ms-DS-Group-Managed-Service-Account

{
  "ldap_properties": {
    "dn": [
      "CN=ms-DS-Group-Managed-Service-Account,CN=Schema,CN=Configuration,DC=X"
    ],
    "rdnattid": [
      "2.5.4.3"
    ],
    "governsid": [
      "1.2.840.113556.1.5.282"
    ],
    "changetype": [
      "ntdsSchemaAdd"
    ],
    "subclassof": [
      "1.2.840.113556.1.3.30"
    ],
    "systemonly": [
      "FALSE"
    ],
    "objectclass": [
      "classSchema"
    ],
    "systemflags": [
      "16"
    ],
    "schemaidguid": [
      "7b8b558a-93a5-4af7-adca-c017e67f1057"
    ],
    "ldapdisplayname": [
      "msDS-GroupManagedServiceAccount"
    ],
    "admindescription": [
      "The group managed service account class is used to create an account which can be shared by different computers to run Windows services."
    ],
    "admindisplayname": [
      "msDS-Group-Managed-Service-Account"
    ],
    "systemmaycontain": [
      "1.2.840.113556.1.4.2200",
      "1.2.840.113556.1.4.2198",
      "1.2.840.113556.1.4.2197",
      "1.2.840.113556.1.4.2196"
    ],
    "systemmustcontain": [
      "1.2.840.113556.1.4.2199"
    ],
    "defaulthidingvalue": [
      "FALSE"
    ],
    "objectclasscategory": [
      "1"
    ],
    "systemposssuperiors": [
      "1.2.840.113556.1.3.30",
      "1.2.840.113556.1.3.23",
      "2.5.6.5",
      "1.2.840.113556.1.5.67"
    ],
    "defaultobjectcategory": [
      "CN=ms-DS-Group-Managed-Service-Account,CN=Schema,CN=Configuration,DC=X"
    ],
    "showinadvancedviewonly": [
      "TRUE"
    ],
    "defaultsecuritydescriptor": [
      "D:(OD;;CR;00299570-246d-11d0-a768-00aa006e0529;;WD)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;AO)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPCRLCLORCSDDT;;;CO)(OA;;WP;4c164200-20c0-11d0-a768-00aa006e0529;;CO)(OA;;SW;72e39547-7b18-11d1-adef-00c04fd8d5cd;;CO)(OA;;SW;f3a64788-5306-11d1-a9c5-0000f80367c1;;CO)(OA;;WP;3e0abfd0-126a-11d0-a060-00aa006c33ed;bf967a86-0de6-11d0-a285-00aa003049e2;CO)(OA;;WP;5f202010-79a5-11d0-9020-00c04fc2d4cf;bf967a86-0de6-11d0-a285-00aa003049e2;CO)(OA;;WP;bf967950-0de6-11d0-a285-00aa003049e2;bf967a86-0de6-11d0-a285-00aa003049e2;CO)(OA;;WP;bf967953-0de6-11d0-a285-00aa003049e2;bf967a86-0de6-11d0-a285-00aa003049e2;CO)(OA;;SW;f3a64788-5306-11d1-a9c5-0000f80367c1;;PS)(OA;;RPWP;77B5B886-944A-11d1-AEBD-0000F80367C1;;PS)(OA;;SW;72e39547-7b18-11d1-adef-00c04fd8d5cd;;PS)(A;;RPLCLORC;;;AU)(OA;;RPWP;bf967a7f-0de6-11d0-a285-00aa003049e2;;CA)(OA;;RP;46a9b11d-60ae-405a-b7e8-ff8a58d456d2;;S-1-5-32-560)(OA;;RP;e362ed86-b728-0842-b27d-2dea7a9df218;;WD)"
    ]
  }
}

{
  "ldap_properties": {
    "cn": [
      "ms-DS-Group-Managed-Service-Account"
    ],
    "rdnattid": [
      "cn"
    ],
    "governsid": [
      "1.2.840.113556.1.5.282"
    ],
    "subclassof": [
      "computer"
    ],
    "systemonly": [
      "FALSE"
    ],
    "systemflags": [
      "FLAG_SCHEMA_BASE_OBJECT"
    ],
    "schemaidguid": [
      "7b8b558a-93a5-4af7-adca-c017e67f1057"
    ],
    "ldapdisplayname": [
      "msDS-GroupManagedServiceAccount"
    ],
    "systemmaycontain": [
      "msDS-GroupMSAMembership, msDS-ManagedPasswordPreviousId, msDS-ManagedPasswordId, msDS-ManagedPassword"
    ],
    "systemmustcontain": [
      "msDS-ManagedPasswordInterval"
    ],
    "defaulthidingvalue": [
      "FALSE"
    ],
    "objectclasscategory": [
      "1"
    ],
    "systemposssuperiors": [
      "container, organizationalUnit, domainDNS"
    ],
    "defaultobjectcategory": [
      "CN=ms-DS-Group-Managed-Service-Account,<SchemaNCDN>"
    ],
    "defaultsecuritydescriptor": [
      "D: (OD;;CR;00299570-246d-11d0-a768-00aa006e0529;;WD) (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;AO) (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPCRLCLORCSDDT;;;CO) (OA;;WP;4c164200-20c0-11d0-a768-00aa006e0529;;CO) (OA;;SW;72e39547-7b18-11d1-adef-00c04fd8d5cd;;CO) (OA;;SW;f3a64788-5306-11d1-a9c5-0000f80367c1;;CO) (OA;;WP;3e0abfd0-126a-11d0-a060-00aa006c33ed;bf967a86-0de6-11d0-a285- 00aa003049e2;CO)(OA;;WP;5f202010-79a5-11d0-9020-00c04fc2d4cf;bf967a86- 0de6-11d0-a285-00aa003049e2;CO)(OA;;WP;bf967950-0de6-11d0-a285- 00aa003049e2;bf967a86-0de6-11d0-a285-00aa003049e2;CO)(OA;;WP;bf967953- 0de6-11d0-a285-00aa003049e2;bf967a86-0de6-11d0-a285-00aa003049e2;CO) (OA;;SW;f3a64788-5306-11d1-a9c5-0000f80367c1;;PS) (OA;;RPWP;77B5B886-944A-11d1-AEBD-0000F80367C1;;PS) (OA;;SW;72e39547-7b18-11d1-adef-00c04fd8d5cd;;PS)(A;;RPLCLORC;;;AU) (OA;;RPWP;bf967a7f-0de6-11d0-a285-00aa003049e2;;CA) (OA;;RP;46a9b11d-60ae-405a-b7e8-ff8a58d456d2;;S-1-5-32-560) (OA;;RP;e362ed86-b728-0842-b27d-2dea7a9df218;;WD)"
    ]
  },
  "version_and_implementation_notes": [
    "Version-Specific Behavior: First implemented on Windows Server 2012."
  ]
}