OID reference

ms-DS-Delegated-Managed-Service-Account

1.2.840.113556.1.5.302

Description

The delegated managed service account class is used to create an account which can supersede a legacy service account and shared by different computers.

Full description and source information

Identification

Identifier and names

Parent
1.2.840.113556.1.5 (5)
Node code
302
Node names
  • ms-DS-Delegated-Managed-Service-Account
  • msDS-DelegatedManagedServiceAccount
Numeric OID
1.2.840.113556.1.5.302
URN notation
urn:oid:1.2.840.113556.1.5.302
ASN.1, OID-IRI and named path variants
ASN.1 notation

{1 2 840 113556 1 5 302}

  • {iso(1) member-body(2) us(840) microsoft(113556) 1 5 ms-DS-Delegated-Managed-Service-Account(302)}
  • {iso(1) member-body(2) us(840) microsoft(113556) 1 5 msDS-DelegatedManagedServiceAccount(302)}
  • {iso(1) member-body(2) us-iso(840) microsoft(113556) 1 5 ms-DS-Delegated-Managed-Service-Account(302)}
  • {iso(1) member-body(2) us-iso(840) microsoft(113556) 1 5 msDS-DelegatedManagedServiceAccount(302)}
  • {iso(1) memberBody(2) us(840) microsoft(113556) 1 5 ms-DS-Delegated-Managed-Service-Account(302)}
  • {iso(1) memberBody(2) us(840) microsoft(113556) 1 5 msDS-DelegatedManagedServiceAccount(302)}
  • {iso(1) memberBody(2) us-iso(840) microsoft(113556) 1 5 ms-DS-Delegated-Managed-Service-Account(302)}
  • {iso(1) memberBody(2) us-iso(840) microsoft(113556) 1 5 msDS-DelegatedManagedServiceAccount(302)}
OID-IRI notation
  • /1/2/840/113556/1/5/302
  • /ISO/Member-Body/US/113556/1/5/302
  • /ISO/Member-Body/840/113556/1/5/302
  • /ISO/2/840/113556/1/5/302
Named path variants
  • /iso/member-body/us/microsoft/1/5/ms-DS-Delegated-Managed-Service-Account
  • /iso/member-body/us/microsoft/1/5/msDS-DelegatedManagedServiceAccount
  • /iso/member-body/us-iso/microsoft/1/5/ms-DS-Delegated-Managed-Service-Account
  • /iso/member-body/us-iso/microsoft/1/5/msDS-DelegatedManagedServiceAccount
  • /iso/memberBody/us/microsoft/1/5/ms-DS-Delegated-Managed-Service-Account
  • /iso/memberBody/us/microsoft/1/5/msDS-DelegatedManagedServiceAccount
  • /iso/memberBody/us-iso/microsoft/1/5/ms-DS-Delegated-Managed-Service-Account
  • /iso/memberBody/us-iso/microsoft/1/5/msDS-DelegatedManagedServiceAccount

Meaning

Descriptions

2 unique

Identical descriptions are grouped. Different wording and device-specific notes are retained.

Description 1

The delegated managed service account class is used to create an account which can supersede a legacy service account and shared by different computers.

Sources for this description

Microsoft Active Directory schema

See 1 matching source record

Description 2

The delegated managed service account class is used to create an account which can supersede a legacy service account and can be shared by different computers.

Sources for this description

Microsoft Active Directory schema

See 1 matching source record

Evidence

Source records

2 records

Matching descriptions are grouped; open a group to compare definitions and supporting files.

Records for description 1Microsoft Active Directory schema1 record · 1 source

Description 1

msDS-DelegatedManagedServiceAccount · unspecifiedMicrosoft Active Directory schema1 source

Status in source: unspecified.

Names: msDS-DelegatedManagedServiceAccount

Technical details
{
  "ldap_properties": {
    "dn": [
      "CN=ms-DS-Delegated-Managed-Service-Account,CN=Schema,CN=Configuration,DC=X"
    ],
    "rdnattid": [
      "cn"
    ],
    "governsid": [
      "1.2.840.113556.1.5.302"
    ],
    "changetype": [
      "ntdsSchemaAdd"
    ],
    "subclassof": [
      "1.2.840.113556.1.3.30"
    ],
    "systemonly": [
      "FALSE"
    ],
    "objectclass": [
      "classSchema"
    ],
    "systemflags": [
      "16"
    ],
    "schemaidguid": [
      "0feb936f-47b3-49f2-9386-1dedc2c23765"
    ],
    "ldapdisplayname": [
      "msDS-DelegatedManagedServiceAccount"
    ],
    "admindescription": [
      "The delegated managed service account class is used to create an account which can supersede a legacy service account and shared by different computers."
    ],
    "admindisplayname": [
      "ms-DS-Delegated-Managed-Service-Account"
    ],
    "systemmaycontain": [
      "1.2.840.113556.1.4.2375",
      "1.2.840.113556.1.4.2200",
      "1.2.840.113556.1.4.2198",
      "1.2.840.113556.1.4.2197",
      "1.2.840.113556.1.4.2196"
    ],
    "systemmustcontain": [
      "1.2.840.113556.1.4.2372",
      "1.2.840.113556.1.4.2199"
    ],
    "defaulthidingvalue": [
      "FALSE"
    ],
    "objectclasscategory": [
      "1"
    ],
    "systemposssuperiors": [
      "1.2.840.113556.1.3.23",
      "2.5.6.5"
    ],
    "defaultobjectcategory": [
      "CN=ms-DS-Delegated-Managed-Service-Account,CN=Schema,CN=Configuration,DC=X"
    ],
    "showinadvancedviewonly": [
      "TRUE"
    ],
    "defaultsecuritydescriptor": [
      "D:(OD;;CR;00299570-246d-11d0-a768-00aa006e0529;;WD)(OD;;RP;e362ed86-b728-0842-b27d-2dea7a9df218;;WD)(OA;;WP;5f202010-79a5-11d0-9020-00c04fc2d4cf;bf967a86-0de6-11d0-a285-00aa003049e2;CO)(OA;;WP;bf967950-0de6-11d0-a285-00aa003049e2;bf967a86-0de6-11d0-a285-00aa003049e2;CO)(OA;;WP;bf967953-0de6-11d0-a285-00aa003049e2;bf967a86-0de6-11d0-a285-00aa003049e2;CO)(OA;;WP;3e0abfd0-126a-11d0-a060-00aa006c33ed;bf967a86-0de6-11d0-a285-00aa003049e2;CO)(OA;;RP;46a9b11d-60ae-405a-b7e8-ff8a58d456d2;;S-1-5-32-560)(OA;;SW;72e39547-7b18-11d1-adef-00c04fd8d5cd;;CO)(OA;;SW;72e39547-7b18-11d1-adef-00c04fd8d5cd;;PS)(OA;;SW;f3a64788-5306-11d1-a9c5-0000f80367c1;;CO)(OA;;SW;f3a64788-5306-11d1-a9c5-0000f80367c1;;PS)(OA;;WP;4c164200-20c0-11d0-a768-00aa006e0529;;CO)(OA;;RPWP;77b5b886-944a-11d1-aebd-0000f80367c1;;PS)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;DA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;AO)(A;;LCRPDTLOCRSDRC;;;CO)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)"
    ]
  }
}
Records for description 2Microsoft Active Directory schema1 record · 1 source

Description 2

ms-DS-Delegated-Managed-Service-Account, msDS-DelegatedManagedServiceAccount · unspecifiedMicrosoft Active Directory schema1 source

Status in source: unspecified.

Names: ms-DS-Delegated-Managed-Service-Account, msDS-DelegatedManagedServiceAccount

Technical details
{
  "ldap_properties": {
    "cn": [
      "ms-DS-Delegated-Managed-Service-Account"
    ],
    "rdnattid": [
      "cn"
    ],
    "governsid": [
      "1.2.840.113556.1.5.302"
    ],
    "subclassof": [
      "computer"
    ],
    "systemonly": [
      "FALSE"
    ],
    "systemflags": [
      "FLAG_SCHEMA_BASE_OBJECT"
    ],
    "schemaidguid": [
      "0feb936f-47b3-49f2-9386-1dedc2c23765"
    ],
    "ldapdisplayname": [
      "msDS-DelegatedManagedServiceAccount"
    ],
    "systemmaycontain": [
      "msDS-GroupMSAMembership, msDS-ManagedPasswordPreviousId, msDS-ManagedPasswordId, msDS-ManagedPassword, msDS-ManagedAccountPrecededByLink;"
    ],
    "systemmustcontain": [
      "msDS-ManagedPasswordInterval, msDS-DelegatedMSAState"
    ],
    "defaulthidingvalue": [
      "FALSE"
    ],
    "objectclasscategory": [
      "1"
    ],
    "systemposssuperiors": [
      "container, organizationalUnit"
    ],
    "defaultobjectcategory": [
      "CN=ms-DS-Delegated-Managed-Service-Account,<SchemaNCDN>"
    ],
    "defaultsecuritydescriptor": [
      "D:(OD;;CR;00299570-246d-11d0-a768-00aa006e0529;;WD)(OD;;RP;e362ed86-b728-0842-b27d-2dea7a9df218;;WD)(OA;;WP;5f202010-79a5-11d0-9020-00c04fc2d4cf;bf967a86-0de6-11d0-a285-00aa003049e2;CO)(OA;;WP;bf967950-0de6-11d0-a285-00aa003049e2;bf967a86-0de6-11d0-a285-00aa003049e2;CO)(OA;;WP;bf967953-0de6-11d0-a285-00aa003049e2;bf967a86-0de6-11d0-a285-00aa003049e2;CO)(OA;;WP;3e0abfd0-126a-11d0-a060-00aa006c33ed;bf967a86-0de6-11d0-a285-00aa003049e2;CO)(OA;;RP;46a9b11d-60ae-405a-b7e8-ff8a58d456d2;;S-1-5-32-560)(OA;;SW;72e39547-7b18-11d1-adef-00c04fd8d5cd;;CO)(OA;;SW;72e39547-7b18-11d1-adef-00c04fd8d5cd;;PS)(OA;;SW;f3a64788-5306-11d1-a9c5-0000f80367c1;;CO)(OA;;SW;f3a64788-5306-11d1-a9c5-0000f80367c1;;PS)(OA;;WP;4c164200-20c0-11d0-a768-00aa006e0529;;CO)(OA;;RPWP;77b5b886-944a-11d1-aebd-0000f80367c1;;PS)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;DA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;AO)(A;;LCRPDTLOCRSDRC;;;CO)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)"
    ]
  },
  "version_and_implementation_notes": [
    "Version-Specific Behavior: First implemented on Windows Server 2025 operating system."
  ]
}

Registration

Registration authorities

Current Registration Authority (inferred from ancestor 1.2.840.113556)

Koos Rommelse

Siblings (204)

OIDNameDirect childrenDescendantsDescription
1.2.840.113556.1.5.299 ms-DS-Shadow-Principal, msDS-ShadowPrincipal00
1.2.840.113556.1.5.300 Dns-Zone-Scope-Container, dnsZoneScopeContainer00
1.2.840.113556.1.5.301 Dns-Zone-Scope, dnsZoneScope00
1.2.840.113556.1.5.7000 700055