allowedAttributes 

Operational attribute 

allowedAttributesEffective 

Operational attribute 

allowedChildClasses 

Operational attribute 

alowedChildClassesEffective 

Operational attribute 

bridgeheadServerListBL 

System usage 

canonicalName 

Operational attribute 

controlAccessRights 

String(Octet) 

createTimeStamp 

String(UTC-Time) 

dBCSPwd 

String(Octet) 

directReports 

System usage. Set using the manager attribute of the users that are managed by this user. 

dSASignature 

Object(Replica-Link) 

dSCorePropagationData 

String(UTC-Time) 

fromEntry 

Operational attribute 

frsComputerReferenceBL 

System usage 

fRSMemberReferenceBL 

System usage 

fSMORoleOwner 

System usage 

groupMembershipSAM 

String(Octet) 

instanceType 

System usage 

isCriticalSystemObject 

System usage 

isDeleted 

System usage 

isPrivilegeHolder 

System usage 

lastKnownParent 

System usage 

lmPwdHistory 

String(Octet) 

logonHours 

String(Octet) 

logonWorkstations 

String(Octet) 

masteredBy 

System usage. 

memberOf 

System usage. Use the “groups” attribute. 

modifyTimeStamp 

String(UTC-Time) 

MS-DRM-Identity-Certificate 

String(Octet) 

ms-DS-Cached-Membership 

String(Octet) 

mS-DS-ConsistencyGuid 

String(Octet) 

mS-DS-CreatorSID 

String(Sid) 

ms-DS-Site-Affinity 

String(Octet) 

mSMQDigests 

String(Octet) 

mSMQDigestsMig 

String(Octet) 

mSMQSignCertificates 

String(Octet) 

mSMQSignCertificatesMig 

String(Octet) 

msNPAllowDialin 

Use RAS MPR API to read and update values. 

msNPCallingStation 

Use RAS MPR API to read and update values. 

msNPSavedCallingStationID 

Use RAS MPR API to read and update values. 

msRADIUSCallbackNumber 

Use RAS MPR API to read and update values. 

msRADIUSFramedIPAddress 

Use RAS MPR API to read and update values. 

msRADIUSFramedRoute 

Use RAS MPR API to read and update values. 

msRADIUSServiceType 

Use RAS MPR API to read and update values. 

msRASSavedCallbackNumber 

Use RAS MPR API to read and update values. 

msRASSavedFramedIPAddress 

Use RAS MPR API to read and update values. 

msRASSavedFramedRoute 

Use RAS MPR API to read and update values. 

netbootSCPBL 

System usage 

nonSecurityMemberBL 

System usage 

ntPwdHistory 

System usage 

objectGUID 

String(Octet). The GUID is stored in the Identity Manager user object in the ResourceInfo for the account. 

objectSid 

String(Sid) 

otherWellKnownObjects 

Object(DN-Binary) 

partialAttributeDeletionList 

System usage 

partialAttributeSet 

System usage 

possibleInferiors 

System usage 

proxiedObjectName 

Object(DN-Binary) 

queryPolicyBL 

System usage 

registeredAddress 

String(Octet) 

replPropertyMetaData 

System usage 

replUpToDateVector 

System usage 

repsFrom 

System usage 

repsTo 

System usage 

sDRightsEffective 

Operational attribute 

securityIdentifier 

String(Sid) 

serverReferenceBL 

System usage 

sIDHistory 

String(Sid) 

siteObjectBL 

System usage 

subRefs 

System usage 

subSchemaSubEntry 

System usage 

supplementalCredentials 

System usage 

systemFlags 

System usage 

telexNumber 

String(Octet) 

teletexTerminalIdentifier 

String(Octet) 

terminalServer 

String(Octet) 

thumbnailLogo 

String(Octet) 

tokenGroups 

String(Sid) / Operational attribute 

tokenGroupsGlobalAndUniversal 

String(Sid) 

tokenGroupsNoGCAcceptable 

String(Sid) / Operational attribute 

unicodePwd 

String(Octet). Use userPassword to set the user’s password. 

userCert 

String(Octet) 

userCertificate 

String(Octet) 

userSMIMECertificate 

String(Octet) 

wellKnownObjects 

Object(DN-String) 

x500uniqueIdentifier 

String(Octet)