ms-DS-Allowed-To-Act-On-Behalf-Of-Other-Identity

AD Schema Attributes » ms-DS-Allowed-To-Act-On-Behalf-Of-Other-Identity attribute

ms-DS-Allowed-To-Act-On-Behalf-Of-Other-Identity attribute

LDAP Name	msDS-AllowedToActOnBehalfOfOtherIdentity
Data type	Security Descriptor String
Single value or multi-value	Single Value
Attribute-Id	1.2.840.113556.1.4.2182
CN	ms-DS-Allowed-To-Act-On-Behalf-Of-Other-Identity
Applies to	Windows Server 2003 and higher
For more information	msDS-AllowedToActOnBehalfOfOtherIdentity - MSDN

Purpose: This attribute specifies whether or not a requestor possesses the necessary permissions to act on behalf of other identities with respect to services that run as this account.

Did you know that using ADManager Plus, you can easily do the following without any scripts:

Automate user account provisioning in AD, Exchange and Office 365 at once.
Assign, modify and revoke Office 365 licenses in bulk.
List all computers running on a specific operating system, and more.

Download the 30-day free trial of ADManager Plus to explore its powerful features!

Script-free, automated AD management and reporting

ADManager Plus, an identity governance solution for Active Directory, Microsoft 365, and Google Workspace, offers features for automating the bulk creation and modification of user accounts via CSV files and intelligent templates. Generate and schedule more than 200 preconfigured reports on users; export them in CSV, PDF, HTML, XLSX, and CSVDE formats; and do even more.

Unravel end-to-end Active Directory management with ADManager Plus

AD User Management / Reports

Active Directory Reporting

Active Directory Management