Active Directory Validated Writes
Active Directory Validated Writes control specific modify operations that require that the system perform value checking prior to writing a value to an attribute of an Active Directory object.
Active Directory Validated Writes
There are 7 validated writes defined in a Windows Server 2025 Active Directory domain -
| # . |
Name . |
Rights GUID . |
Applies To . |
1 |
Validated write to computer attributes |
9b026da6-0d3c-465c-8bee-5199d7165cba |
Computer |
2 |
Add/Remove self as member |
bf9679c0-0de6-11d0-a285-00aa003049e2 |
Group |
3 |
Validated write to DNS host name |
72e39547-7b18-11d1-adef-00c04fd8d5cd |
ms-DS-Delegated-Managed-Service-Account, ms-DS-Group-Managed-Service-Account, ms-DS-Managed-Service-Account, Computer |
4 |
Validated write to MS DS Additional DNS Host Name |
80863791-dbe9-4eb8-837e-7f0ab55d9ac7 |
Computer |
5 |
Validated write to MS DS behavior version |
d31a8757-2447-4545-8081-3bb610cacbf2 |
NTDS-DSA |
6 |
Validated write to MS DS Jet Database Page Size |
da823a60-41f0-4c89-942b-2b70a6c003d4 |
NTDS-DSA |
7 |
Validated write to service principal name |
f3a64788-5306-11d1-a9c5-0000f80367c1 |
ms-DS-Delegated-Managed-Service-Account, ms-DS-Group-Managed-Service-Account, ms-DS-Managed-Service-Account, Computer |