Overview#

We have some details on various Microsoft Active Directory Attributes.

The terms Attribute and "property" are interchangeable when discussing Microsoft Active Directory. The name of an attribute is similar to the name of a field in a database. The actual value assigned to the attribute is stored in Active Directory.[1]

The Active Directory schema can be extended to include additional attributes.

Spreadsheets on Microsoft Active Directory Attributes[1]#

We have compiled these from various sources including our own discovery.

Spreadsheet of User Properties in Active Directory Users & Computers MMC#

The spreadsheet ADUC Attribute Documents the attributes corresponding to the fields on the following tabs of the user properties dialog of ADUC:

• MMC General Tab
• Address
• MMC Account Tab
• Profile
• Telephones
• Organization

We also have show most of these on ADUC.

Microsoft Active Directory Schema#

Microsoft Active Directory Schema shows the:

• syntax of each Attribute in the schema
• which Attributes are replicated to the Global Catalog
• which Attributes have LDAP Indexes
• which Attributes are OperationalAttributes
• which Attributes are Not Synchronized
• whether they are SINGLE-VALUE or MULTI-VALUE
• which class of objects can use each attribute.

The spreadsheet indicates which attributes were available in Windows 2000 Server and which were new in Windows Server 2003 or Windows Server 2008. Some of the attributes that are shown as not available in Windows Server 2003, but available in Windows Server 2008, where introduced in Windows Server 2003 R2.

The Microsoft Active Directory Schema does not include attributes added to the schema by Exchange.

Property Methods #

Documents all Property Methods available for user objects, which of these are supported by WinNT, the syntax, and the attributes they are based on. The value returned by a property method is not stored in Active Directory, but is calculated from other attributes.

LDAP and Global Catalog#

Some interesting aspects of for using LDAP against the Microsoft Active Directory Attributes

More Information#

There might be more information for this subject on one of the following:

• AccountNameHistory
• AllowedAttributesEffective
• Assistant
• AttributeSecurityGUID
• ClassDisplayName
• DefaultHidingValue
• DefaultObjectCategory
• DirectReports
• ExtendedCharsAllowed
• IsDefunct
• IsEphemeral
• LDAP Schema
• LDAPAdminLimits
• LegacyExchangeDN
• ManagedBy
• Manager
• Member
• MemberOf
• Microsoft Active Directory
• Microsoft Management Console
• ModifyTimestamp
• MsDS-TrustForestTrustInfo
• ObjectGUID
• QueryPolicyObject
• RdnAttId
• TokenGroups
• UnixHomeDirectory
• WhenChanged

---

• [#1] - http://www.rlmueller.net/UserAttributes.htm - based on information aquired 2013-07-29