LDAP name

Description

c

The country/region in the address of the user. The country/region is represented as the 2-character country code based on ISO-3166.

cn

The name that represents an object. Used to perform searches.

co

The 'co' (Friendly Country Name) attribute specifies names of countries in human-readable format. It is commonly used in conjunction with the 'c' (Country Name) [Schema] attribute (whose values are restricted to the two-letter codes defined in [ISO3166]).

company

The user's company name.

countryCode

Specifies the country code for the user's language of choice. This value is not used by Windows 2000.

department

Contains the name for the department in which the user works.

description

Contains the description to display for an object. This value is treated as single-valued by the system.

displayName

The display name for an object. This is usually the combination of the users first name, middle initial, and last name.

distinguishedName

Same as the Distinguished Name for an object. Used by Exchange.

facsimileTelephoneNumber

Contains telephone number of the user's business fax machine.

givenName

Contains the given name (first name) of the user.

homeDirectory

The home directory for the account. If homeDrive is set and specifies a drive letter, homeDirectory must be a UNC path. Otherwise, homeDirectory is a fully qualified local path including the drive letter (e.g. "c:\directory\folder"). This value can be a null string.

homeDrive

Specifies the drive letter to which to map the UNC path specified by homeDirectory. The drive letter must be specified in the form "<DriveLetter>:" where <DriveLetter> is the letter of the drive to map. The <DriveLetter> must be a single, uppercase letter and the colon (:) is required.

homePhone

The user's main home phone number.

info

The user's comments. This string can be a null string.

initials

Contains the initials for parts of the user's full name.

ipPhone

The TCP/IP address for the phone.

l

Represents the name of a locality, such as a town or city.

lastLogon

The last time the user logged on. This value is stored as a large integer that represents the number of 100 nanosecond intervals since January 1, 1601 (UTC). A value of zero means that the last logon time is unknown.

lDAPDisplayName

The name used by LDAP clients, such as the ADSI LDAP provider, to read and write the attribute using the LDAP protocol.

mail

The list of email addresses for a contact.

memberOf

The distinguished name of the groups to which this object belongs.

mobile

The primary cell phone number.

pager

The primary pager number.

physicalDeliveryOfficeName

Contains the office location in the user's place of business.

postalCode

The postal or zip code for mail delivery.

postOfficeBox

The P.O. Box number for this object.

profilePath

Specifies a path to the user's profile. This value can be a null string, a local absolute path, or a UNC path.

sAMAccountName

The logon name used to support clients and servers running older versions of the operating system, such as Windows NT 4.0, Windows 95, Windows 98, and LAN Manager. This attribute must be less than 20 characters to support older clients.

scriptPath

This attribute specifies the path for the user's logon script. The string can be null.

sn

This attribute contains the family or last name for a user.

st

The name of a user's state or province.

streetAddress

The street address.

telephoneNumber

The primary telephone number.

title

Contains the user's job title. This property is commonly used to indicate the formal job title, such as Senior Programmer, rather than occupational class, such as programmer. It is not typically used for suffix titles such as Esq. or DDS.

userAccountControl

Flags that control the behavior of the user account.

userPrincipalName

This attribute contains the UPN that is an Internet-style login name for a user based on the Internet standard RFC 822. The UPN is shorter than the distinguished name and easier to remember. By convention, this should map to the user e-mail name. The value set for this attribute is equal to the length of the user's ID and the domain name.

userWorkstations

Contains the NetBIOS or DNS names of the computers running Windows NT Workstation/Windows 2000 Professional from which the user can log on. Each NetBIOS name is separated by a comma. The NetBIOS name of a computer is the sAMAccountName property of a computer object. Multiple names should be separated by commas.

wWWHomePage

The primary web page.