OID reference

ms-DS-Shadow-Principal-Sid

1.2.840.113556.1.4.2324

Description

This attribute contains the SID of a principal from an external forest.

Full description and source information

Identification

Identifier and names

Parent

1.2.840.113556.1.4 (4)

Node code

2324

Node names

ms-DS-Shadow-Principal-Sid
msDS-ShadowPrincipalSid

Numeric OID

1.2.840.113556.1.4.2324

URN notation

urn:oid:1.2.840.113556.1.4.2324

ASN.1, OID-IRI and named path variants

ASN.1 notation

{1 2 840 113556 1 4 2324}

{iso(1) member-body(2) us(840) microsoft(113556) 1 4 ms-DS-Shadow-Principal-Sid(2324)}
{iso(1) member-body(2) us(840) microsoft(113556) 1 4 msDS-ShadowPrincipalSid(2324)}
{iso(1) member-body(2) us-iso(840) microsoft(113556) 1 4 ms-DS-Shadow-Principal-Sid(2324)}
{iso(1) member-body(2) us-iso(840) microsoft(113556) 1 4 msDS-ShadowPrincipalSid(2324)}
{iso(1) memberBody(2) us(840) microsoft(113556) 1 4 ms-DS-Shadow-Principal-Sid(2324)}
{iso(1) memberBody(2) us(840) microsoft(113556) 1 4 msDS-ShadowPrincipalSid(2324)}
{iso(1) memberBody(2) us-iso(840) microsoft(113556) 1 4 ms-DS-Shadow-Principal-Sid(2324)}
{iso(1) memberBody(2) us-iso(840) microsoft(113556) 1 4 msDS-ShadowPrincipalSid(2324)}

OID-IRI notation

/1/2/840/113556/1/4/2324
/ISO/Member-Body/US/113556/1/4/2324
/ISO/Member-Body/840/113556/1/4/2324
/ISO/2/840/113556/1/4/2324

Named path variants

/iso/member-body/us/microsoft/1/4/ms-DS-Shadow-Principal-Sid
/iso/member-body/us/microsoft/1/4/msDS-ShadowPrincipalSid
/iso/member-body/us-iso/microsoft/1/4/ms-DS-Shadow-Principal-Sid
/iso/member-body/us-iso/microsoft/1/4/msDS-ShadowPrincipalSid
/iso/memberBody/us/microsoft/1/4/ms-DS-Shadow-Principal-Sid
/iso/memberBody/us/microsoft/1/4/msDS-ShadowPrincipalSid
/iso/memberBody/us-iso/microsoft/1/4/ms-DS-Shadow-Principal-Sid
/iso/memberBody/us-iso/microsoft/1/4/msDS-ShadowPrincipalSid

Meaning

Descriptions

2 unique

Identical descriptions are grouped. Different wording and device-specific notes are retained.

Description 1

This attribute contains the SID of a principal from an external forest.

Sources for this description

Microsoft Active Directory schema

See 1 matching source record

Description 2

Contains the SID of a principal from an external forest.

Sources for this description

Microsoft Active Directory schema

See 1 matching source record

Evidence

Source records

2 records

Matching descriptions are grouped; open a group to compare definitions and supporting files.

Records for description 1Microsoft Active Directory schema1 record · 1 source

Description 1

ms-DS-Shadow-Principal-Sid, msDS-ShadowPrincipalSid · unspecifiedMicrosoft Active Directory schema1 source

Status in source: unspecified.

Names: ms-DS-Shadow-Principal-Sid, msDS-ShadowPrincipalSid

Technical details

{
  "ldap_properties": {
    "cn": [
      "ms-DS-Shadow-Principal-Sid"
    ],
    "omsyntax": [
      "4"
    ],
    "systemonly": [
      "FALSE"
    ],
    "attributeid": [
      "1.2.840.113556.1.4.2324"
    ],
    "searchflags": [
      "fATTINDEX"
    ],
    "systemflags": [
      "FLAG_SCHEMA_BASE_OBJECT"
    ],
    "schemaidguid": [
      "1dcc0722-aab0-4fef-956f-276fe19de107"
    ],
    "issinglevalued": [
      "TRUE"
    ],
    "attributesyntax": [
      "2.5.5.17"
    ],
    "ldapdisplayname": [
      "msDS-ShadowPrincipalSid"
    ],
    "showinadvancedviewonly": [
      "TRUE"
    ]
  },
  "version_and_implementation_notes": [
    "Version-Specific Behavior: First implemented on Windows Server 2016."
  ]
}

Microsoft Active Directory schema · Publisher's source file: Microsoft Active Directory — [MS-ADA2]-240423.docx (DOCX) · Download Microsoft Active Directory — [MS-ADA2]-240423.docx (DOCX)

Records for description 2Microsoft Active Directory schema1 record · 1 source

Description 2

msDS-ShadowPrincipalSid · unspecifiedMicrosoft Active Directory schema1 source

Status in source: unspecified.

Names: msDS-ShadowPrincipalSid

Technical details

{
  "ldap_properties": {
    "dn": [
      "CN=ms-DS-Shadow-Principal-Sid,CN=Schema,CN=Configuration,DC=X"
    ],
    "omsyntax": [
      "4"
    ],
    "changetype": [
      "ntdsSchemaAdd"
    ],
    "systemonly": [
      "FALSE"
    ],
    "attributeid": [
      "1.2.840.113556.1.4.2324"
    ],
    "objectclass": [
      "attributeSchema"
    ],
    "searchflags": [
      "1"
    ],
    "systemflags": [
      "16"
    ],
    "instancetype": [
      "4"
    ],
    "schemaidguid": [
      "1dcc0722-aab0-4fef-956f-276fe19de107"
    ],
    "issinglevalued": [
      "TRUE"
    ],
    "attributesyntax": [
      "2.5.5.17"
    ],
    "ldapdisplayname": [
      "msDS-ShadowPrincipalSid"
    ],
    "admindescription": [
      "Contains the SID of a principal from an external forest."
    ],
    "admindisplayname": [
      "ms-DS-Shadow-Principal-Sid"
    ],
    "showinadvancedviewonly": [
      "TRUE"
    ]
  }
}

Microsoft Active Directory schema · Download Microsoft Active Directory — schema updates (HTML)

Registration

Registration authorities

Current Registration Authority (inferred from ancestor 1.2.840.113556)

Koos Rommelse

Siblings (1492)

OID	Name	Description
1.2.840.113556.1.4.2291	ms-DS-Computer-AuthN-Policy, msDS-ComputerAuthNPolicy
1.2.840.113556.1.4.2292	ms-DS-Computer-AuthN-Policy-BL, msDS-ComputerAuthNPolicyBL
1.2.840.113556.1.4.2293	ms-DS-Service-AuthN-Policy, msDS-ServiceAuthNPolicy
1.2.840.113556.1.4.2294	ms-DS-Service-AuthN-Policy-BL, msDS-ServiceAuthNPolicyBL
1.2.840.113556.1.4.2295	msDS-AssignedAuthNPolicy, ms-DS-Assigned-AuthN-Policy
1.2.840.113556.1.4.2296	ms-DS-Assigned-AuthN-Policy-BL, msDS-AssignedAuthNPolicyBL
1.2.840.113556.1.4.2297	ms-DS-AuthN-Policy-Enforced, msDS-AuthNPolicyEnforced
1.2.840.113556.1.4.2298	ms-DS-AuthN-Policy-Silo-Enforced, msDS-AuthNPolicySiloEnforced
1.2.840.113556.1.4.2308	ms-DS-Device-MDMStatus, msDS-DeviceMDMStatus
1.2.840.113556.1.4.2309	2309	LDAP_SERVER_LINK_TTL_OID
1.2.840.113556.1.4.2310	ms-DS-External-Directory-Object-Id, msDS-ExternalDirectoryObjectId
1.2.840.113556.1.4.2314	ms-DS-Is-Compliant, msDS-IsCompliant
1.2.840.113556.1.4.2315	ms-DS-Key-Id, msDS-KeyId
1.2.840.113556.1.4.2316	ms-DS-Key-Material, msDS-KeyMaterial
1.2.840.113556.1.4.2317	ms-DS-Key-Usage, msDS-KeyUsage
1.2.840.113556.1.4.2318	ms-DS-Key-Principal, msDS-KeyPrincipal
1.2.840.113556.1.4.2319	ms-DS-Key-Principal-BL, msDS-KeyPrincipalBL
1.2.840.113556.1.4.2320	ms-DS-Device-DN, msDS-DeviceDN
1.2.840.113556.1.4.2321	ms-DS-Computer-SID, msDS-ComputerSID
1.2.840.113556.1.4.2322	ms-DS-Custom-Key-Information, msDS-CustomKeyInformation
1.2.840.113556.1.4.2323	ms-DS-Key-Approximate-Last-Logon-Time-Stamp, msDS-KeyApproximateLastLogonTimeStamp
1.2.840.113556.1.4.2325	ms-DS-Device-Trust-Type, msDS-DeviceTrustType
1.2.840.113556.1.4.2328	msDS-KeyCredentialLink
1.2.840.113556.1.4.2329	msDS-KeyCredentialLink-BL
1.2.840.113556.1.4.2344	ms-DS-Expire-Passwords-On-Smart-Card-Only-Accounts, msDS-ExpirePasswordsOnSmartCardOnlyAccounts
1.2.840.113556.1.4.2345	ms-DS-Token-Group-Names, msds-tokenGroupNames
1.2.840.113556.1.4.2346	ms-DS-Token-Group-Names-Global-And-Universal, msds-tokenGroupNamesGlobalAndUniversal
1.2.840.113556.1.4.2347	ms-DS-Token-Group-Names-No-GC-Acceptable, msds-tokenGroupNamesNoGCAcceptable
1.2.840.113556.1.4.2348	ms-DS-User-Allowed-NTLM-Network-Authentication, msDS-UserAllowedNTLMNetworkAuthentication
1.2.840.113556.1.4.2349	ms-DS-Service-Allowed-NTLM-Network-Authentication, msDS-ServiceAllowedNTLMNetworkAuthentication
1.2.840.113556.1.4.2350	ms-DS-Strong-NTLM-Policy, msDS-StrongNTLMPolicy
1.2.840.113556.1.4.2352	ms-DS-Source-Anchor, msDS-SourceAnchor
1.2.840.113556.1.4.2353	ms-DS-Object-SOA, msDS-ObjectSoa
1.2.840.113556.1.4.2366	ms-DS-Preferred-Data-Location, msDS-preferredDataLocation
1.2.840.113556.1.4.2371	msDS-SupersededServiceAccountState
1.2.840.113556.1.4.2372	ms-DS-Delegated-MSA-State, msDS-DelegatedMSAState
1.2.840.113556.1.4.2373	ms-DS-Superseded-Managed-Account-Link, msDS-SupersededManagedAccountLink
1.2.840.113556.1.4.2374	ms-DS-Superseded-Managed-Account-LinkBL, msDS-SupersededManagedAccountLinkBL
1.2.840.113556.1.4.2375	ms-DS-Managed-Account-Preceded-By-Link, msDS-ManagedAccountPrecededByLink
1.2.840.113556.1.4.2376	ms-DS-Managed-Account-Preceded-By-LinkBL, msDS-ManagedAccountPrecededByLinkBL
1.2.840.113556.1.4.2377	ms-DS-JetGetRecordSize3, msDS-JetGetRecordSize3
1.2.840.113556.1.4.2378	ms-DS-JetDB-Page-Size, msDS-JetDBPageSize