OID reference

ms-DS-Allowed-To-Delegate-To

1.2.840.113556.1.4.1787

Description

Allowed-To-Delegate-To contains a list of SPNs that are used for Constrained Delegation

Full description and source information

Identification

Identifier and names

Parent
1.2.840.113556.1.4 (4)
Node code
1787
Node names
  • ms-DS-Allowed-To-Delegate-To
  • msDS-AllowedToDelegateTo
Numeric OID
1.2.840.113556.1.4.1787
URN notation
urn:oid:1.2.840.113556.1.4.1787
ASN.1, OID-IRI and named path variants
ASN.1 notation

{1 2 840 113556 1 4 1787}

  • {iso(1) member-body(2) us(840) microsoft(113556) 1 4 ms-DS-Allowed-To-Delegate-To(1787)}
  • {iso(1) member-body(2) us(840) microsoft(113556) 1 4 msDS-AllowedToDelegateTo(1787)}
  • {iso(1) member-body(2) us-iso(840) microsoft(113556) 1 4 ms-DS-Allowed-To-Delegate-To(1787)}
  • {iso(1) member-body(2) us-iso(840) microsoft(113556) 1 4 msDS-AllowedToDelegateTo(1787)}
  • {iso(1) memberBody(2) us(840) microsoft(113556) 1 4 ms-DS-Allowed-To-Delegate-To(1787)}
  • {iso(1) memberBody(2) us(840) microsoft(113556) 1 4 msDS-AllowedToDelegateTo(1787)}
  • {iso(1) memberBody(2) us-iso(840) microsoft(113556) 1 4 ms-DS-Allowed-To-Delegate-To(1787)}
  • {iso(1) memberBody(2) us-iso(840) microsoft(113556) 1 4 msDS-AllowedToDelegateTo(1787)}
OID-IRI notation
  • /1/2/840/113556/1/4/1787
  • /ISO/Member-Body/US/113556/1/4/1787
  • /ISO/Member-Body/840/113556/1/4/1787
  • /ISO/2/840/113556/1/4/1787
Named path variants
  • /iso/member-body/us/microsoft/1/4/ms-DS-Allowed-To-Delegate-To
  • /iso/member-body/us/microsoft/1/4/msDS-AllowedToDelegateTo
  • /iso/member-body/us-iso/microsoft/1/4/ms-DS-Allowed-To-Delegate-To
  • /iso/member-body/us-iso/microsoft/1/4/msDS-AllowedToDelegateTo
  • /iso/memberBody/us/microsoft/1/4/ms-DS-Allowed-To-Delegate-To
  • /iso/memberBody/us/microsoft/1/4/msDS-AllowedToDelegateTo
  • /iso/memberBody/us-iso/microsoft/1/4/ms-DS-Allowed-To-Delegate-To
  • /iso/memberBody/us-iso/microsoft/1/4/msDS-AllowedToDelegateTo

Meaning

Descriptions

2 unique

Identical descriptions are grouped. Different wording and device-specific notes are retained.

Description 1

Allowed-To-Delegate-To contains a list of SPNs that are used for Constrained Delegation

Sources for this description

Microsoft Active Directory schema

See 1 matching source record

Description 2

For a given computer or user account, this attribute specifies the list of service principal names (SPN) corresponding to Windows services that can act on behalf of the computer or user account.

Sources for this description

Microsoft Active Directory schema

See 1 matching source record

Evidence

Source records

2 records

Matching descriptions are grouped; open a group to compare definitions and supporting files.

Records for description 1Microsoft Active Directory schema1 record · 1 source

Description 1

msDS-AllowedToDelegateTo · unspecifiedMicrosoft Active Directory schema1 source

Status in source: unspecified.

Names: msDS-AllowedToDelegateTo

Technical details
{
  "ldap_properties": {
    "dn": [
      "CN=ms-DS-Allowed-To-Delegate-To,CN=Schema,CN=Configuration,DC=X"
    ],
    "omsyntax": [
      "64"
    ],
    "changetype": [
      "ntdsSchemaAdd"
    ],
    "systemonly": [
      "FALSE"
    ],
    "attributeid": [
      "1.2.840.113556.1.4.1787"
    ],
    "objectclass": [
      "attributeSchema"
    ],
    "searchflags": [
      "0"
    ],
    "systemflags": [
      "16"
    ],
    "schemaidguid": [
      "800d94d7-b7a1-42a1-b14d-7cae1423d07f"
    ],
    "issinglevalued": [
      "FALSE"
    ],
    "attributesyntax": [
      "2.5.5.12"
    ],
    "ldapdisplayname": [
      "msDS-AllowedToDelegateTo"
    ],
    "admindescription": [
      "Allowed-To-Delegate-To contains a list of SPNs that are used for Constrained Delegation"
    ],
    "admindisplayname": [
      "ms-DS-Allowed-To-Delegate-To"
    ],
    "attributesecurityguid": [
      "e48d0154-bcf8-11d1-8702-00c04fb96050"
    ],
    "showinadvancedviewonly": [
      "TRUE"
    ]
  }
}
Records for description 2Microsoft Active Directory schema1 record · 1 source

Description 2

ms-DS-Allowed-To-Delegate-To, msDS-AllowedToDelegateTo · unspecifiedMicrosoft Active Directory schema1 source

Status in source: unspecified.

Names: ms-DS-Allowed-To-Delegate-To, msDS-AllowedToDelegateTo

Technical details
{
  "ldap_properties": {
    "cn": [
      "ms-DS-Allowed-To-Delegate-To"
    ],
    "omsyntax": [
      "64"
    ],
    "systemonly": [
      "FALSE"
    ],
    "attributeid": [
      "1.2.840.113556.1.4.1787"
    ],
    "searchflags": [
      "0"
    ],
    "systemflags": [
      "FLAG_SCHEMA_BASE_OBJECT"
    ],
    "schemaidguid": [
      "800d94d7-b7a1-42a1-b14d-7cae1423d07f"
    ],
    "schemaflagsex": [
      "FLAG_ATTR_IS_CRITICAL"
    ],
    "issinglevalued": [
      "FALSE"
    ],
    "attributesyntax": [
      "2.5.5.12"
    ],
    "ldapdisplayname": [
      "msDS-AllowedToDelegateTo"
    ],
    "attributesecurityguid": [
      "e48d0154-bcf8-11d1-8702-00c04fb96050"
    ]
  },
  "version_and_implementation_notes": [
    "Version-Specific Behavior: First implemented on Windows Server 2003.",
    "The schemaFlagsEx attribute was added to this attribute definition in Windows Server 2008."
  ]
}

Registration

Registration authorities

Current Registration Authority (inferred from ancestor 1.2.840.113556)

Koos Rommelse

Siblings (1492)

OIDNameDirect childrenDescendantsDescription
1.2.840.113556.1.4.1709 ms-DS-Has-Instantiated-NCs, msDS-HasInstantiatedNCs00
1.2.840.113556.1.4.1710 ms-DS-Allowed-DNS-Suffixes, msDS-AllowedDNSSuffixes00
1.2.840.113556.1.4.1711 ms-DS-SD-Reference-Domain, msDS-SDReferenceDomain00
1.2.840.113556.1.4.1712 ms-PKI-OID-LocalizedName, msPKI-OIDLocalizedName00
1.2.840.113556.1.4.1713 MSMQ-Secured-Source, MSMQ-SecuredSource00
1.2.840.113556.1.4.1714 MSMQ-Multicast-Address, MSMQ-MulticastAddress00
1.2.840.113556.1.4.1715 ms-DS-SPN-Suffixes, msDS-SPNSuffixes00
1.2.840.113556.1.4.1716 ms-DS-IntId, msDS-IntId00
1.2.840.113556.1.4.1717 msDS-AdditionalDnsHostName, ms-DS-Additional-Dns-Host-Name00
1.2.840.113556.1.4.1718 msDS-AdditionalSamAccountName, ms-DS-Additional-Sam-Account-Name00
1.2.840.113556.1.4.1719 ms-DS-DnsRootAlias, msDS-DnsRootAlias00
1.2.840.113556.1.4.1720 ms-DS-ReplicationEpoch, msDS-ReplicationEpoch00
1.2.840.113556.1.4.1721 ms-DS-UpdateScript, msDS-UpdateScript00
1.2.840.113556.1.4.1780 Hide-From-AB, hideFromAB00
1.2.840.113556.1.4.1781 178100 Microsoft Lightweight Directory Access Protocol (LDAP) fast bind extended request
1.2.840.113556.1.4.1782 msDS-KeyVersionNumber, ms-DS-KeyVersionNumber00
1.2.840.113556.1.4.1783 msDS-ExecuteScriptPassword, ms-DS-ExecuteScriptPassword00
1.2.840.113556.1.4.1784 ms-DS-Logon-Time-Sync-Interval, msDS-LogonTimeSyncInterval00
1.2.840.113556.1.4.1785 msIIS-FTPRoot, ms-IIS-FTP-Root00
1.2.840.113556.1.4.1786 msIIS-FTPDir, ms-IIS-FTP-Dir00
1.2.840.113556.1.4.1788 MS-DS-Per-User-Trust-Quota, msDS-PerUserTrustQuota00
1.2.840.113556.1.4.1789 MS-DS-All-Users-Trust-Quota, msDS-AllUsersTrustQuota00
1.2.840.113556.1.4.1790 MS-DS-Per-User-Trust-Tombstones-Quota, msDS-PerUserTrustTombstonesQuota00
1.2.840.113556.1.4.1791 179100 LDAP_CAP_ACTIVE_DIRECTORY_LDAP_INTEG_OID (indicates that the Lightweight Directory Access Protocol (LDAP) server is capable of …
1.2.840.113556.1.4.1792 msDS-AzLDAPQuery, ms-DS-Az-LDAP-Query00
1.2.840.113556.1.4.1793 msDS-NonMembers, ms-DS-Non-Members00
1.2.840.113556.1.4.1794 msDS-NonMembersBL, ms-DS-Non-Members-BL00
1.2.840.113556.1.4.1795 ms-DS-Az-Domain-Timeout, msDS-AzDomainTimeout00
1.2.840.113556.1.4.1796 ms-DS-Az-Script-Engine-Cache-Max, msDS-AzScriptEngineCacheMax00
1.2.840.113556.1.4.1797 ms-DS-Az-Script-Timeout, msDS-AzScriptTimeout00
1.2.840.113556.1.4.1798 ms-DS-Az-Application-Name, msDS-AzApplicationName00
1.2.840.113556.1.4.1799 ms-DS-Az-Scope-Name, msDS-AzScopeName00
1.2.840.113556.1.4.1800 ms-DS-Az-Operation-ID, msDS-AzOperationID00
1.2.840.113556.1.4.1801 msDS-AzBizRule, ms-DS-Az-Biz-Rule00
1.2.840.113556.1.4.1802 msDS-AzBizRuleLanguage, ms-DS-Az-Biz-Rule-Language00
1.2.840.113556.1.4.1803 msDS-AzLastImportedBizRulePath, ms-DS-Az-Last-Imported-Biz-Rule-Path00
1.2.840.113556.1.4.1805 ms-DS-Az-Generate-Audits, msDS-AzGenerateAudits00
1.2.840.113556.1.4.1806 msDS-MembersForAzRole, ms-DS-Members-For-Az-Role00
1.2.840.113556.1.4.1807 msDS-MembersForAzRoleBL, ms-DS-Members-For-Az-Role-BL00
1.2.840.113556.1.4.1808 msDS-OperationsForAzTask, ms-DS-Operations-For-Az-Task00
1.2.840.113556.1.4.1809 msDS-OperationsForAzTaskBL, ms-DS-Operations-For-Az-Task-BL00
1.2.840.113556.1.4.1810 msDS-TasksForAzTask, ms-DS-Tasks-For-Az-Task00
1.2.840.113556.1.4.1811 msDS-TasksForAzTaskBL, ms-DS-Tasks-For-Az-Task-BL00
1.2.840.113556.1.4.1812 msDS-OperationsForAzRole, ms-DS-Operations-For-Az-Role00
1.2.840.113556.1.4.1813 msDS-OperationsForAzRoleBL, ms-DS-Operations-For-Az-Role-BL00
1.2.840.113556.1.4.1814 msDS-TasksForAzRole, ms-DS-Tasks-For-Az-Role00
1.2.840.113556.1.4.1815 msDS-TasksForAzRoleBL, ms-DS-Tasks-For-Az-Role-BL00
1.2.840.113556.1.4.1816 ms-DS-Az-Class-ID, msDS-AzClassId00
1.2.840.113556.1.4.1817 ms-DS-Az-Application-Version, msDS-AzApplicationVersion00
1.2.840.113556.1.4.1818 ms-DS-Az-Task-Is-Role-Definition, msDS-AzTaskIsRoleDefinition00