ms-DS-Reveal-OnDemand-Group attribute

Used with RODCs to define which users, computers, and groups are allowed to have their passwords cached on an RODC.

Entry Value
CN ms-DS-Reveal-OnDemand-Group
Ldap-Display-Name msDS-RevealOnDemandGroup
Size -
Update Privilege -
Update Frequency -
Attribute-Id 1.2.840.113556.1.4.1928
System-Id-Guid 303d9f4a-1dd6-4b38-8fc5-33afe8c988ad
Syntax Object(DS-DN)

Implementations

Windows Server 2008

Entry Value
Link-Id 2110
MAPI-Id -
System-Only False
Is-Single-Valued False
Is Indexed False
In Global Catalog False
NT-Security-Descriptor O:BAG:BAD:S:
Range-Lower -
Range-Upper -
Search-Flags 0x00000000
System-Flags 0x00000010
Classes used in Computer
NTDS-DSA

Windows Server 2008 R2

Entry Value
Link-Id 2110
MAPI-Id -
System-Only False
Is-Single-Valued False
Is Indexed False
In Global Catalog False
NT-Security-Descriptor O:BAG:BAD:S:
Range-Lower -
Range-Upper -
Search-Flags 0x00000000
System-Flags 0x00000010
Classes used in Computer
NTDS-DSA

Windows Server 2012

Entry Value
Link-Id 2110
MAPI-Id -
System-Only False
Is-Single-Valued False
Is Indexed False
In Global Catalog False
NT-Security-Descriptor O:BAG:BAD:S:
Range-Lower -
Range-Upper -
Search-Flags 0x00000000
System-Flags 0x00000010
Classes used in Computer
NTDS-DSA