This is a complete reference of Active Directory user attributes, organized by the tabs you see in Active Directory Users and Computers (ADUC). Each table lists the friendly name, the LDAP attribute name, and an example value. Use this as a reference when writing PowerShell scripts, building CSV imports, or configuring LDAP queries.
Attribute List
General Tab
| Friendly Name | LDAP Attribute Name | Example |
|---|---|---|
| First Name | givenName | John |
| Initials | initials | JS |
| Last Name | sn | Smith |
| Display Name | displayName | John Smith |
| Description | description | Sales Manager |
| Office | physicalDeliveryOfficeName | London Office |
| Telephone Number | telephoneNumber | 949-555-1234 |
| Telephone Number (Other) | otherTelephone | 949-555-1234 |
| jsmith@company.com | ||
| Web Page | wWWHomePage | www.company.com |
Address Tab
| Friendly Name | LDAP Attribute Name | Example |
|---|---|---|
| Street | streetAddress | 123 Main Street |
| P.O. Box | postOfficeBox | PO Box 456 |
| City | l | Los Angeles |
| State/Province | st | California |
| Zip/Postal Code | postalCode | 90210 |
| Country | co | United States |
| Country Abbreviation | c | US |
| Country Code | countryCode | 840 |
Account Tab
| Friendly Name | LDAP Attribute Name | Example |
|---|---|---|
| User Logon Name | userPrincipalName | jsmith@company.com |
| User Logon Name (Pre-Windows 2000) | sAMAccountName | jsmith |
| Account Expires | accountExpires | 12/31/2026 |
| Logon Hours | logonHours | - |
| Log On To (Workstations) | userWorkstations | PC01, PC02 |
| Account Is Disabled | userAccountControl | 514 |
| Account Is Locked | lockoutTime | - |
| User Must Change Password at Next Logon | pwdLastSet | 0 |
| Password Never Expires | userAccountControl | 66048 |
| User Cannot Change Password | userAccountControl | 68 |
Profile Tab
| Friendly Name | LDAP Attribute Name | Example |
|---|---|---|
| Profile Path | profilePath | \\server\profiles\jsmith |
| Logon Script | scriptPath | logon.bat |
| Home Folder (Local Path) | homeDirectory | C:\Users\jsmith |
| Home Folder (Connect Drive) | homeDrive | H: |
| Home Folder (To Path) | homeDirectory | \\server\home\jsmith |
Telephones Tab
| Friendly Name | LDAP Attribute Name | Example |
|---|---|---|
| Home Phone | homePhone | 949-555-5678 |
| Mobile | mobile | 949-555-9999 |
| Pager | pager | 949-555-0000 |
| Fax | facsimileTelephoneNumber | 949-555-1111 |
| IP Phone | ipPhone | 5001 |
Organization Tab
| Friendly Name | LDAP Attribute Name | Example |
|---|---|---|
| Title | title | IT Manager |
| Department | department | Information Technology |
| Company | company | Contoso Ltd |
| Manager | manager | CN=Jane Doe,OU=IT,DC=company,DC=com |
| Direct Reports | directReports | - |
| Employee ID | employeeID | EMP001 |
| Employee Number | employeeNumber | 12345 |
| Employee Type | employeeType | Full-Time |
| Division | division | North America |
Exchange / Email
| Friendly Name | LDAP Attribute Name | Example |
|---|---|---|
| Email Addresses (Proxy) | proxyAddresses | SMTP:jsmith@company.com |
| Alias | mailNickname | jsmith |
| Hide from Address List | msExchHideFromAddressLists | TRUE |
| Target Address | targetAddress | SMTP:jsmith@company.mail.onmicrosoft.com |
| Legacy Exchange DN | legacyExchangeDN | /o=Company/ou=Exchange/cn=Recipients/cn=jsmith |
Password / Security
| Friendly Name | LDAP Attribute Name | Example |
|---|---|---|
| Password Last Set | pwdLastSet | 133500000000000000 |
| Last Bad Password Attempt | badPasswordTime | 133500000000000000 |
| Bad Password Count | badPwdCount | 3 |
| Last Logon | lastLogon | 133500000000000000 |
| Last Logon (Replicated) | lastLogonTimestamp | 133500000000000000 |
| Logon Count | logonCount | 487 |
| When Created | whenCreated | 1/15/2024 |
| When Changed | whenChanged | 4/10/2026 |
| SID | objectSid | S-1-5-21-… |
| SID History | sidHistory | - |
Extension Attributes
| Friendly Name | LDAP Attribute Name | Example |
|---|---|---|
| Extension Attribute 1 | extensionAttribute1 | Custom Value |
| Extension Attribute 2 | extensionAttribute2 | Custom Value |
| Extension Attribute 3 | extensionAttribute3 | Custom Value |
| Extension Attribute 4 | extensionAttribute4 | Custom Value |
| Extension Attribute 5 | extensionAttribute5 | Custom Value |
| Extension Attribute 6 | extensionAttribute6 | Custom Value |
| Extension Attribute 7 | extensionAttribute7 | Custom Value |
| Extension Attribute 8 | extensionAttribute8 | Custom Value |
| Extension Attribute 9 | extensionAttribute9 | Custom Value |
| Extension Attribute 10 | extensionAttribute10 | Custom Value |
| Extension Attribute 11 | extensionAttribute11 | Custom Value |
| Extension Attribute 12 | extensionAttribute12 | Custom Value |
| Extension Attribute 13 | extensionAttribute13 | Custom Value |
| Extension Attribute 14 | extensionAttribute14 | Custom Value |
| Extension Attribute 15 | extensionAttribute15 | Custom Value |
Visual Reference
This section shows the common ADUC screens and what the friendly name to LDAP name mapping.
General Tab
Address Tab
Account Tab
Profile Tab
Telephones Tab
Organization Tab
How to View User Attributes using Active Directory Users and Computers (ADUC)
Use the steps below to enable the Attribute Editor and view user attributes in Active Directory.
Step 1. Open ADUC
Step 2. Click on View and enable Advanced Features
When you enable advanced features this option will stay enabled, meaning you do not need to enable it each time you open ADUC.
Step 3. Open the Attribute Editor
With the advanced features enabled, you can open a user account and click the Attribute Editor. This will display all the attributes for this user account.
There will be many attributes that are blank, this is normal. If you want to see only the attributes that have values click on filter and select Show only attributes that have values.
This will greatly reduce the number of attributes displayed for the user. I personally like to display all attributes including the blank ones as I often need to check the value for specific user attributes.
View User Attributes in Active Directory with AD Pro Toolkit
The AD Pro Toolkit makes it easy to view attributes in Active Directory. You can quickly view multiple attributes for multiple users or users in an OU. This can be useful to verify user data and to ensure the values are consistent across your organization.
Step 1. Click on User Reports > All Users
Step 2. Add or Remove User Attributes
To add or remove user attributes to the report click the columns button at the top.
Step 3. Click Run
Now click “Run” to get the users and their attributes.
Step 4. Export User Attributes
To export the list of users and attributes click the “Export button” and select your format.
The AD Pro Toolkit includes over 200 pre-built reports.
- User Reports
- Computer Reports
- Group Policy Reports
- Group Reports
- OUs
- Security Reports
Try the Toolkit for FREE in your domain, Download Free Trial.
