Copyright: Thursday, October 07, 1999 10:40:28


A brief description of the selected class appears here.


Every object in the directory has a naming attribute from which its relative distinguished name is formed. The naming attribute for the class is Common-Name. The value assigned to Common-Name is the value that instances of the class will have as their relative distinguished name.


Object IDs are issued by the International Standards Organization (ISO) and are guaranteed to be unique across all networks worldwide. The object IDs ensure that classes or attributes that are defined by different entities do not conflict when various directory services such as Active Directory are brought together into a global directory.


The selected class can be one of three types: structural, abstract, or auxiliary. Structural means that the class can be instantiated in the directory. Abstract means the class provides a basic definition of a class that can be used to form structural classes. Auxiliary means a class that can be used to extend the definition of a class that inherits from it but cannot be used to form a class by itself.


This is the name of this class used by the LDAP agent for Active Directory. This is the name LDAP clients must use to access objects of this class. Active Directory clients access the directory using LDAP.


Click this button to select a new category or name of this class from the object list. This is the name used by the LDAP agent for Active Directory.


Click this option to show the objects of the selected class while browsing.


Click this option to deactivate the class. Deactivation allows you to recover the class, whereas deletion is permanent. You can deactivate a class only if that class is not specified as a Sub-Class-Of, Auxiliary-Class-Of, or Poss-Superior of any existing active class. When a class is deactivated, you can no longer create objects that are instances of the class. A deactivated class still exists in the directory, so you cannot create new classes with the same common name, object ID, or LDAP-Display-Name as the deactivated class.


Click this option to deactivate the attribute. Deactivation allows you to recover the attribute whereas deletion is permanent. Active Directory does not permit you to delete classes or attributes. When an attribute is deactivated, you cannot use it in definitions of new classes, nor add it to existing class definitions.


Classes describe Active Directory objects. The name of the object is often the same as the description.


Click this option to show the objects of the selected class while browsing.


Click this option to place the selected attribute in the directory.


This is the name of the object as assigned in the Active Directory schema. An object name is an attribute of the object's class.


Type a maximum value for this attribute. Valid characters for this field are 0-9. The maximum acceptable value is determined by the attribute’s syntax. Integer, Large Integer and Enumeration syntaxes accept negative numbers. For these syntaxes, the largest value that can be entered is 2,147,483,647. For all other syntaxes, the largest value that can be entered is 4,294,967,295.


Type a minimum value for this attribute. Valid characters for this field are 0-9. The minimum acceptable value is determined by the attribute’s syntax. Integer, Large Integer and Enumeration syntaxes accept negative numbers. For these syntaxes, the smallest value that can be entered is -2,147,483,648. For all other syntaxes, the smallest value that can be entered is 0 (zero).


Object IDs are unique across all networks worldwide. All object IDs are assigned by the International Standards Organization (ISO) and ensure that objects that are defined by different entities do not conflict when various directory services such as Active Directory are brought together into a global directory.


Syntax refers to the data type that can be used for a particular attribute, such as an integer, a string, or a date. Every attribute of every object is associated with exactly one syntax.


Click this button to browse for a domain controller within the forest to select as the new operations master.


Click this button to add a new system mandatory attribute to the selected class. Select a new mandatory attribute from the object list that appears when you click this button.


Lists the system mandatory attributes for the selected class that cannot be removed.


This button will become active only when you select a new system mandatory attribute that you have just added. Only the system mandatory attributes that you add can be removed.


Click this button to add a new system optional attribute to the selected class. Select a new optional attribute from the object list that appears when you click this button.


Lists the system optional attributes that are currently defined for the selected class.


This button is active only when you select a new system optional attribute that you have just added. Only the system optional attributes that you add can be removed.


Click this button to add new auxiliary classes for this class. Select a new auxiliary class from the object list.


Displays the auxiliary or subclasses of the parent class. A class can have one parent or superclass and many auxiliary classes. The auxiliary classes contribute their attributes to the class that inherits from them.


Click this button to remove a selected auxiliary class. You can remove an auxiliary class only if you have added it to this list. A system auxiliary class cannot be removed.


This is the parent class of which this class is a subclass. This class inherits mandatory and optional attributes from the specified parent class.


Click this button to add a new superior class for the selected class. Select a new superior class from the object list.


This list shows the possible tree structures for the directory by specifying what classes can be the parent for any given class.


Click this button to remove the selected superior class. System superior classes cannot be removed.


The value assigned to this name is the value that the attribute-class will have as its relative distinguished name. Every object in the directory has a naming attribute from which its relative distinguished name is formed.


The name of this attribute as used by the LDAP agent for Active Directory. This is the name LDAP clients must use to read or write values for this attribute.


Type the maximum length of the string for the syntax of the specified attribute you want to add.


Type the minimum length of the string for the syntax of the specified attribute you want to add.


Object IDs are issued by the International Standards Organization (ISO) and are guaranteed to be unique across all networks worldwide. The object IDs ensure that classes or attributes that are defined by different entities do not conflict when various directory services such as Active Directory are brought together into a global directory.


Click the down arrow and scroll through the list to select the syntax. Syntax refers to the data type that can be used for a particular attribute, such as an integer, a string, or a date. Every attribute of every object is associated with exactly one syntax.


Click this option to store the selected attribute with multiple values, all of uniform syntax. This is stored in the directory as Multi-Valued=FALSE and Single-Valued=TRUE.


The value assigned to this name is the value that the class will have as its relative distinguished name. Every object in the directory has a naming attribute from which its relative distinguished name is formed.


The name of this class as used by the LDAP agent for Active Directory. This is the name LDAP clients must use to read or write values for objects of this class.


Object IDs are issued by the International Standards Organization (ISO) and are guaranteed to be unique across all networks worldwide. The object IDs ensure that classes or attributes that are defined by different entities do not conflict when various directory services such as Active Directory are brought together into a global directory.


This is the parent class of which this class is a subclass. This class inherits mandatory and optional attributes from the specified parent class.


The selected class can be one of three types: structural, abstract, or auxiliary. Structural means that the class can be instantiated in the directory. Abstract means the class provides a basic definition of a class that can be used to form structural classes. Auxiliary means a class that can be used to extend the definition of a class that inherits from it, but cannot be used to form a class by itself.


This is the current domain controller for the domain.


This is the domain controller that is the current operations master.


This is the domain controller that is the current operations master in the domain.


Type the name of the specific domain controller you want to select.


Select this option to browse for a new domain controller within the forest.


Select this option to specify a new domain controller.


Select this option to place the selected attribute in the global catalog for replication to all domain controllers.


Lists the possible choices of all class objects available to use in the server.


Select this option to allow modifications on this server. The console contains a formal definition of the directory attributes and classes.


This option is helpful when locating attributes that may not be known by the client. A common use for ANR is when the surname and given names are stored in the directory in a format that is not intuitive to the client. For example, the directory may have the display name of Glynn, Jim and a client may search for Jim Glynn. ANR will return a match in this instance.


This option only applies to the attributes that are instances of the user class. When selected it specifies that when a user object is duplicated the attribute will also be copied to the new instance.