search for: a_admincount

...tion. To check if adminCount is set or not I used this command: ldapsearch -D <binddn> \ -w <password> -h <windows-ads> -x -b \ cn=<username>,cn=Users,dc=... Microsoft says in this article: http://msdn.microsoft.com/library/default.asp?url=/library/en-us/adschema/adschema/a_admincount.asp "Indicates that a given object has had its ACL's changed to a more secure value by the system because it was a member of one of the administrative groups (directly or transitively)." and this attribute is set "When an object is added to an administrative group." The...