SelfADSI - The LDAP / ADSI Scripting Tutorial Attributes for ADS Users

In this section of the SelfADSI Scripting tutorial the attributes of an Active Directory Services user object will be described. There are quite a lot of attributes definied for ADS users, all these can be read and manipulated over LDAP and therefor with ADSI also.

Interesting links for this topic:

	MSDN docu of the schema attributes for ADS user objects		MSDN general documentation of the AD Schema
	Reading attributes (SelfADSI scripting tutorial whitepaper)		Writing attributes (SelfADSI scripting tutorial whitepaper)
	Searching directory objects for specific attribute values

When you start dealing with attributes, it can be a bit confusing that in the MSDN documentation there is always two kinds of AD user attribute names: the internal AD database label and the official LDAP label. Unfortunately, sometimes there is no intuitive reference to the meaning of the attribute - or both names are very different from each other.

You can go here directly to the alphabetical list of attributes.

You can search for the attributes by using the original tabs from the "ADS users and computers" tool. Just click on the tab labels to get the detailed description. You can also go to the next tab by clicking it directly.

The next tabs are only visible if Exchange has been installed in the Active Directory forest and if the according management tools exist on your machine - and if the regarding user is mail enabled.

The next tab is only visible if you register the file AcctInfo.dll (account info) from the Windows 2003 Ressource Kit with the following command: regsvr32 acctinfo.dll

The next tabs are only visible if Exchange has been installed in the Active Directory forest and if the according management tools exist on your machine - and if the regarding user is mail enabled.

< back to top

Alphabetical list of attributes

	accountExpires		adminDescription		adminDisplayName		ADsPath
	altRecipient		altRecipientBL		authOrig		authOrigBL
	autoReplyMessage		badPasswordTime		badPwdCount		c (Country)
	canonicalName		Class		co (Country)		company
	countryCode		createTimeStamp		deletedItemFlags		delivContLength
	deliverAndRedirect		department		descritpion		directReports
	displayName		displayNamePrintable		distinguishedName		dLMemRejectPerms
	dLMemRejectPermsBL		dLMemSubmitPerms		dLMemSubmitPermsBL		extensionAttribute1 - 15
	facsimileTelephoneNumber		garbageCollPeriod		givenName		homeDirectory
	homeDrive		homeMDB		homeMTA		homePhone
	info		initials		ipPhone		isDeleted
	l (Location)		lastLogoff		lastLogon		lastLogonTimestamp
	legacyExchangeDN		lockoutTime		logonCount		logonHours
	mail		mailNickname		manager		mDBOverHardQuotaLimit
	mDBOverQuotaLimit		mDBStorageQuota		mDBUseDefaults		member
	memberOf		mobile		modifyTimeStamp		msCOM-UserPartitionSetLink
	msDS-User-Account-Control-Computed		msExchHideFromAddressLists		msExchHomeServerName		msExchMailbox SecurityDescriptor
	msExchMasterAccountSID		msExchOmaAdmin WirelessEnable		msExchPoliciesExcluded		msExchRecipLimit
	msExchRequireAuthToSendTo		msExchUserAccountControl		msNPAllowDialin		msNPCallingStationID
	msNPSavedCallingStationID		msRADIUSCallbackNumber		msRADIUSFramedIPAddress		msRADIUSFramedRoute
	msRADIUSServiceType		msRASSavedCallbackNumber		msRASSavedFramedIPAddress		msRASSavedFramedRoute
	msSFU30GidNumber		msSFU30HomeDirectory		msSFU30LoginShell		msSFU30Name
	msSFU30NisDomain		msSFU30Password		msSFU30UidNumber		name
	Name (ADSI Property)		nTSecurityDescriptor		objectCategory		objectClass
	objectGUID		objectSid		other facsimileTelephoneNumber		otherHomePhone
	otherIpPhone		otherMobile		otherPager		otherTelephone
	pager		Parent		physicalDeliveryOfficeName		postalCode
	postOfficeBox		primaryGroupID		profilePath		protocolSettings
	proxyAddresses		publicDelegates		publicDelegatesBL		pwdLastSet
	sAMAccountName		scriptPath		securityProtocol		sIDHistory
	sn (Surname)		st (State)		streetAddress		submissionContLength
	telephoneNumber		textEncodedORAddress		title		unauthOrig
	unauthOrigBL		url		userAccountControl		userCertificate
	userParameters		userPrincipalName		userWorkstations		uSNChanged
	uSNCreated		whenChanged		whenCreated		wWWHomePage

< back to top

back to SelfADSI home