Active Directory uses bit masks, or bit fields, or bit flags or bit maps or whatever you want to call them. Anyway, AD uses them, a lot. Let's say you're digging deep into Active Directory internals, and you want to see all the attributes in your schema that are eligible for being made confidential. We know that something called "base schema attributes" cannot be made confidential, and that we know whether an attribute is a base schema attribute or not based on a certain bit that is set in that attribute's systemFlags attribute.
↧