Directory Services

Mapping between IADsUser Properties and Active Directory Properties

When applicable, a property of ADSI user object is mapped to an appropriate Active Directory property. The ADSI user object properties are associated with the IADsUser property methods. Active Directory properties correspond to the ldapDisplayname attributes.

The following table lists the mapping between the IADsUser properties and their LDAP counterparts.

ADSI property Active Directory property
AccountDisabled userAccountControl mask
AccountExpirationDate accountExpires
BadLoginAddress Not Supported
BadLoginCount badPwdCount
Department department
Description description
Division division
EmailAddress mail
EmployeeID employeeID
FaxNumber facsimileTelephoneNumber
FirstName givenName
FullName displayName
GraceLoginsAllowed Not Supported
GraceLoginsRemaining Not Supported
HomeDirectory homeDirectory
HomePage wWWHomePage
IsAccountLocked userAccountControl mask
Languages language
LastFailedLogin badPasswordTime
LastLogin lastLogon
LastLogoff lastLogoff
LastName sn
LoginHours logonHours
LoginScript scriptPath
LoginWorkstations userWorkstations
Manager manager
MaxLogins Not Supported
MaxStorage maxStorage
NamePrefix personalTitle
NameSuffix generationQualifier
OfficeLocations physicalDeliveryOfficeName
OtherName middleName
PasswordExpirationDate Set using Group Policy Editor*
PasswordLastChanged pwdLastSet
PasswordMinimumLength Set using Group Policy Editor*
PasswordRequired userAccountControl mask
Picture thumbnailPhoto
PostalAddresses postalAddress
PostalCodes postalCode
Profile profilePath
RequireUniquePassword Set using Group Policy Editor*
SeeAlso seeAlso
TelephoneHome homePhone
TelephoneMobile mobile
TelephoneNumber telephoneNumber
TelephonePager pager
Title title
* For Windows® 2000, group policy objects are not scriptable; use the Microsoft® Management Console snap-in to set them. This will be featured in a future release.