For some controloid values, you can replace object identifiers with user-friendly strings. The strings are listed here in lower case, but the case is not important. You can use camelCase if you prefer, for example. accountusable accountusability Account Usability Control, Object Identifier: 1.3.6.1.4.1.42.2.27.9.5.8 authzid authorizationidentity Authorization Identity Request Control, Object Identifier: 2.16.840.1.113730.3.4.16 effectiverights geteffectiverights Get Effective Rights Request Control, Object Identifier: 1.3.6.1.4.1.42.2.27.9.5.2 managedsait Manage DSAIT Request Control, Object Identifier: 2.16.840.1.113730.3.4.2 noop no-op No-Op Control, Object Identifier: 1.3.6.1.4.1.4203.1.10.2 pwpolicy passwordpolicy Password Policy Control, Object Identifier: 1.3.6.1.4.1.42.2.27.8.5.1 realattrsonly realattributesonly Real Attributes Only Request Control, Object Identifier: 2.16.840.1.113730.3.4.17 subtreedelete treedelete Subtree Delete Request Control, Object Identifier: 1.2.840.113556.1.4.805 virtualattrsonly virtualattributesonly Virtual Attributes Only Request Control, Object Identifier: 2.16.840.1.113730.3.4.19