AD属性对照表.docx

“常规”标签 姓Sn名Givename英文缩写Initials显示名称displayName描述Description办公室physicalDeliveryOfficeName电话号码telephoneNumber电话号码：其它otherTelephone多个以英文分号分隔电子邮件Mail网页wWWHomePage网页：其它url多个以英文分号分隔“地址”标签 国家/地区C如：中国CN，英国GB省/自治区St市/县L街道streetAddress邮政信箱postOfficeBox邮政编码postalCode“帐户”标签 用户登录名userPrincipalName形如：用户登录名（以前版本）sAMAccountName形如：S1登录时间logonHours登录到userWorkstations多个以英文逗号分隔用户帐户控制userAccountControl(启用：512，禁用：514，密码永不过期：66048)帐户过期accountExpires“配置文件”标签配置文件路径profilePath登录脚本scriptPath主文件夹：本地路径homeDirectory连接homeDrive到homeDirectory“电话”标签家庭电话homePhone(若是其它，在前面加other。)寻呼机Pager如：otherhomePhone。移动电话mobile若多个以英文分号分隔。传真FacsimileTelephoneNumberIP电话ipPhone注释Info“单位”标签 职务Title部门Department公司Company“隶属于”标签 隶属于memberOf用户组的DN不需使用引号，多个用分号分隔“拨入”标签远程访问权限（拨入或VPN）msNPAllowDialin允许访问值：TRUE拒绝访问值：FALSE回拨选项msRADIUSServiceType由呼叫方设置或回拨到值：4总是回拨到msRADIUSCallbackNumber名:GivenName属性显示名称属性名称First NamegivenNameLast NamesnInitialsinitialsDescriptiondescriptionOfficephysicalDeliveryOfficeNameTelephone NumbertelephoneNumberTelephone: OtherotherTelephoneE-MailmailWeb PagewwwHomePageWeb Page: Otherurl帐号属性：显示名称属性名称UserLogon NameuserPrincipalNameUser logon name (pre-Windows 2000)sAMAccountnameLogon HourslogonHoursLog On TologonWorkstationAccount is locked outuserAccountControlUser must change password at next logonpwdLastSetUser cannot change passwordN/AOther Account OptionsuserAccountControlAccount ExpiresaccountExpires地址属性显示名称属性名称StreetstreetAddressP.O.BoxpostOfficeBoxCitylState/ProvincestZip/Postal CodepostalCodeCountry/Regionc, co, and countryCode成员属性显示名称属性名称Member ofmemberOfSet Primary GroupprimaryGroupID组织属性显示名称属性名称TitletitleDepartmentdepartmentCompanycompanyManager:NamemanagerDirect ReportsdirectReports外型属性显示名称属性名称Profile PathprofilePathLogon ScriptscriptPathHome Folder: Local PathhomeDirectoryHome Folder: ConnecthomeDriveHome Folder: TohomeDirectory电话相关属性显示名称属性名称HometelephoneNumberHome: OtherotherTelephonePagerpagerPager: OtherpagerOtherMobilemobileMobile: OtherotherMobileFaxfacsimileTelephoneNumberFax: OtherotherFacsimileTelephoneNumberIP phoneipPhoneIP phone: OtherotherIpPhoneNotesinfoC#操作AD例子：GetUserEntry public static DirectoryEntry GetUserEntryByAccount(DirectoryEntry entry, string account) DirectorySearcher searcher = new DirectorySearcher(entry); searcher.Filter = (&(objectClass=user)(SAMAccountName= + account + ); SearchResult result = searcher.FindOne(); entry.Close(); if (result != null) return result.GetDirectoryEntry(); return null; Set Property public static void SetProperty(DirectoryEntry entry, string propertyName, string propertyValue) if (entry.Properties.Contains(propertyName) if (string.IsNullOrEmpty(propertyValue) object o = entry.PropertiespropertyName.Value; entry.PropertiespropertyName.Remove(o); else entry.PropertiespropertyName0 = propertyValue; else if (string.IsNullOrEmpty(propertyValue) return; entry.PropertiespropertyName.Add(propertyValue); Get Property public static string GetProperty(DirectoryEnt