How to List All Active Directory Attributes

In this tutorial, you will learn how to quickly get a list of all Active Directory user attributes.

I’m going to show you how to list attributes using the Active Directory Users Console, the AD Pro Toolkit, and PowerShell.

By default, Active Directory does not display all attributes but no big deal it is easy to fix.

Reasons to get all user attributes:

Export AD Users to CSV

Update AD User Attributes

Create AD User Reports

Check or verify user attributes

Let’s get started.

How to List All User Attributes Using ADUC

To list all user attributes in Active Directory you first need to enable the advanced features.

Step 1. Open the Active Directory Users and Computer Console

active directory users and computer console

Step 2. Click on View and enable Advanced Features

advanced features

When you enable advanced features this option will stay enabled, meaning you do not need to enable it each time you open ADUC.

Step 3. Open the Attribute Editor

With the advanced features enabled, you can open a user account and click the Attribute Editor. This will display all the attributes for this user account.

active directory attribute editor

There will be many attributes that are blank, this is normal. If you want to see only the attributes that have values click on filter and select Show only attributes that have values.

show only attributes that have values

This will greatly reduce the number of attributes displayed for the user. I personally like to display all attributes including the blank ones as I often need to check the value for specific user attributes.

List Active Directory Attributes Using the AD Pro Toolkit

There are a few different ways you can list all user attributes with the AD Pro Toolkit.

Note: The toolkit does not get all attributes, it has been configured to list the most commonly used attributes. Currently, it will get over 40 user attributes. More can be added upon request.

Option 1: Export Users Tool

Click on Tools > Export Users

You can run this tool for the entire domain or select an OU or group.

list attributes using the export users tool

Click on the Columns button to add or remove user attributes.

add or remove user attributes

You can export the list to CSV, Excel or PDF by clicking the export button.

export attributes

Option 2: All Users Report

You can also get a list of user attributes by running one of the many user reports.

Click on Reports > Users

The AD Pro Toolkit includes over 200 pre-built reports.

  • User Reports
  • Computer Reports
  • Group Policy Reports
  • Group Reports
  • OUs
  • Security Reports

Try the Toolkit for FREE in your domain, Download Free Trial.

Get All User Attributes with PowerShell

By default, the get-aduser cmdlet will only return 10 user attributes.

get user attributes with powershell

To get all user attributes with PowerShell you need to use the Properties parameter.

Here is an example command.

get-aduser -Identity robert.allen -properties *
display all attributes with powershell

The above command will return 111 user attributes. This number might be different in your domain depending on if the schema has been modified or extended.

To count the number of attributes use the below command.

$user= get-aduser robert.allen -properties *;
$user | Get-Member -MemberType Property,AliasProperty | Measure-Object

I hope you found this guide useful. If you have questions or comments post them below.

Related Content

Recommended Tool: Active Directory Pro Toolkit

The AD Pro Toolkit includes 14 tools in 1 to help simplify and automate Active Directory management.

Automate user creation, bulk update accounts, group management, logon reports, report NTFS permissions, cleanup, and secure AD, troubleshoot account lockouts, and much more.

In addition, the toolkit includes over 200 built-in reports.

Click here to download a free trial

Leave a Comment