Active Directory Attribute Reference

Overview

SMOD is a flexible tool that allows almost all Active Directory attributes to be exposed to the user for self service editing.  This reference gives some information about the data types that are supported by SMOD and a list of useful attributes in Active Directory with their corresponding LDAP names for reference.  

 

Please keep in mind this is not an inclusive list.  Since Active Directory is extensible and the schema (definition of classes and attributes in Active Directory) constantly changes and can be changed by third party products, many more attributes can be supported by SMOD as long as the data type for that attribute is supported.  

Supported Datatypes

Each Active Directory attribute is of a certain data type.  Also, the attributes can be classified as single value or multi value.  For example, one common data type is INTEGER.  An attribute can be defined with dataype of INTEGER and classified as single value - meaning the attribute can only store one INTEGER value.  

 

The following table shows the common data types in Active Directory and the type of support in SMOD:

 

Data Type ADSIEDIT data type Support in SMOD Example
String (Unicode) Unicode (Directory) String

Full Support (Single-Value and Multi-Value)

 displayName
Object Identifier (OID) Object Identifier Not Supported allowedAttributes
Case Sensitive String CaseSensitiveString

Full Support (Single-Value and Multi-Value)

  
CaseIgnoreString Case Insensitive String

Full Support (Single-Value and Multi-Value)

 legacyExchangeDN
String (Printable) IA5-String

Full Support (Single-Value and Multi-Value)

 serialNumber
String Numeric Numerical String

Full Support (Single-Value and Multi-Value)

 internationalISDNNumber
Distinguished Name with Binary DN Binary Not Supported authOrig
Boolean Boolean

Full Support (Single-Value)

 isDeleted
Integer Integer Full Support (Single-Value and Multi-Value) countryCode
String Octet Octet String (Integer8) Full Support Single-Value for photo attributes jpegphoto

UTC Time

 UTC CodedTime Full Support Single-Value  
Generalized Time UTC Coded Time Full Support Single-Value modifyTimeStamp
Presentation Address Presentation Address Not Supported  
Distinguished Name Distinguished Name Full Support (Single-Value and Multi-Value) - user objects only assistant
Distinguished Name with String Distinguished Name with String Not Supported msExchSupervisionUserLink
Large Integer Large Integer Full Support Single-Value (treated as date-time) lastLogoff
OR-Name ORName Not Supported  
SID

SID

 Not Supported tokenGroups
Security Descriptor   Not Supported  

 

 

Attributes in Microsoft Active Directory

A comprehensive list of Active Directory attributes is beyond the scope of this document.  Some common attributes are shown below with their Common Names and LDAP Names.  

 

To use the attribute in SMOD, you must specify the LDAP Display Name in the SMOD Admin section when adding attributes.  

 

Common Name

LDAP Display Name Syntax Syntax Name (Data Type) Single Valued?
Account-Expires accountExpires 2.5.5.16 Integer8 TRUE
Account-Name-History accountNameHistory 2.5.5.12 DirectoryString FALSE
Account-Expires accountExpires 2.5.5.16 Integer8 TRUE
Assistant assistant 2.5.5.1 DN TRUE
Canonical-Name canonicalName 2.5.5.12 DirectoryString FALSE
carLicense carLicense 2.5.5.12 DirectoryString FALSE
Common-Name cn 2.5.5.12 DirectoryString TRUE
Text-Country co 2.5.5.12 DirectoryString TRUE
User-Comment comment 2.5.5.12 DirectoryString TRUE
Company company 2.5.5.12 DirectoryString TRUE
Country-Code countryCode 2.5.5.9 Enumeration TRUE
Department department 2.5.5.12 DirectoryString TRUE
departmentNumber departmentNumber 2.5.5.12 DirectoryString FALSE
Description description 2.5.5.12 DirectoryString FALSE
Reports directReports 2.5.5.1 DN FALSE
Display-Name displayName 2.5.5.12 DirectoryString TRUE
Obj-Dist-Name distinguishedName 2.5.5.1 DN TRUE
Division division 2.5.5.12 DirectoryString TRUE
Employee-ID employeeID 2.5.5.12 DirectoryString TRUE
Employee-Number employeeNumber 2.5.5.12 DirectoryString TRUE
Employee-Type employeeType 2.5.5.12 DirectoryString TRUE
Extension-Name extensionName 2.5.5.12 DirectoryString FALSE
Facsimile-Telephone-Number facsimileTelephoneNumber 2.5.5.12 DirectoryString TRUE
Given-Name givenName 2.5.5.12 DirectoryString TRUE
Home-Directory homeDirectory 2.5.5.12 DirectoryString TRUE
Home-Drive homeDrive 2.5.5.12 DirectoryString TRUE
Phone-Home-Primary homePhone 2.5.5.12 DirectoryString TRUE
Address-Home homePostalAddress 2.5.5.12 DirectoryString TRUE
houseIdentifier houseIdentifier 2.5.5.12 DirectoryString FALSE
Comment info 2.5.5.12 DirectoryString TRUE
Initials initials 2.5.5.12 DirectoryString TRUE
Phone-Ip-Primary ipPhone 2.5.5.12 DirectoryString TRUE
jpegPhoto jpegPhoto 2.5.5.10 OctetString FALSE
Locality-Name l 2.5.5.12 DirectoryString TRUE
E-mail-Addresses mail 2.5.5.12 DirectoryString TRUE
Manager manager 2.5.5.1 DN TRUE
Is-Member-Of-DL memberOf 2.5.5.1 DN FALSE
Other-Name middleName 2.5.5.12 DirectoryString TRUE
Phone-Mobile-Primary mobile 2.5.5.12 DirectoryString TRUE
ms-Exch-Assistant-Name msExchAssistantName 2.5.5.12 DirectoryString TRUE
RDN name 2.5.5.12 DirectoryString TRUE
Organization-Name o 2.5.5.12 DirectoryString FALSE
Phone-Fax-Other otherFacsimileTelephoneNumber 2.5.5.12 DirectoryString FALSE
Phone-Home-Other otherHomePhone 2.5.5.12 DirectoryString FALSE
Phone-Ip-Other otherIpPhone 2.5.5.12 DirectoryString FALSE
Phone-Mobile-Other otherMobile 2.5.5.12 DirectoryString FALSE
Phone-Pager-Other otherPager 2.5.5.12 DirectoryString FALSE
Phone-Office-Other otherTelephone 2.5.5.12 DirectoryString FALSE
Organizational-Unit-Name ou 2.5.5.12 DirectoryString FALSE
Phone-Pager-Primary pager 2.5.5.12 DirectoryString TRUE
Personal-Title personalTitle 2.5.5.12 DirectoryString TRUE
photo photo 2.5.5.10 OctetString FALSE
Physical-Delivery-Office-Name physicalDeliveryOfficeName 2.5.5.12 DirectoryString TRUE
Postal-Address postalAddress 2.5.5.12 DirectoryString FALSE
Postal-Code postalCode 2.5.5.12 DirectoryString TRUE
Post-Office-Box postOfficeBox 2.5.5.12 DirectoryString FALSE
preferredLanguage preferredLanguage 2.5.5.12 DirectoryString TRUE
Phone-ISDN-Primary primaryInternationalISDNNumber 2.5.5.12 DirectoryString TRUE
Telex-Primary primaryTelexNumber 2.5.5.12 DirectoryString TRUE
Profile-Path profilePath 2.5.5.12 DirectoryString TRUE
Proxy-Addresses proxyAddresses 2.5.5.12 DirectoryString FALSE
roomNumber roomNumber 2.5.5.12 DirectoryString FALSE
Script-Path scriptPath 2.5.5.12 DirectoryString TRUE
secretary secretary 2.5.5.1 DN FALSE
Surname sn 2.5.5.12 DirectoryString TRUE
State-Or-Province-Name st 2.5.5.12 DirectoryString TRUE
Street-Address street 2.5.5.12 DirectoryString TRUE
Address streetAddress 2.5.5.12 DirectoryString TRUE
Telephone-Number telephoneNumber 2.5.5.12 DirectoryString TRUE
Logo thumbnailLogo 2.5.5.10 OctetString TRUE
Picture thumbnailPhoto 2.5.5.10 OctetString TRUE
Title title 2.5.5.12 DirectoryString TRUE
WWW-Page-Other url 2.5.5.12 DirectoryString FALSE
User-Parameters userParameters 2.5.5.12 DirectoryString TRUE
User-Principal-Name userPrincipalName 2.5.5.12 DirectoryString TRUE
User-Shared-Folder userSharedFolder 2.5.5.12 DirectoryString TRUE
User-Workstations userWorkstations 2.5.5.12 DirectoryString TRUE
Wbem-Path wbemPath 2.5.5.12 DirectoryString FALSE
WWW-Home-Page wWWHomePage 2.5.5.12 DirectoryString TRUE
x500uniqueIdentifier x500uniqueIdentifier 2.5.5.10 OctetString FALSE

 

 

The suggested reference for Microsoft Active Directory attributes is Microsoft's MSDN Library.  At the time of creation of this document, the following link pointed to the MSDN attributes pages:

 

Microsoft MSDN Active Directory Attribute Reference