Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Im trying to make a c# app that extracts users from AD. And with the AD im working on there are a lot if wierd names for the fields in a user object.

name = fullname
mail = email
telephoneNumber = phone number 

(yeah, not much wierdness yet... but:)

sn = surname
co = country
l = city
st = state

So my question is there a list of the fieldnames that i can extract for a user or are they setup by the administrator (ifso i have to ask him for his crazy keywords)?

share|improve this question
That is a good question... And now you can vote! – gWaldo Oct 19 '10 at 20:18
up vote 8 down vote accepted

AD is basically a customized-for-windows LDAP server. Is this and this the kind of information you're looking for?

There are extensions and alterations that can be made to it, such as for integrating Exchange or other services with AD, so you can't necessarily count on every AD environment being exactly the same. But the basic authentication fields shouldn't change.

You can google for information on importing/exporting bulk information in AD for information about fields and attributes. There are plenty of tools for moving data to and from text files and AD out there.

share|improve this answer
Ah, just what I wanted :-) – Jason94 Oct 19 '10 at 11:52
@Jason94: Then you should upvote and accept this answer. – Robert Munteanu Oct 19 '10 at 11:55
I have acceptet but i have too little street creed around here to up it, sry. – Jason94 Oct 19 '10 at 12:57

I personally use ADExplorer (from SysInternals, now owned by Microsoft) and occasionally ADSIEdit for all of my AD property needs. Really helpful when writing code...

share|improve this answer

I needed similar information not long ago and found this resource quite usefull : link text

share|improve this answer

Yes, use an ldap browser is the easiest way. Or lookup the active directory ldap schema

share|improve this answer

We have a product Called Keck at You may want to check it out. It may do what you are needing already.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.