activedirectory.schema

attributetype ( 1.2.840.113556.1.4.221 NAME 'sAMAccountName'
        EQUALITY caseExactMatch
        SYNTAX '1.3.6.1.4.1.1466.115.121.1.15' SINGLE-VALUE )

attributetype ( 1.2.840.113556.1.4.1412
        NAME 'primaryGroupToken'
        SYNTAX '1.3.6.1.4.1.1466.115.121.1.27'
        SINGLE-VALUE )

attributetype ( 1.2.840.113556.1.4.653
        NAME 'managedBy'
        SYNTAX '1.3.6.1.4.1.1466.115.121.1.12'
        SINGLE-VALUE )

attributetype ( 1.2.840.113556.1.4.530
        NAME 'nonSecurityMember'
        SYNTAX '1.3.6.1.4.1.1466.115.121.1.12' )

attributetype ( 1.2.840.113556.1.4.346
        NAME 'desktopProfile'
        SYNTAX '1.3.6.1.4.1.1466.115.121.1.15'
        SINGLE-VALUE )

attributetype ( 1.2.840.113556.1.4.200
        NAME 'controlAccessRights'
        SYNTAX '1.3.6.1.4.1.1466.115.121.1.40' )

attributetype ( 1.2.840.113556.1.4.166
        NAME 'groupMembershipSAM'
        SYNTAX '1.3.6.1.4.1.1466.115.121.1.40'
        SINGLE-VALUE )

attributetype ( 1.2.840.113556.1.4.152
        NAME 'groupAttributes'
        SYNTAX '1.3.6.1.4.1.1466.115.121.1.27'
        SINGLE-VALUE )

attributetype ( 1.2.840.113556.1.4.150
        NAME 'adminCount'
        SYNTAX '1.3.6.1.4.1.1466.115.121.1.27'
        SINGLE-VALUE )

attributetype ( 1.2.840.113556.1.4.144
        NAME 'operatorCount'
        SYNTAX '1.3.6.1.4.1.1466.115.121.1.27'
        SINGLE-VALUE )

attributetype ( 1.2.840.113556.1.4.750
        NAME 'groupType'
        SYNTAX '1.3.6.1.4.1.1466.115.121.1.27'
        SINGLE-VALUE )

attributetype ( 1.2.840.113556.1.4.89
        NAME 'nTGroupMembers'
        SYNTAX '1.3.6.1.4.1.1466.115.121.1.40' )

attributetype ( 1.2.840.113556.1.2.102
        NAME 'memberOf'
        SYNTAX '1.3.6.1.4.1.1466.115.121.1.12'
        NO-USER-MODIFICATION )

objectclass ( 1.2.840.113556.1.5.8
        NAME 'group'
        SUP top
        STRUCTURAL
        MUST (groupType )
        MAY (member $ nTGroupMembers $ operatorCount $ adminCount $
                groupAttributes $ groupMembershipSAM $ controlAccessRights $
                desktopProfile $ nonSecurityMember $ managedBy $
                primaryGroupToken $ mail ) )