Difference between revisions of "AD Hidden Attributes"

Revision as of 00:54, 17 March 2016

Overview

AD doesn't display all of the LDAP attributes that are available. If you want to make use of one of these attributes and need to set permissions on them, you'll find that they are not shown. Below are the steps to display these hidden attributes so that you can make permissions changes.

How to enable view of hidden attributes

Open dssec.dat with Notepad.exe run as Administrator.
Search for the attribute you want to make visible.
Set its value as follows:
0 = Show Read & Write 1 = Show Write 2 = Show Read 7 = Hidden

References

http://social.technet.microsoft.com/wiki/contents/articles/20746.how-to-allow-the-delegation-of-filtered-properties-in-active-directory-users-and-computers.aspx