Group and user management Set user authentication LDAP synchronization

The tables that follow provide you with detailed information about various Active Directory entry values and how to locate them in the Properties dialog box. This information corresponds to the information stored using the Active Directory Users and Computers snap-in. To locate entry values, right-click on a User object, then choose Properties. Then, click on the tab that corresponds to "property sheet," and locate the item in the dialog box that corresponds to "label."

"Account" Property Sheet

Label	Value	Additional information
UserLogon Name	userPrincipalName	The LDAP attribute is logonPrincipalName, which prefixes the Logon Name drop-down menu and adds the full text to the value of the entry.
User logon name (pre-Windows 2000)	sAMAccountname	None.
Logon Hours	logonHours	None.
Log On To	logonWorkstation	None.
Account is locked out	userAccountControl	Toggles a bit in the userAccountControl bitmask (flag: UF_ACCOUNTSDISABLE).
User must change password at next logon	pwdLastSet	None.
User cannot change password	Not applicable.	This is the Change Password control in the access-control list.
Other Account Options	userAccountControl	The remaining items in Account Options toggle bits in the userAccountControl bitmask (flags in a DWORD).
Account Expires	accountExpires	None.

"Address" Property Sheet

Label	Value	Additional information
Street	streetAddress	None.
P.O.Box	postOfficeBox	None.
City	l	The "l" attribute name is a lowercase "L" as in "look."
State/Province	st	None.
Zip/Postal Code	postalCode	None.
Country/Region	c	Also sets co (LDAP) and CountryCode attributes with appropriate value.

"Member Of" Property Sheet

Label	Value	Additional information
Member of	memberOf	None.
Set Primary Group	primaryGroupID	LDAP: Tied to PrimaryGroupToken of the primary group.

"Organization" Property Sheet

Label	Value	Additional information
Title	title	None.
Department	department	None.
Company	company	None.
Manager:Name	manager	None.
Direct Reports	directReports	Back linked by the Active Directory to directreports.

"Profile" Property Sheet

Label	Value	Additional information
Profile Path	profilePath	None.
Logon Script	scriptPath	None.
Home Folder: Local Path	Not applicable.	None.
Home Folder: Connect	homeDrive	None.
Home Folder: To	homeDirectory	Mutually exclusive. Either a home share or a local directory path, but not both.
Drive Letter Drop-down	HomeDirDrive (LDAP Attribute)	None.

"Telephone" Property Sheet

Label	Value	Additional information
Home	telephoneNumber	LDAP: homePhone.
Home: Other	otherTelephone	LDAP: otherHomePhone
Pager	pager	None.
Pager: Other	pagerOther	LDAP: otherPager.
Mobile	mobile	None.
Mobile: Other	otherMobile	None.
Fax	facsimileTelephoneNumber	None.
Fax: Other	otherFacsimileTelephoneNumber	None.
IP phone	ipPhone	None.
IP phone: Other	otherIpPhone	None.
Notes	info	None.

More information about...
	Forum architecture (dispatcher, butler, and so on)
	Use management pages

Group and user management Set user authentication LDAP synchronization