
DisplayName can be confused with CN or description.ĭi splay name and Description are differentĭN is simply the most important LDAP attribute.ĬN=Jay Jamieson, OU= Newport, DC=cp, DC=com If you script this property, be sure you understand which field you are configuring. Not to be confused with displayName on the Users property sheet.ĭisplayName = Guy Thomas. What you see in Active Directory Users and Computers. Actually, this LDAP attribute can be made up from givenName joined to SN. Common LDAP Attributes List with Examples LDAP AttributeĬN=Guy Thomas. csv file in Excel, search for the value, and read the LDAP field name from row 1. One of my favourite techniques is to add values in the active directory property boxes, then export using CSVDE.

When you write your scripts, check how the LDAP attributes map to the Active Directory boxes.

It shows the commonest LDAP attributes for vVBSscripts. The diagram below is taken from Active Directory Users and Computers. LDAP Attributes from Active Directory Users and Computers Finally, pay particular attention to commas in distinguished names. Even the speech marks have to be of the right type, “double quotes are correct”, ‘single quotes may be ignored’, with unpredictable results. Incidentally, in this situation, DC means domain content rather than domain controller.Īnother point with the syntax is to check the speech marks when used with VBScript commands, DN is often enclosed in “speech marks”. DC often comes with two entries, DC=CP, DC=COM. Observe the different components CN=common name, OU = organizational unit. Time spent in getting to know the DN attribute will repay manyfold. Once you have selected the object, then you can change its attributes.

The other side of the coin is that DN provides a way of selecting any object in Active Directory. Each DN must have a different name and location from all other objects in Active Directory. Hall of Fame LDAP Attribute – DN Distinguished NameĪs the word ‘distinguished’ suggests, this is THE LDAP attribute that uniquely defines an object. LDAP Attributes from Active Directory Users and Computers.Hall of fame LDAP attribute – DN distinguished name.For example, when you bulk import users you will include the LDAP attributes: dn and sAMAccountName. Programs like VBScript ( WSH), CSVDE and LDIFDE rely on these LDAP attributes to create or modify objects in Active Directory. This page explains the common Lightweight Directory Access Protocol ( LDAP) attributes which are used in VBS scripts and PowerShell. Common LDAP Attributes for VBS and Powershell Scripts
