Share via

3.1.1.4.5.42 msds-tokenGroupNames, msds-tokenGroupNamesNoGCAcceptable

  • Article

The msds-tokenGroupNames and msds-tokenGroupNamesNoGCAcceptable attributes exist on AD DS but not on AD LDS, on Windows Server 2016 operating system and later.

The msds-tokenGroupNames attribute contains the DN values corresponding to the SID values returned by the constructed attribute tokenGroups (section 3.1.1.4.5.19).

The msds-tokenGroupNamesNoGCAcceptable attribute contains the DN values corresponding to the SID values returned by the constructed attribute tokenGroupsNoGCAcceptable (section 3.1.1.4.5.19).