ПРИЛОЖЕНИЕ А

Атрибуты и классы
схемы Active Directory

Атрибуты

Account-Expires Assign-Primary-Token-Privilege
Account-Logon-Audit Assistant-Name
Account-Management-Audit Assoc-NT-Account
Activation-Schedule Attribute-ID
Activation-Style Attribute-Security-GUID
Additional-Information Attribute-Syntax
Address Audit-Privilege
Address-Entry-Display-Table Auditing-Policy
Address-Entry-Display-Table-MSDOS Auth-Orig
Address-Syntax Auth-Orig-BL
Address-Type Authentication-Options
ADMD AutoReply
Admin-Context-Menu AutoRcply-Message
Admin-Count AutoReply-Subject
Admin-Description Auxiliary-Class
Admin-Display-Name Backup-Privilege
Admin-Property-Pages Bad-Password-Time
Alias-Count Bad-Pwd-Count
Allow-Auto-Connections Batch-Access
Alt-Recipient Birth-Location
Alt-Recipient-BL Builtin-Account-Operators-Group
Alternate-Security-Identities Builtin-Administrators-Group
App-Flags Builtin-Backup-Group
Application-Name Builtin-Creation-Time
Applies-To Builtin-Guest-Group
Asset-Number Builtin-Modified-Count



Builtin-Print-Operators-Group Cost
Builtin-Replicator-Group Country-Code
Builtin-Server-Operators-Group Country-Name
Builtin-Users-Group Create-Pagefile-Privilege
Business-Category' Create-Permanent-Privilege
Business-Roles Create-Token-Privilege
Bytes-Per-Minute Creation-Time
CA-Certificate Creation-Wizard
CA-Exchange-Certificate Curr-Machine-Id
CA-Exchange-Certificate-Chain Current-Location
CA-Signature-Certificate Current-Value
CA-Signature-Certificate-Chain DBCS-Pwd
Change-Notify-Privilege Debug-Privilege
Change-Pwd-Logon-Required Default-Class-Store
Code-Package Default-File-Extension
Code-Page Default-Group
COM-App-Id Default-Hiding-Value
COM-Auto-Convert-Class-Id Default-Inter-Site-Schedule
COM-ClassID Default-Intra-Site-Schedule
COM-InterfaceID Default-Local-Policy-Object
COM-Other-Prog-Id Default-Priority
COM-Package-Id Default-Security-Descriptor
COM-ProgID Deliv-Cont-Length
COM-PS-CLSID Deliv-EITs
COM-Treat-As-Class-Id Deliv-Ext-Cont-Types
COM-Typelib-Id Deliver-And-Redirect
Com-Uniquc-Cat-Id Delivery-Mechanism
COM-LInique-CLSID Department
COM-Unique-IID Description
COM-Unique-LIBID Desktop-Profile
COM-Unique-Package-Id Destination-Indicator
Comment Detailed-Tracking-Audit
Common-Name Diagnostic-reg-key
Company Directory-Service-Access-Audit
Computer-Name Display-Name
Consistency-DLL Display-Name-Override
Consistency-GUID Display-Name-Printable
Contact-Name Display-Specification
Container-Administrators Division
Container-Info DL-Mem-Reject-Perms
Content-Indexing-Allowed DL-Mem-Reject-Perms-BL
Context-Menu DL-Mem-Submit-Perms
Control-Access-Rights DL-Mem-Submit-Perms-BL



DL-Mcmbcr-Rule Domain-Cross-Ref
DMD-Location Domain-Friendly-Name
Dns-Allow-Dynamic Domain-Name
Dn.s-Allow-XFR Domain-Object-Reference
Dns-Notify-Secondaries Domain-Policy-Object
Dns-Root Domain-Policy-Reference
Dns-RR-Set-Type-1 Domain-Replica
Dns-RR-Set-Type-10 Domain-Replicas
Dns-RR-Set-Type-11 Domain-Wide-Policy
Dns-RR-Set-Type-12 Driver-Name
Dns-RR-Set-Type-13 Driver-Version
Dns-RR-Set-Type-14 Dynamic-LDAP-Server
Dns-RR-Set-Type-15 E-mail-Addresses
Dns-RR-Set-Type-16 EFSPolicy
Dns-RR-Set-Type-17 Employee-ID
Dns-RR-Set-Type-18 Enabled-Connection
Dns-RR-Set-Type-19 Enabled-Protocols
Dns-RR-Set-Type-2 Encrypt-Key-Cert
Dns-RR-Set-Typc-20 Execution-Context
Dns-RR-Set-Type-21 Expiration-Time
Dns-RR-Set-Type-22 Extended-Chars-Allowed
Dns-RR-Set-Type-23 Extension-Attribute-1
Dns-RR-Set-Type-24 Extension-Attribute-10
Dns-RR-Set-Type-25 Extension-Attribute-2
Dns-RR-Set-Type-26 Extension-Attribute-3
Dns-RR-Set-Type-27 Extension-Attribute-4
Dns-RR-Set-Type-28 Extension-Attribute-5
Dns-RR-Set-Type-29 Extension-Attribute-6
Dns-RR-Set-Type-3 Extension-Attribute-7
Dns-RR-Set-Type-30 Extension-Attribute-8
Dns-RR-Set-Type-31 Extension-Attribute-9
Dns-RR-Set-Type-32 Extension-Data
Dns-RR-Set-Type-33 Extension-Name
Dns-RR-Set-Type-4 Extension-Name-Inherited
Dns-RR-Set-Type-5 Facsimile-Telephone-Number
Dns-RR-Set-Type-6 Flags
Dns-RR-Set-Type-65281 Flat-Name
Dns-RR-Set-Type-65282 Folder-Pathname
Dns-RR-Set-Type-7 Force-Logoff
Dns-RR-Set-Type-8 Foreign-DSAs
Dns-RR-Set-Type-9 Foreign-Identifier
Dns-Secure-Secondaries From-Server
Domain-Component From-Site



FSMO-Role-Owner Interactive-Access
Garbage-Coll-Period International-ISDN-Number
Gencrated-Connection Invocation-Id
(iivcn-Name Ipsec-Policy-Rcference
Global-Friendly-Name Is-Deleted
Governs-ID Is-Member-Of-DL
droup-Attributes Is-Single-Valued
Group-Count KCC-Status
Group-Membership-SAM Key-Exchange-Key-Cert
Group-Priority Kc\'\vords
Groups-to-Ignore Language
Ha.s-Full-Replica-NC.s Last-Backup-Restoration-Time
Has-Master-NCs Last-Content-Indexed
Hclp-Datal6 Last-Logoff
Help-Data32 Last-Logon
Help-File-Namc Last-Set-Time
Heuristics Last-Update-Sequence
Hide-DL-Mcmbership LDAP-Display-Name
Hide-From-Address-Book Link-ID
Home-Directory Link-Track-Sccret
Home-Drive Lm-Pwd-History
Home-MDB Load-Driver-Privilege
Home-MDB-BL Local-Bridge-Head
Home-MTA Local-Bridge-Head-Address
Home-Postal-Address Local-Policy-Flags
Icon-Path Local-Policy-Reference
IMO-Builtin-Account-Ops-Group Local-Scope
IMO-Builtin-Admin-Group Locale-ID
IMO-Builtin-Backup-Group Locality-Name
IMO-Builtin-Guest-Group Localized-Name
IMO-Builtin-Print-Ops-Group Location
IMO-Builtin-Replicator-Group Lock-Memory-Privilege
IMO-Builtin-Server-Ops-Group Lock-Out-Observation-Window
IMO-Builtin-Users-Group Lockout-Disconnect
Implemented-Categories Lockout-Duration
Imported-From Lockout-Threshold
Inbound-Sites Log-Rollover-Interval
Increase-Base-Priority-Privilege Logo
Increase-Quota-Privilege Logon-Audit
Initial-Auth-Incoming Logon-Count
Initial-Auth-Outgoing Logon-Hours
Initials Logon-Workstation
Instance-Type LSA-Creation-Time



LSA-Modified-Count Monitoring-Cached-Via-Mail
Machine-Account-Privilege Monitoring-Cached-Via-RPC
Machine-Architecture Monitoring-Mail-Update-Interval
Machine-DNS-Name Monitoring-Mail-Update-Units
Machine-DNS-Name-Form Monitoring-RPC-Update-Interval
Machine-Password-Change-Interval Monitoring-RPC-Update-Units
Machine-Role Must-Contain
Machine-Wide-Policy N-Address
Mail-nickname Name-Prefix
Maintain-AutoReply-History Name-Suffix
Manager NC-Name
MAPI-Display-Type NETBIOS-Name
MAPI-ID Netboot-GUID
MAPI-Recipient Netboot-Initialization
Marshalled-Interface Netboot-Machine-File-Path
Max-Active-Queries Netboot-NIC
Max-Page-Size Network-Access
Max-Pwd-Age Network-Address
Max-Query-Duration Newsgroup
Max-Renew-Age Next-Level-Store
Max-Sizc-All-Rcsult-Scts Next-Rid
Max-Storage NNTP-Character-Set
Max-Temp-Table-Size NNTP-Content-Format
Max-Ticket-Age Non-Security-Member
May-Contain Non-Security-Member-BL
MDB-Over-Quota-Limit Notification-List
MDB-Storage-Quota NT-Group-Members
MDB-Use-Defaults NT-Machine-Name
Member NT-Mixed-Domain
MIME-Types Nt-Pwd-History
Min-Pwd-Age NT-Security-Descriptor
Min-Pwd-Length Obj-Dist-Name
Min-Ticket-Age Object-Access-Audit
Moderated Object-Class
Moderator Object-Class-Category
Modified-Count Object-Count
Modified-Count-At-Last-Prom Object-Guid
Moniker Object-Sid
Moniker-Display-Name OEM-Information
Monitored-Configurations OlD-Type
Monitored-Services OM-Object-Class
Monitoring-Availability-Style OM-Syntax
Monitoring-Availability-Window OMT-Guid



OMT-Indx-Guid Prefix-Map
OOF-Reply-To-Originator Primary-Ciroup-ID
Operating-System Print-Attributes
Operating-System-Hotfix Print-Bin-Names
Opcrating-System-Service-Pack Print-Collate
Operating-System- Version Print-Color
Operator-Count Print-Duplex-Supported
Options Print-End-Time
Organization-Name Print-Form-Name
Organizational-! Init-Name Print-Keep-Printed-Jobs
Original-Display-Table Print-Language
Original-Display-Table-MSDOS Print-MAC-Address
Other-ADS-Paths Print-Max-Copics
Other-Login-Workstations Print-Max-Resolution-Supported
Other-Name Print-Max-X-Extcnt
Outbound-Sites Print-Max-Y-Extent
Owner Print-Media-Ready
Owner-BL Print-Mcdia-Supported
Package-Flags Print-Memory
Package-Name Print-Min-X-Extent
Package-Type Print-Min-Y-Extent
Parent-Cert-Server Print-Network-Address
Per-Msg-Dialog-Display-Table Print-Notify
Per-Recip-Dialog-Display-Table Print-Number-Up
PF-Comacts Print-Orientations-Supported
Physical-Delivery-Office-Name Print-Owner
Physical-Location-Object Print-Rate
Physical-Location-Object-BL Print-Rate-Dnit
Picture Print-Separator-File
PKT Print-Share-Name
PKT-Guid Print-Spooling
Policy-Change-Audit Print-Stapling-Supported
Policy-Name Print-Start-Time
Policy-Options Print-Status
POP-Character-Set Printer-Name
POP-Content-Format Prior-Set-Time
Port-Name Prior-Value
Poss-Superiors Priority
Post-Office-Box Private-Key
Postal-Address Privilige-Usc-Audit
Postal-Code Profile-Path
Preferred-Delivcry-Method Profile-Single-Process-Privilege
Preferred-Oil Property-Pages



Proxied-Object-Namc Rcplication-Scrvicc-Command
Proxy-Access Replication-Stagger
Proxy-Addresses Replication-Staging-Path
Proxy-Gencration-Enabled Replication-Status
Proxy-Lifetime Replication-LJpdate-Timeout
Public-Delegates Report-To-Originator
Public-Delegates-BL Report-To-Owncr
Public-Key-Policy Reports
Pwd-History-Length Reps-From
Pwd-Last-Set Rcps-To
Pwd-Propertics Reps-To-Ext
Quality-Of-Scrvice Required-Categories
Query-Policy-BL Restore-Privilcge
Query-Policy-Object Reverse-Membership
Range-Lower Revision
Range-Upper Rid
RDN RID-Allocation-Pool
RDN-Att-ID RID-Availablc-Pool
Registered-Address RID-Manager-Reference
Rcmote-Bridge-Head RID-Next-RID
Remotc-Bridge-Head-Addrcss RID-Previous-Allocation-Pool
Remote-Servcr-Narne RID-Used-Pool
Remote-Shutdown-Privilege Rights-Guid
Remote-Site rpc-Ns-Annotation
Remote-Source rpc-Ns-Bindings
Remote-Source-Type rpc-Ns-Codeset
Rcpl-Property-Meta-Data rpc-Ns-Group
Repl-UpToDate-Vector rpc-Ns-Interface-ID
Repl-Uuid-Table rpc-Ns-Objcct-ID
Replica-Set-GUID rpc-Ns-Priority
Replica-Set-Server rpc-Ns-Profile-Entry
Replica-Source rpc-Ns-Transfer-Syntax
Replication-Boot-State Run-As
Replication-DB-Path SAM-Account-Name
Replication-Directory-Filter SAM-Account-Type
Replication-DS-Poll SAM-Compatibilityl
Replication-Extensions SAM-Compatibility2
Replication-File-Filter Schedule
Replication-Level-Limit Schema-Flags
Replication-Mail-Msg-Size Schema-Flags-Ex
Replication-Root-Path Schema-ID-GUID
Replication-Root-Security Schema-Update
Replication-Sensitivity Schema-Updatc-Now



Schema-Version System-Flags
Script-Path System-May-Contain
Search-Flags System-Must-Contain
Search-Guide System-Only
Security-Identifier System-Poss-Superiors
Security-Principal-ID System-Profile-Privilege
Security-Privilege Systemtime-Privilege
Security-Protocol Take-Ownership-Privilege
Sce-Also Target-Address
Scci-Notification Tcb-Privilege
Serial-Number Telephone-Assistant
Server-Name Telephone-Fax
Server-Role Telephone-Home
Server-State Telephone-Home2
Service-Access Telephone-Mobile
Scrvice-Admin-CLSID Telephone-Number
Scrvice-Binding-Information Telephone-Office 1
Service-Class-ID Telephone-0ffice2
Service-Class-Info Telephone-Pager
Service-Class-Namc Teletcx-Terminal-Identifier
Scrvice-Instance-Version Telex-Number
Setup-Command Temp-Table-Pcrcentage
Shell-Context-Menu Text-Country
Shell-Property-Pages Time-Refresh
Shutdown-Privilege Time-Vol-Change
SID-History Title
Signature-Key-Cert Tombstone-Lifetime
Site-GUID Tracking-Log-Path-Name
Site-Object Trust-Attributes
Site-Object-BL Trust-Auth-Incoming
Site-Server Trust-Auth-Outgoing
State-Or-Province-Name Trust-Direction
Street-Address Trust-Parent
Sub-Class-Of Trust-Partner
Sub-Refs Trust-Posix-Offset
Sub-Site Trust-Type
Submission-Cont-Length UAS-Compat
Superior-DNS-Root Unauth Crig
Supplemental-Credentials Unauth-Orig-BL
Surname UNC-Name
System-Audit Unicode-Pwd
System-Auxiliary-Class Unsolicited-Input-Privilege
System-Environment-Privilege Use-Server-Values



LJsenct-Site-Name
LJser-Account-Control
User-Cert
LIser-Comment
User-Count
User-Full-Name
User-Parameters
User-Password
User-Workstations
USN-Changed
USN-Created
LISN-DSA-Last-Obj-Removed
USN-Last-Obj-Rem
Valid-Connection
Vendor
Version-Number
Vcrsion-Number-Hi
Version-Number-Lo
Vol-Table-GLJID
Vol-Table-Idx-GUID
Volume-Count
When-Changed
When-Created
Winsock-Addresses
W^WW-Home-Page
X 121 -Address
X500-Access-Control-List
X500-RDN
X509-Cert


Классы

Address-Template
Application-Process
Application-Registration
Attribute-Schema
Builtin-Domain
Category-Registration
Cert-Service-Admin-Point
Class-Registration
Class-Schema
Class-Store
Com-Connection-Point


COM-Interface
Computer
Configuration
Connection
Connection-Point
Contact
Container
Control-Access-Right
Country
Cross-Ref
Device
Dfs-Configuration
Display-Specifier
Display-Template
Distribution-List
DMD
Dns-Node
Dns-Zone
Domain
Domain-Country
Domain-DNS
Domain-Hierarchy
Domain-Locality
Domain-Organization
Domain-Organizational-Unit
Domain-Policy
Domain-Proxy
File-Link-Tracking
File-Link-Tracking-Entry
Foreign-Security-Principal
FT-Dfs
Group
Group-Of-Names
Inter-Site-Connection
Ipsec-policy
Leaf
Licensing-Settings
Link-Track-Object-Move-Table
Link-Track-OMT-Entry
Link-Track-Vol-Entry
Link-Track-Volume-Table
Local-Policy
LocalGroup



Locality rpc-Profile
Mail-Recipient rpc-Profile-Element
Mailbox rpc-Server
Manageable-Object rpc-Server-Element
MSFT-DSA Sam-Domain
MSFT-FRS Sam-Domain-Base
NTDS-Connection Sam-Server
NTDS-Service Secret
NTDS-Scttings Security-Object
NTFRS-Replica-Set Security-Principal
NTFRS-Settings Server
Organisation Server-Connection
Organizational-Person Service-Administration-Point
Organizational-Unit Service-Class
Package-Registration Service-Instance
Person Site
Physical-Location Site-Connection-Settings
Print-Queue Site-Settings
Public-Folder Sites-Container
Query-Policy Storage
Remote-Address Subnet
Remotc-Mail-Recipient Subnet-Container
Replication-Connector Top
RID-Manager Trusted-Domain
rpc-Entry Type-Library
rpc-Group User
Volume


Используются технологии uCoz