The Microsoft Active Directory database contains a variety of predefined object classes, such as user, computer, contact, and so on. It also contains attribute objects, which can be used in classes.
An Active Directory class, defined as a classSchema type object, defines attributes for specific class, default values for those attributes, and security settings. For example, the user class is defined as a classSchema object type.
An Active Directory attribute, defined as an attributeSchema type object, defines settings for a specific attribute that then can be used in multiple classes. For example, the cn attribute is defined as an attributeSchema object type.
All classSchema and attributeSchema objects are stored in the special Active Directory partition, called the schema partition. You can view all schema partition objects using, for example, the adsiedit.msc tool. Figure 8-1 shows an example of the schema partition view in adsiedit.msc.
Figure 8-1: Active Directory schema partition view in adsiedit.msc
All classSchema and attributeSchema objects have a unique Globally Unique Identifier (GUID) attribute named schemaIDGUID. Many Windows mechanisms, including the Windows auditing subsystem, use these GUIDs to refer to a specific class or attribute. Schema GUIDs for default Active Directory classes and attributes have predefined values and ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month, and much more.
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.
Julian F.
Head of Cybersecurity
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.
Addison B.
Field Engineer
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.
Amir M.
Data Platform Tech Lead
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.
