AD hidden attributes

[SQLScholar]

Hi all,

Is there a list anywhere that shows all User attributes of AD and if they are visable to

A) End user directory view
B) ADUC

Basically i need a field to store someones mifare number. I am already using employeeid - but i need a field similar so that both End users and ADUC cant see this field.

TIA

Dan

----------------------------------------
Be who you are and say what you feel, because those who mind don't matter and those who matter don't mind - Dr. Seuss

Computer Science is no more about computers than astronomy is about telescopes - EW Dijkstra
----------------------------------------

 

[acl03]

Adsiedit.msc is the easiest tool that I know of that shows all attributes of AD objects.

See this page from MS:

http://technet.microsoft.com/en-us/library/cc773354.aspx

Be careful when editing objects in this manner, as many of these attributes may not seem important. There may be a field here you can use, but I am not sure of that.

Adding a new attribute to an AD object involves making modifications to the Schema, which can be VERY dangerous, so I do not recommend that at all.

Thanks,
Andrew

Hard work often pays off over time, but procrastination pays off right now!

 

[SQLScholar]

Sorry - i am probably not being clear.

I know ADSIedit and use it currently. What i am trying to find is a field i can use that fulfils my criteria.

Dan

----------------------------------------
Be who you are and say what you feel, because those who mind don't matter and those who matter don't mind - Dr. Seuss

Computer Science is no more about computers than astronomy is about telescopes - EW Dijkstra
----------------------------------------

 

[ELBeast]

It sounds as though you are looking to use something similar to confidential attributes?

See this article:

http://blogs.dirteam.com/blogs/tomek/archive/2005/11/21/confidential-bit.aspx

(How to create and use confidential attributes)