> For the complete documentation index, see [llms.txt](https://xedex.gitbook.io/internalpentest/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://xedex.gitbook.io/internalpentest/internal-pentest/active-directory/introduction/attributes.md).

# Attributes

Each object in Active Directory Domain Services contains a set of attributes that define the characteristics of the object. Each attribute is described by an [**attributeSchema**](https://docs.microsoft.com/windows/desktop/ADSchema/c-attributeschema) object in the schema container that defines the attribute.

type of attributes that are stored in Active Directory Domain Services: 

* Domain-replicated, stored attributes :  stored in the directory (such as [**cn**](https://docs.microsoft.com/windows/desktop/ADSchema/a-cn), [**nTSecurityDescriptor**](https://docs.microsoft.com/windows/desktop/ADSchema/a-ntsecuritydescriptor), and [**objectGUID**](https://docs.microsoft.com/windows/desktop/ADSchema/a-objectguid)) and replicated to all domain controllers in a domain. A subset of these attributes is also replicated to the global catalog.
* Non-replicated, locally stored attributes:  Non-replicated attributes, such as [**badPwdCount**](https://docs.microsoft.com/windows/desktop/ADSchema/a-badpwdcount), [**Last-Logon**](https://docs.microsoft.com/windows/desktop/ADSchema/a-lastlogon), and [**Last-Logoff**](https://docs.microsoft.com/windows/desktop/ADSchema/a-lastlogoff) are stored on each domain controller, but are not replicated. The non-replicated attributes are attributes that pertain to a particular domain controller.

For more infos :

{% embed url="<https://docs.microsoft.com/fr-fr/windows/win32/ad/attributes>" %}

{% embed url="<https://docs.microsoft.com/fr-fr/windows/win32/ad/characteristics-of-attributes>" %}