attributetype ( 1.2.840.113556.1.4.221
        NAME 'sAMAccountName'
        EQUALITY caseExactMatch
        SYNTAX '1.3.6.1.4.1.1466.115.121.1.15'
        SINGLE-VALUE )

attributetype ( 1.2.840.113556.1.4.750
        NAME 'groupType'
        SYNTAX '1.3.6.1.4.1.1466.115.121.1.27'
        SINGLE-VALUE )

attributetype ( 1.2.840.113556.1.2.206
        NAME 'reportToOriginator'
        SYNTAX '1.3.6.1.4.1.1466.115.121.1.7'
        SINGLE-VALUE )

attributetype ( 1.2.840.113556.1.2.207
        NAME 'reportToOwner'
        SYNTAX '1.3.6.1.4.1.1466.115.121.1.7'
        SINGLE-VALUE )

attributetype ( 1.2.840.113556.1.2.297
        NAME 'hideDLMembership'
        SYNTAX '1.3.6.1.4.1.1466.115.121.1.7'
        SINGLE-VALUE )

attributetype ( 1.2.840.113556.1.2.330
        NAME 'dLMemberRule'
        SYNTAX '1.3.6.1.4.1.1466.115.121.1.40' )

attributetype ( 1.2.840.113556.1.2.438
        NAME 'oOFReplyToOriginator'
        SYNTAX '1.3.6.1.4.1.1466.115.121.1.7'
        SINGLE-VALUE )

attributetype ( 1.2.840.113556.1.4.89
                NAME 'nTGroupMembers'
                SYNTAX '1.3.6.1.4.1.1466.115.121.1.40' )
attributetype ( 1.2.840.113556.1.4.144
                NAME 'operatorCount'
                SYNTAX '1.3.6.1.4.1.1466.115.121.1.27'
                SINGLE-VALUE )

attributetype ( 1.2.840.113556.1.4.150
                NAME 'adminCount'
                SYNTAX '1.3.6.1.4.1.1466.115.121.1.27'
                SINGLE-VALUE )

attributetype ( 1.2.840.113556.1.4.152
                NAME 'groupAttributes'
                SYNTAX '1.3.6.1.4.1.1466.115.121.1.27'
                SINGLE-VALUE )

attributetype ( 1.2.840.113556.1.4.166
                NAME 'groupMembershipSAM'
                SYNTAX '1.3.6.1.4.1.1466.115.121.1.40'
                SINGLE-VALUE )

attributetype ( 1.2.840.113556.1.4.200
                NAME 'controlAccessRights'
                SYNTAX '1.3.6.1.4.1.1466.115.121.1.40' )

attributetype ( 1.2.840.113556.1.4.346
                NAME 'desktopProfile'
                SYNTAX '1.3.6.1.4.1.1466.115.121.1.15'
                SINGLE-VALUE )

attributetype ( 1.2.840.113556.1.4.530
                NAME 'nonSecurityMember'
                SYNTAX '1.3.6.1.4.1.1466.115.121.1.12' )

attributetype ( 1.2.840.113556.1.4.653
                NAME 'managedBy'
                SYNTAX '1.3.6.1.4.1.1466.115.121.1.12'
                SINGLE-VALUE )

attributetype ( 1.2.840.113556.1.4.1412
                NAME 'primaryGroupToken'
                SYNTAX '1.3.6.1.4.1.1466.115.121.1.27'
                SINGLE-VALUE  )

attributetype ( 1.2.840.113556.1.4.1792
                NAME 'msDS-AzLDAPQuery'
                SYNTAX '1.3.6.1.4.1.1466.115.121.1.15'
                SINGLE-VALUE )

attributetype ( 1.2.840.113556.1.4.1793
                NAME 'msDS-NonMembers'
                SYNTAX '1.3.6.1.4.1.1466.115.121.1.12' )

attributetype ( 1.2.840.113556.1.4.7000.102.50300
                NAME 'msExchOriginatingForest'
                SYNTAX '1.3.6.1.4.1.1466.115.121.1.15' )

attributetype ( 1.2.840.113556.1.6.18.1.339
                NAME 'msSFU30NisDomain'
                SYNTAX '1.3.6.1.4.1.1466.115.121.1.26'
                SINGLE-VALUE )

attributetype ( 1.2.840.113556.1.6.18.1.309
                NAME 'msSFU30Name'
                SYNTAX '1.3.6.1.4.1.1466.115.121.1.26'
                SINGLE-VALUE )

attributetype ( 1.2.840.113556.1.6.18.1.346
                NAME 'msSFU30PosixMember'
                SYNTAX '1.3.6.1.4.1.1466.115.121.1.12' )

objectclass ( 1.2.840.113556.1.5.8
        NAME 'group'
        SUP top
        STRUCTURAL
        MUST (groupType )
        MAY (member $ owner $ reportToOriginator
                $ reportToOwner $ hideDLMembership
                $ dLMemberRule $ oOFReplyToOriginator
                $ nTGroupMembers $ operatorCount
                $ adminCount $ groupAttributes
                $ groupMembershipSAM $ controlAccessRights
                $ desktopProfile $ nonSecurityMember
                $ managedBy $ primaryGroupToken
                $ msDS-AzLDAPQuery $ msDS-NonMembers
                $ mail $ msExchOriginatingForest
                $ msSFU30NisDomain $ msSFU30Name $ msSFU30PosixMember ) )