Active Directory, 3rd Edition

Classes (classSchema Objects)

Schema classes are defined as instances of the classSchema class. Table 4-6 shows the most important attributes that you may wish to set.

Table 4-6. The defining attributes of a classSchema object instance

Attribute	Syntax	Mandatory	Multivalued	Description
auxiliaryClass	OID	No	Yes	The list of Auxiliary (or 88-Class) classes that this object inherits attributes from.
Cn	Unicode	Yes	No	The Relative Distinguished Name (RDN).
defaultHidingValue	Boolean	No	No	Whether the object should be hidden or displayed within the MMCs by default.
defaultSecurityDescriptor	Octet string	No	No	The Security Descriptor to assign to new instances of this class. Note that this SD is applied to new instances of the class if and only if an SD is not specifically provided and set during the creation of the instance.
Description	Unicode string	No	No	A description of the attribute.
governsID	OID	Yes	No	The OID that uniquely identifies objects of this class.
lDAPDisplayName	Unicode	No	No	The name by which LDAP clients identify this class.
mayContain	OID	No	Yes	The list of attributes that are optional for this class.
mustContain	OID	No	Yes	The list of attributes that are mandatory for this class.
nTSecurityDescriptor	NT-Security Descriptor	Yes	Yes	Security Descriptor on the classSchema object itself. For example, setting an SD allows you to govern who can actually create instances of the object ...