If a developer wants to do something in AD, getting/ modifying AD attributes are common operations. Instead of checking attributes of AD object through coding, Active Directory provides an advanced feature “Attribute Editor” for developers to check them.
1. Open Active Directory Users and Computers and select “Advanced Features“ under “View” tab.
2. Select any object and check its properties.
3. Click the “Attribute Editor” tab.
4. Under the “Attribute Editor,” we can find all the attributes and can modify those that are not read only.
5. Double click any not read only attribute in the editor and a Multi-valued string editor will open to edit “description“?attributes.
This feature was very helpful when we developed the AD Self Service web part. As required, AD Self Service allows users to manage their AD information directly in SharePoint. For any user, there are different types of attributes like single value attribute (displayName, etc.), multiple value attribute (description, etc.), and read only attribute (distingushedName, etc.). Attribute Editor is a very convenient way to check this information. If a user modified an attribute through AD Self Service, we can check if the modification is correct with Attribute Editor. So, when dealing with AD objects, do not forget to use the advanced “Attribute Editor” feature.
Ништяк!