Group Attributes in Classic SFU-Compliant Zones

In classic SFU-compliant zones, UNIX-specific group attributes are stored as part of the Active Directory group object.

Group attribute	Stored in Active Directory attribute
UnixName	MSSFU30Name:GroupName For example: MSSFU30Name:performx
Gid	MSSFU30GidNumber:value For example: MSSFU30GidNumber:458
NisDomain	MSSFU30NisDomain:value This attribute must be defined. Server Suite uses this setting to determine if the group is a member of the zone. When you create SFU-compliant zones, you must specify the NIS domain name that should be included. For example, you can configure zone_bejing to include all users and groups whose NIS domain attribute is set to nisbejing. For example: MSSFU30NisDomain:nisbejing.local
UnixEnabled	Not supported.

The Microsoft Services for UNIX schema extension supports group membership as an attribute of the group object in the same way the RFC 2307-compliant schema does. Server Suite does not use this attribute, however. Server Suite uses Active Directory group membership to identify group members.