We currently have a View that queries active directory info. I was wondering if there was a good reference as to what fields (field names) are available in AD for me to query against. I don't have access to Active Directory so I can't go playing around in there to maybe figure it out myself. Any help would be appreciated.
我们目前有一个View查询活动目录信息。我想知道是否有一个很好的参考,在AD中可用的哪些字段(字段名称)供我查询。我没有访问Active Directory所以我不能去那里玩,也许我自己搞清楚。任何帮助,将不胜感激。
2 个解决方案
#1
Active Directory uses LDAP v3. This version specifies that any fields may be modified, added, and removed, but in order for AD to work properly there are many fields it retains. You can view the schema for your AD instance by going to the domain controller and using the schema editor (in MMC) to view the available fields, but as you said you do not have access to those resources. Here are the common attributes used across most LDAP implementations:
Active Directory使用LDAP v3。此版本指定可以修改,添加和删除任何字段,但为了使AD正常工作,它保留了许多字段。您可以通过转到域控制器并使用架构编辑器(在MMC中)查看可用字段来查看AD实例的架构,但正如您所说,您无权访问这些资源。以下是大多数LDAP实现中使用的常用属性:
givenName: first name
givenName:名字
sn: last name
sn:姓氏
telephoneNumber: phone number
telephoneNumber:电话号码
streetAddress: street address
streetAddress:街道地址
l: city
st: state
c: country
postalCode: zip code
postalCode:邮政编码
#2
There's a really good set of references at Richard Mueller's site - he has Excel sheets about the AD properties, how they map to the "Active Directory Users & Computers" tool, and how to search using ADO - lots of good stuff!
Richard Mueller的网站上有很多很好的参考资料 - 他有关于AD属性的Excel表格,他们如何映射到“Active Directory用户和计算机”工具,以及如何使用ADO进行搜索 - 很多好东西!
Marc
#1
Active Directory uses LDAP v3. This version specifies that any fields may be modified, added, and removed, but in order for AD to work properly there are many fields it retains. You can view the schema for your AD instance by going to the domain controller and using the schema editor (in MMC) to view the available fields, but as you said you do not have access to those resources. Here are the common attributes used across most LDAP implementations:
Active Directory使用LDAP v3。此版本指定可以修改,添加和删除任何字段,但为了使AD正常工作,它保留了许多字段。您可以通过转到域控制器并使用架构编辑器(在MMC中)查看可用字段来查看AD实例的架构,但正如您所说,您无权访问这些资源。以下是大多数LDAP实现中使用的常用属性:
givenName: first name
givenName:名字
sn: last name
sn:姓氏
telephoneNumber: phone number
telephoneNumber:电话号码
streetAddress: street address
streetAddress:街道地址
l: city
st: state
c: country
postalCode: zip code
postalCode:邮政编码
#2
There's a really good set of references at Richard Mueller's site - he has Excel sheets about the AD properties, how they map to the "Active Directory Users & Computers" tool, and how to search using ADO - lots of good stuff!
Richard Mueller的网站上有很多很好的参考资料 - 他有关于AD属性的Excel表格,他们如何映射到“Active Directory用户和计算机”工具,以及如何使用ADO进行搜索 - 很多好东西!
Marc