Get user's custom attribute from Active Directory

⌘K

Get user’s custom attribute from Active Directory

This activity allows receiving user’s or secure group custom attribute from Active Directory and stores result in variable.

get_user's_custom_attribute_from_active_directory_1

If attribute does not exist, this method returns empty string.

SharePoint Workflow Designer Phrase

Get this user this attribute from this domain and store result in Variable: variable

Parameters
ParameterDescription
this userUser or secure group login name. Ex: “user@domain”, “domain\user” or “user”
this attributeAttribute name
this domainOptional. Domain name. You should enter domain name if user name without adomain, otherwise it will be calculated from the user name.

By default, activity uses the current user when authenticating. If you want to use custom authentication, use “Set Active Directory authentication” activity before. See “LDAP Attribute” table to determine the attribute name.

Table: LDAP Attributes

LDAP AttributeExample
CN – Common NameCN=Guy Thomas. Actually, this LDAP attribute is made up from givenName joined to SN.
descriptionWhat you see in Active Directory Users and Computers. Not to be confused with displayName on the Users property sheet.
displayNamedisplayName = Guy Thomas. If you script this property, be sure you understand which field you are configuring. DisplayName can be confused with CN or description.
DN – also distinguishedNameDN is simply the most important LDAP attribute. CN=Jay Jamieson, OU= Newport,DC=cp,DC=com
givenNameFirstname also called Christian name
homeDriveHome Folder : connect. Tricky to configure
namename = Guy Thomas. Exactly the same as CN.
objectCategoryDefines the Active Directory Schema category. For example,
78objectClass = Person
objectClassobjectClass = User. Also used for Computer, organizationalUnit, even container. Important top level container.
physicalDeliveryOfficeNameOffice! on the user’s General property sheet
profilePathRoaming profile path: connect. Trick to set up
sAMAccountNamesAMAccountName = guyt. Old NT 4.0 logon name, must be unique in the domain. Can be confused with CN.
SNSN = Thomas. This would be referred to as last name or surname.
userAccountControlInteger value. Used to select user account options checkboxes. Complete list of user account control values you can find on http://msdn.microsoft.com/library/default.asp?url=/library/en- us/adschema/adschema/a_useraccountcontrol.asp
userPrincipalNameuserPrincipalName = guyt@CP.com Often abbreviated to UPN, and looks like an email address. Very useful for logging on especially in a large Forest. Note UPN must be unique in the forest.
homeMDBHere is where you set the MailStore
legacyExchangeDNLegacy distinguished name for creating Contacts. In the following example,Guy Thomas is a Contact in the first administrative group of GUYDOMAIN: /o=GUYDOMAIN/ou=first administrative group/cn=Recipients/cn=Guy Thomas
mailAn easy, but important attribute. A simple SMTP address is all that is required billyn@ourdom.com
mAPIRecipient – FALSEIndicates that a contact is not a domain user.
mailNicknameNormally this is the same value as the sAMAccountName, but could be different if you wished. Needed for mail enabled contacts.
mDBUseDefaultsAnother straightforward field, just the value to:True
msExchHomeServerNameExchange needs to know which server to deliver the mail. Example:/o=YourOrg/ou=First Administrative Group/cn=Configuration/cn=Servers/cn=MailSrv
proxyAddressesAs the name ‘proxy’ suggests, it is possible for one recipient to have more than one email address. Note the plural spelling of proxyAddresses.
targetAddressSMTP:@ e-mail address. Note that SMTP is case sensitive. All capitals means the default address.
showInAddressBookCoDisplays the contact in the Global Address List.pyright © 2016 All rights reserved. www.virtosoftware.com
cCountry or Region
companyCompany or organization name
departmentUseful category to fill in and use for filtering
homephoneHome Phone number, (Lots more phone LDAPs)
l (Lower case L)L = Location. City ( Maybe Office
locationImportant, particularly for printers.
managerBoss, manager
mobileMobile Phone number
ObjectClassUsually, User, or Computer
OUOrganizational unit. See also DN
postalCodeZip or post code
stState, Province or County
streetAddressFirst line of address
telephoneNumberOffice Phone

How can we help?