Skip to content

NetTools

Swiss army knife for AD troubleshooting

  • Home
  • Features
  • Screenshots
  • Videos
  • Download
  • Blog
  • Other Tools
    • ACL Viewer
    • GPO Viewer
  • Contact Us

Tag: Meta Data

LDAP Search – Attributes

The Attributes field defines what attributes should be returned by the query, the attributes are specified as a comma separated list. The attributes field also support an number of additional functions for formatting, decode types, and updates.

The Attributes field has the following format:

Syntax: [Attribute[;Conditional Attribute][;DecodeType][;Type][=<Op><Value>]][,][Meta.<Type>.<Attribute>[,] []

Attribute - the name of the attribute to be returned, the list of attributes is provided in a comma separated list, i.e. name, whencreated, pwdlastset.  If the attributes field is left blank all attributes of the object are returned, with the exception of constructed attributes.  

Conditional Attributes - Conditional Attributes allow the user to define the value that is returned based on a true or false conditional statement. See Conditional Attributes

DecodeType - the option is used to change the default DecodeType of an attribute i.e. LastLogonTimeStamp;int64.  See Decode Types for a full list of Decode Types 

Type - These are the Microsoft supported options that provide additional server side functionality, they are:

Range:x-x
Binary

=Op - These are the parameters to complete update queries. See Update Query

Meta.<Type>.<Attribute> - This provides the ability to return the meta data details of an attribute in a query result.  The meta data for an attribute includes the following fields - version number, local USN, originating server, time, and originating DC, any of these can be returned.  The meta data is from the server being queried, to see the meta across all DC use the Meta Data option.

Type:

ver - Version
lusn - Local USN
ousn - Originating USN
time - Time of change
dc - Originating DC

Attribute - The name of the attribute

Examples:

meta.ver.objectclass 
meta.time.pwdlastset
meta.dc.lastlogontimestamp

Author NetToolsPosted on 28 July 201913 January 2020Categories InformationTags Conditional Attributes, Decode Types, Meta Data, Update Queries

Recent Posts

  • HowTo: Display what items were remove from a group membership
  • How to decode LogonHours Attribute
  • HowTo Dump the Active Directory Database
  • Invalid characters for Office365 Sync
  • HowTo: Retrieve BitLocker Passwords
  • NetTools v1.29.0
  • HowTo: Retrieving gMSA Password Details
  • HowTo Troubleshoot AD LDAPS Connection Issues
  • During a logon attempt, the user’s security context accumulated too many security IDs.
  • HowTo: Retrieve LAPS Password
  • Workaround for SmartScreen
  • NetTools V1.28.0
  • NetTools V1.27.7
  • NetTools v1.27.0
  • HowTo: Check that a user has actually changed their password

Tags

  • access token
  • ACE
  • ACL
  • ACL Browser
  • AD Attributes
  • AD Properties
  • ANR
  • ASQ
  • Attributes
  • Basics
  • Columns
  • Conditional Attributes
  • Create Multiples
  • Data Converters
  • Decode Types
  • Favorites
  • FSMO
  • GC
  • GUID
  • Hex
  • HowTo
  • IDate
  • Input Mode
  • IP
  • IPN
  • Kerberos
  • LDAP
  • LDAP Writes
  • Meta Data
  • OID
  • password
  • Schema
  • SDate
  • SDateTime
  • Search
  • SID
  • Sort
  • SSL
  • Subst
  • Table View
  • Trustee Mode
  • Unicode
  • Update Mode
  • UserInput
  • ZDate
  • Home
  • Features
  • Screenshots
  • Videos
  • Download
  • Blog
  • Other Tools
    • ACL Viewer
    • GPO Viewer
  • Contact Us
NetTools Proudly powered by WordPress