LDAP Attributes

In this article, we will discuss Active directory LDAP attributes and match them with the friendly name you will see in Active Directory as a field. The name of an attribute is similar to the name of a field in a database. The actual value assigned to the attribute is stored in Active Directory. These attribute mappings with the Active directory fields can be really handy when working with scripts or creating a program that connects to LDAP. 

The table below provides a visual reference of the users LDAP field mappings in Active Directory and the active directory Tab that the fields live. These LDAP attributes can be easily queried using a variety of methods such as VB, C#, or even VBScript.

LDAP attributes

COMMON LDAP ATTRIBUTES

Active Directory TABActive Directory FieldLDAP Attribute
GeneralFirst NamegivenName
GeneralInitialsinitials
GeneralLast namesn
GeneralDisplay namedisplayName
GeneralDescriptiondescription
GeneralOfficetelephoneNumber
GeneralTelephone numbertelephoneNumber
GeneralE-mailmail
GeneralWeb pagewWWHomePage
AddressStreetstreetAddress
AddressP.O BoxpostOfficeBox
AddressCityl
AddressState/provinceSt
AddressZip/Postal CodepostalCode
AddressCounty/regionco
AccountUser logon nameuserPrincipalName
Accountuser logon name (pre-Windows 200)sAMAccountName
AccountLogon Hours (Button)logonHours
AccountUser must change password at next logonpwdLastSet
Account Account ExpiresaccountExpires
ProfileProfile pathprofilePath
ProfileLogon scriptscriptPath
ProfileLocal pathhomeDirectory
ProfileConnecthomeDrive
TelephonesHomehomePhone
TelephonesPagerpager
TelephonesMobileMobile
TelephonesFaxfacsimileTelephoneNumber
TelephonesIP PhoneipPhone
TelephonesNotesinfo
OrganizationJob Titletitle
OrganizationDepartmentdepartment
OrganizationCompanycompany
OrganizationManagermanager
OrganizationDirect Reportsdirectreports
Member OfPrimary GroupprimaryGroupID
ObjectCanonical name of objectcanonicalName
ObjectProtect object from accidental deletionnTSecurityDescriptor

Leave a Reply

Your email address will not be published.