Active Directory的用户属性说明

Active Directory中User对象属性

User Object User Interface Mapping

The following tables identify the property pages supplied by the Active Directory Users and Computers snap-in. Each table identifies the user interface elements of the property page and the Active Directory attribute associated with that user interface element. Because the property pages that are displayed by the Active Directory Users and Computers snap-in can be extended, it is not possible to provide this data for all of the pages displayed in a property sheet.

General Property Page

 

The following table lists UI labels of the General property page.

* UI label Active Directory attribute
* First Name givenName
* Last Name sn
* Initials initials
* Description description
* Office physicalDeliveryOfficeName
* Telephone Number telephoneNumber
* Telephone: Other otherTelephone
* E-Mail mail
* Web Page wwwHomePage
Web Page: Other url

 

Account Property Page

 

The following table lists the UI labels of the Account property page.

UI label Active Directory attribute Comment
* UserLogon Name userPrincipalName This field is taken from everything in the userPrincipalName attribute that preceeds the last '@' character. The last '@' character and everything after it is placed in the suffix combo box.

* User logon name (pre-Windows 2000) sAMAccountname No comment.

* Logon Hours logonHours No comment.
* Log On To logonWorkstation No comment.

* Account is locked out lockoutTime and lockoutDuration If the lockoutTime attribute is not zero, the lockoutDuration attribute is added to lockoutTime and compared to the current date and time to determine if the account is locked out.

* User must change password at next logon pwdLastSet No comment. User cannot change password N/A This is the Change Password control in the ACL.

* Other Account Options userAccountControl The remaining items in Account Options toggle bits in the userAccountControl attribute bitmask (flags in a DWORD).
* Account Expires accountExpires The Account Expires control displays the date that the account will expire at the end of. The accountExpires attribute is stored as the date that the account expires on. Because of this, the date displayed in the Account Expires control will be displayed as one day earlier than the date contained in the accountExpires attribute.

 

Address Property Page

 

The following table lists the UI labels of the Address property page.

UI label Active Directory attribute Comment
* Street streetAddress No comment.
* P.O.Box postOfficeBox No comment.
* City l The l attribute name is a lowercase "L" as in Locale.
* State/Province st No comment.
* Zip/Postal Code postalCode No comment.
* Country/Region c, co, and countryCode No comment.

 

Member Of Property Page

 

The following table lists UI labels of the Member Of property page.

UI label Active Directory attribute Comment
* Member of memberOf No comment.
* Set Primary Group primaryGroupID
* LDAP: Tied to primaryGroupToken of the primary group.

 

Organization Property Page

 

The following table shows the UI labels of the Organization property page.

UI label Active Directory attribute Comment
* Title title No comment.
* Department department No comment.
* Company company No comment.
* Manager:Name manager No comment.
* Direct Reports directReports No comment.

 

Profile Property Page

 

The following table lists the UI labels of the Profile property page.

UI label Active Directory attribute Comment
* Profile Path profilePath No comment.
 * Logon Script scriptPath No comment. Home Folder:
* Local Path homeDirectory If Local path is selected, the local path is stored in the homeDirectory attribute.
* Home Folder: Connect homeDrive If Connect is selected, the mapped drive is stored in the homeDrive attribute. Home Folder: To homeDirectory If Connect is selected, the path is stored in the homeDirectory attribute.

 

Telephones Property Page

 

The following table lists the UI elements of the Telephones property page and their corresponding Active Directory attributes.

UI label Active Directory attribute
* Home homePhone
* Home: Other otherHomePhone
* Pager pager Pager:
* Other otherPager
* Mobile mobile
* Mobile: Other otherMobile
* Fax facsimileTelephoneNumber
* Fax: Other otherFacsimileTelephoneNumber
* IP phone ipPhone
* IP phone: Other otherIpPhone Notes info

 

Environment, Sessions, Remote Control, and Terminal Services Profile Property Pages