User
Stores information about employees, contractors, or long-term visitors in an organization. Includes attributes such as name, contact details, and job-related information.
Table Specific Information
Select
All columns support server-side processing for the operators =, >= , <=, !=, LIKE, AND, and OR. Other filters are executed client side within the 本製品. For example, the following query is processed by LDAP:
SELECT * FROM User WHERE Title LIKE '%abc%' AND AdminCount != '1' LIMIT 5
Insert
To add a User, all fields can be specified except Id, DN, and BaseDN. Required fields that should be provided are RDN and ObjectClass. For example:
INSERT INTO [User] (RDN, ObjectClass) VALUES ('CN=TestUser', 'Top; Person; OrganizationalPerson; User')
Update
All columns except Id, DN, and BaseDN can be updated by providing the Id in the WHERE clause. For example:
UPDATE User SET PostalCode = '94042' WHERE Id = '1|CN=NewUser,CN=Users,DC=MyDC'
Delete
Users can be deleted by providing the Id of the User in a DELETE statement. For example:
DELETE FROM User WHERE Id = '1|CN=NewUser,CN=Users,DC=MyDC'
Columns
| Name | Type | ReadOnly | References | DataFormat | Description |
| Id [KEY] | String | True |
A combined index and Distinguished Name (DN). Multiple indices are supported when the column is set to 'SplitDataByRow'. | ||
| DN | String | True |
The full Distinguished Name (DN) that uniquely identifies the object in the LDAP directory. | ||
| RDN | String | False |
The Relative Distinguished Name (RDN), which is the unique portion of the DN within its parent container. | ||
| BaseDN | String | True |
The base Distinguished Name (BaseDN) that specifies the starting point for LDAP operations. | ||
| ObjectClass | String | False | DelimitedData |
A list of LDAP object classes that define the attributes and behavior of this object. | |
| SN | String | False | DelimitedData |
The surname or family name of the user, such as 'Smith'. | |
| CN | String | False | DelimitedData |
The common name of the object, used for identification and searches. For example, 'John Doe'. | |
| UserPassword | String | False | DelimitedData |
The user's password stored in UTF-8 format. This is a write-only attribute for security purposes. | |
| TelephoneNumber | String | False | DelimitedData |
The primary telephone number associated with the user or object. | |
| SeeAlso | String | False | DelimitedData |
A list of Distinguished Names (DNs) of objects that are related or linked to this one. | |
| Description | String | False | DelimitedData |
A textual description of the object. This attribute can be single-valued or multi-valued depending on compatibility requirements. | |
| Title | String | False | DelimitedData |
The user's formal job title, such as 'Senior Programmer', rather than occupational class, such as programmer. This does not include suffix titles like 'Esq.' or 'DDS'. | |
| X121Address | String | False | DelimitedData |
The X.121 address associated with the object, often used in telecommunications. | |
| RegisteredAddress | String | False | DelimitedData |
A mnemonic address associated with a specific city, registered in the relevant country or region. | |
| DestinationIndicator | String | False | DelimitedData |
An X.500 attribute that is not used in modern NTDS implementations. | |
| PreferredDeliveryMethod | String | False | DelimitedData |
The X.500-preferred method for delivering messages to the addressee. | |
| TelexNumber | String | False | DelimitedData |
A list of alternate telex numbers associated with the user or object. | |
| TeletexTerminalIdentifier | String | False | DelimitedData |
Specifies the Teletex terminal identifier and optional parameters for a teletex terminal linked to this object. | |
| InternationalISDNNumber | String | False | DelimitedData |
The International ISDN (Integrated Services Digital Network) number associated with the object. | |
| FacsimileTelephoneNumber | String | False | DelimitedData |
The telephone number of the user's business fax machine. | |
| Street | String | False | DelimitedData |
The street address of the user or object. | |
| PostOfficeBox | String | False | DelimitedData |
The post office box number associated with the user or object. | |
| PostalCode | String | False | DelimitedData |
The postal or ZIP code used for mail delivery to the user or object. | |
| PostalAddress | String | False | DelimitedData |
The complete mailing address of the user or object. | |
| PhysicalDeliveryOfficeName | String | False | DelimitedData |
The name or location of the user's office within their place of business. | |
| OU | String | False | DelimitedData |
The name of the Organizational Unit (OU) to which the user or object belongs. | |
| ST | String | False | DelimitedData |
The state or province associated with the user or object. | |
| L | String | False | DelimitedData |
The locality, such as a city or town, associated with the user or object. | |
| UserCertificate | String | False | DelimitedData |
A DER-encoded X.509v3 certificate issued to the user, including public key certificates provided by Microsoft Certificate Services. | |
| NetworkAddress | String | False | DelimitedData |
The TCP/IP address for a network segment, also referred to as the subnet address. | |
| UserAccountControl | String | False | DelimitedData |
Flags that define the behavior and access control of the user account. | |
| BadPwdCount | String | False | DelimitedData |
The number of failed login attempts for this account. A value of 0 indicates that the count is unknown. | |
| CodePage | String | False | DelimitedData |
Specifies the code page for the user's preferred language. This attribute is not used in modern Windows implementations. | |
| HomeDirectory | String | False | DelimitedData |
The home directory for the account. If 'homeDrive' specifies a drive letter, 'homeDirectory' must be a UNC path. Otherwise, it is a local path, including the drive letter (e.g., 'C:\Directory\Folder'). | |
| HomeDrive | String | False | DelimitedData |
The drive letter to map to the UNC path specified in 'homeDirectory'. Must be in the format 'DriveLetter:', where 'DriveLetter' is an uppercase letter. | |
| BadPasswordTime | Datetime | False | DelimitedData |
The last date and time a failed login attempt was made using an incorrect password. Stored as a large integer representing the number of 100-nanosecond intervals since January 1, 1601 (UTC). A value of 0 indicates no record of failed attempts. | |
| LastLogoff | String | False | DelimitedData |
This attribute is not currently used in modern implementations. | |
| LastLogon | Datetime | False | DelimitedData |
The last time the user successfully logged on. Stored as a large integer representing the number of 100-nanosecond intervals since January 1, 1601 (UTC). A value of 0 indicates no record of login. | |
| LastLogonTimestamp | Datetime | False | DelimitedData |
The timestamp of the last time the user logged on. This value is stored as a large integer that represents the number of 100-nanosecond intervals since January 1, 1601 (UTC). A value of zero means that the last logon time is unknown. | |
| DBCSPwd | String | False | DelimitedData |
The LAN Manager password of the account. Used primarily for backward compatibility. | |
| LocaleID | String | False | DelimitedData |
A list of locale IDs representing the language and geographic preferences for the user. | |
| ScriptPath | String | False | DelimitedData |
The path to the user's login script. Can be null. | |
| LogonHours | String | False | DelimitedData |
Specifies the hours during which the user is allowed to log on to the domain. | |
| LogonWorkstation | String | False | DelimitedData |
Not used in modern implementations. Refer to the User-Workstations attribute instead. | |
| MaxStorage | String | False | DelimitedData |
Defines the maximum disk space the user can use. Use 'USER_MAXSTORAGE_UNLIMITED' to allow unlimited space. | |
| UserWorkstations | String | False | DelimitedData |
Lists the NetBIOS or DNS names of the computers from which the user can log on. Multiple names are separated by commas. | |
| UnicodePwd | String | False | DelimitedData |
The user's password stored in Windows NT one-way format (OWF). This is managed by the operating system, and the original password cannot be derived. | |
| OtherLoginWorkstations | String | False | DelimitedData |
Specifies non-Windows NT or LAN Manager workstations from which the user can log on. | |
| NtPwdHistory | String | False | DelimitedData |
The user's password history stored in Windows NT one-way format (OWF). | |
| PwdLastSet | Datetime | False | DelimitedData |
The date and time when the user's password was last changed. Stored as a large integer representing 100-nanosecond intervals since January 1, 1601 (UTC). A value of 0 indicates that the user must set a password at next login. | |
| PreferredOU | String | False | DelimitedData |
The Organizational Unit (OU) that is displayed by default on the user's desktop. | |
| PrimaryGroupID | String | False | DelimitedData |
The Relative Identifier (RID) for the user's primary group, typically the Domain Users group. | |
| UserParameters | String | False | DelimitedData |
A Unicode string reserved for application-specific user data. Can be null or contain any character string. | |
| ProfilePath | String | False | DelimitedData |
The path to the user's profile. This value can be a null string, a local absolute path, or a UNC path. | |
| OperatorCount | String | False | DelimitedData |
Tracks the number of operators assigned to the user. | |
| AdminCount | String | False | DelimitedData |
Indicates whether the system has adjusted the ACLs of the object for higher security due to membership in an administrative group. | |
| AccountExpires | Datetime | False | DelimitedData |
The date when the account expires. Stored as a large integer representing 100-nanosecond intervals since January 1, 1601 (UTC). A value of 0 or 0x7FFFFFFFFFFFFFFF indicates the account does not expire. | |
| LmPwdHistory | String | False | DelimitedData |
The password history of the user in LAN Manager (LM) format. Used for backward compatibility. | |
| GroupMembershipSAM | String | False | DelimitedData |
Provides support for down-level Windows NT group membership functionality. | |
| LogonCount | String | False | DelimitedData |
The number of successful logons for the account. A value of 0 indicates no record of successful logons. | |
| ControlAccessRights | String | False | DelimitedData |
Defines the specific rights required for users to perform operations on this object. | |
| DefaultClassStore | String | False | DelimitedData |
Specifies the default Class Store associated with the user. | |
| GroupsToIgnore | String | False | DelimitedData |
An attribute that is not currently used and has no functional effect. | |
| GroupPriority | String | False | DelimitedData |
An unused attribute associated with group priority. | |
| DesktopProfile | String | False | DelimitedData |
Specifies the desktop profile location for a user or group of users. This attribute is not currently used. | |
| DynamicLDAPServer | String | False | DelimitedData |
The DNS name of the server responsible for dynamic properties of this account. | |
| UserPrincipalName | String | False | DelimitedData |
An Internet-style login name for the user, based on RFC 822 standards. Typically maps to the user's email address for convenience. For more information about this attribute, see User Naming Attributes. | |
| LockoutTime | Datetime | False | DelimitedData |
The date and time (UTC) when the account was locked out. Stored as a large integer representing 100-nanosecond intervals since January 1, 1601 (UTC). A value of 0 indicates the account is not locked out. | |
| UserSharedFolder | String | False | DelimitedData |
Specifies a UNC path to the user's shared documents folder. The path must be a network UNC path of the form \\Server\Share\Directory. This value can be a null string. | |
| UserSharedFolderOther | String | False | DelimitedData |
Specifies an additional UNC path to the user's shared documents folder. The path must be a network UNC path of the form \\Server\Share\Directory. This value can be a null string. | |
| ServicePrincipalName | String | False | DelimitedData |
Lists the Service Principal Names (SPNs) used for mutual authentication with services on this computer. | |
| ACSPolicyName | String | False | DelimitedData |
Specifies the name of the ACS (Access Control System) policy that applies to the user. | |
| TerminalServer | String | False | DelimitedData |
Contains data used by the Windows NT Terminal Server. Not user-editable. | |
| MSMQSignCertificates | String | False | DelimitedData |
A collection of certificates issued to the user for Microsoft Message Queuing (MSMQ). Includes a digest for each certificate. | |
| MSMQDigests | String | False | DelimitedData |
An array of digests corresponding to the certificates in the MSMQSignCertificates attribute, used for certificate mapping. | |
| MSMQDigestsMig | String | False | DelimitedData |
In MSMQ mixed-mode, stores the previous value of the MSMQDigests attribute. | |
| MSMQSignCertificatesMig | String | False | DelimitedData |
In MSMQ mixed-mode, stores the previous value of the MSMQSignCertificates attribute. | |
| MsNPAllowDialin | String | False | DelimitedData |
Indicates whether the account is allowed to dial in to a RAS server. This value should be managed through RAS administration tools. | |
| MsNPCallingStationID | String | False | DelimitedData |
An attribute used internally for RAS. Do not modify directly. | |
| MsNPSavedCallingStationID | String | False | DelimitedData |
Stores the saved RAS calling station ID. This attribute is used internally and should not be modified directly. | |
| MsRADIUSCallbackNumber | String | False | DelimitedData |
The callback number used for RADIUS. This attribute is managed internally. | |
| MsRADIUSFramedIPAddress | String | False | DelimitedData |
Specifies the framed IP address for RADIUS. Managed internally. | |
| MsRADIUSFramedRoute | String | False | DelimitedData |
Defines the framed route for RADIUS. Managed internally. | |
| MsRADIUSServiceType | String | False | DelimitedData |
Indicates the RADIUS service type. Managed internally. | |
| MsRASSavedCallbackNumber | String | False | DelimitedData |
The saved RADIUS callback number. Managed internally. | |
| MsRASSavedFramedIPAddress | String | False | DelimitedData |
The saved RADIUS framed IP address. Managed internally. | |
| MsRASSavedFramedRoute | String | False | DelimitedData |
The saved RADIUS framed route. Managed internally. | |
| MS-DS-CreatorSID | String | False | DelimitedData |
The Security Identifier (SID) of the creator of the object containing this attribute. |
Pseudo-Columns
SELECT ステートメントのWHERE 句では、疑似カラムフィールドを使用して、データソースから返されるタプルを詳細に制御することができます。
| Name | Type | Description |
| Filter | String |
Defines an explicit LDAP filter that overrides any other filter specified in the WHERE clause. |