Combined index and DN. Multiple indices are only possible when a column is set to SplitDataByRow.

The full distinguished name.

The relative distinguished name.

The base distinguished name.

A bitfield that dictates how the object is instantiated on a particular server. The value of this attribute can differ on different replicas even if the replicas are in sync.

The Windows NT security descriptor for the schema object. A security descriptor is a data structure that contains security information about an object, such as the ownership and permissions of the object.

An object class name used to group objects of this or derived classes.

The list of classes from which this class is derived.

Free text for notes on object.

The user's address.

A user's home address.

The description displayed on admin screens.

The name to be displayed on admin screens.

Attributes that will be permitted to be assigned to a class.

A list of attributes that can be modified on the object.

Classes that can be contained by a class.

A list of classes that can be modified.

The distinguished name of a user's administrative assistant.

The list of servers that are bridgeheads for replication.

The name of the object in canonical format. myserver2.fabrikam.com/users/jeffsmith is an example of a distinguished name in canonical format. This is a constructed attribute. The results returned are identical to those returned by the following Active Directory function: DsCrackNames(NULL, DS_NAME_FLAG_SYNTACTICAL_ONLY, DS_FQDN_1779_NAME, DS_CANONICAL_NAME, ...).

The user's comments. This string can be a null string.

The name that represents an object. Used to perform searches.

The user's company name.

Specifies the country/region code for the user's language of choice. This value is not used by Windows 2000.

The country/region in the address of the user. The country/region is represented as a 2-character code based on ISO-3166.

The date when this object was created. This value is replicated.

Contains the name for the department in which the user works.

Contains the description to display for an object. This value is restricted as single-valued for backward compatibility in some cases but is allowed to be multi-valued in others. See Remarks.

This is part of the X.500 specification and not used by NTDS.

The display name for an object. This is usually the combination of the users first name, middle initial, and last name.

The printable display name for an object. The printable display name is usually the combination of the user's first name, middle initial, and last name.

The user's division.

The DSA-Signature of an object is the Invocation-ID of the last directory to modify the object.

The DS-Core-Propagation-Data attribute is for internal use only.

The list of email addresses for a contact.

The ID of an employee.

The name of a property page used to extend the UI of a directory object.

Contains telephone number of the user's business fax machine.

To be used by the object to store bit information.

This is a constructed attribute that is TRUE if the object is writable and FALSE if it is read-only, for example, a GC replica instance.

Reference to replica sets to which this computer belongs.

Reference to subscriber objects for this member.

Flexible Single-Master Operation: The distinguished name of the DC where the schema can be modified.

This attribute is located on the CN=Directory Service,CN=Windows NT,CN=Services,CN=Configuration,... object. It represents the time, in hours, between DS garbage collection runs.

Indicates a person generation. For example, Jr. or II.

Contains the given name (first name) of the user.

Contains the initials for parts of the user's full name. This may be used as the middle initial in the Windows Address Book.

Specifies an International ISDN Number associated with an object.

If TRUE, the object hosting this attribute must be replicated during installation of a new replica.

If TRUE, this object has been marked for deletion and cannot be instantiated. After the tombstone period has expired, it will be removed from the system.

The distinguished name of the groups to which this object belongs.

Backward link to privileges held by a given principal.

The Distinguished Name (DN) of the last known parent of an orphaned object.

The distinguished name previously used by Exchange.

Represents the name of a locality, such as a town or city.

BLOB that contains a logo for this object.

Contains the list of objects that are managed by the user. The objects listed are those that have the property managedBy property set to this user. Each item in the list is a linked reference to the managed object.

Contains the distinguished name of the user who is the user's manager. The manager's user object contains a directReports property that contains references to all user objects that have their manager properties set to this distinguished name.

Backward link for Has-Master-NCs attribute. The distinguished name for its NTDS Settings objects.

X.400 address.

A computed attribute that represents the date when this object was last changed. This value is not replicated.

This attribute is used to check consistency between the directory and another object, database, or application, by comparing a count of child objects.

This attribute is used to check consistency between the directory and another object, database, or application, by comparing GUIDs.

A list of service connection points that reference this NetBoot server.

List of nonsecurity-members for an Exchange distribution list.

Same as the Distinguished Name for an object. Used by Exchange.

The unique identifier for an object.

This can be used to store a version number for the object.

The name of the organizational unit.

The name of the company or organization.

Contains other additional mail addresses in a form such as CCMAIL: BruceKeever.

Additional names for a user. For example, middle name, patronymic, matronymic, or others.

Contains a list of containers by GUID and Distinguished Name. This permits retrieving an object after it has been moved by using just the GUID and the domain name. Whenever the object is moved, the system automatically updates the Distinguished Name.

Tracks the internal replication state of partial replicas (that is, on GCs). Attribute of the partial replica NC object. Used when the GC is in the process of removing attributes from the objects in its partial replica NCs.

Tracks the internal replication state of partial replicas (that is, on GCs). Attribute of the partial replica NC object. Defines the set of attributes present on a particular partial replica NC.

The user's title.

A list of alternate facsimile numbers.

A list of alternate home phone numbers.

The user's main home phone number.

The list of alternate TCP/IP addresses for the phone. Used by Telephony.

The TCP/IP address for the phone. Used by Telephony.

The primary ISDN.

A list of alternate mobile phone numbers.

The primary mobile phone number.

A list of alternate office phone numbers.

A list of alternate pager numbers.

The primary pager number.

Contains the office location in the user's place of business.

An image of the user. A space-efficient format like JPEG or GIF is recommended.

The list of objects that this object can contain.

The mailing address for the object.

The postal or zip code for mail delivery.

The post office box number for this object.

The X.500-preferred way to deliver to addressee.

This attribute is used internally by Active Directory to help track interdomain moves.

A proxy address is the address by which a Microsoft Exchange Server recipient object is recognized in a foreign mail system. Proxy addresses are required for all recipient objects, such as custom recipients and distribution lists.

List of all objects holding references to a given Query-Policy.

The Relative Distinguished Name (RDN) of an object. An RDN is the relative portion of a distinguished name (DN), which uniquely identifies an LDAP object.

Specifies a mnemonic for an address associated with an object at a particular city location. The mnemonic is registered in the country/region in which the city is located and is used in the provision of the Public Telegram Service.

Tracks internal replication state information for DS objects. Information here can be extracted in public form through the public API DsReplicaGetInfo(). Present on all DS objects.

Tracks internal replication state information for an entire NC. Information here can be extracted in public form through the API DsReplicaGetInfo(). Present on all NC root objects.

Contains the list of users that directly report to the user. The users listed as reports are those that have the property manager property set to this user. Each item in the list is a linked reference to the object that represents the user.

Lists the servers from which the directory will accept changes for the defined naming context.

Lists the servers that the directory will notify of changes and servers to which the directory will send changes on Request for the defined naming context.

The revision level for a security descriptor or other change. Only used in the sam-server and ds-ui-settings objects.

This constructed attribute returns a single DWORD value that can have up to three bits set:

List of distinguished names that are related to an object.

Found in the domain naming context. The distinguished name of a computer under the sites folder.

This attribute is used to indicate in which MAPI address books an object will appear. It is usually maintained by the Exchange Recipient Update Service.

TRUE if this attribute is to be visible in the Advanced mode of the UI.

The list of distinguished names for subnets that belong to this site.

The name of a user's state or province.

The street address.

List of subordinate references of a Naming Context.

The distinguished name for the location of the subschema object where a class or attribute is defined.

This attribute contains the family or last name for a user.

An integer value that contains flags that define additional properties of the class. See Remarks.

The primary telephone number.

Specifies the Teletex terminal identifier and, optionally, parameters, for a teletex terminal associated with an object.

A list of alternate telex numbers.

The primary telex number.

The country/region in which the user is located.

This attribute is used to support X.400 addresses in a text format.

Contains the user's job title. This property is commonly used to indicate the formal job title, such as Senior Programmer, rather than occupational class, such as programmer. It is not typically used for suffix titles such as Esq. or DDS.

Nortel v1 or DMS certificates.

The user's comments.

The user's password in UTF-8 format. This is a write-only attribute.

Certificate distribution object or tagged certificates.

The update sequence number (USN) assigned by the local directory for the latest change, including creation. See also , USN-Created.

The update sequence number (USN) assigned at object creation. See also, USN-Changed.

Contains the update sequence number (USN) for the last system object that was removed from a server.

The update sequence number (USN) for inter-site replication.

Contains the update sequence number (USN) for the last non-system object that was removed from a server.

Value of the USN-Changed attribute of the object from the remote directory that replicated the change to the local server.

References to objects in other ADSI namespaces.

This attribute contains a list of well-known object containers by GUID and distinguished name. The well-known objects are system containers. This information is used to retrieve an object after it has been moved by using just the GUID and the domain name. Whenever the object is moved, the system automatically updates the Distinguished Name portion of the Well-Known-Objects values that referred to the object. The file Ntdsapi.h contains the following definitions, which can be used to retrieve an object (the GUIDs that are associated to these objects are contained in Ntdsapi.h):

The date when this object was last changed. This value is not replicated and exists in the global catalog.

The date when this object was created. This value is replicated and is in the global catalog.

A web page that is the primary landing page of a website.

A list of alternate webpages.

The X.121 address for an object.

Contains the DER-encoded X.509v3 certificates issued to the user. Note that this property contains the public key certificates issued to this user by Microsoft Certificate Service.

Defines the LDAP filter explicitly, overriding any other values set in the WHERE clause.