In this tutorial, you will learn how to quickly get a list of all Active Directory user attributes.
I’m going to show you how to list attributes using the Active Directory Users Console, the AD Pro Toolkit, and PowerShell.
By default, Active Directory does not display all attributes but no big deal it is easy to fix.
Reasons to get all user attributes:
Export AD Users to CSV
Update AD User Attributes
Create AD User Reports
Check or verify user attributes
Let’s get started.
How to List All User Attributes Using ADUC
To list all user attributes in Active Directory you first need to enable the advanced features.
Step 1. Open the Active Directory Users and Computer Console
Step 2. Click on View and enable Advanced Features
When you enable advanced features this option will stay enabled, meaning you do not need to enable it each time you open ADUC.
Step 3. Open the Attribute Editor
With the advanced features enabled, you can open a user account and click the Attribute Editor. This will display all the attributes for this user account.
There will be many attributes that are blank, this is normal. If you want to see only the attributes that have values click on filter and select Show only attributes that have values.
This will greatly reduce the number of attributes displayed for the user. I personally like to display all attributes including the blank ones as I often need to check the value for specific user attributes.
List Active Directory Attributes Using the AD Pro Toolkit
There are a few different ways you can list all user attributes with the AD Pro Toolkit.
Note: The toolkit does not get all attributes, it has been configured to list the most commonly used attributes. Currently, it will get over 40 user attributes. More can be added upon request.
Option 1: Export Users Tool
Click on Tools > Export Users
You can run this tool for the entire domain or select an OU or group.
Click on the Columns button to add or remove user attributes.
You can export the list to CSV, Excel or PDF by clicking the export button.
Option 2: All Users Report
You can also get a list of user attributes by running one of the many user reports.
Click on Reports > Users
The AD Pro Toolkit includes over 200 pre-built reports.
- User Reports
- Computer Reports
- Group Policy Reports
- Group Reports
- OUs
- Security Reports
Try the Toolkit for FREE in your domain, Download Free Trial.
Get All User Attributes with PowerShell
By default, the get-aduser cmdlet will only return 10 user attributes.
To get all user attributes with PowerShell you need to use the Properties parameter.
Here is an example command.
get-aduser -Identity robert.allen -properties *
The above command will return 111 user attributes. This number might be different in your domain depending on if the schema has been modified or extended.
To count the number of attributes use the below command.
$user= get-aduser robert.allen -properties *;
$user | Get-Member -MemberType Property,AliasProperty | Measure-Object
I hope you found this guide useful. If you have questions or comments post them below.
