RootDSE (Windows)
Expand the table of content
In LDAP 3.0, rootDSE is defined as the root of the directory data tree on a directory server. The rootDSE is not part of any namespace. The purpose of the rootDSE is to provide data about the directory server. For more information about rootDSE, see
in the Active Directory SDK documentation.
rootDSE contains the following attributes. All attributes are single-valued unless otherwise noted.
AttributeSyntaxDescription
configurationNamingContext
Contains the distinguished name for the configuration container.
currentTime
Contains the current time set on this directory server in Coordinated Universal Time format.
defaultNamingContext
Contains the distinguished name for the domain of which this directory server is a member.
dnsHostName
Contains the DNS address for this directory server.
domainControllerFunctionality
Indicates the functional level of the domain controller. This can be one of the following values.
"0" - Windows 2000 Mode
"2" - Windows Server 2003 Mode
"3" - Windows Server 2008 Mode
domainFunctionality
Indicates the functional level of the domain. This can be one of the following values.
"0" - Windows 2000 Domain Mode
"1" - Windows Server 2003 Interim Domain Mode
"2" - Windows Server 2003 Domain Mode
"3" - Windows Server 2008 Domain Mode
Windows Server 2008 R2 Domain Mode
dsServiceName
Contains the distinguished name of the NTDS settings object for this directory server.
forestFunctionality
Indicates the functional level of the forest. This can be one of the following values.
"0" - Windows 2000 Forest Mode
"1" - Windows Server 2003 Interim Forest Mode
"2" - Windows Server 2003 Forest Mode
"3" - Windows Server 2008 Forest Mode
Windows Server 2008 R2 Forest Mode
highestCommittedUSN
Contains the highest update sequence number (USN) on this directory server. Used by directory replication.
isGlobalCatalogReady
Indicates if the global catalog is fully operational. Contains either "TRUE" or "FALSE".
isSynchronized
Indicates if the directory server is fully synchronized. Contains either "TRUE" or "FALSE".
ldapServiceName
Contains the Service Principal Name (SPN) for the LDAP server. Used for mutual authentication.
namingContexts
A multiple-valued attribute that contains the distinguished names for all naming contexts stored on this directory server. By default, a Windows 2000 domain controller contains at least three naming contexts: Schema, Configuration, and one for the domain of which the server is a member.
rootDomainNamingContext
Contains the distinguished name for the first domain in the forest that contains the domain of which this directory server is a member.
schemaNamingContext
Contains the distinguished name for the schema container.
serverName
Contains the distinguished name for the server object for this directory server in the configuration container.
subschemaSubentry
Contains the distinguished name for the
object. The subSchema object contains properties that expose the supported attributes (in the
property) and classes (in the
property).
The subschemaSubentry property and subschema are defined in LDAP 3.0 (see RFC 2251).
supportedCapabilities
A multiple-valued attribute that contains the capabilities supported by this directory server.
supportedControl
A multiple-valued attribute that contains the OIDs for extension controls supported by this directory server. See the table below for a list of the possible control OIDs.
supportedLDAPPolicies
A multiple-valued attribute that contains the names of the supported LDAP management policies.
supportedLDAPVersion
A multiple-valued attribute that contains the LDAP versions (specified by major version number) supported by this directory server.
supportedSASLMechanisms
Contains the security mechanisms supported for SASL negotiation (see LDAP RFCs). By default, GSSAPI is supported.
Active Directory supports the following control OIDs in the supportedControl attribute. For more information, see
Control OIDString constant
1.2.840..4.319
1.2.840..4.473
1.2.840..4.474
1.2.840..4.801
1.2.840..4.528
1.2.840..4.417
1.2.840..4.619
1.2.840..4.841
1.2.840..4.529
1.2.840..4.805
1.2.840..4.521
1.2.840..4.1338
1.2.840..4.1339
1.2.840..4.1340
1.2.840..4.1413
IN THIS ARTICLE
Is this page helpful?
Additional feedback?
1500 characters remaining
Thank you!
We appreciate your feedback.君，已阅读到文档的结尾了呢~~
扫扫二维码，随身浏览文档
手机或平板扫扫即可继续访问
AD-work-book
举报该文档为侵权文档。
举报该文档含有违规或不良信息。
反馈该文档无法正常浏览。
举报该文档为重复文档。
推荐理由：
将文档分享至：
分享完整地址
文档地址：
粘贴到BBS或博客
flash地址：
支持嵌入FLASH地址的网站使用
html代码：
&embed src='/DocinViewer--144.swf' width='100%' height='600' type=application/x-shockwave-flash ALLOWFULLSCREEN='true' ALLOWSCRIPTACCESS='always'&&/embed&
450px*300px480px*400px650px*490px
支持嵌入HTML代码的网站使用
您的内容已经提交成功
您所提交的内容需要审核后才能发布，请您等待！
3秒自动关闭窗口Access denied |
used Cloudflare to restrict access
Please enable cookies.
What happened?
The owner of this website () has banned your access based on your browser's signature (3bae-ua98).