Verknüpfte Attribute (linked attributes) sind Verknüpfungspaare, die aus einem Forward-Link und einem Back-Link Attribut bestehen. Ob es sich bei einem Attribut im AD-Schema um ein verknüpftes Attribut handelt, wird von dem linkID Attribut bestimmt, das sich im attributeSchema-Objekt befindet. Das linkID Attribut im Forward-Link enthält immer einen geraden und das linkID Attribut im verknüpften Back-Link enthält stets einen ungeraden Wert, nämlich den Wert „Forward-linkID plus 1“. Der Administrator kann dabei ausschließlich das Forward-Link Attribut bearbeiten, nicht jedoch das Back-Link Attribut! Repliziert werden nur die Forward-Link Attribute, nicht jedoch die Back-Links.


Weitere Details liefert der folgende Artikel:


Verknüpfte Attribute


 



Alle verknüpften Attribute mit der AD-PowerShell abfragen


Alle Forward- und Back-Link Attribute die im AD-Schema existieren, kann man sich mit der AD-PowerShell wie folgt anzeigen lassen:


Get-ADObject -LDAPFilter “(&(objectClass=attributeSchema)(linkID=*))” -Properties lDAPDisplayName,linkID -SearchBase “CN=Schema,CN=Configuration,DC=AD2008R2,DC=Dikmenoglu,DC=DE” -searchScope oneLevel | Select lDAPDisplayName,linkID | Sort-Object linkID | FT -A


 



Alle verknüpften Attribute mit dem Kommandozeilentool dsquery abfragen


Mit dsquery lassen sich alle Forward- und Back-Link Attribute folgendermaßen anzeigen:


dsquery * “CN=Schema,CN=Configuration,DC=AD2008R2,DC=Dikmenoglu,DC=DE” -Scope oneLevel -Filter “(&(objectClass=attributeSchema)(linkID=*))” -attr lDAPDisplayName linkID -Limit 0


 



Alle verknüpften Attribute mit LDP abfragen


Nachdem man sich in LDP mit einem DC verbunden und mit dem AD “gebunden” hat, muss man unter Durchsuchen – Suchen zuerst diesen Filter angeben: (&(objectClass=attributeSchema)(linkID=*)). Es genügt als Suchbereich die Option Eine Ebene zu wählen und im Feld Attribute, die beiden Attribute lDAPDisplayName;linkID anzugeben. Anschließend werden alle verknüpften Attribute angezeigt.



 


 



Die verknüpften Attribute mit einem AD-PowerShell Skript abfragen


Mit dem folgenden AD-PowerShell Skript kann man sich gezielt nur die Forward-Link, Back-Link oder Forward- und Back-Link Attribute anzeigen lassen. Für das Skript ist es zwingend notwendig, dass die AD-PowerShell Cmdlets zur Verfügung stehen. Die AD-PowerShell, die out-of-the-box unter Windows Server 2008 R2 zur Verfügung steht,  lässt sich auch in einer Windows Server 2003 und Windows Server 2008 Umgebung einsetzen. In diesen Umgebungen ist es jedoch erforderlich, das Active Directory Management Gateway Service bereitzustellen.



Die AD Management Gateway Services für Windows Server 2003 und Windows Server 2008


 

######################################################
#
# AD-PowerShell Skript zum Anzeigen von Forward-Link,
# Back-Link oder Forward- und Back-Link Attribute
#
# Von: Yusuf Dikmenoglu 11/2010
#
# http://blog.dikmenoglu.de
#
######################################################

clear

$auswahl = Read-Host “Welche Attribut Art soll angezeigt werden (1…Forward-Link 2…Back-Link 3…Forward- und Back-Link):”

switch ($auswahl){

1 {

Get-ADObject -LDAPFilter “(&(objectClass=attributeSchema)(linkID=*))” -Properties lDAPDisplayName,linkID -SearchBase “CN=Schema,CN=Configuration,DC=Root-Domäne” -searchScope oneLevel | Sort-Object linkID | ForEach-Object {

if (!($_.linkID % 2)){

Write-Host “Forward-Link: “ $_.lDAPDisplayName $_.linkID

}

}

}

2 {

Get-ADObject -LDAPFilter “(&(objectClass=attributeSchema)(linkID=*))” -Properties lDAPDisplayName,linkID -SearchBase “CN=Schema,CN=Configuration,DC=Root-Domäne” -searchScope oneLevel | Sort-Object linkID | ForEach-Object {

if ($_.linkID % 2){

Write-Host “Back-Link: “ $_.lDAPDisplayName $_.linkID

}

}

}

3 {

Get-ADObject -LDAPFilter “(&(objectClass=attributeSchema)(linkID=*))” -Properties lDAPDisplayName,linkID -SearchBase “CN=Schema,CN=Configuration,DC=Root-Domäne” -searchScope oneLevel | Sort-Object linkID | ForEach-Object {

if ($_.linkID % 2){

Write-Host “Back-Link: “ $_.lDAPDisplayName $_.linkID

}

else {

Write-Host “Forward-Link: “ $_.lDAPDisplayName $_.linkID

}

}

}

default{

Write-Host “Ungültige Eingabe”

}

}


 


 


In einer Windows Server 2008 R2 AD Umgebung ohne jegliche AD-Erweiterung (wie beispielsweise eigene Schemaerweiterungen, Exchange etc.), existieren folgende 97 verknüpfte Attribute:



member                                                2
memberOf                                              3
manager                                               42
directReports                                         43
owner                                                 44
ownerBL                                               45
siteObject                                            46
siteObjectBL                                          47
nonSecurityMember                                     50
nonSecurityMemberBL                                   51
queryPolicyObject                                     68
queryPolicyBL                                         69
privilegeHolder                                       70
isPrivilegeHolder                                     71
managedBy                                             72
managedObjects                                        73
hasPartialReplicaNCs                                  74
msDS-IsPartialReplicaFor                              75
hasMasterNCs                                          76
masteredBy                                            77
syncMembership                                        78
serverReference                                       94
serverReferenceBL                                     95
bridgeheadTransportList                               98
bridgeheadServerListBL                                99
netbootServer                                         100
netbootSCPBL                                          101
frsComputerReference                                  102
frsComputerReferenceBL                                103
fRSMemberReference                                    104
fRSMemberReferenceBL                                  105
fRSPrimaryMember                                      106
siteLinkList                                          142
siteList                                              144
msCOM-PartitionLink                                   1040
msCOM-PartitionSetLink                                1041
msDS-NC-Replica-Locations                             1044
msFRS-Hub-Member                                      1046
msCOM-UserPartitionSetLink                            1048
msCOM-UserLink                                        1049
msDS-SDReferenceDomain                                2000
msDS-HasInstantiatedNCs                               2002
msDS-NonMembers                                       2014
msDS-NonMembersBL                                     2015
msDS-MembersForAzRole                                 2016
msDS-MembersForAzRoleBL                               2017
msDS-OperationsForAzTask                              2018
msDS-OperationsForAzTaskBL                            2019
msDS-TasksForAzTask                                   2020
msDS-TasksForAzTaskBL                                 2021
msDS-OperationsForAzRole                              2022
msDS-OperationsForAzRoleBL                            2023
msDS-TasksForAzRole                                   2024
msDS-TasksForAzRoleBL                                 2025
msDS-HasDomainNCs                                     2026
msDS-IsDomainFor                                      2027
msSFU30PosixMember                                    2030
msSFU30PosixMemberOf                                  2031
msDS-hasMasterNCs                                     2036
msDs-masteredBy                                       2037
msDS-ObjectReference                                  2038
msDS-ObjectReferenceBL                                2039
msPKIDPAPIMasterKeys                                  2046
msPKIAccountCredentials                               2048
msDFSR-ComputerReference                              2050
msDFSR-ComputerReferenceBL                            2051
msDFSR-MemberReference                                2052
msDFSR-MemberReferenceBL                              2053
msDS-KrbTgtLink                                       2100
msDS-KrbTgtLinkBl                                     2101
msDS-RevealedUsers                                    2102
msDS-RevealedDSAs                                     2103
msDS-hasFullReplicaNCs                                2104
msDS-IsFullReplicaFor                                 2105
msDS-NeverRevealGroup                                 2106
msDS-RevealOnDemandGroup                              2110
msDS-AuthenticatedAtDC                                2112
msDS-AuthenticatedToAccountlist                       2113
msDS-NC-RO-Replica-Locations                          2114
msDS-NC-RO-Replica-Locations-BL                       2115
msDS-PSOAppliesTo                                     2118
msDS-PSOApplied                                       2119
addressBookRoots2                                     2122
globalAddressList2                                    2124
templateRoots2                                        2126
msDS-BridgeHeadServersUsed                            2160
msPKI-CredentialRoamingTokens                         2162
msDS-OIDToGroupLink                                   2164
msDS-OIDToGroupLinkBl                                 2165
msDS-HostServiceAccount                               2166
msDS-HostServiceAccountBL                             2167
msDS-EnabledFeature                                   2168
msDS-EnabledFeatureBL                                 2169
msTSPrimaryDesktop                                    2170
msTSPrimaryDesktopBL                                  2171
msTSSecondaryDesktops                                 2172
msTSSecondaryDesktopBL                                2173


 




In einer Windows Server 2008 R2 und Exchange 2010 SP1 Umgebung, existieren folgende 314 verknüpfte Attribute:



member                                               2
memberOf                                             3
altRecipient                                         12
altRecipientBL                                       13
publicDelegates                                      14
publicDelegatesBL                                    15
homeMDB                                              32
homeMDBBL                                            33
manager                                              42
directReports                                        43
owner                                                44
ownerBL                                              45
siteObject                                           46
siteObjectBL                                         47
nonSecurityMember                                    50
nonSecurityMemberBL                                  51
queryPolicyObject                                    68
queryPolicyBL                                        69
privilegeHolder                                      70
isPrivilegeHolder                                    71
managedBy                                            72
managedObjects                                       73
hasPartialReplicaNCs                                 74
msDS-IsPartialReplicaFor                             75
hasMasterNCs                                         76
masteredBy                                           77
syncMembership                                       78
serverReference                                      94
serverReferenceBL                                    95
bridgeheadTransportList                              98
bridgeheadServerListBL                               99
netbootServer                                        100
netbootSCPBL                                         101
frsComputerReference                                 102
frsComputerReferenceBL                               103
fRSMemberReference                                   104
fRSMemberReferenceBL                                 105
fRSPrimaryMember                                     106
authOrig                                             110
authOrigBL                                           111
dLMemSubmitPerms                                     112
dLMemSubmitPermsBL                                   113
unauthOrig                                           114
unauthOrigBL                                         115
dLMemRejectPerms                                     116
dLMemRejectPermsBL                                   117
responsibleLocalDXA                                  122
assocRemoteDXA                                       123
supportingStack                                      132
supportingStackBL                                    133
siteLinkList                                         142
siteList                                             144
msExchHomeSyncService                                146
msExchChildSyncAgreements                            147
msExchRoutingGroupMembersDN                          1000
msExchHomeRoutingGroupDNBL                           1001
msExchSourceBridgeheadServersDN                      1002
msExchBridgeheadedLocalConnectorsDNBL                1003
msExchTargetBridgeheadServersDN                      1004
msExchBridgeheadedRemoteConnectorsDNBL               1005
msExchCASchemaPolicy                                 1006
msExchSchemaPolicyConsumers                          1007
msExchOwningPFTree                                   1008
msExchOwningPFTreeBL                                 1009
msExchPolicyList                                     1012
msExchPolicyListBL                                   1013
msExchUseOAB                                         1014
msExchUseOABBL                                       1015
msExchAddressListServiceLink                         1016
msExchAddressListServiceBL                           1017
msExchComputerLink                                   1018
msExchExchangeServerLink                             1019
msExchConferenceZone                                 1020
msExchConferenceZoneBL                               1021
msExchMasterService                                  1022
msExchMasterServiceBL                                1023
msExchExportContainersLinked                         1028
msExchExportContainersBL                             1029
msExchResponsibleMTAServer                           1030
msExchResponsibleMTAServerBL                         1031
msExchImportContainerLinked                          1032
msExchAppliesToSmtpVS                                1034
msExchAppliesToSmtpVSBL                              1035
msExchConferenceMailbox                              1036
msExchConferenceMailboxBL                            1037
msExchMCUHostsSites                                  1038
msExchMCUHostsSitesBL                                1039
msCOM-PartitionLink                                  1040
msCOM-PartitionSetLink                               1041
msDS-NC-Replica-Locations                            1044
msFRS-Hub-Member                                     1046
msCOM-UserPartitionSetLink                           1048
msCOM-UserLink                                       1049
msExchHomeRoutingGroup                               1050
msExchRoutingGroupMembersBL                          1051
msExchMobileMailboxPolicyLink                        1058
msExchMobileMailboxPolicyBL                          1059
msExchAvailabilityPerUserAccount                     1060
msExchAvailabilityPerUserAccountBL                   1061
msExchAvailabilityOrgWideAccount                     1062
msExchAvailabilityOrgWideAccountBL                   1063
msExchUMDTMFFallbackAutoAttendantLink                1064
msExchUMDTMFFallbackAutoAttendantBL                  1065
msExchOWATranscodingFileTypes                        1066
msExchOWATranscodingFileTypesBL                      1067
msExchOWAAllowedFileTypes                            1068
msExchOWAAllowedFileTypesBL                          1069
msExchOWAAllowedMimeTypes                            1070
msExchOWAAllowedMimeTypesBL                          1071
msExchOWAForceSaveFileTypes                          1072
msExchOWAForceSaveFileTypesBL                        1073
msExchOWAForceSaveMIMETypes                          1074
msExchOWAForceSaveMIMETypesBL                        1075
msExchOWABlockedFileTypes                            1076
msExchOWABlockedFileTypesBL                          1077
msExchOWABlockedMIMETypes                            1078
msExchOWABlockedMIMETypesBL                          1079
msExchOWARemoteDocumentsAllowedServers               1080
msExchOWARemoteDocumentsAllowedServersBL             1081
msExchOWARemoteDocumentsBlockedServers               1082
msExchOWARemoteDocumentsBlockedServersBL             1083
msExchOWARemoteDocumentsInternalDomainSuffixList     1084
msExchOWARemoteDocumentsInternalDomainSuffixListBL   1085
msExchOWATranscodingMimeTypes                        1086
msExchOWATranscodingMimeTypesBL                      1087
msExchSMTPReceiveDefaultAcceptedDomainLink           1088
msExchSMTPReceiveDefaultAcceptedDomainBL             1089
msExchHABShowInDepartments                           1090
msExchHABShowInDepartmentsBL                         1091
msExchHABRootDepartmentLink                          1092
msExchHABRootDepartmentBL                            1093
msExchHABChildDepartmentsLink                        1094
msExchHABChildDepartmentsBL                          1095
msExchMobileRemoteDocumentsAllowedServers            1096
msExchMobileRemoteDocumentsAllowedServersBL          1097
msExchMobileRemoteDocumentsBlockedServers            1098
msExchMobileRemoteDocumentsBlockedServersBL          1099
msExchMobileRemoteDocumentsInternalDomainSuffixList  1100
msExchMobileRemoteDocumentsInternalDomainSuffixListBL1101
msExchServerSite                                     1102
msExchServerSiteBL                                   1103
msExchHostServerLink                                 1104
msExchHostServerBL                                   1105
msExchMDBAvailabilityGroupLink                       1110
msExchMDBAvailabilityGroupBL                         1111
msExchConfigurationUnitLink                          1112
msExchConfigurationUnitBL                            1113
msExchPolicyTagLink                                  1114
msExchPolicyTagLinkBL                                1115
msExchRoleLink                                       1116
msExchRoleBL                                         1117
msExchUserLink                                       1118
msExchUserBL                                         1119
msExchDomainRestrictionLink                          1120
msExchDomainRestrictionBL                            1121
msExchConfigRestrictionLink                          1122
msExchConfigRestrictionBL                            1123
msExchApprovalApplicationLink                        1124
msExchArbitrationMailboxesBL                         1125
msExchCoManagedByLink                                1126
msExchCoManagedObjectsBL                             1127
msExchModeratedByLink                                1128
msExchModeratedObjectsBL                             1129
msExchOrganizationsGlobalAddressListsLink            1130
msExchOrganizationsGlobalAddressListsBL              1131
msExchOrganizationsAddressBookRootsLink              1132
msExchOrganizationsAddressBookRootsBL                1133
msExchOrganizationsTemplateRootsLink                 1134
msExchOrganizationsTemplateRootsBL                   1135
msExchExchangeRPCServiceArrayLink                    1136
msExchExchangeRPCServiceArrayBL                      1137
msExchParentPlanLink                                 1178
msExchParentPlanBL                                   1179
msExchBypassModerationLink                           1180
msExchBypassModerationBL                             1181
msExchBypassModerationFromDLMembersLink              1182
msExchBypassModerationFromDLMembersBL                1183
msExchFedAcceptedDomainLink                          1184
msExchFedAcceptedDomainBL                            1185
msExchServerAssociationLink                          1186
msExchServerAssociationBL                            1187
msExchSupervisionUserLink                            1188
msExchSupervisionUserBL                              1189
msExchSupervisionDLLink                              1190
msExchSupervisionDLBL                                1191
msExchSupervisionOneOffLink                          1192
msExchSupervisionOneOffBL                            1193
msExchMailboxMoveTargetMDBLink                       1194
msExchMailboxMoveTargetMDBBL                         1195
msExchRBACPolicyLink                                 1196
msExchRBACPolicyBL                                   1197
msExchMailboxMoveSourceMDBLink                       1198
msExchMailboxMoveSourceMDBBL                         1199
msExchArchiveDatabaseLink                            1200
msExchArchiveDatabaseBL                              1201
msExchRMSComputerAccountsLink                        1202
msExchRMSComputerAccountsBL                          1203
msExchDelegateListLink                               1204
msExchDelegateListBL                                 1205
msExchDeviceAccessControlRuleLink                    1206
msExchDeviceAccessControlRuleBL                      1207
msOrg-Leaders                                        1208
msOrg-LeadersBL                                      1209
msExchIntendedMailboxPlanLink                        1210
msExchIntendedMailboxPlanBL                          1211
msExchDefaultPublicMDB                               1212
msExchDefaultPublicMDBBL                             1213
msExchMailboxMoveSourceUserLink                      1214
msExchMailboxMoveSourceUserBL                        1215
msExchMailboxMoveStorageMDBLink                      1216
msExchMailboxMoveStorageMDBBL                        1217
msExchMailboxMoveTargetUserLink                      1218
msExchMailboxMoveTargetUserBL                        1219
msExchSharedConfigLink                               1220
msExchSharedConfigBL                                 1221
msExchMailboxMoveSourceArchiveMDBLink                1222
msExchMailboxMoveSourceArchiveMDBBL                  1223
msExchMailboxMoveTargetArchiveMDBLink                1224
msExchMailboxMoveTargetArchiveMDBBL                  1225
msExchShadowManagerLink                              1226
msExchSupportedSharedConfigLink                      1228
msExchSupportedSharedConfigBL                        1229
msExchDisabledArchiveDatabaseLink                    1230
msDS-SDReferenceDomain                               2000
msDS-HasInstantiatedNCs                              2002
msDS-NonMembers                                      2014
msDS-NonMembersBL                                    2015
msDS-MembersForAzRole                                2016
msDS-MembersForAzRoleBL                              2017
msDS-OperationsForAzTask                             2018
msDS-OperationsForAzTaskBL                           2019
msDS-TasksForAzTask                                  2020
msDS-TasksForAzTaskBL                                2021
msDS-OperationsForAzRole                             2022
msDS-OperationsForAzRoleBL                           2023
msDS-TasksForAzRole                                  2024
msDS-TasksForAzRoleBL                                2025
msDS-HasDomainNCs                                    2026
msDS-IsDomainFor                                     2027
msSFU30PosixMember                                   2030
msSFU30PosixMemberOf                                 2031
msDS-hasMasterNCs                                    2036
msDs-masteredBy                                      2037
msDS-ObjectReference                                 2038
msDS-ObjectReferenceBL                               2039
msPKIDPAPIMasterKeys                                 2046
msPKIAccountCredentials                              2048
msDFSR-ComputerReference                             2050
msDFSR-ComputerReferenceBL                           2051
msDFSR-MemberReference                               2052
msDFSR-MemberReferenceBL                             2053
msExchELCFolderLink                                  2054
msExchELCFolderBL                                    2055
msExchMailboxTemplateLink                            2056
msExchMailboxTemplateBL                              2057
msExchUMTemplateLink                                 2058
msExchUMTemplateBL                                   2059
msExchUMRecipientDialPlanLink                        2060
msExchUMRecipientDialPlanBL                          2061
msExchUMServerDialPlanLink                           2062
msExchUMServerDialPlanBL                             2063
msExchUMIPGatewayDialPlanLink                        2064
msExchUMIPGatewayDialPlanBL                          2065
msExchUMIPGatewayServerLink                          2066
msExchUMIPGatewayServerBL                            2067
msExchUMAutoAttendantDialPlanLink                    2068
msExchUMAutoAttendantDialPlanBL                      2069
msExchUMDialPlanDefaultAutoAttendantLink             2070
msExchUMDialPlanDefaultAutoAttendantBL               2071
msExchUMHuntGroupDialPlanLink                        2072
msExchUMHuntGroupDialPlanBL                          2073
msExchELCExpiryDestinationLink                       2080
msExchAttachmentFilteringExceptionConnectorsLink     2082
msExchJournalingRulesLink                            2084
msExchMailboxOABVirtualDirectoriesLink               2086
msExchMailboxOABVirtualDirectoriesBL                 2087
msExchOABVirtualDirectoriesLink                      2088
msExchOABVirtualDirectoriesBL                        2089
msExchELCAutoCopyAddressLink                         2090
msExchUMMailboxPolicyDialPlanLink                    2092
msExchUMMailboxPolicyDialPlanBL                      2093
msExchSmtpSendReceiveConnectorLink                   2094
msExchTransportSubmissionServerOverrideList          2096
msExchServerAdminDelegationLink                      2098
msExchServerAdminDelegationBL                        2099
msDS-KrbTgtLink                                      2100
msDS-KrbTgtLinkBl                                    2101
msDS-RevealedUsers                                   2102
msDS-RevealedDSAs                                    2103
msDS-hasFullReplicaNCs                               2104
msDS-IsFullReplicaFor                                2105
msDS-NeverRevealGroup                                2106
msDS-RevealOnDemandGroup                             2110
msDS-AuthenticatedAtDC                               2112
msDS-AuthenticatedToAccountlist                      2113
msDS-NC-RO-Replica-Locations                         2114
msDS-NC-RO-Replica-Locations-BL                      2115
msDS-PSOAppliesTo                                    2118
msDS-PSOApplied                                      2119
addressBookRoots2                                    2122
globalAddressList2                                   2124
templateRoots2                                       2126
msDS-BridgeHeadServersUsed                           2160
msPKI-CredentialRoamingTokens                        2162
msDS-OIDToGroupLink                                  2164
msDS-OIDToGroupLinkBl                                2165
msDS-HostServiceAccount                              2166
msDS-HostServiceAccountBL                            2167
msDS-EnabledFeature                                  2168
msDS-EnabledFeatureBL                                2169
msTSPrimaryDesktop                                   2170
msTSPrimaryDesktopBL                                 2171
msTSSecondaryDesktops                                2172
msTSSecondaryDesktopBL                               2173

Comments are closed, but trackbacks and pingbacks are open.