http://msdn.microsoft.com/library/default.asp?url=/library/en-us/ad/ad/user_object_user_interface_mapping.asp
Active Directory 的属性,对AD做操作是一定要知道的。
User Object User Interface Mapping
The following tables identify the property pages supplied by the Active Directory Users and Computers snap-in. Each table identifies the user interface elements of the property page and the Active Directory attribute associated with that user interface element. Because the property pages that are displayed by the Active Directory Users and Computers snap-in can be extended, it is not possible to provide this data for all of the pages displayed in a property sheet.
General Property Page
The following table lists UI labels of the General property page.
UI label | Active Directory attribute |
---|---|
First Name | givenName |
Last Name | sn |
Initials | initials |
Display Name | displayName |
Description | description |
Office | physicalDeliveryOfficeName |
Telephone Number | telephoneNumber |
Telephone: Other | otherTelephone |
Web Page | wwwHomePage |
Web Page: Other | url |
Account Property Page
The following table lists the UI labels of the Account property page.
UI label | Active Directory attribute | Comment |
---|---|---|
UserLogon Name | userPrincipalName | This field is taken from everything in the userPrincipalName attribute that precedes the last '@' character. The last '@' character and everything after it is placed in the suffix combo box. |
User logon name (pre-Windows 2000) | sAMAccountname | No comment. |
Logon Hours | logonHours | No comment. |
Log On To | logonWorkstation | No comment. |
Account is locked out | lockoutTime and lockoutDuration | If the lockoutTime attribute is not zero, the lockoutDuration attribute is added to lockoutTime and compared to the current date and time to determine if the account is locked out. |
User must change password at next logon | pwdLastSet | No comment. |
User cannot change password | N/A | This is the Change Password control in the ACL. |
Other Account Options | userAccountControl | The remaining items in Account Options toggle bits in the userAccountControl attribute bitmask (flags in a DWORD). |
Account Expires | accountExpires | The Account Expires control displays the date that the account will expire at the end of. The accountExpires attribute is stored as the date that the account expires on. Because of this, the date displayed in the Account Expires control will be displayed as one day earlier than the date contained in the accountExpires attribute. |
Address Property Page
The following table lists the UI labels of the Address property page.
UI label | Active Directory attribute | Comment |
---|---|---|
Street | streetAddress | No comment. |
P.O.Box | postOfficeBox | No comment. |
City | l | The l attribute name is a lowercase "L" as in Locale. |
State/Province | st | No comment. |
Zip/Postal Code | postalCode | No comment. |
Country/Region | c, co, and countryCode | No comment. |
Member Of Property Page
The following table lists UI labels of the Member Of property page.
UI label | Active Directory attribute | Comment |
---|---|---|
Member of | memberOf | No comment. |
Set Primary Group | primaryGroupID | LDAP: Tied to primaryGroupToken of the primary group. |
Organization Property Page
The following table shows the UI labels of the Organization property page.
UI label | Active Directory attribute | Comment |
---|---|---|
Title | title | No comment. |
Department | department | No comment. |
Company | company | No comment. |
Manager:Name | manager | No comment. |
Direct Reports | directReports | No comment. |
Profile Property Page
The following table lists the UI labels of the Profile property page.
UI label | Active Directory attribute | Comment |
---|---|---|
Profile Path | profilePath | No comment. |
Logon Script | scriptPath | No comment. |
Home Folder: Local Path | homeDirectory | If Local path is selected, the local path is stored in the homeDirectory attribute. |
Home Folder: Connect | homeDrive | If Connect is selected, the mapped drive is stored in the homeDrive attribute. |
Home Folder: To | homeDirectory | If Connect is selected, the path is stored in the homeDirectory attribute. |
Telephones Property Page
The following table lists the UI elements of the Telephones property page and their corresponding Active Directory attributes.
UI label | Active Directory attribute |
---|---|
Home | homePhone |
Home: Other | otherHomePhone |
Pager | pager |
Pager: Other | otherPager |
Mobile | mobile |
Mobile: Other | otherMobile |
Fax | facsimileTelephoneNumber |
Fax: Other | otherFacsimileTelephoneNumber |
IP phone | ipPhone |
IP phone: Other | otherIpPhone |
Notes | info |
Environment, Sessions, Remote Control, and Terminal Services Profile Property Pages
The Environment, Sessions, Remote Control, and Terminal Services Profile pages are supplied for a user object to support terminal services. The UI elements for these pages do not correspond to individual Active Directory attributes. Instead, the settings are stored in private data within Active Directory. The terminal services settings can be accessed with the IADsTsUserEx interface.