[cifs-protocol] DS_FLAG Option bits (SRX091002600036 "[MS-ADTS] DS_FLAG option bits")

Bill Wesse billwe at microsoft.com
Fri Oct 2 07:23:44 MDT 2009

Good morning Tridge - we have created case SRX091002600036 "[MS-ADTS] DS_FLAG option bits" to track work against your question concerning the DC_FLAG option bits.

I will begin work on this today, and will update you with my findings as soon as possible.

Bill Wesse
MCSE, MCTS / Senior Escalation Engineer, US-CSS DSC PROTOCOL TEAM
8055 Microsoft Way
Charlotte, NC 28273
TEL:  +1(980) 776-8200
CELL: +1(704) 661-5438
FAX:  +1(704) 665-9606

-----Original Message-----
From: tridge at samba.org [mailto:tridge at samba.org] 
Sent: Thursday, October 01, 2009 9:08 PM
To: Interoperability Documentation Help
Cc: cifs-protocol at samba.org
Subject: CAR: DS_FLAG Option bits


We've been looking at the DS_FLAG option bits returned by a w2k8-r2
server in CLDAP (see MS-ADTS section We've found that a
w2k8-r2 domain controller for a single domain in a forest returns

Can you tell us why it doesn't add the DS_DNS_CONTROLLER_FLAG,
DS_DNS_DOMAIN_FLAG and DS_DNS_FOREST_FLAG bits? The description of
those bits would seem to match the windows DC, so we're wondering if
perhaps we've misunderstood them.

In it says:

       - If the server has a DNS name, the DS_DNS_CONTROLLER_FLAG bit is set.

       - If the DnsDomain value specified in the search filter is the DNS name of the default NC,
         the DS_DNS_DOMAIN_FLAG bit is set.

       - If the DnsDomain value specified in the search filter is the forest name, the
         DS_DNS_FOREST_FLAG bit is set.

My test w2k8-r2 DC definately has a DNS name, and the search filter
was for the default NC, and it is the forest name, so I expected all 3
bits to be set.

See http://samba.org/tridge/sniffs/w2k8b-join-w2k8-dc.cap frame
14. The two machines are both w2k8-r2. The DC is 

Cheers, Tridge

More information about the cifs-protocol mailing list