 1.2.840.113556.1.4.752

+attributeSyntax: 2.5.5.12

+omSyntax: 64

+isSingleValued: FALSE

+schemaIdGuid: 9a9a0220-4a5b-11d1-a9c3-0000f80367c1

+systemOnly: FALSE

+searchFlags: 0

+attributeSecurityGuid: 77b5b886-944a-11d1-aebd-0000f80367c1

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: User-SMIME-Certificate

 ldapDisplayName: userSMIMECertificate

 attributeId: 2.16.840.1.113730.3.140

@@ -14588,19 +14543,6 @@ searchFlags: 0
 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

-cn: Vendor

-ldapDisplayName: vendor

-attributeId: 1.2.840.113556.1.4.255

-attributeSyntax: 2.5.5.12

-omSyntax: 64

-isSingleValued: TRUE

-schemaIdGuid: 281416df-1968-11d0-a28f-00aa003049e2

-systemOnly: FALSE

-searchFlags: 0

-rangeLower: 0

-rangeUpper: 512

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: NT-Security-Descriptor

 ldapDisplayName: nTSecurityDescriptor

 attributeId: 1.2.840.113556.1.2.281

@@ -14617,6 +14559,19 @@ isMemberOfPartialAttributeSet: TRUE
 systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_OPERATIONAL |FLAG_ATTR_REQ_PARTIAL_SET_MEMBER

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

+cn: Vendor

+ldapDisplayName: vendor

+attributeId: 1.2.840.113556.1.4.255

+attributeSyntax: 2.5.5.12

+omSyntax: 64

+isSingleValued: TRUE

+schemaIdGuid: 281416df-1968-11d0-a28f-00aa003049e2

+systemOnly: FALSE

+searchFlags: 0

+rangeLower: 0

+rangeUpper: 512

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: Version-Number

 ldapDisplayName: versionNumber

 attributeId: 1.2.840.113556.1.4.141

@@ -14729,20 +14684,6 @@ isMemberOfPartialAttributeSet: TRUE
 systemFlags: FLAG_SCHEMA_BASE_OBJECT |FLAG_ATTR_REQ_PARTIAL_SET_MEMBER | FLAG_ATTR_NOT_REPLICATED

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

-cn: When-Created

-ldapDisplayName: whenCreated

-attributeId: 1.2.840.113556.1.2.2

-attributeSyntax: 2.5.5.11

-omSyntax: 24

-isSingleValued: TRUE

-schemaIdGuid: bf967a78-0de6-11d0-a285-00aa003049e2

-systemOnly: TRUE

-searchFlags: 0

-mapiID: 12295

-isMemberOfPartialAttributeSet: TRUE

-systemFlags: FLAG_SCHEMA_BASE_OBJECT |FLAG_ATTR_REQ_PARTIAL_SET_MEMBER

-schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

-

 cn: Organization-Name

 ldapDisplayName: o

 attributeId: 2.5.4.10

@@ -14760,6 +14701,20 @@ isMemberOfPartialAttributeSet: TRUE
 systemFlags: FLAG_SCHEMA_BASE_OBJECT |FLAG_ATTR_REQ_PARTIAL_SET_MEMBER

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

+cn: When-Created

+ldapDisplayName: whenCreated

+attributeId: 1.2.840.113556.1.2.2

+attributeSyntax: 2.5.5.11

+omSyntax: 24

+isSingleValued: TRUE

+schemaIdGuid: bf967a78-0de6-11d0-a285-00aa003049e2

+systemOnly: TRUE

+searchFlags: 0

+mapiID: 12295

+isMemberOfPartialAttributeSet: TRUE

+systemFlags: FLAG_SCHEMA_BASE_OBJECT |FLAG_ATTR_REQ_PARTIAL_SET_MEMBER

+schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

+

 cn: Winsock-Addresses

 ldapDisplayName: winsockAddresses

 attributeId: 1.2.840.113556.1.4.142

@@ -14834,7 +14789,7 @@ omSyntax: 6
 isSingleValued: FALSE

 schemaIdGuid: bf9679e5-0de6-11d0-a285-00aa003049e2

 systemOnly: TRUE

-searchFlags: fPRESERVEONDELETE

+searchFlags: fATTINDEX | fPRESERVEONDELETE

 attributeSecurityGuid: e48d0154-bcf8-11d1-8702-00c04fb96050

 isMemberOfPartialAttributeSet: TRUE

 systemFlags: FLAG_SCHEMA_BASE_OBJECT |FLAG_ATTR_REQ_PARTIAL_SET_MEMBER

@@ -14878,7 +14833,7 @@ isSingleValued: FALSE
 schemaIdGuid: 9a7ad94b-ca53-11d1-bbd0-0080c76670c0

 systemOnly: TRUE

 searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED

+systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED |FLAG_DOMAIN_DISALLOW_RENAME

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

 cn: Object-Count

@@ -14925,7 +14880,6 @@ mapiID: 32807
 isMemberOfPartialAttributeSet: TRUE

 systemFlags: FLAG_SCHEMA_BASE_OBJECT |FLAG_ATTR_REQ_PARTIAL_SET_MEMBER

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

-systemOnly: FALSE

 

 cn: Object-Version

 ldapDisplayName: objectVersion

@@ -15440,7 +15394,7 @@ isSingleValued: TRUE
 schemaIdGuid: 2df90d74-009f-11d2-aa4c-00c04fd7d83a

 systemOnly: TRUE

 searchFlags: 0

-systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED

+systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_ATTR_IS_CONSTRUCTED |FLAG_DOMAIN_DISALLOW_RENAME

 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

 

 cn: Partial-Attribute-Deletion-List

diff --git a/source4/setup/ad-schema/MS-AD_Schema_Classes_v20080618.txt b/source4/setup/ad-schema/MS-AD_Schema_2K8Classes.txt
index e2655d57da..87edde7e0b 100644
--- a/source4/setup/ad-schema/MS-AD_Schema_Classes_v20080618.txt
+++ b/source4/setup/ad-schema/MS-AD_Schema_2K8Classes.txt
@@ -1,51 +1,13 @@
-# © 2008 Microsoft Corporation. All rights reserved

+#Intellectual Property Rights Notice for Protocol Documentation

+#•	Copyrights. This protocol documentation is covered by Microsoft copyrights. Regardless of any other terms that are contained in the terms of use for the Microsoft website that hosts this documentation, you may make copies of it in order to develop implementations of the protocols, and may distribute portions of it in your implementations of the protocols or your documentation as necessary to properly document the implementation. You may also distribute in your implementation, with or without modification, any schema, IDL’s, or code samples that are included in the documentation. This permission also applies to any documents that are referenced in the protocol documentation. 

+#•	No Trade Secrets. Microsoft does not claim any trade secret rights in this documentation. 

+#•	Patents. Microsoft has patents that may cover your implementations of the protocols. Neither this notice nor Microsoft's delivery of the documentation grants any licenses under those or any other Microsoft patents. However, the protocols may be covered by Microsoft’s Open Specification Promise (available here: http://www.microsoft.com/interop/osp). If you would prefer a written license, or if the protocols are not covered by the OSP, patent licenses are available by contacting protocol@microsoft.com. 

+#•	Trademarks. The names of companies and products contained in this documentation may be covered by trademarks or similar intellectual property rights. This notice does not grant any licenses under those rights. 

+#Reservation of Rights. All other rights are reserved, and this notice does not grant any rights other than specifically described above, whether by implication, estoppel, or otherwise. 

+#Tools. This protocol documentation is intended for use in conjunction with publicly available standard specifications and network programming art, and assumes that the reader either is familiar with the aforementioned material or has immediate access to it. A protocol specification does not require the use of Microsoft programming tools or programming environments in order for you to develop an implementation. If you have access to Microsoft programming tools and environments you are free to take advantage of them.

 #

-# Intellectual Property Rights Notice for Protocol Documentation

-#

-# Copyrights. 

-# This protocol documentation is covered by Microsoft

-# copyrights. Regardless of any other terms that are contained in the

-# terms of use for the Microsoft website that hosts this documentation,

-# you may make copies of it in order to develop implementations of the

-# protocols, and may distribute portions of it in your implementations

-# of the protocols or your documentation as necessary to properly

-# document the implementation. You may also distribute in your

-# implementation, with or without modification, any schema, IDL's, or

-# code samples that are included in the documentation. This permission

-# also applies to any documents that are referenced in the protocol

-# documentation.

-# 

-# No Trade Secrets. 

-# Microsoft does not claim any trade secret rights in this documentation.

-# 

-# Patents. 

-# Microsoft has patents that may cover your implementations of the

-# protocols.  Neither this notice nor Microsoft's delivery of the

-# documentation grants any licenses under those or any other Microsoft

-# patents.  However, the protocols may be covered by MicrosoftÂ’s Open

-# Specification Promise (available here:

-# http://www.microsoft.com/interop/osp).  If you would prefer a written

-# license, or if the protocols are not covered by the OSP, patent

-# licenses are available by contacting protocol@microsoft.com.

-# 

-# Trademarks. 

-# The names of companies and products contained in this documentation

-# may be covered by trademarks or similar intellectual property

-# rights. This notice does not grant any licenses under those

-# rights.Reservation of Rights.  All other rights are reserved, and this

-# notice does not grant any rights other than specifically described

-# above, whether by implication, estoppel, or otherwise.

-# 

-# Tools. 

-# This protocol documentation is intended for use in conjunction with

-# publicly available standard specifications and network programming

-# art, and assumes that the reader either is familiar with the

-# aforementioned material or has immediate access to it.  A protocol

-# specification does not require the use of Microsoft programming tools

-# or programming environments in order for you to develop an

-# implementation.  If you have access to Microsoft programming tools and

-# environments you are free to take advantage of them.

-

+#AD Schema Classes

+#____________________

 cn: account

 ldapDisplayName: account

 governsId: 0.9.2342.19200300.100.4.5

@@ -75,6 +37,92 @@ systemOnly: FALSE
 defaultObjectCategory: CN=Application-Site-Settings,CN=Schema,CN=Configuration,<RootDomainDN>

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

+cn: ms-DFSR-Connection

+ldapDisplayName: msDFSR-Connection

+governsId: 1.2.840.113556.1.6.13.4.10

+objectClassCategory: 1

+rdnAttId: cn

+subClassOf: top

+mustContain: fromServer

+mayContain: msDFSR-Options2, msDFSR-DisablePacketPrivacy,msDFSR-Priority, msDFSR-Enabled, msDFSR-RdcEnabled,msDFSR-RdcMinFileSizeInKb, msDFSR-Keywords, msDFSR-Schedule,msDFSR-Flags, msDFSR-Options, msDFSR-Extension

+possSuperiors: msDFSR-Member

+schemaIdGuid:e58f972e-64b5-46ef-8d8b-bbc3e1897eab

+defaultSecurityDescriptor: D:(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;DA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;CO)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY)

+defaultHidingValue: TRUE

+systemOnly: FALSE

+defaultObjectCategory: CN=ms-DFSR-Connection,CN=Schema,CN=Configuration,<RootDomainDN>

+

+cn: ms-DFSR-Content

+ldapDisplayName: msDFSR-Content

+governsId: 1.2.840.113556.1.6.13.4.6

+objectClassCategory: 1

+rdnAttId: cn

+subClassOf: top

+mayContain: msDFSR-Options2, msDFSR-Flags, msDFSR-Options,msDFSR-Extension

+possSuperiors: msDFSR-ReplicationGroup

+schemaIdGuid:64759b35-d3a1-42e4-b5f1-a3de162109b3

+defaultSecurityDescriptor: D:(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;DA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;CO)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY)

+defaultHidingValue: TRUE

+systemOnly: FALSE

+defaultObjectCategory: CN=ms-DFSR-Content,CN=Schema,CN=Configuration,<RootDomainDN>

+

+cn: ms-DFSR-ContentSet

+ldapDisplayName: msDFSR-ContentSet

+governsId: 1.2.840.113556.1.6.13.4.7

+objectClassCategory: 1

+rdnAttId: cn

+subClassOf: top

+mayContain: msDFSR-Options2, msDFSR-OnDemandExclusionDirectoryFilter,msDFSR-OnDemandExclusionFileFilter,msDFSR-DefaultCompressionExclusionFilter, msDFSR-DeletedSizeInMb,msDFSR-Priority, msDFSR-ConflictSizeInMb, msDFSR-StagingSizeInMb,msDFSR-RootSizeInMb, description, msDFSR-DfsPath, msDFSR-FileFilter,msDFSR-DirectoryFilter, msDFSR-Flags, msDFSR-Options,msDFSR-Extension

+possSuperiors: msDFSR-Content

+schemaIdGuid:4937f40d-a6dc-4d48-97ca-06e5fbfd3f16

+defaultSecurityDescriptor: D:(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;DA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;CO)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY)

+defaultHidingValue: TRUE

+systemOnly: FALSE

+defaultObjectCategory: CN=ms-DFSR-ContentSet,CN=Schema,CN=Configuration,<RootDomainDN>

+

+cn: ms-DFSR-GlobalSettings

+ldapDisplayName: msDFSR-GlobalSettings

+governsId: 1.2.840.113556.1.6.13.4.4

+objectClassCategory: 1

+rdnAttId: cn

+subClassOf: top

+mayContain: msDFSR-Options2, msDFSR-Flags, msDFSR-Options,msDFSR-Extension

+possSuperiors: container

+schemaIdGuid:7b35dbad-b3ec-486a-aad4-2fec9d6ea6f6

+defaultSecurityDescriptor: D:(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;DA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;CO)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY)

+defaultHidingValue: TRUE

+systemOnly: FALSE

+defaultObjectCategory: CN=ms-DFSR-GlobalSettings,CN=Schema,CN=Configuration,<RootDomainDN>

+

+cn: ms-DFSR-LocalSettings

+ldapDisplayName: msDFSR-LocalSettings

+governsId: 1.2.840.113556.1.6.13.4.1

+objectClassCategory: 1

+rdnAttId: cn

+subClassOf: top

+mayContain: msDFSR-StagingCleanupTriggerInPercent,msDFSR-CommonStagingSizeInMb, msDFSR-CommonStagingPath,msDFSR-Options2, msDFSR-Version, msDFSR-Flags, msDFSR-Options,msDFSR-Extension

+possSuperiors: computer

+schemaIdGuid:fa85c591-197f-477e-83bd-ea5a43df2239

+defaultSecurityDescriptor: D:(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;DA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;CO)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY)

+defaultHidingValue: TRUE

+systemOnly: FALSE

+defaultObjectCategory: CN=ms-DFSR-LocalSettings,CN=Schema,CN=Configuration,<RootDomainDN>

+

+cn: ms-DFSR-Member

+ldapDisplayName: msDFSR-Member

+governsId: 1.2.840.113556.1.6.13.4.9

+objectClassCategory: 1

+rdnAttId: cn

+subClassOf: top

+mustContain: msDFSR-ComputerReference

+mayContain: msDFSR-Options2, serverReference, msDFSR-Keywords,msDFSR-Flags, msDFSR-Options, msDFSR-Extension

+possSuperiors: msDFSR-Topology

+schemaIdGuid:4229c897-c211-437c-a5ae-dbf705b696e5

+defaultSecurityDescriptor: D:(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;DA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;CO)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY)

+defaultHidingValue: TRUE

+systemOnly: FALSE

+defaultObjectCategory: CN=ms-DFSR-Member,CN=Schema,CN=Configuration,<RootDomainDN>

+

 cn: ms-DFSR-ReplicationGroup

 ldapDisplayName: msDFSR-ReplicationGroup

 governsId: 1.2.840.113556.1.6.13.4.5

@@ -97,7 +145,7 @@ objectClassCategory: 1
 rdnAttId: cn

 subClassOf: top

 mustContain: msDFSR-MemberReference, msDFSR-ReplicationGroupGuid

-mayContain: msDFSR-Flags, msDFSR-Options, msDFSR-Extension

+mayContain: msDFSR-Options2, msDFSR-Flags, msDFSR-Options,msDFSR-Extension

 possSuperiors: msDFSR-LocalSettings

 schemaIdGuid:e11505d7-92c4-43e7-bf5c-295832ffc896

 defaultSecurityDescriptor: D:(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;DA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;CO)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY)

@@ -126,7 +174,7 @@ governsId: 1.2.840.113556.1.6.13.4.8
 objectClassCategory: 1

 rdnAttId: cn

 subClassOf: top

-mayContain: msDFSR-Flags, msDFSR-Options, msDFSR-Extension

+mayContain: msDFSR-Options2, msDFSR-Flags, msDFSR-Options,msDFSR-Extension

 possSuperiors: msDFSR-ReplicationGroup

 schemaIdGuid:04828aa9-6e42-4e80-b962-e2fe00754d17

 defaultSecurityDescriptor: D:(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;DA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;CO)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY)

@@ -134,6 +182,20 @@ defaultHidingValue: TRUE
 systemOnly: FALSE

 defaultObjectCategory: CN=ms-DFSR-Topology,CN=Schema,CN=Configuration,<RootDomainDN>

 

+cn: Application-Version

+ldapDisplayName: applicationVersion

+governsId: 1.2.840.113556.1.5.216

+objectClassCategory: 1

+rdnAttId: cn

+subClassOf: applicationSettings

+mayContain: owner, managedBy, keywords, versionNumberLo,versionNumberHi, versionNumber, vendor, appSchemaVersion

+possSuperiors: organizationalUnit, computer, container

+schemaIdGuid:ddc790ac-af4d-442a-8f0f-a1d4caa7dd92

+defaultSecurityDescriptor: D:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)

+defaultHidingValue: TRUE

+systemOnly: FALSE

+defaultObjectCategory: CN=Application-Version,CN=Schema,CN=Configuration,<RootDomainDN>

+

 cn: ms-DS-App-Configuration

 ldapDisplayName: msDS-App-Configuration

 governsId: 1.2.840.113556.1.5.220

@@ -223,20 +285,6 @@ systemOnly: FALSE
 defaultObjectCategory: CN=ms-DS-Az-Role,CN=Schema,CN=Configuration,<RootDomainDN>

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: Application-Version

-ldapDisplayName: applicationVersion

-governsId: 1.2.840.113556.1.5.216

-objectClassCategory: 1

-rdnAttId: cn

-subClassOf: applicationSettings

-mayContain: owner, managedBy, keywords, versionNumberLo,versionNumberHi, versionNumber, vendor, appSchemaVersion

-possSuperiors: organizationalUnit, computer, container

-schemaIdGuid:ddc790ac-af4d-442a-8f0f-a1d4caa7dd92

-defaultSecurityDescriptor: D:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)

-defaultHidingValue: TRUE

-systemOnly: FALSE

-defaultObjectCategory: CN=Application-Version,CN=Schema,CN=Configuration,<RootDomainDN>

-

 cn: ms-DS-Az-Scope

 ldapDisplayName: msDS-AzScope

 governsId: 1.2.840.113556.1.5.237

@@ -268,6 +316,22 @@ systemOnly: FALSE
 defaultObjectCategory: CN=ms-DS-Az-Task,CN=Schema,CN=Configuration,<RootDomainDN>

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

+cn: Attribute-Schema

+ldapDisplayName: attributeSchema

+governsId: 1.2.840.113556.1.3.14

+objectClassCategory: 1

+rdnAttId: cn

+subClassOf: top

+systemMustContain: schemaIDGUID, oMSyntax, lDAPDisplayName,isSingleValued, cn, attributeSyntax, attributeID

+systemMayContain: systemOnly, searchFlags, schemaFlagsEx, rangeUpper,rangeLower, oMObjectClass, msDs-Schema-Extensions, msDS-IntId,mAPIID, linkID, isMemberOfPartialAttributeSet, isEphemeral,isDefunct, extendedCharsAllowed, classDisplayName,attributeSecurityGUID

+systemPossSuperiors: dMD

+schemaIdGuid:bf967a80-0de6-11d0-a285-00aa003049e2

+defaultSecurityDescriptor: D:S:

+defaultHidingValue: TRUE

+systemOnly: FALSE

+defaultObjectCategory: CN=Attribute-Schema,CN=Schema,CN=Configuration,<RootDomainDN>

+systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_DOMAIN_DISALLOW_RENAME

+

 cn: ms-DS-Password-Settings

 ldapDisplayName: msDS-PasswordSettings

 governsId: 1.2.840.113556.1.5.255

@@ -289,7 +353,7 @@ governsId: 1.2.840.113556.1.5.256
 objectClassCategory: 1

 rdnAttId: cn

 subClassOf: top

-systemPossSuperiors: Container

+systemPossSuperiors: container

 schemaIdGuid: 5b06b06a-4cf3-44c0-bd16-43bc10a987da

 defaultSecurityDescriptor: D:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)

 systemOnly: FALSE

@@ -387,21 +451,18 @@ systemOnly: FALSE
 defaultObjectCategory: CN=MSMQ-Custom-Recipient,CN=Schema,CN=Configuration,<RootDomainDN>

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: Attribute-Schema

-ldapDisplayName: attributeSchema

-governsId: 1.2.840.113556.1.3.14

-objectClassCategory: 1

+cn: BootableDevice

+ldapDisplayName: bootableDevice

+governsId: 1.3.6.1.1.1.2.12

+objectClassCategory: 3

 rdnAttId: cn

 subClassOf: top

-systemMustContain: schemaIDGUID, oMSyntax, lDAPDisplayName,isSingleValued, cn, attributeSyntax, attributeID

-systemMayContain: systemOnly, searchFlags, schemaFlagsEx,rangeUpper, rangeLower, oMObjectClass, msDs-Schema-Extensions,msDS-IntId, mAPIID, linkID, isMemberOfPartialAttributeSet,isEphemeral, isDefunct, extendedCharsAllowed, classDisplayName,attributeSecurityGUID

-systemPossSuperiors: dMD

-schemaIdGuid:bf967a80-0de6-11d0-a285-00aa003049e2

-defaultSecurityDescriptor: D:S:

+mayContain: cn, bootParameter, bootFile

+schemaIdGuid:4bcb2477-4bb3-4545-a9fc-fb66e136b435

+defaultSecurityDescriptor: D:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)

 defaultHidingValue: TRUE

 systemOnly: FALSE

-defaultObjectCategory: CN=Attribute-Schema,CN=Schema,CN=Configuration,<RootDomainDN>

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

+defaultObjectCategory: CN=BootableDevice,CN=Schema,CN=Configuration,<RootDomainDN>

 

 cn: MSMQ-Group

 ldapDisplayName: msMQ-Group

@@ -515,7 +576,7 @@ governsId: 1.2.840.113556.1.5.196
 objectClassCategory: 1

 rdnAttId: cn

 subClassOf: top

-systemMayContain: msPKI-OID-User-Notice, msPKI-OIDLocalizedName,msPKI-OID-CPS, msPKI-OID-Attribute, msPKI-Cert-Template-OID

+systemMayContain: msDS-OIDToGroupLink, msPKI-OID-User-Notice,msPKI-OIDLocalizedName, msPKI-OID-CPS, msPKI-OID-Attribute,msPKI-Cert-Template-OID

 systemPossSuperiors: msPKI-Enterprise-Oid, container

 schemaIdGuid:37cfd85c-6719-4ad8-8f9e-8678ba627563

 defaultSecurityDescriptor: D:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)

@@ -553,18 +614,20 @@ systemOnly: FALSE
 defaultObjectCategory: CN=ms-PKI-Private-Key-Recovery-Agent,CN=Schema,CN=Configuration,<RootDomainDN>

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: BootableDevice

-ldapDisplayName: bootableDevice

-governsId: 1.3.6.1.1.1.2.12

-objectClassCategory: 3

+cn: Builtin-Domain

+ldapDisplayName: builtinDomain

+governsId: 1.2.840.113556.1.5.4

+objectClassCategory: 1

 rdnAttId: cn

 subClassOf: top

-mayContain: cn, bootParameter, bootFile

-schemaIdGuid:4bcb2477-4bb3-4545-a9fc-fb66e136b435

-defaultSecurityDescriptor: D:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)

+systemAuxiliaryClass: samDomainBase

+systemPossSuperiors: domainDNS

+schemaIdGuid:bf967a81-0de6-11d0-a285-00aa003049e2

+defaultSecurityDescriptor: D:(A;;RPLCLORC;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)

 defaultHidingValue: TRUE

 systemOnly: FALSE

-defaultObjectCategory: CN=BootableDevice,CN=Schema,CN=Configuration,<RootDomainDN>

+defaultObjectCategory: CN=Builtin-Domain,CN=Schema,CN=Configuration,<RootDomainDN>

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

 cn: ms-Print-ConnectionPolicy

 ldapDisplayName: msPrint-ConnectionPolicy

@@ -714,19 +777,19 @@ systemOnly: FALSE
 defaultObjectCategory: CN=ms-WMI-IntSetParam,CN=Schema,CN=Configuration,<RootDomainDN>

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: Builtin-Domain

-ldapDisplayName: builtinDomain

-governsId: 1.2.840.113556.1.5.4

+cn: Category-Registration

+ldapDisplayName: categoryRegistration

+governsId: 1.2.840.113556.1.5.74

 objectClassCategory: 1

 rdnAttId: cn

-subClassOf: top

-systemAuxiliaryClass: samDomainBase

-systemPossSuperiors: domainDNS

-schemaIdGuid:bf967a81-0de6-11d0-a285-00aa003049e2

-defaultSecurityDescriptor: D:(A;;RPLCLORC;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)

+subClassOf: leaf

+systemMayContain: managedBy, localizedDescription, localeID,categoryId

+systemPossSuperiors: classStore

+schemaIdGuid:7d6c0e9d-7e20-11d0-afd6-00c04fd930c9

+defaultSecurityDescriptor: D:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)

 defaultHidingValue: TRUE

 systemOnly: FALSE

-defaultObjectCategory: CN=Builtin-Domain,CN=Schema,CN=Configuration,<RootDomainDN>

+defaultObjectCategory: CN=Category-Registration,CN=Schema,CN=Configuration,<RootDomainDN>

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

 cn: ms-WMI-MergeablePolicyTemplate

@@ -882,19 +945,20 @@ systemOnly: FALSE
 defaultObjectCategory: CN=ms-WMI-Som,CN=Schema,CN=Configuration,<RootDomainDN>

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: Category-Registration

-ldapDisplayName: categoryRegistration

-governsId: 1.2.840.113556.1.5.74

-objectClassCategory: 1

+cn: Certification-Authority

+ldapDisplayName: certificationAuthority

+governsId: 2.5.6.16

+objectClassCategory: 0

 rdnAttId: cn

-subClassOf: leaf

-systemMayContain: managedBy, localizedDescription, localeID,categoryId

-systemPossSuperiors: classStore

-schemaIdGuid:7d6c0e9d-7e20-11d0-afd6-00c04fd930c9

+subClassOf: top

+systemMustContain: cn, certificateRevocationList, cACertificate,authorityRevocationList

+systemMayContain: teletexTerminalIdentifier,supportedApplicationContext, signatureAlgorithms, searchGuide,previousParentCA, previousCACertificates, pendingParentCA,pendingCACertificates, parentCACertificateChain, parentCA,enrollmentProviders, domainPolicyObject, domainID, dNSHostName,deltaRevocationList, currentParentCA, crossCertificatePair,cRLObject, certificateTemplates, cAWEBURL, cAUsages, cAConnect,cACertificateDN

+systemPossSuperiors: container

+schemaIdGuid:3fdfee50-47f4-11d1-a9c3-0000f80367c1

 defaultSecurityDescriptor: D:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)

 defaultHidingValue: TRUE

 systemOnly: FALSE

-defaultObjectCategory: CN=Category-Registration,CN=Schema,CN=Configuration,<RootDomainDN>

+defaultObjectCategory: CN=Certification-Authority,CN=Schema,CN=Configuration,<RootDomainDN>

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

 cn: ms-WMI-StringSetParam

@@ -1052,20 +1116,19 @@ systemOnly: TRUE
 defaultObjectCategory: CN=NTDS-DSA,CN=Schema,CN=Configuration,<RootDomainDN>

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: Certification-Authority

-ldapDisplayName: certificationAuthority

-governsId: 2.5.6.16

-objectClassCategory: 0

+cn: Class-Registration

+ldapDisplayName: classRegistration

+governsId: 1.2.840.113556.1.5.10

+objectClassCategory: 1

 rdnAttId: cn

-subClassOf: top

-systemMustContain: cn, certificateRevocationList, cACertificate,authorityRevocationList

-systemMayContain: teletexTerminalIdentifier,supportedApplicationContext, signatureAlgorithms, searchGuide,previousParentCA, previousCACertificates, pendingParentCA,pendingCACertificates, parentCACertificateChain, parentCA,enrollmentProviders, domainPolicyObject, domainID, dNSHostName,deltaRevocationList, currentParentCA, crossCertificatePair,cRLObject, certificateTemplates, cAWEBURL, cAUsages, cAConnect,cACertificateDN

-systemPossSuperiors: container

-schemaIdGuid:3fdfee50-47f4-11d1-a9c3-0000f80367c1

+subClassOf: leaf

+systemMayContain: requiredCategories, managedBy,implementedCategories, cOMTreatAsClassId, cOMProgID,cOMOtherProgId, cOMInterfaceID, cOMCLSID

+systemPossSuperiors: classStore

+schemaIdGuid:bf967a82-0de6-11d0-a285-00aa003049e2

 defaultSecurityDescriptor: D:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)

 defaultHidingValue: TRUE

 systemOnly: FALSE

-defaultObjectCategory: CN=Certification-Authority,CN=Schema,CN=Configuration,<RootDomainDN>

+defaultObjectCategory: CN=Class-Registration,CN=Schema,CN=Configuration,<RootDomainDN>

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

 cn: NTDS-DSA-RO

@@ -1088,7 +1151,7 @@ governsId: 1.2.840.113556.1.5.72
 objectClassCategory: 1

 rdnAttId: cn

 subClassOf: top

-systemMayContain: tombstoneLifetime, sPNMappings,replTopologyStayOfExecution, msDS-Other-Settings, garbageCollPeriod,dSHeuristics

+systemMayContain: msDS-DeletedObjectLifetime, tombstoneLifetime,sPNMappings, replTopologyStayOfExecution, msDS-Other-Settings,garbageCollPeriod, dSHeuristics

 systemPossSuperiors: container

 schemaIdGuid:19195a5f-6da0-11d0-afd3-00c04fd930c9

 defaultSecurityDescriptor: D:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)

@@ -1136,7 +1199,7 @@ subClassOf: top
 systemMayContain: schedule, msFRS-Topology-Pref, msFRS-Hub-Member,managedBy, fRSVersionGUID, fRSServiceCommand, fRSRootSecurity,fRSReplicaSetType, fRSReplicaSetGUID, fRSPrimaryMember,fRSPartnerAuthLevel, fRSLevelLimit, fRSFlags, fRSFileFilter,fRSExtensions, fRSDSPoll, fRSDirectoryFilter

 systemPossSuperiors: nTFRSSettings

 schemaIdGuid:5245803a-ca6a-11d0-afff-0000f80367c1

-defaultSecurityDescriptor: D:(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;DA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;CO)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY)

+defaultSecurityDescriptor: D:(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;DA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;CO)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY)(OA;;CCDC;2a132586-9373-11d1-aebc-0000f80367c1;;ED)

 defaultHidingValue: TRUE

 systemOnly: FALSE

 defaultObjectCategory: CN=NTFRS-Replica-Set,CN=Schema,CN=Configuration,<RootDomainDN>

@@ -1219,20 +1282,21 @@ systemOnly: FALSE
 defaultObjectCategory: CN=Organization,CN=Schema,CN=Configuration,<RootDomainDN>

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: Class-Registration

-ldapDisplayName: classRegistration

-governsId: 1.2.840.113556.1.5.10

+cn: Class-Schema

+ldapDisplayName: classSchema

+governsId: 1.2.840.113556.1.3.13

 objectClassCategory: 1

 rdnAttId: cn

-subClassOf: leaf

-systemMayContain: requiredCategories, managedBy,implementedCategories, cOMTreatAsClassId, cOMProgID,cOMOtherProgId, cOMInterfaceID, cOMCLSID

-systemPossSuperiors: classStore

-schemaIdGuid:bf967a82-0de6-11d0-a285-00aa003049e2

-defaultSecurityDescriptor: D:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)

+subClassOf: top

+systemMustContain: subClassOf, schemaIDGUID, objectClassCategory,governsID, defaultObjectCategory, cn

+systemMayContain: systemPossSuperiors, systemOnly, systemMustContain,systemMayContain, systemAuxiliaryClass, schemaFlagsEx, rDNAttID,possSuperiors, mustContain, msDs-Schema-Extensions, msDS-IntId,mayContain, lDAPDisplayName, isDefunct, defaultSecurityDescriptor,defaultHidingValue, classDisplayName, auxiliaryClass

+systemPossSuperiors: dMD

+schemaIdGuid:bf967a83-0de6-11d0-a285-00aa003049e2

+defaultSecurityDescriptor: D:S:

 defaultHidingValue: TRUE

 systemOnly: FALSE

-defaultObjectCategory: CN=Class-Registration,CN=Schema,CN=Configuration,<RootDomainDN>

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

+defaultObjectCategory: CN=Class-Schema,CN=Schema,CN=Configuration,<RootDomainDN>

+systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_DOMAIN_DISALLOW_RENAME

 

 cn: Organizational-Person

 ldapDisplayName: organizationalPerson

@@ -1350,7 +1414,7 @@ governsId: 1.2.840.113556.1.5.178
 objectClassCategory: 1

 rdnAttId: cn

 subClassOf: top

-systemMayContain: signatureAlgorithms, enrollmentProviders,dNSHostName, certificateTemplates, cACertificateDN, cACertificate

+systemMayContain: msPKI-Enrollment-Servers, msPKI-Site-Name,signatureAlgorithms, enrollmentProviders, dNSHostName,certificateTemplates, cACertificateDN, cACertificate

 systemPossSuperiors: container

 schemaIdGuid:ee4aa692-3bba-11d2-90cc-00c04fd91ab1

 defaultSecurityDescriptor: D:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)

@@ -1385,20 +1449,19 @@ defaultHidingValue: TRUE
 systemOnly: FALSE

 defaultObjectCategory: CN=PosixGroup,CN=Schema,CN=Configuration,<RootDomainDN>

 

-cn: Class-Schema

-ldapDisplayName: classSchema

-governsId: 1.2.840.113556.1.3.13

+cn: Class-Store

+ldapDisplayName: classStore

+governsId: 1.2.840.113556.1.5.44

 objectClassCategory: 1

 rdnAttId: cn

 subClassOf: top

-systemMustContain: subClassOf, schemaIDGUID, objectClassCategory,governsID, defaultObjectCategory, cn

-systemMayContain: systemPossSuperiors, systemOnly, systemMustContain,systemMayContain, systemAuxiliaryClass, schemaFlagsEx, rDNAttID,possSuperiors, mustContain, msDs-Schema-Extensions, msDS-IntId,mayContain, lDAPDisplayName, isDefunct, defaultSecurityDescriptor,defaultHidingValue, classDisplayName, auxiliaryClass

-systemPossSuperiors: dMD

-schemaIdGuid:bf967a83-0de6-11d0-a285-00aa003049e2

-defaultSecurityDescriptor: D:S:

+systemMayContain: versionNumber, nextLevelStore, lastUpdateSequence,appSchemaVersion

+systemPossSuperiors: domainPolicy, computer, group, user, classStore,organizationalUnit, domainDNS, container

+schemaIdGuid:bf967a84-0de6-11d0-a285-00aa003049e2

+defaultSecurityDescriptor: D:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)

 defaultHidingValue: TRUE

 systemOnly: FALSE

-defaultObjectCategory: CN=Class-Schema,CN=Schema,CN=Configuration,<RootDomainDN>

+defaultObjectCategory: CN=Class-Store,CN=Schema,CN=Configuration,<RootDomainDN>

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

 cn: Print-Queue

@@ -1552,19 +1615,35 @@ systemOnly: FALSE
 defaultObjectCategory: CN=Rpc-Container,CN=Schema,CN=Configuration,<RootDomainDN>

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: Class-Store

-ldapDisplayName: classStore

-governsId: 1.2.840.113556.1.5.44

+cn: ACS-Policy

+ldapDisplayName: aCSPolicy

+governsId: 1.2.840.113556.1.5.137

 objectClassCategory: 1

 rdnAttId: cn

 subClassOf: top

-systemMayContain: versionNumber, nextLevelStore, lastUpdateSequence,appSchemaVersion

-systemPossSuperiors: domainPolicy, computer, group, user, classStore,organizationalUnit, domainDNS, container

-schemaIdGuid:bf967a84-0de6-11d0-a285-00aa003049e2

+systemMayContain: aCSTotalNoOfFlows, aCSTimeOfDay, aCSServiceType,aCSPriority, aCSPermissionBits, aCSMinimumDelayVariation,aCSMinimumLatency, aCSMaximumSDUSize, aCSMinimumPolicedSize,aCSMaxTokenRatePerFlow, aCSMaxTokenBucketPerFlow,aCSMaxPeakBandwidthPerFlow, aCSMaxDurationPerFlow,aCSMaxAggregatePeakRatePerUser, aCSIdentityName, aCSDirection,aCSAggregateTokenRatePerUser

+systemPossSuperiors: container

+schemaIdGuid:7f561288-5301-11d1-a9c5-0000f80367c1

+defaultSecurityDescriptor: D:(A;;RPWPCRCCDCLCLOLORCWOWDSDDTDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)

+defaultHidingValue: TRUE

+systemOnly: FALSE

+defaultObjectCategory: CN=ACS-Policy,CN=Schema,CN=Configuration,<RootDomainDN>

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

+cn: Com-Connection-Point

+ldapDisplayName: comConnectionPoint

+governsId: 1.2.840.113556.1.5.11

+objectClassCategory: 1

+rdnAttId: cn

+subClassOf: connectionPoint

+systemMustContain: cn

+systemMayContain: monikerDisplayName, moniker, marshalledInterface

+systemPossSuperiors: container

+schemaIdGuid:bf967a85-0de6-11d0-a285-00aa003049e2

 defaultSecurityDescriptor: D:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)

 defaultHidingValue: TRUE

 systemOnly: FALSE

-defaultObjectCategory: CN=Class-Store,CN=Schema,CN=Configuration,<RootDomainDN>

+defaultObjectCategory: CN=Com-Connection-Point,CN=Schema,CN=Configuration,<RootDomainDN>

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

 cn: rpc-Entry

@@ -1695,7 +1774,7 @@ subClassOf: top
 systemAuxiliaryClass: samDomainBase

 systemMayContain: treeName, rIDManagerReference, replicaSource,pwdProperties, pwdHistoryLength, privateKey, pekList,pekKeyChangeInterval, nTMixedDomain, nextRid, nETBIOSName,msDS-PerUserTrustTombstonesQuota, msDS-PerUserTrustQuota,ms-DS-MachineAccountQuota, msDS-LogonTimeSyncInterval,msDS-AllUsersTrustQuota, modifiedCountAtLastProm, minPwdLength,minPwdAge, maxPwdAge, lSAModifiedCount, lSACreationTime,lockoutThreshold, lockoutDuration, lockOutObservationWindow,gPOptions, gPLink, eFSPolicy, domainPolicyObject, desktopProfile,description, defaultLocalPolicyObject, creationTime,controlAccessRights, cACertificate, builtinModifiedCount,builtinCreationTime, auditingPolicy

 schemaIdGuid:bf967a90-0de6-11d0-a285-00aa003049e2

-defaultSecurityDescriptor: D:(A;;RP;;;WD)(OA;;CR;1131f6aa-9c07-11d1-f79f-00c04fc2dcd2;;ED)(OA;;CR;1131f6ab-9c07-11d1-f79f-00c04fc2dcd2;;ED)(OA;;CR;1131f6ac-9c07-11d1-f79f-00c04fc2dcd2;;ED)(OA;;CR;1131f6aa-9c07-11d1-f79f-00c04fc2dcd2;;BA)(OA;;CR;1131f6ab-9c07-11d1-f79f-00c04fc2dcd2;;BA)(OA;;CR;1131f6ac-9c07-11d1-f79f-00c04fc2dcd2;;BA)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;DA)(A;CI;RPWPCRLCLOCCRCWDWOSDSW;;;BA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY)(A;CI;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;EA)(A;CI;LC;;;RU)(OA;CIIO;RP;037088f8-0ae1-11d2-b422-00a0c968f939;bf967aba-0de6-11d0-a285-00aa003049e2;RU)(OA;CIIO;RP;59ba2f42-79a2-11d0-9020-00c04fc2d3cf;bf967aba-0de6-11d0-a285-00aa003049e2;RU)(OA;CIIO;RP;bc0ac240-79a9-11d0-9020-00c04fc2d4cf;bf967aba-0de6-11d0-a285-00aa003049e2;RU)(OA;CIIO;RP;4c164200-20c0-11d0-a768-00aa006e0529;bf967aba-0de6-11d0-a285-00aa003049e2;RU)(OA;CIIO;RP;5f202010-79a5-11d0-9020-00c04fc2d4cf;bf967aba-0de6-11d0-a285-00aa003049e2;RU)(OA;;RP;c7407360-20bf-11d0-a768-00aa006e0529;;RU)(OA;CIIO;RPLCLORC;;bf967a9c-0de6-11d0-a285-00aa003049e2;RU)(A;;RPRC;;;RU)(OA;CIIO;RPLCLORC;;bf967aba-0de6-11d0-a285-00aa003049e2;RU)(A;;LCRPLORC;;;ED)(OA;CIIO;RP;037088f8-0ae1-11d2-b422-00a0c968f939;4828CC14-1437-45bc-9B07-AD6F015E5F28;RU)(OA;CIIO;RP;59ba2f42-79a2-11d0-9020-00c04fc2d3cf;4828CC14-1437-45bc-9B07-AD6F015E5F28;RU)(OA;CIIO;RP;bc0ac240-79a9-11d0-9020-00c04fc2d4cf;4828CC14-1437-45bc-9B07-AD6F015E5F28;RU)(OA;CIIO;RP;4c164200-20c0-11d0-a768-00aa006e0529;4828CC14-1437-45bc-9B07-AD6F015E5F28;RU)(OA;CIIO;RP;5f202010-79a5-11d0-9020-00c04fc2d4cf;4828CC14-1437-45bc-9B07-AD6F015E5F28;RU)(OA;CIIO;RPLCLORC;;4828CC14-1437-45bc-9B07-AD6F015E5F28;RU)(OA;;RP;b8119fd0-04f6-4762-ab7a-4986c76b3f9a;;RU)(OA;;RP;b8119fd0-04f6-4762-ab7a-4986c76b3f9a;;AU)(OA;CIIO;RP;b7c69e6d-2cc7-11d2-854e-00a0c983f608;bf967aba-0de6-11d0-a285-00aa003049e2;ED)(OA;CIIO;RP;b7c69e6d-2cc7-11d2-854e-00a0c983f608;bf967a9c-0de6-11d0-a285-00aa003049e2;ED)(OA;CIIO;RP;b7c69e6d-2cc7-11d2-854e-00a0c983f608;bf967a86-0de6-11d0-a285-00aa003049e2;ED)(OA;;CR;1131f6ad-9c07-11d1-f79f-00c04fc2dcd2;;DD)(OA;;CR;1131f6ad-9c07-11d1-f79f-00c04fc2dcd2;;BA)(OA;;CR;e2a36dc9-ae17-47c3-b58b-be34c55ba633;;S-1-5-32-557)(OA;;CR;280f369c-67c7-438e-ae98-1d46f3c6f541;;AU)(OA;;CR;ccc2dc7d-a6ad-4a7a-8846-c04e3cc53501;;AU)(OA;;CR;05c74c5e-4deb-43b4-bd9f-86664c2a7fd5;;AU)(OA;;CR;1131f6ae-9c07-11d1-f79f-00c04fc2dcd2;;ED)(OA;;CR;1131f6ae-9c07-11d1-f79f-00c04fc2dcd2;;BA)(OA;CIIO;CRRPWP;91e647de-d96f-4b70-9557-d63ff4f3ccd8;;PS)(OA;;CR;1131f6aa-9c07-11d1-f79f-00c04fc2dcd2;;RO)S:(AU;SA;WDWOWP;;;WD)(AU;SA;CR;;;BA)(AU;SA;CR;;;DU)(OU;CISA;WP;f30e3bbe-9ff0-11d1-b603-0000f80367c1;bf967aa5-0de6-11d0-a285-00aa003049e2;WD)(OU;CISA;WP;f30e3bbf-9ff0-11d1-b603-0000f80367c1;bf967aa5-0de6-11d0-a285-00aa003049e2;WD)

+defaultSecurityDescriptor: D:(A;;RP;;;WD)(OA;;CR;1131f6aa-9c07-11d1-f79f-00c04fc2dcd2;;ED)(OA;;CR;1131f6ab-9c07-11d1-f79f-00c04fc2dcd2;;ED)(OA;;CR;1131f6ac-9c07-11d1-f79f-00c04fc2dcd2;;ED)(OA;;CR;1131f6aa-9c07-11d1-f79f-00c04fc2dcd2;;BA)(OA;;CR;1131f6ab-9c07-11d1-f79f-00c04fc2dcd2;;BA)(OA;;CR;1131f6ac-9c07-11d1-f79f-00c04fc2dcd2;;BA)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;DA)(A;CI;RPWPCRLCLOCCRCWDWOSDSW;;;BA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY)(A;CI;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;EA)(A;CI;LC;;;RU)(OA;CIIO;RP;037088f8-0ae1-11d2-b422-00a0c968f939;bf967aba-0de6-11d0-a285-00aa003049e2;RU)(OA;CIIO;RP;59ba2f42-79a2-11d0-9020-00c04fc2d3cf;bf967aba-0de6-11d0-a285-00aa003049e2;RU)(OA;CIIO;RP;bc0ac240-79a9-11d0-9020-00c04fc2d4cf;bf967aba-0de6-11d0-a285-00aa003049e2;RU)(OA;CIIO;RP;4c164200-20c0-11d0-a768-00aa006e0529;bf967aba-0de6-11d0-a285-00aa003049e2;RU)(OA;CIIO;RP;5f202010-79a5-11d0-9020-00c04fc2d4cf;bf967aba-0de6-11d0-a285-00aa003049e2;RU)(OA;;RP;c7407360-20bf-11d0-a768-00aa006e0529;;RU)(OA;CIIO;RPLCLORC;;bf967a9c-0de6-11d0-a285-00aa003049e2;RU)(A;;RPRC;;;RU)(OA;CIIO;RPLCLORC;;bf967aba-0de6-11d0-a285-00aa003049e2;RU)(A;;LCRPLORC;;;ED)(OA;CIIO;RP;037088f8-0ae1-11d2-b422-00a0c968f939;4828CC14-1437-45bc-9B07-AD6F015E5F28;RU)(OA;CIIO;RP;59ba2f42-79a2-11d0-9020-00c04fc2d3cf;4828CC14-1437-45bc-9B07-AD6F015E5F28;RU)(OA;CIIO;RP;bc0ac240-79a9-11d0-9020-00c04fc2d4cf;4828CC14-1437-45bc-9B07-AD6F015E5F28;RU)(OA;CIIO;RP;4c164200-20c0-11d0-a768-00aa006e0529;4828CC14-1437-45bc-9B07-AD6F015E5F28;RU)(OA;CIIO;RP;5f202010-79a5-11d0-9020-00c04fc2d4cf;4828CC14-1437-45bc-9B07-AD6F015E5F28;RU)(OA;CIIO;RPLCLORC;;4828CC14-1437-45bc-9B07-AD6F015E5F28;RU)(OA;;RP;b8119fd0-04f6-4762-ab7a-4986c76b3f9a;;RU)(OA;;RP;b8119fd0-04f6-4762-ab7a-4986c76b3f9a;;AU)(OA;CIIO;RP;b7c69e6d-2cc7-11d2-854e-00a0c983f608;bf967aba-0de6-11d0-a285-00aa003049e2;ED)(OA;CIIO;RP;b7c69e6d-2cc7-11d2-854e-00a0c983f608;bf967a9c-0de6-11d0-a285-00aa003049e2;ED)(OA;CIIO;RP;b7c69e6d-2cc7-11d2-854e-00a0c983f608;bf967a86-0de6-11d0-a285-00aa003049e2;ED)(OA;;CR;1131f6ad-9c07-11d1-f79f-00c04fc2dcd2;;DD)(OA;;CR;89e95b76-444d-4c62-991a-0facbeda640c;;ED)(OA;;CR;1131f6ad-9c07-11d1-f79f-00c04fc2dcd2;;BA)(OA;;CR;89e95b76-444d-4c62-991a-0facbeda640c;;BA)(OA;;CR;e2a36dc9-ae17-47c3-b58b-be34c55ba633;;S-1-5-32-557)(OA;;CR;280f369c-67c7-438e-ae98-1d46f3c6f541;;AU)(OA;;CR;ccc2dc7d-a6ad-4a7a-8846-c04e3cc53501;;AU)(OA;;CR;05c74c5e-4deb-43b4-bd9f-86664c2a7fd5;;AU)(OA;;CR;1131f6ae-9c07-11d1-f79f-00c04fc2dcd2;;ED)(OA;;CR;1131f6ae-9c07-11d1-f79f-00c04fc2dcd2;;BA)(OA;CIIO;CRRPWP;91e647de-d96f-4b70-9557-d63ff4f3ccd8;;PS)S:(AU;SA;WDWOWP;;;WD)(AU;SA;CR;;;BA)(AU;SA;CR;;;DU)(OU;CISA;WP;f30e3bbe-9ff0-11d1-b603-0000f80367c1;bf967aa5-0de6-11d0-a285-00aa003049e2;WD)(OU;CISA;WP;f30e3bbf-9ff0-11d1-b603-0000f80367c1;bf967aa5-0de6-11d0-a285-00aa003049e2;WD)

 defaultHidingValue: TRUE

 systemOnly: FALSE

 defaultObjectCategory: CN=Sam-Domain,CN=Schema,CN=Configuration,<RootDomainDN>

@@ -1714,35 +1793,21 @@ systemOnly: FALSE
 defaultObjectCategory: CN=Sam-Domain-Base,CN=Schema,CN=Configuration,<RootDomainDN>

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: ACS-Policy

-ldapDisplayName: aCSPolicy

-governsId: 1.2.840.113556.1.5.137

-objectClassCategory: 1

-rdnAttId: cn

-subClassOf: top

-systemMayContain: aCSTotalNoOfFlows, aCSTimeOfDay, aCSServiceType,aCSPriority, aCSPermissionBits, aCSMinimumDelayVariation,aCSMinimumLatency, aCSMaximumSDUSize, aCSMinimumPolicedSize,aCSMaxTokenRatePerFlow, aCSMaxTokenBucketPerFlow,aCSMaxPeakBandwidthPerFlow, aCSMaxDurationPerFlow,aCSMaxAggregatePeakRatePerUser, aCSIdentityName, aCSDirection,aCSAggregateTokenRatePerUser

-systemPossSuperiors: container

-schemaIdGuid:7f561288-5301-11d1-a9c5-0000f80367c1

-defaultSecurityDescriptor: D:(A;;RPWPCRCCDCLCLOLORCWOWDSDDTDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)

-defaultHidingValue: TRUE

-systemOnly: FALSE

-defaultObjectCategory: CN=ACS-Policy,CN=Schema,CN=Configuration,<RootDomainDN>

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

-cn: Com-Connection-Point

-ldapDisplayName: comConnectionPoint

-governsId: 1.2.840.113556.1.5.11

+cn: Computer

+ldapDisplayName: computer

+governsId: 1.2.840.113556.1.3.30

 objectClassCategory: 1

 rdnAttId: cn

-subClassOf: connectionPoint

-systemMustContain: cn

-systemMayContain: monikerDisplayName, moniker, marshalledInterface

-systemPossSuperiors: container

-schemaIdGuid:bf967a85-0de6-11d0-a285-00aa003049e2

-defaultSecurityDescriptor: D:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)

-defaultHidingValue: TRUE

+subClassOf: user

+auxiliaryClass: ipHost

+mayContain: msSFU30Aliases, msSFU30NisDomain, nisMapName,msSFU30Name

+systemMayContain: msTSEndpointData, msTSEndpointType,msTS-EndpointPlugin, msDS-HostServiceAccount,msDS-IsUserCachableAtRodc, msTSProperty02,msTSProperty01, msTPM-OwnerInformation, msDS-RevealOnDemandGroup,msDS-NeverRevealGroup, msDS-PromotionSettings, msDS-SiteName,msDS-isRODC, msDS-isGC, msDS-AuthenticatedAtDC, msDS-RevealedList,msDS-RevealedUsers, msDS-ExecuteScriptPassword, msDS-KrbTgtLink,volumeCount, siteGUID, rIDSetReferences, policyReplicationFlags,physicalLocationObject, operatingSystemVersion,operatingSystemServicePack, operatingSystemHotfix, operatingSystem,networkAddress, netbootSIFFile, netbootMirrorDataFile,netbootMachineFilePath, netbootInitialization, netbootGUID,msDS-AdditionalSamAccountName, msDS-AdditionalDnsHostName,managedBy, machineRole, location, localPolicyFlags, dNSHostName,defaultLocalPolicyObject, cn, catalogs

+systemPossSuperiors: container, organizationalUnit, domainDNS

+schemaIdGuid:bf967a86-0de6-11d0-a285-00aa003049e2

+defaultSecurityDescriptor: D:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;AO)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPCRLCLORCSDDT;;;CO)(OA;;WP;4c164200-20c0-11d0-a768-00aa006e0529;;CO)(A;;RPLCLORC;;;AU)(OA;;CR;ab721a53-1e2f-11d0-9819-00aa0040529b;;WD)(A;;CCDC;;;PS)(OA;;CCDC;bf967aa8-0de6-11d0-a285-00aa003049e2;;PO)(OA;;RPWP;bf967a7f-0de6-11d0-a285-00aa003049e2;;CA)(OA;;SW;f3a64788-5306-11d1-a9c5-0000f80367c1;;PS)(OA;;RPWP;77B5B886-944A-11d1-AEBD-0000F80367C1;;PS)(OA;;SW;72e39547-7b18-11d1-adef-00c04fd8d5cd;;PS)(OA;;SW;72e39547-7b18-11d1-adef-00c04fd8d5cd;;CO)(OA;;SW;f3a64788-5306-11d1-a9c5-0000f80367c1;;CO)(OA;;WP;3e0abfd0-126a-11d0-a060-00aa006c33ed;bf967a86-0de6-11d0-a285-00aa003049e2;CO)(OA;;WP;5f202010-79a5-11d0-9020-00c04fc2d4cf;bf967a86-0de6-11d0-a285-00aa003049e2;CO)(OA;;WP;bf967950-0de6-11d0-a285-00aa003049e2;bf967a86-0de6-11d0-a285-00aa003049e2;CO)(OA;;WP;bf967953-0de6-11d0-a285-00aa003049e2;bf967a86-0de6-11d0-a285-00aa003049e2;CO)(OA;;RP;46a9b11d-60ae-405a-b7e8-ff8a58d456d2;;S-1-5-32-560)

+defaultHidingValue: FALSE

 systemOnly: FALSE

-defaultObjectCategory: CN=Com-Connection-Point,CN=Schema,CN=Configuration,<RootDomainDN>

+defaultObjectCategory: CN=Computer,CN=Schema,CN=Configuration,<RootDomainDN>

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

 cn: Sam-Server

@@ -1894,21 +1959,20 @@ systemOnly: FALSE
 defaultObjectCategory: CN=Service-Instance,CN=Schema,CN=Configuration,<RootDomainDN>

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: Computer

-ldapDisplayName: computer

-governsId: 1.2.840.113556.1.3.30

+cn: Configuration

+ldapDisplayName: configuration

+governsId: 1.2.840.113556.1.5.12

 objectClassCategory: 1

 rdnAttId: cn

-subClassOf: user

-auxiliaryClass: ipHost

-mayContain: msSFU30Aliases, msSFU30NisDomain, nisMapName,msSFU30Name

-systemMayContain: msDS-IsUserCachableAtRodc, msTSProperty02,msTSProperty01, msTPM-OwnerInformation, msDS-RevealOnDemandGroup,msDS-NeverRevealGroup, msDS-PromotionSettings, msDS-SiteName,msDS-isRODC, msDS-isGC, msDS-AuthenticatedAtDC, msDS-RevealedList,msDS-RevealedUsers, msDS-ExecuteScriptPassword, msDS-KrbTgtLink,volumeCount, siteGUID, rIDSetReferences, policyReplicationFlags,physicalLocationObject, operatingSystemVersion,operatingSystemServicePack, operatingSystemHotfix, operatingSystem,networkAddress, netbootSIFFile, netbootMirrorDataFile,netbootMachineFilePath, netbootInitialization, netbootGUID,msDS-AdditionalSamAccountName, msDS-AdditionalDnsHostName,managedBy, machineRole, location, localPolicyFlags, dNSHostName,defaultLocalPolicyObject, cn, catalogs

-systemPossSuperiors: container, organizationalUnit, domainDNS

-schemaIdGuid:bf967a86-0de6-11d0-a285-00aa003049e2

-defaultSecurityDescriptor: D:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;AO)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPCRLCLORCSDDT;;;CO)(OA;;WP;4c164200-20c0-11d0-a768-00aa006e0529;;CO)(A;;RPLCLORC;;;AU)(OA;;CR;ab721a53-1e2f-11d0-9819-00aa0040529b;;WD)(A;;CCDC;;;PS)(OA;;CCDC;bf967aa8-0de6-11d0-a285-00aa003049e2;;PO)(OA;;RPWP;bf967a7f-0de6-11d0-a285-00aa003049e2;;CA)(OA;;SW;f3a64788-5306-11d1-a9c5-0000f80367c1;;PS)(OA;;RPWP;77B5B886-944A-11d1-AEBD-0000F80367C1;;PS)(OA;;SW;72e39547-7b18-11d1-adef-00c04fd8d5cd;;PS)(OA;;SW;72e39547-7b18-11d1-adef-00c04fd8d5cd;;CO)(OA;;SW;f3a64788-5306-11d1-a9c5-0000f80367c1;;CO)(OA;;WP;3e0abfd0-126a-11d0-a060-00aa006c33ed;bf967a86-0de6-11d0-a285-00aa003049e2;CO)(OA;;WP;5f202010-79a5-11d0-9020-00c04fc2d4cf;bf967a86-0de6-11d0-a285-00aa003049e2;CO)(OA;;WP;bf967950-0de6-11d0-a285-00aa003049e2;bf967a86-0de6-11d0-a285-00aa003049e2;CO)(OA;;WP;bf967953-0de6-11d0-a285-00aa003049e2;bf967a86-0de6-11d0-a285-00aa003049e2;CO)(OA;;RP;46a9b11d-60ae-405a-b7e8-ff8a58d456d2;;S-1-5-32-560)

-defaultHidingValue: FALSE

-systemOnly: FALSE

-defaultObjectCategory: CN=Computer,CN=Schema,CN=Configuration,<RootDomainDN>

+subClassOf: top

+systemMustContain: cn

+systemMayContain: msDS-USNLastSyncSuccess, gPOptions, gPLink

+systemPossSuperiors: domainDNS

+schemaIdGuid:bf967a87-0de6-11d0-a285-00aa003049e2

+defaultSecurityDescriptor: D:(A;;RPWPCRCCDCLCLORCWOWDSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)

+defaultHidingValue: TRUE

+systemOnly: TRUE

+defaultObjectCategory: CN=Configuration,CN=Schema,CN=Configuration,<RootDomainDN>

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

 cn: ShadowAccount

@@ -2054,22 +2118,22 @@ defaultSecurityDescriptor: D:S:
 defaultHidingValue: TRUE

 systemOnly: TRUE

 defaultObjectCategory: CN=SubSchema,CN=Schema,CN=Configuration,<RootDomainDN>

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

+systemFlags: FLAG_SCHEMA_BASE_OBJECT | FLAG_DOMAIN_DISALLOW_RENAME

 

-cn: Configuration

-ldapDisplayName: configuration

-governsId: 1.2.840.113556.1.5.12

-objectClassCategory: 1

+cn: Connection-Point

+ldapDisplayName: connectionPoint

+governsId: 1.2.840.113556.1.5.14

+objectClassCategory: 2

 rdnAttId: cn

-subClassOf: top

+subClassOf: leaf

 systemMustContain: cn

-systemMayContain: gPOptions, gPLink

-systemPossSuperiors: domainDNS

-schemaIdGuid:bf967a87-0de6-11d0-a285-00aa003049e2

-defaultSecurityDescriptor: D:(A;;RPWPCRCCDCLCLORCWOWDSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)

+systemMayContain: msDS-Settings, managedBy, keywords

+systemPossSuperiors: container, computer

+schemaIdGuid:5cb41ecf-0e4c-11d0-a286-00aa003049e2

+defaultSecurityDescriptor: D:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)

 defaultHidingValue: TRUE

-systemOnly: TRUE

-defaultObjectCategory: CN=Configuration,CN=Schema,CN=Configuration,<RootDomainDN>

+systemOnly: FALSE

+defaultObjectCategory: CN=Connection-Point,CN=Schema,CN=Configuration,<RootDomainDN>

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

 cn: Top

@@ -2080,7 +2144,7 @@ rdnAttId: cn
 subClassOf: top

 systemMustContain: objectClass, objectCategory, nTSecurityDescriptor,instanceType

 mayContain: msSFU30PosixMemberOf, msDFSR-ComputerReferenceBL,msDFSR-MemberReferenceBL, msDS-ObjectReferenceBL

-systemMayContain: msDS-NcType, msDS-PSOApplied, msDS-PrincipalName,msDS-RevealedListBL, msDS-AuthenticatedToAccountlist,msDS-IsPartialReplicaFor, msDS-IsDomainFor, msDS-IsFullReplicaFor,msDS-RevealedDSAs, msDS-KrbTgtLinkBl, url, wWWHomePage, whenCreated,whenChanged, wellKnownObjects, wbemPath, uSNSource, uSNLastObjRem,USNIntersite, uSNDSALastObjRemoved, uSNCreated, uSNChanged,systemFlags, subSchemaSubEntry, subRefs, structuralObjectClass,siteObjectBL, serverReferenceBL, sDRightsEffective, revision,repsTo, repsFrom, directReports, replUpToDateVector,replPropertyMetaData, name, queryPolicyBL, proxyAddresses,proxiedObjectName, possibleInferiors, partialAttributeSet,partialAttributeDeletionList, otherWellKnownObjects, objectVersion,objectGUID, distinguishedName, nonSecurityMemberBL, netbootSCPBL,ownerBL, msDS-ReplValueMetaData, msDS-ReplAttributeMetaData,msDS-NonMembersBL, msDS-NCReplOutboundNeighbors,msDS-NCReplInboundNeighbors, msDS-NCReplCursors,msDS-TasksForAzRoleBL, msDS-TasksForAzTaskBL,msDS-OperationsForAzRoleBL, msDS-OperationsForAzTaskBL,msDS-MembersForAzRoleBL, msDs-masteredBy, mS-DS-ConsistencyGuid,mS-DS-ConsistencyChildCount, msDS-Approx-Immed-Subordinates,msCOM-PartitionSetLink, msCOM-UserLink, modifyTimeStamp, masteredBy,managedObjects, lastKnownParent, isPrivilegeHolder, memberOf,isDeleted, isCriticalSystemObject, showInAdvancedViewOnly,fSMORoleOwner, fRSMemberReferenceBL, frsComputerReferenceBL,fromEntry, flags, extensionName, dSASignature,dSCorePropagationData, displayNamePrintable, displayName,description, createTimeStamp, cn, canonicalName,bridgeheadServerListBL, allowedChildClassesEffective,allowedChildClasses, allowedAttributesEffective, allowedAttributes,adminDisplayName, adminDescription, msDS-NC-RO-Replica-Locations-BL

+systemMayContain: msTSPrimaryDesktopBL, msTSSecondaryDesktopsBL,msDS-EnabledFeatureBL, msDS-LastKnownRDN, msDS-HostServiceAccountBL,msDS-OIDToGroupLinkBl, msDS-LocalEffectiveRecycleTime,msDS-LocalEffectiveDeletionTime, isRecyled, msDS-NcType,msDS-PSOApplied, msDS-PrincipalName,msDS-RevealedListBL, msDS-AuthenticatedToAccountlist,msDS-IsPartialReplicaFor, msDS-IsDomainFor, msDS-IsFullReplicaFor,msDS-RevealedDSAs, msDS-KrbTgtLinkBl, url, wWWHomePage, whenCreated,whenChanged, wellKnownObjects, wbemPath, uSNSource, uSNLastObjRem,USNIntersite, uSNDSALastObjRemoved, uSNCreated, uSNChanged,systemFlags, subSchemaSubEntry, subRefs, structuralObjectClass,siteObjectBL, serverReferenceBL, sDRightsEffective, revision,repsTo, repsFrom, directReports, replUpToDateVector,replPropertyMetaData, name, queryPolicyBL, proxyAddresses,proxiedObjectName, possibleInferiors, partialAttributeSet,partialAttributeDeletionList, otherWellKnownObjects, objectVersion,objectGUID, distinguishedName, nonSecurityMemberBL, netbootSCPBL,ownerBL, msDS-ReplValueMetaData, msDS-ReplAttributeMetaData,msDS-NonMembersBL, msDS-NCReplOutboundNeighbors,msDS-NCReplInboundNeighbors, msDS-NCReplCursors,msDS-TasksForAzRoleBL, msDS-TasksForAzTaskBL,msDS-OperationsForAzRoleBL, msDS-OperationsForAzTaskBL,msDS-MembersForAzRoleBL, msDs-masteredBy, mS-DS-ConsistencyGuid,mS-DS-ConsistencyChildCount, msDS-Approx-Immed-Subordinates,msCOM-PartitionSetLink, msCOM-UserLink, modifyTimeStamp, masteredBy,managedObjects, lastKnownParent, isPrivilegeHolder, memberOf,isDeleted, isCriticalSystemObject, showInAdvancedViewOnly,fSMORoleOwner, fRSMemberReferenceBL, frsComputerReferenceBL,fromEntry, flags, extensionName, dSASignature,dSCorePropagationData, displayNamePrintable, displayName,description, createTimeStamp, cn, canonicalName,bridgeheadServerListBL, allowedChildClassesEffective,allowedChildClasses, allowedAttributesEffective, allowedAttributes,adminDisplayName, adminDescription, msDS-NC-RO-Replica-Locations-BL

 systemPossSuperiors: lostAndFound

 schemaIdGuid:bf967ab7-0de6-11d0-a285-00aa003049e2

 defaultSecurityDescriptor: D:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)

@@ -2128,9 +2192,9 @@ subClassOf: organizationalPerson
 auxiliaryClass: shadowAccount, posixAccount

 systemAuxiliaryClass: securityPrincipal, mailRecipient

 mayContain: msSFU30NisDomain, msSFU30Name, msDS-SourceObjectDN,x500uniqueIdentifier, userSMIMECertificate, userPKCS12, uid,secretary, roomNumber, preferredLanguage, photo, labeledURI,jpegPhoto, homePostalAddress, givenName, employeeType,employeeNumber, displayName, departmentNumber, carLicense, audio

-systemMayContain: msDS-ResultantPSO, MSTSLSProperty01,MSTSLSProperty02, msTSManagingLS2, msTSManagingLS3, msTSManagingLS4,msTSLicenseVersion2, msTSLicenseVersion3, msTSLicenseVersion4,msTSExpireDate2, msTSExpireDate3, msTSExpireDate4,msDS-AuthenticatedAtDC, msDS-UserPasswordExpiryTimeComputed,msTSManagingLS, msTSLicenseVersion, msTSExpireDate, msTSProperty02,msTSProperty01, msTSInitialProgram, msTSWorkDirectory,msTSDefaultToMainPrinter, msTSConnectPrinterDrives,msTSConnectClientDrives, msTSBrokenConnectionAction,msTSReconnectionAction, msTSMaxIdleTime, msTSMaxConnectionTime,msTSMaxDisconnectionTime, msTSRemoteControl, msTSAllowLogon,msTSHomeDrive, msTSHomeDirectory, msTSProfilePath,msDS-FailedInteractiveLogonCountAtLastSuccessfulLogon,msDS-FailedInteractiveLogonCount,msDS-LastFailedInteractiveLogonTime,msDS-LastSuccessfulInteractiveLogonTime,msRADIUS-SavedFramedIpv6Route, msRADIUS-FramedIpv6Route,msRADIUS-SavedFramedIpv6Prefix, msRADIUS-FramedIpv6Prefix,msRADIUS-SavedFramedInterfaceId, msRADIUS-FramedInterfaceId,msPKIAccountCredentials, msPKIDPAPIMasterKeys,msPKIRoamingTimeStamp, msDS-SupportedEncryptionTypes,msDS-SecondaryKrbTgtNumber, pager, o, mobile, manager, mail,initials, homePhone, businessCategory, userCertificate,userWorkstations, userSharedFolderOther, userSharedFolder,userPrincipalName, userParameters, userAccountControl, unicodePwd,terminalServer, servicePrincipalName, scriptPath, pwdLastSet,profilePath, primaryGroupID, preferredOU, otherLoginWorkstations,operatorCount, ntPwdHistory, networkAddress, msRASSavedFramedRoute,msRASSavedFramedIPAddress, msRASSavedCallbackNumber,msRADIUSServiceType, msRADIUSFramedRoute, msRADIUSFramedIPAddress,msRADIUSCallbackNumber, msNPSavedCallingStationID,msNPCallingStationID, msNPAllowDialin, mSMQSignCertificatesMig,mSMQSignCertificates, mSMQDigestsMig, mSMQDigests, msIIS-FTPRoot,msIIS-FTPDir, msDS-User-Account-Control-Computed,msDS-Site-Affinity, mS-DS-CreatorSID,msDS-Cached-Membership-Time-Stamp, msDS-Cached-Membership,msDRM-IdentityCertificate, msCOM-UserPartitionSetLink, maxStorage,logonWorkstation, logonHours, logonCount, lockoutTime, localeID,lmPwdHistory, lastLogonTimestamp, lastLogon, lastLogoff, homeDrive,homeDirectory, groupsToIgnore, groupPriority, groupMembershipSAM,dynamicLDAPServer, desktopProfile, defaultClassStore, dBCSPwd,controlAccessRights, codePage, badPwdCount, badPasswordTime,adminCount, aCSPolicyName, accountExpires

+systemMayContain:  msTSPrimaryDesktop, msTSSecondaryDesktops,msPKI-CredentialRoamingTokens, msDS-ResultantPSO, MSTSLSProperty01,MSTSLSProperty02, msTSManagingLS2, msTSManagingLS3, msTSManagingLS4,msTSLicenseVersion2, msTSLicenseVersion3, msTSLicenseVersion4,msTSExpireDate2, msTSExpireDate3, msTSExpireDate4,msDS-AuthenticatedAtDC, msDS-UserPasswordExpiryTimeComputed,msTSManagingLS, msTSLicenseVersion, msTSExpireDate, msTSProperty02,msTSProperty01, msTSInitialProgram, msTSWorkDirectory,msTSDefaultToMainPrinter, msTSConnectPrinterDrives,msTSConnectClientDrives, msTSBrokenConnectionAction,msTSReconnectionAction, msTSMaxIdleTime, msTSMaxConnectionTime,msTSMaxDisconnectionTime, msTSRemoteControl, msTSAllowLogon,msTSHomeDrive, msTSHomeDirectory, msTSProfilePath,msDS-FailedInteractiveLogonCountAtLastSuccessfulLogon,msDS-FailedInteractiveLogonCount,msDS-LastFailedInteractiveLogonTime,msDS-LastSuccessfulInteractiveLogonTime,msRADIUS-SavedFramedIpv6Route, msRADIUS-FramedIpv6Route,msRADIUS-SavedFramedIpv6Prefix, msRADIUS-FramedIpv6Prefix,msRADIUS-SavedFramedInterfaceId, msRADIUS-FramedInterfaceId,msPKIAccountCredentials, msPKIDPAPIMasterKeys,msPKIRoamingTimeStamp, msDS-SupportedEncryptionTypes,msDS-SecondaryKrbTgtNumber, pager, o, mobile, manager, mail,initials, homePhone, businessCategory, userCertificate,userWorkstations, userSharedFolderOther, userSharedFolder,userPrincipalName, userParameters, userAccountControl, unicodePwd,terminalServer, servicePrincipalName, scriptPath, pwdLastSet,profilePath, primaryGroupID, preferredOU, otherLoginWorkstations,operatorCount, ntPwdHistory, networkAddress, msRASSavedFramedRoute,msRASSavedFramedIPAddress, msRASSavedCallbackNumber,msRADIUSServiceType, msRADIUSFramedRoute, msRADIUSFramedIPAddress,msRADIUSCallbackNumber, msNPSavedCallingStationID,msNPCallingStationID, msNPAllowDialin, mSMQSignCertificatesMig,mSMQSignCertificates, mSMQDigestsMig, mSMQDigests, msIIS-FTPRoot,msIIS-FTPDir, msDS-User-Account-Control-Computed,msDS-Site-Affinity, mS-DS-CreatorSID,msDS-Cached-Membership-Time-Stamp, msDS-Cached-Membership,msDRM-IdentityCertificate, msCOM-UserPartitionSetLink, maxStorage,logonWorkstation, logonHours, logonCount, lockoutTime, localeID,lmPwdHistory, lastLogonTimestamp, lastLogon, lastLogoff, homeDrive,homeDirectory, groupsToIgnore, groupPriority, groupMembershipSAM,dynamicLDAPServer, desktopProfile, defaultClassStore, dBCSPwd,controlAccessRights, codePage, badPwdCount, badPasswordTime,adminCount, aCSPolicyName, accountExpires

 schemaIdGuid:bf967aba-0de6-11d0-a285-00aa003049e2

-defaultSecurityDescriptor: D:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;AO)(A;;RPLCLORC;;;PS)(OA;;CR;ab721a53-1e2f-11d0-9819-00aa0040529b;;PS)(OA;;CR;ab721a54-1e2f-11d0-9819-00aa0040529b;;PS)(OA;;CR;ab721a56-1e2f-11d0-9819-00aa0040529b;;PS)(OA;;RPWP;77B5B886-944A-11d1-AEBD-0000F80367C1;;PS)(OA;;RPWP;E45795B2-9455-11d1-AEBD-0000F80367C1;;PS)(OA;;RPWP;E45795B3-9455-11d1-AEBD-0000F80367C1;;PS)(OA;;RP;037088f8-0ae1-11d2-b422-00a0c968f939;;RS)(OA;;RP;4c164200-20c0-11d0-a768-00aa006e0529;;RS)(OA;;RP;bc0ac240-79a9-11d0-9020-00c04fc2d4cf;;RS)(A;;RC;;;AU)(OA;;RP;59ba2f42-79a2-11d0-9020-00c04fc2d3cf;;AU)(OA;;RP;77B5B886-944A-11d1-AEBD-0000F80367C1;;AU)(OA;;RP;E45795B3-9455-11d1-AEBD-0000F80367C1;;AU)(OA;;RP;e48d0154-bcf8-11d1-8702-00c04fb96050;;AU)(OA;;CR;ab721a53-1e2f-11d0-9819-00aa0040529b;;WD)(OA;;RP;5f202010-79a5-11d0-9020-00c04fc2d4cf;;RS)(OA;;RPWP;bf967a7f-0de6-11d0-a285-00aa003049e2;;CA)(OA;;RP;46a9b11d-60ae-405a-b7e8-ff8a58d456d2;;S-1-5-32-560)(OA;;WPRP;6db69a1c-9422-11d1-aebd-0000f80367c1;;S-1-5-32-561)

+defaultSecurityDescriptor: D:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;AO)(A;;RPLCLORC;;;PS)(OA;;CR;ab721a53-1e2f-11d0-9819-00aa0040529b;;PS)(OA;;CR;ab721a54-1e2f-11d0-9819-00aa0040529b;;PS)(OA;;CR;ab721a56-1e2f-11d0-9819-00aa0040529b;;PS)(OA;;RPWP;77B5B886-944A-11d1-AEBD-0000F80367C1;;PS)(OA;;RPWP;E45795B2-9455-11d1-AEBD-0000F80367C1;;PS)(OA;;RPWP;E45795B3-9455-11d1-AEBD-0000F80367C1;;PS)(OA;;RP;037088f8-0ae1-11d2-b422-00a0c968f939;;RS)(OA;;RP;4c164200-20c0-11d0-a768-00aa006e0529;;RS)(OA;;RP;bc0ac240-79a9-11d0-9020-00c04fc2d4cf;;RS)(A;;RC;;;AU)(OA;;RP;59ba2f42-79a2-11d0-9020-00c04fc2d3cf;;AU)(OA;;RP;77B5B886-944A-11d1-AEBD-0000F80367C1;;AU)(OA;;RP;E45795B3-9455-11d1-AEBD-0000F80367C1;;AU)(OA;;RP;e48d0154-bcf8-11d1-8702-00c04fb96050;;AU)(OA;;CR;ab721a53-1e2f-11d0-9819-00aa0040529b;;WD)(OA;;RP;5f202010-79a5-11d0-9020-00c04fc2d4cf;;RS)(OA;;RPWP;bf967a7f-0de6-11d0-a285-00aa003049e2;;CA)(OA;;RP;46a9b11d-60ae-405a-b7e8-ff8a58d456d2;;S-1-5-32-560)(OA;;WPRP;6db69a1c-9422-11d1-aebd-0000f80367c1;;S-1-5-32-561)(OA;;WPRP;5805bc62-bdc9-4428-a5e2-856a0f4c185e;;S-1-5-32-561)

 systemPossSuperiors: builtinDomain, organizationalUnit, domainDNS

 defaultHidingValue: FALSE

 systemOnly: FALSE

@@ -2153,22 +2217,6 @@ systemOnly: FALSE
 defaultObjectCategory: CN=Volume,CN=Schema,CN=Configuration,<RootDomainDN>

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: Connection-Point

-ldapDisplayName: connectionPoint

-governsId: 1.2.840.113556.1.5.14

-objectClassCategory: 2

-rdnAttId: cn

-subClassOf: leaf

-systemMustContain: cn

-systemMayContain: msDS-Settings, managedBy, keywords

-systemPossSuperiors: container, computer

-schemaIdGuid:5cb41ecf-0e4c-11d0-a286-00aa003049e2

-defaultSecurityDescriptor: D:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)

-defaultHidingValue: TRUE

-systemOnly: FALSE

-defaultObjectCategory: CN=Connection-Point,CN=Schema,CN=Configuration,<RootDomainDN>

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: Contact

 ldapDisplayName: contact

 governsId: 1.2.840.113556.1.5.15

@@ -2288,7 +2336,7 @@ governsId: 1.2.840.113556.1.5.7000.53
 objectClassCategory: 1

 rdnAttId: cn

 subClassOf: top

-systemMayContain: msDS-SPNSuffixes, uPNSuffixes, msDS-UpdateScript,msDS-ExecuteScriptPassword, msDS-Behavior-Version

+systemMayContain: msDS-EnabledFeature, msDS-SPNSuffixes, uPNSuffixes,msDS-UpdateScript, msDS-ExecuteScriptPassword, msDS-Behavior-Version

 systemPossSuperiors: configuration

 schemaIdGuid:ef9e60e0-56f7-11d1-a9c6-0000f80367c1

 defaultSecurityDescriptor: D:(A;;GA;;;SY)

@@ -2382,7 +2430,7 @@ objectClassCategory: 1
 rdnAttId: cn

 subClassOf: top

 systemMustContain: cn

-systemMayContain: schemaUpdate, schemaInfo, prefixMap,msDs-Schema-Extensions, msDS-IntId, dmdName

+systemMayContain: msDS-USNLastSyncSuccess, schemaUpdate, schemaInfo,prefixMap, msDs-Schema-Extensions, msDS-IntId, dmdName

 systemPossSuperiors: configuration

 schemaIdGuid:bf967a8f-0de6-11d0-a285-00aa003049e2

 defaultSecurityDescriptor: D:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)

@@ -2488,10 +2536,10 @@ objectClassCategory: 1
 rdnAttId: dc

 subClassOf: domain

 systemAuxiliaryClass: samDomain

-systemMayContain: msDS-Behavior-Version, msDS-AllowedDNSSuffixes,managedBy

+systemMayContain: msDS-EnabledFeature, msDS-USNLastSyncSuccess,msDS-Behavior-Version, msDS-AllowedDNSSuffixes, managedBy

 systemPossSuperiors: domainDNS

 schemaIdGuid:19195a5b-6da0-11d0-afd3-00c04fd930c9

-defaultSecurityDescriptor: D:(A;;RP;;;WD)(OA;;CR;1131f6aa-9c07-11d1-f79f-00c04fc2dcd2;;ED)(OA;;CR;1131f6ab-9c07-11d1-f79f-00c04fc2dcd2;;ED)(OA;;CR;1131f6ac-9c07-11d1-f79f-00c04fc2dcd2;;ED)(OA;;CR;1131f6aa-9c07-11d1-f79f-00c04fc2dcd2;;BA)(OA;;CR;1131f6ab-9c07-11d1-f79f-00c04fc2dcd2;;BA)(OA;;CR;1131f6ac-9c07-11d1-f79f-00c04fc2dcd2;;BA)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;DA)(A;CI;RPWPCRLCLOCCRCWDWOSDSW;;;BA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY)(A;CI;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;EA)(A;CI;LC;;;RU)(OA;CIIO;RP;037088f8-0ae1-11d2-b422-00a0c968f939;bf967aba-0de6-11d0-a285-00aa003049e2;RU)(OA;CIIO;RP;59ba2f42-79a2-11d0-9020-00c04fc2d3cf;bf967aba-0de6-11d0-a285-00aa003049e2;RU)(OA;CIIO;RP;bc0ac240-79a9-11d0-9020-00c04fc2d4cf;bf967aba-0de6-11d0-a285-00aa003049e2;RU)(OA;CIIO;RP;4c164200-20c0-11d0-a768-00aa006e0529;bf967aba-0de6-11d0-a285-00aa003049e2;RU)(OA;CIIO;RP;5f202010-79a5-11d0-9020-00c04fc2d4cf;bf967aba-0de6-11d0-a285-00aa003049e2;RU)(OA;;RP;c7407360-20bf-11d0-a768-00aa006e0529;;RU)(OA;CIIO;RPLCLORC;;bf967a9c-0de6-11d0-a285-00aa003049e2;RU)(A;;RPRC;;;RU)(OA;CIIO;RPLCLORC;;bf967aba-0de6-11d0-a285-00aa003049e2;RU)(A;;LCRPLORC;;;ED)(OA;CIIO;RP;037088f8-0ae1-11d2-b422-00a0c968f939;4828CC14-1437-45bc-9B07-AD6F015E5F28;RU)(OA;CIIO;RP;59ba2f42-79a2-11d0-9020-00c04fc2d3cf;4828CC14-1437-45bc-9B07-AD6F015E5F28;RU)(OA;CIIO;RP;bc0ac240-79a9-11d0-9020-00c04fc2d4cf;4828CC14-1437-45bc-9B07-AD6F015E5F28;RU)(OA;CIIO;RP;4c164200-20c0-11d0-a768-00aa006e0529;4828CC14-1437-45bc-9B07-AD6F015E5F28;RU)(OA;CIIO;RP;5f202010-79a5-11d0-9020-00c04fc2d4cf;4828CC14-1437-45bc-9B07-AD6F015E5F28;RU)(OA;CIIO;RPLCLORC;;4828CC14-1437-45bc-9B07-AD6F015E5F28;RU)(OA;;RP;b8119fd0-04f6-4762-ab7a-4986c76b3f9a;;RU)(OA;;RP;b8119fd0-04f6-4762-ab7a-4986c76b3f9a;;AU)(OA;CIIO;RP;b7c69e6d-2cc7-11d2-854e-00a0c983f608;bf967aba-0de6-11d0-a285-00aa003049e2;ED)(OA;CIIO;RP;b7c69e6d-2cc7-11d2-854e-00a0c983f608;bf967a9c-0de6-11d0-a285-00aa003049e2;ED)(OA;CIIO;RP;b7c69e6d-2cc7-11d2-854e-00a0c983f608;bf967a86-0de6-11d0-a285-00aa003049e2;ED)(OA;;CR;1131f6ad-9c07-11d1-f79f-00c04fc2dcd2;;DD)(OA;;CR;1131f6ad-9c07-11d1-f79f-00c04fc2dcd2;;BA)(OA;;CR;e2a36dc9-ae17-47c3-b58b-be34c55ba633;;S-1-5-32-557)(OA;;CR;280f369c-67c7-438e-ae98-1d46f3c6f541;;AU)(OA;;CR;ccc2dc7d-a6ad-4a7a-8846-c04e3cc53501;;AU)(OA;;CR;05c74c5e-4deb-43b4-bd9f-86664c2a7fd5;;AU)(OA;;CR;1131f6ae-9c07-11d1-f79f-00c04fc2dcd2;;ED)(OA;;CR;1131f6ae-9c07-11d1-f79f-00c04fc2dcd2;;BA)(OA;CIIO;CRRPWP;91e647de-d96f-4b70-9557-d63ff4f3ccd8;;PS)(OA;;CR;1131f6aa-9c07-11d1-f79f-00c04fc2dcd2;;RO)S:(AU;SA;WDWOWP;;;WD)(AU;SA;CR;;;BA)(AU;SA;CR;;;DU)(OU;CISA;WP;f30e3bbe-9ff0-11d1-b603-0000f80367c1;bf967aa5-0de6-11d0-a285-00aa003049e2;WD)(OU;CISA;WP;f30e3bbf-9ff0-11d1-b603-0000f80367c1;bf967aa5-0de6-11d0-a285-00aa003049e2;WD)

+defaultSecurityDescriptor: D:(A;;RP;;;WD)(OA;;CR;1131f6aa-9c07-11d1-f79f-00c04fc2dcd2;;ED)(OA;;CR;1131f6ab-9c07-11d1-f79f-00c04fc2dcd2;;ED)(OA;;CR;1131f6ac-9c07-11d1-f79f-00c04fc2dcd2;;ED)(OA;;CR;1131f6aa-9c07-11d1-f79f-00c04fc2dcd2;;BA)(OA;;CR;1131f6ab-9c07-11d1-f79f-00c04fc2dcd2;;BA)(OA;;CR;1131f6ac-9c07-11d1-f79f-00c04fc2dcd2;;BA)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;DA)(A;CI;RPWPCRLCLOCCRCWDWOSDSW;;;BA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY)(A;CI;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;EA)(A;CI;LC;;;RU)(OA;CIIO;RP;037088f8-0ae1-11d2-b422-00a0c968f939;bf967aba-0de6-11d0-a285-00aa003049e2;RU)(OA;CIIO;RP;59ba2f42-79a2-11d0-9020-00c04fc2d3cf;bf967aba-0de6-11d0-a285-00aa003049e2;RU)(OA;CIIO;RP;bc0ac240-79a9-11d0-9020-00c04fc2d4cf;bf967aba-0de6-11d0-a285-00aa003049e2;RU)(OA;CIIO;RP;4c164200-20c0-11d0-a768-00aa006e0529;bf967aba-0de6-11d0-a285-00aa003049e2;RU)(OA;CIIO;RP;5f202010-79a5-11d0-9020-00c04fc2d4cf;bf967aba-0de6-11d0-a285-00aa003049e2;RU)(OA;;RP;c7407360-20bf-11d0-a768-00aa006e0529;;RU)(OA;CIIO;RPLCLORC;;bf967a9c-0de6-11d0-a285-00aa003049e2;RU)(A;;RPRC;;;RU)(OA;CIIO;RPLCLORC;;bf967aba-0de6-11d0-a285-00aa003049e2;RU)(A;;LCRPLORC;;;ED)(OA;CIIO;RP;037088f8-0ae1-11d2-b422-00a0c968f939;4828CC14-1437-45bc-9B07-AD6F015E5F28;RU)(OA;CIIO;RP;59ba2f42-79a2-11d0-9020-00c04fc2d3cf;4828CC14-1437-45bc-9B07-AD6F015E5F28;RU)(OA;CIIO;RP;bc0ac240-79a9-11d0-9020-00c04fc2d4cf;4828CC14-1437-45bc-9B07-AD6F015E5F28;RU)(OA;CIIO;RP;4c164200-20c0-11d0-a768-00aa006e0529;4828CC14-1437-45bc-9B07-AD6F015E5F28;RU)(OA;CIIO;RP;5f202010-79a5-11d0-9020-00c04fc2d4cf;4828CC14-1437-45bc-9B07-AD6F015E5F28;RU)(OA;CIIO;RPLCLORC;;4828CC14-1437-45bc-9B07-AD6F015E5F28;RU)(OA;;RP;b8119fd0-04f6-4762-ab7a-4986c76b3f9a;;RU)(OA;;RP;b8119fd0-04f6-4762-ab7a-4986c76b3f9a;;AU)(OA;CIIO;RP;b7c69e6d-2cc7-11d2-854e-00a0c983f608;bf967aba-0de6-11d0-a285-00aa003049e2;ED)(OA;CIIO;RP;b7c69e6d-2cc7-11d2-854e-00a0c983f608;bf967a9c-0de6-11d0-a285-00aa003049e2;ED)(OA;CIIO;RP;b7c69e6d-2cc7-11d2-854e-00a0c983f608;bf967a86-0de6-11d0-a285-00aa003049e2;ED)(OA;;CR;1131f6ad-9c07-11d1-f79f-00c04fc2dcd2;;DD)(OA;;CR;89e95b76-444d-4c62-991a-0facbeda640c;;ED)(OA;;CR;1131f6ad-9c07-11d1-f79f-00c04fc2dcd2;;BA)(OA;;CR;89e95b76-444d-4c62-991a-0facbeda640c;;BA)(OA;;CR;e2a36dc9-ae17-47c3-b58b-be34c55ba633;;S-1-5-32-557)(OA;;CR;280f369c-67c7-438e-ae98-1d46f3c6f541;;AU)(OA;;CR;ccc2dc7d-a6ad-4a7a-8846-c04e3cc53501;;AU)(OA;;CR;05c74c5e-4deb-43b4-bd9f-86664c2a7fd5;;AU)(OA;;CR;1131f6ae-9c07-11d1-f79f-00c04fc2dcd2;;ED)(OA;;CR;1131f6ae-9c07-11d1-f79f-00c04fc2dcd2;;BA)(OA;CIIO;CRRPWP;91e647de-d96f-4b70-9557-d63ff4f3ccd8;;PS)S:(AU;SA;WDWOWP;;;WD)(AU;SA;CR;;;BA)(AU;SA;CR;;;DU)(OU;CISA;WP;f30e3bbe-9ff0-11d1-b603-0000f80367c1;bf967aa5-0de6-11d0-a285-00aa003049e2;WD)(OU;CISA;WP;f30e3bbf-9ff0-11d1-b603-0000f80367c1;bf967aa5-0de6-11d0-a285-00aa003049e2;WD)

 defaultHidingValue: FALSE

 systemOnly: FALSE

 defaultObjectCategory: CN=Domain-DNS,CN=Schema,CN=Configuration,<RootDomainDN>

@@ -2760,7 +2808,7 @@ subClassOf: user
 mayContain: x500uniqueIdentifier, userSMIMECertificate, userPKCS12,userCertificate, uid, secretary, roomNumber, preferredLanguage,photo, pager, o, mobile, manager, mail, labeledURI, jpegPhoto,initials, homePostalAddress, homePhone, givenName, employeeType,employeeNumber, displayName, departmentNumber, carLicense,businessCategory, audio

 possSuperiors: domainDNS, organizationalUnit, container

 schemaIdGuid:4828cc14-1437-45bc-9b07-ad6f015e5f28

-defaultSecurityDescriptor: D:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;AO)(A;;RPLCLORC;;;PS)(OA;;CR;ab721a53-1e2f-11d0-9819-00aa0040529b;;PS)(OA;;CR;ab721a54-1e2f-11d0-9819-00aa0040529b;;PS)(OA;;CR;ab721a56-1e2f-11d0-9819-00aa0040529b;;PS)(OA;;RPWP;77B5B886-944A-11d1-AEBD-0000F80367C1;;PS)(OA;;RPWP;E45795B2-9455-11d1-AEBD-0000F80367C1;;PS)(OA;;RPWP;E45795B3-9455-11d1-AEBD-0000F80367C1;;PS)(OA;;RP;037088f8-0ae1-11d2-b422-00a0c968f939;;RS)(OA;;RP;4c164200-20c0-11d0-a768-00aa006e0529;;RS)(OA;;RP;bc0ac240-79a9-11d0-9020-00c04fc2d4cf;;RS)(A;;RC;;;AU)(OA;;RP;59ba2f42-79a2-11d0-9020-00c04fc2d3cf;;AU)(OA;;RP;77B5B886-944A-11d1-AEBD-0000F80367C1;;AU)(OA;;RP;E45795B3-9455-11d1-AEBD-0000F80367C1;;AU)(OA;;RP;e48d0154-bcf8-11d1-8702-00c04fb96050;;AU)(OA;;CR;ab721a53-1e2f-11d0-9819-00aa0040529b;;WD)(OA;;RP;5f202010-79a5-11d0-9020-00c04fc2d4cf;;RS)(OA;;RPWP;bf967a7f-0de6-11d0-a285-00aa003049e2;;CA)(OA;;RP;46a9b11d-60ae-405a-b7e8-ff8a58d456d2;;S-1-5-32-560)(OA;;WPRP;6db69a1c-9422-11d1-aebd-0000f80367c1;;S-1-5-32-561)

+defaultSecurityDescriptor: D:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;AO)(A;;RPLCLORC;;;PS)(OA;;CR;ab721a53-1e2f-11d0-9819-00aa0040529b;;PS)(OA;;CR;ab721a54-1e2f-11d0-9819-00aa0040529b;;PS)(OA;;CR;ab721a56-1e2f-11d0-9819-00aa0040529b;;PS)(OA;;RPWP;77B5B886-944A-11d1-AEBD-0000F80367C1;;PS)(OA;;RPWP;E45795B2-9455-11d1-AEBD-0000F80367C1;;PS)(OA;;RPWP;E45795B3-9455-11d1-AEBD-0000F80367C1;;PS)(OA;;RP;037088f8-0ae1-11d2-b422-00a0c968f939;;RS)(OA;;RP;4c164200-20c0-11d0-a768-00aa006e0529;;RS)(OA;;RP;bc0ac240-79a9-11d0-9020-00c04fc2d4cf;;RS)(A;;RC;;;AU)(OA;;RP;59ba2f42-79a2-11d0-9020-00c04fc2d3cf;;AU)(OA;;RP;77B5B886-944A-11d1-AEBD-0000F80367C1;;AU)(OA;;RP;E45795B3-9455-11d1-AEBD-0000F80367C1;;AU)(OA;;RP;e48d0154-bcf8-11d1-8702-00c04fb96050;;AU)(OA;;CR;ab721a53-1e2f-11d0-9819-00aa0040529b;;WD)(OA;;RP;5f202010-79a5-11d0-9020-00c04fc2d4cf;;RS)(OA;;RPWP;bf967a7f-0de6-11d0-a285-00aa003049e2;;CA)(OA;;RP;46a9b11d-60ae-405a-b7e8-ff8a58d456d2;;S-1-5-32-560)(OA;;WPRP;6db69a1c-9422-11d1-aebd-0000f80367c1;;S-1-5-32-561)(OA;;WPRP;5805bc62-bdc9-4428-a5e2-856a0f4c185e;;S-1-5-32-561)

 defaultHidingValue: FALSE

 systemOnly: FALSE

 defaultObjectCategory: CN=Person,CN=Schema,CN=Configuration,<RootDomainDN>

@@ -3181,6 +3229,36 @@ systemOnly: FALSE
 defaultObjectCategory: CN=Meeting,CN=Schema,CN=Configuration,<RootDomainDN>

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

+cn: ms-net-ieee-80211-GroupPolicy

+lDAPDisplayName: ms-net-ieee-80211-GroupPolicy

+governsID: 1.2.840.113556.1.5.251

+objectClassCategory: 1

+rDNAttID: cn

+subClassOf: top

+systemMayContain: ms-net-ieee-80211-GP-PolicyReserved,ms-net-ieee-80211-GP-PolicyData, ms-net-ieee-80211-GP-PolicyGUID

+systemPossSuperiors: computer, container, person

+schemaIDGUID: 1cb81863-b822-4379-9ea2-5ff7bdc6386d

+defaultSecurityDescriptor: D:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)

+defaultHidingValue: TRUE

+systemOnly: FALSE

+defaultObjectCategory: CN=ms-net-ieee-80211-GroupPolicy,CN=Schema,CN=Configuration,<RootDomainDN>

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

+cn: ms-net-ieee-8023-GroupPolicy

+lDAPDisplayName: ms-net-ieee-8023-GroupPolicy

+governsID: 1.2.840.113556.1.5.252

+objectClassCategory: 1

+rDNAttID: cn

+subClassOf: top

+systemMayContain: ms-net-ieee-8023-GP-PolicyReserved,ms-net-ieee-8023-GP-PolicyData, ms-net-ieee-8023-GP-PolicyGUID

+systemPossSuperiors: computer, container, person

+schemaIDGUID: 99a03a6a-ab19-4446-9350-0cb878ed2d9b

+defaultSecurityDescriptor: D:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)

+defaultHidingValue: TRUE

+systemOnly: FALSE

+defaultObjectCategory: CN=ms-net-ieee-8023-GroupPolicy,CN=Schema,CN=Configuration,<RootDomainDN>

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: MS-SQL-OLAPCube

 ldapDisplayName: mS-SQL-OLAPCube

 governsId: 1.2.840.113556.1.5.190

@@ -3226,6 +3304,20 @@ systemOnly: FALSE
 defaultObjectCategory: CN=MS-SQL-OLAPServer,CN=Schema,CN=Configuration,<RootDomainDN>

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

+cn: Application-Settings

+ldapDisplayName: applicationSettings

+governsId: 1.2.840.113556.1.5.7000.49

+objectClassCategory: 2

+rdnAttId: cn

+subClassOf: top

+systemMayContain: notificationList, msDS-Settings, applicationName

+systemPossSuperiors: server

+schemaIdGuid:f780acc1-56f0-11d1-a9c6-0000f80367c1

+defaultHidingValue: TRUE

+systemOnly: FALSE

+defaultObjectCategory: CN=Application-Settings,CN=Schema,CN=Configuration,<RootDomainDN>

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

+

 cn: MS-SQL-SQLDatabase

 ldapDisplayName: mS-SQL-SQLDatabase

 governsId: 1.2.840.113556.1.5.188

@@ -3256,20 +3348,6 @@ systemOnly: FALSE
 defaultObjectCategory: CN=MS-SQL-SQLPublication,CN=Schema,CN=Configuration,<RootDomainDN>

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: Application-Settings

-ldapDisplayName: applicationSettings

-governsId: 1.2.840.113556.1.5.7000.49

-objectClassCategory: 2

-rdnAttId: cn

-subClassOf: top

-systemMayContain: notificationList, msDS-Settings, applicationName

-systemPossSuperiors: server

-schemaIdGuid:f780acc1-56f0-11d1-a9c6-0000f80367c1

-defaultHidingValue: TRUE

-systemOnly: FALSE

-defaultObjectCategory: CN=Application-Settings,CN=Schema,CN=Configuration,<RootDomainDN>

-systemFlags: FLAG_SCHEMA_BASE_OBJECT

-

 cn: MS-SQL-SQLRepository

 ldapDisplayName: mS-SQL-SQLRepository

 governsId: 1.2.840.113556.1.5.186

@@ -3330,89 +3408,66 @@ systemOnly: FALSE
 defaultObjectCategory: CN=ms-COM-PartitionSet,CN=Schema,CN=Configuration,<RootDomainDN>

 systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: ms-DFSR-Connection

-ldapDisplayName: msDFSR-Connection

-governsId: 1.2.840.113556.1.6.13.4.10

+cn: ms-DFS-Deleted-Link-v2

+ldapDisplayName: msDFS-DeletedLinkv2

+governsId: 1.2.840.113556.1.5.260

 objectClassCategory: 1

 rdnAttId: cn

 subClassOf: top

-mustContain: fromServer

-mayContain: msDFSR-Options2, msDFSR-DisablePacketPrivacy,msDFSR-Priority, msDFSR-Enabled, msDFSR-RdcEnabled,msDFSR-RdcMinFileSizeInKb, msDFSR-Keywords, msDFSR-Schedule,msDFSR-Flags, msDFSR-Options, msDFSR-Extension

-possSuperiors: msDFSR-Member

-schemaIdGuid:e58f972e-64b5-46ef-8d8b-bbc3e1897eab

-defaultSecurityDescriptor: D:(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;DA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;CO)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY)

-defaultHidingValue: TRUE

-systemOnly: FALSE

-defaultObjectCategory: CN=ms-DFSR-Connection,CN=Schema,CN=Configuration,<RootDomainDN>

-

-cn: ms-DFSR-Content

-ldapDisplayName: msDFSR-Content

-governsId: 1.2.840.113556.1.6.13.4.6

-objectClassCategory: 1

-rdnAttId: cn

-subClassOf: top

-mayContain: msDFSR-Flags, msDFSR-Options, msDFSR-Extension

-possSuperiors: msDFSR-ReplicationGroup

-schemaIdGuid:64759b35-d3a1-42e4-b5f1-a3de162109b3

-defaultSecurityDescriptor: D:(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;DA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;CO)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY)

-defaultHidingValue: TRUE

-systemOnly: FALSE

-defaultObjectCategory: CN=ms-DFSR-Content,CN=Schema,CN=Configuration,<RootDomainDN>

-

-cn: ms-DFSR-ContentSet

-ldapDisplayName: msDFSR-ContentSet

-governsId: 1.2.840.113556.1.6.13.4.7

-objectClassCategory: 1

-rdnAttId: cn

-subClassOf: top

-mayContain: msDFSR-Options2, msDFSR-OnDemandExclusionDirectoryFilter,msDFSR-OnDemandExclusionFileFilter,msDFSR-DefaultCompressionExclusionFilter, msDFSR-DeletedSizeInMb,msDFSR-Priority, msDFSR-ConflictSizeInMb, msDFSR-StagingSizeInMb,msDFSR-RootSizeInMb, description, msDFSR-DfsPath, msDFSR-FileFilter,msDFSR-DirectoryFilter, msDFSR-Flags, msDFSR-Options,msDFSR-Extension

-possSuperiors: msDFSR-Content

-schemaIdGuid:4937f40d-a6dc-4d48-97ca-06e5fbfd3f16

-defaultSecurityDescriptor: D:(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;DA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;CO)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY)

+systemMustContain: msDFS-NamespaceIdentityGUIDv2,msDFS-LinkIdentityGUIDv2, msDFS-LastModifiedv2, msDFS-LinkPathv2

+systemMayContain: msDFS-Commentv2, msDFS-ShortNameLinkPathv2

+systemPossSuperiors: msDFS-Namespacev2

+schemaIdGuid: 25173408-04ca-40e8-865e-3f9ce9bf1bd3

+defaultSecurityDescriptor: D:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)

 defaultHidingValue: TRUE

 systemOnly: FALSE

-defaultObjectCategory: CN=ms-DFSR-ContentSet,CN=Schema,CN=Configuration,<RootDomainDN>

+defaultObjectCategory: CN=ms-DFS-Deleted-Link-v2, CN=Schema,CN=Configuration, <RootDomainDN>

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: ms-DFSR-GlobalSettings

-ldapDisplayName: msDFSR-GlobalSettings

-governsId: 1.2.840.113556.1.6.13.4.4

+cn: ms-DFS-Link-v2

+ldapDisplayName: msDFS-Linkv2

+governsId: 1.2.840.113556.1.5.259

 objectClassCategory: 1

 rdnAttId: cn

 subClassOf: top

-mayContain: msDFSR-Flags, msDFSR-Options, msDFSR-Extension

-possSuperiors: container

-schemaIdGuid:7b35dbad-b3ec-486a-aad4-2fec9d6ea6f6

-defaultSecurityDescriptor: D:(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;DA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;CO)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY)

+systemMustContain: msDFS-GenerationGUIDv2,msDFS-NamespaceIdentityGUIDv2, msDFS-LinkIdentityGUIDv2,msDFS-LastModifiedv2, msDFS-Ttlv2, msDFS-TargetListv2,msDFS-Propertiesv2, msDFS-LinkPathv2

+systemMayContain: msDFS-Commentv2, msDFS-LinkSecurityDescriptorv2,msDFS-ShortNameLinkPathv2

+systemPossSuperiors: msDFS-Namespacev2

+schemaIdGuid: 7769fb7a-1159-4e96-9ccd-68bc487073eb

+defaultSecurityDescriptor: D:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)

 defaultHidingValue: TRUE

 systemOnly: FALSE

-defaultObjectCategory: CN=ms-DFSR-GlobalSettings,CN=Schema,CN=Configuration,<RootDomainDN>

+defaultObjectCategory: CN=ms-DFS-Link-v2, CN=Schema,CN=Configuration, <RootDomainDN>

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: ms-DFSR-LocalSettings

-ldapDisplayName: msDFSR-LocalSettings

-governsId: 1.2.840.113556.1.6.13.4.1

+cn: ms-DFS-Namespace-Anchor

+ldapDisplayName: msDFS-NamespaceAnchor

+governsId: 1.2.840.113556.1.5.257

 objectClassCategory: 1

 rdnAttId: cn

 subClassOf: top

-mayContain: msDFSR-Version, msDFSR-Flags, msDFSR-Options,msDFSR-Extension

-possSuperiors: computer

-schemaIdGuid:fa85c591-197f-477e-83bd-ea5a43df2239

-defaultSecurityDescriptor: D:(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;DA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;CO)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY)

+systemMustContain: msDFS-SchemaMajorVersion

+systemPossSuperiors: dfsConfiguration

+schemaIdGuid: da73a085-6e64-4d61-b064-015d04164795

+defaultSecurityDescriptor: D:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;CO)

 defaultHidingValue: TRUE

 systemOnly: FALSE

-defaultObjectCategory: CN=ms-DFSR-LocalSettings,CN=Schema,CN=Configuration,<RootDomainDN>

+defaultObjectCategory: CN=ms-DFS-Namespace-Anchor, CN=Schema,CN=Configuration, <RootDomainDN>

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

-cn: ms-DFSR-Member

-ldapDisplayName: msDFSR-Member

-governsId: 1.2.840.113556.1.6.13.4.9

+cn: ms-DFS-Namespace-v2

+ldapDisplayName: msDFS-Namespacev2

+governsId: 1.2.840.113556.1.5.258

 objectClassCategory: 1

 rdnAttId: cn

 subClassOf: top

-mustContain: msDFSR-ComputerReference

-mayContain: serverReference, msDFSR-Keywords, msDFSR-Flags,msDFSR-Options, msDFSR-Extension

-possSuperiors: msDFSR-Topology

-schemaIdGuid:4229c897-c211-437c-a5ae-dbf705b696e5

-defaultSecurityDescriptor: D:(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;DA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;CO)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY)

+systemMustContain: msDFS-SchemaMajorVersion,msDFS-SchemaMinorVersion, msDFS-GenerationGUIDv2,msDFS-NamespaceIdentityGUIDv2, msDFS-LastModifiedv2, msDFS-Ttlv2,msDFS-TargetListv2, msDFS-Propertiesv2

+systemMayContain: msDFS-Commentv2

+systemPossSuperiors: msDFS-NamespaceAnchor

+schemaIdGuid: 21cb8628-f3c3-4bbf-bff6-060b2d8f299a

+defaultSecurityDescriptor: D:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)

 defaultHidingValue: TRUE

 systemOnly: FALSE

-defaultObjectCategory: CN=ms-DFSR-Member,CN=Schema,CN=Configuration,<RootDomainDN>

+defaultObjectCategory: CN=ms-DFS-Namespace-v2, CN=Schema,CN=Configuration, <RootDomainDN>

+systemFlags: FLAG_SCHEMA_BASE_OBJECT

 

diff --git a/source4/setup/ad-schema/licence.txt b/source4/setup/ad-schema/licence.txt
index 9db966461b..490525ca89 100644
--- a/source4/setup/ad-schema/licence.txt
+++ b/source4/setup/ad-schema/licence.txt
@@ -4,51 +4,4 @@ The licence on these schema files is not GPL, or a standard Open
 Source licence.  Be careful to redistribute thes files as part of
 Samba or 'your implementation', but not alone.
 
---
-
-Intellectual Property Rights Notice for Protocol Documentation
-
-Copyrights. 
-This protocol documentation is covered by Microsoft
-copyrights. Regardless of any other terms that are contained in the
-terms of use for the Microsoft website that hosts this documentation,
-you may make copies of it in order to develop implementations of the
-protocols, and may distribute portions of it in your implementations
-of the protocols or your documentation as necessary to properly
-document the implementation. You may also distribute in your
-implementation, with or without modification, any schema, IDL's, or
-code samples that are included in the documentation. This permission
-also applies to any documents that are referenced in the protocol
-documentation.
-
-No Trade Secrets. 
-Microsoft does not claim any trade secret rights in this documentation.
-
-Patents. 
-Microsoft has patents that may cover your implementations of the
-protocols.  Neither this notice nor Microsoft's delivery of the
-documentation grants any licenses under those or any other Microsoft
-patents.  However, the protocols may be covered by MicrosoftÂ’s Open
-Specification Promise (available here:
-http://www.microsoft.com/interop/osp).  If you would prefer a written
-license, or if the protocols are not covered by the OSP, patent
-licenses are available by contacting protocol@microsoft.com.
-
-Trademarks. 
-The names of companies and products contained in this documentation
-may be covered by trademarks or similar intellectual property
-rights. This notice does not grant any licenses under those
-rights.Reservation of Rights.  All other rights are reserved, and this
-notice does not grant any rights other than specifically described
-above, whether by implication, estoppel, or otherwise.
-
-Tools. 
-This protocol documentation is intended for use in conjunction with
-publicly available standard specifications and network programming
-art, and assumes that the reader either is familiar with the
-aforementioned material or has immediate access to it.  A protocol
-specification does not require the use of Microsoft programming tools
-or programming environments in order for you to develop an
-implementation.  If you have access to Microsoft programming tools and
-environments you are free to take advantage of them.
-
+See each file for it's licence from Microsoft
diff --git a/source4/utils/config.mk b/source4/utils/config.mk
index ea8e00ff8a..5fa7e200f0 100644
--- a/source4/utils/config.mk
+++ b/source4/utils/config.mk
@@ -92,16 +92,3 @@ oLschema2ldif_OBJ_FILES = $(addprefix $(utilssrcdir)/, oLschema2ldif.o)
 
 MANPAGES += $(utilssrcdir)/man/oLschema2ldif.1
 
-################################################
-# Start BINARY  ad2oLschema
-[BINARY::ad2oLschema]
-INSTALLDIR = BINDIR
-PRIVATE_DEPENDENCIES = \
-		LIBLDB_CMDLINE SAMDB 
-# End BINARY ad2oLschema
-################################################
-
-ad2oLschema_OBJ_FILES = $(addprefix $(utilssrcdir)/, ad2oLschema.o)
-
-MANPAGES += $(utilssrcdir)/man/ad2oLschema.1
-