In this article, we will discuss Active directory LDAP attributes and match them with the friendly name you will see in Active Directory as a field. The name of an attribute is similar to the name of a field in a database. The actual value assigned to the attribute is stored in Active Directory. These attribute mappings with the Active directory fields can be really handy when working with scripts or creating a program that connects to LDAP.
The table below provides a visual reference of the users LDAP field mappings in Active Directory and the active directory Tab that the fields live. These LDAP attributes can be easily queried using a variety of methods such as VB, C#, or even VBScript.
COMMON LDAP ATTRIBUTES
Active Directory TAB | Active Directory Field | LDAP Attribute |
General | First Name | givenName |
General | Initials | initials |
General | Last name | sn |
General | Display name | displayName |
General | Description | description |
General | Office | telephoneNumber |
General | Telephone number | telephoneNumber |
General | ||
General | Web page | wWWHomePage |
Address | Street | streetAddress |
Address | P.O Box | postOfficeBox |
Address | City | l |
Address | State/province | St |
Address | Zip/Postal Code | postalCode |
Address | County/region | co |
Account | User logon name | userPrincipalName |
Account | user logon name (pre-Windows 200) | sAMAccountName |
Account | Logon Hours (Button) | logonHours |
Account | User must change password at next logon | pwdLastSet |
Account | Account Expires | accountExpires |
Profile | Profile path | profilePath |
Profile | Logon script | scriptPath |
Profile | Local path | homeDirectory |
Profile | Connect | homeDrive |
Telephones | Home | homePhone |
Telephones | Pager | pager |
Telephones | Mobile | Mobile |
Telephones | Fax | facsimileTelephoneNumber |
Telephones | IP Phone | ipPhone |
Telephones | Notes | info |
Organization | Job Title | title |
Organization | Department | department |
Organization | Company | company |
Organization | Manager | manager |
Organization | Direct Reports | directreports |
Member Of | Primary Group | primaryGroupID |
Object | Canonical name of object | canonicalName |
Object | Protect object from accidental deletion | nTSecurityDescriptor |