Active Directory 和 Office 365 属性命名

---

正如我在上一篇文章中指出的那样，Active Directory 和 Azure AD 用户属性命名有点混乱！

当您拥有 Office 365 并且属性从本地 AD 同步到 Azure AD (AAD) 时，属性名称似乎会随机更改：

• 从 AD 复制到 Azure AD Connect Metaverse 时，某些属性名称可能会更改
• 从 Azure AD Connect Metaverse 复制到 Azure AD 时，某些属性名称可能会更改

此外，某些属性名称可能会根据您使用的 Office 365 脚本界面而变化。

作为参考，本地 AD AAD Connect Metaverse AAD 复制如下所示：

请务必阅读本文以充分了解 Azure AD Connect 复制和 Metaverse。

本文将为您提供 AD 到 AAD 复制期间转换的各种属性名称的完整概述。

属性名称从 AD 更改为 AAD 将 Metaverse 连接到 AAD (Office 365)

首先，让我们概述一下 AD 到 AAD 连接到 AAD 复制中的整个属性映射（我使用此脚本来提取信息）。

下表显示了 AD 用户属性的 LDAP 显示名称、Azure AD Connect Metaverse 中的属性名称以及 Azure AD (Office 365) 中的属性名称：

AD/Metaverse/AAD - 属性名称

ADAAD MetaverseAAD altRecipientaltRecipientaltRecipient assistantassistantassistant authOrigauthOrigauthOrig cccountryLetterCode cncncommonName cococountry companycompanycompany countryCodecountryCodecountryCode departmentdepartmentdepartment descriptiondescriptiondescription dLMemRejectPermsdLMemRejectPermsdLMemRejectPerms dLMemSubmitPermsdLMemSubmitPermsdLMemSubmitPerms employeeIDemployeeIDemployeeID extensionAttribute1extensionAttribute1extensionAttribute1 extensionAttribute10extensionAttribute10extensionAttribute10 extensionAttribute11extensionAttribute11extensionAttribute11 extensionAttribute12extensionAttribute12extensionAttribute12 extensionAttribute13extensionAttribute13extensionAttribute13 extensionAttribute14extensionAttribute14extensionAttribute14 extensionAttribute15extensionAttribute15extensionAttribute15 extensionAttribute2extensionAttribute2extensionAttribute2 extensionAttribute3extensionAttribute3extensionAttribute3 extensionAttribute4extensionAttribute4extensionAttribute4 extensionAttribute5extensionAttribute5extensionAttribute5 extensionAttribute6extensionAttribute6extensionAttribute6 extensionAttribute7extensionAttribute7extensionAttribute7 extensionAttribute8extensionAttribute8extensionAttribute8 extensionAttribute9extensionAttribute9extensionAttribute9 facsimileTelephoneNumberfacsimileTelephoneNumberfacsimileTelephoneNumber givenNamegivenNamegivenName homePhonehomePhonehomePhone infoinfoinfo initialsinitialsinitials ipPhoneipPhoneipPhone llcity legacyExchangeDNlegacyExchangeDNlegacyExchangeDN mailmailmail mailNicknamemailNicknamealias managermanagermanager middleNamemiddleNamemiddleName mobilemobilemobile msDS-HABSeniorityIndexmsDS-HABSeniorityIndexmsDsHabSeniorityIndex msDS-PhoneticDisplayNamemsDS-PhoneticDisplayNamemsDsPhoneticDisplayName msExchArchiveGUIDmsExchArchiveGUIDmsExchArchiveGuid msExchArchiveNamemsExchArchiveNamemsExchArchiveName msExchAssistantNamemsExchAssistantNamemsExchAssistantName msExchAuditAdminmsExchAuditAdminmsExchAuditAdmin msExchAuditDelegatemsExchAuditDelegatemsExchAuditDelegate msExchAuditDelegateAdminmsExchAuditDelegateAdminmsExchAuditDelegateAdmin msExchAuditOwnermsExchAuditOwnermsExchAuditOwner msExchBlockedSendersHashmsExchBlockedSendersHashmsExchBlockedSendersHash msExchBypassAuditmsExchBypassAuditmsExchBypassAudit msExchDelegateListLinkmsExchDelegateListLinkmsExchDelegateListLink msExchELCExpirySuspensionEndmsExchELCExpirySuspensionEndmsExchElcExpirySuspensionEnd msExchELCExpirySuspensionStartmsExchELCExpirySuspensionStartmsExchElcExpirySuspensionStart msExchELCMailboxFlagsmsExchELCMailboxFlagsmsExchElcMailboxFlags msExchEnableModerationmsExchEnableModerationmsExchEnableModeration msExchHideFromAddressListsmsExchHideFromAddressListsmsExchHideFromAddressLists msExchImmutableIdmsExchImmutableIdmsExchImmutableId msExchLitigationHoldDatemsExchLitigationHoldDatemsExchLitigationHoldDate msExchLitigationHoldOwnermsExchLitigationHoldOwnermsExchLitigationHoldOwner msExchMailboxAuditEnablemsExchMailboxAuditEnablemsExchMailboxAuditEnable msExchMailboxAuditLogAgeLimitmsExchMailboxAuditLogAgeLimitmsExchMailboxAuditLogAgeLimit msExchMailboxGuidmsExchMailboxGuidmsExchMailboxGuid msExchModeratedByLinkmsExchModeratedByLinkmsExchModeratedByLink msExchModerationFlagsmsExchModerationFlagsmsExchModerationFlags msExchRecipientDisplayTypemsExchRecipientDisplayTypemsExchRecipientDisplayType msExchRemoteRecipientTypemsExchRemoteRecipientTypemsExchRemoteRecipientType msExchRequireAuthToSendTomsExchRequireAuthToSendTomsExchRequireAuthToSendTo msExchResourceCapacitymsExchResourceCapacitymsExchResourceCapacity msExchResourceDisplaymsExchResourceDisplaymsExchResourceDisplay msExchResourceMetaDatamsExchResourceMetaDatamsExchResourceMetadata msExchResourceSearchPropertiesmsExchResourceSearchPropertiesmsExchResourceSearchProperties msExchRetentionCommentmsExchRetentionCommentmsExchRetentionComment msExchRetentionURLmsExchRetentionURLmsExchRetentionUrl msExchSafeRecipientsHashmsExchSafeRecipientsHashmsExchSafeRecipientsHash msExchSafeSendersHashmsExchSafeSendersHashmsExchSafeSendersHash msExchSenderHintTranslationsmsExchSenderHintTranslationsmsExchSenderHintTranslations msExchUsageLocationusageLocationusageLocation objectSidobjectSidonPremiseSecurityIdentifier otherFacsimileTelephoneNumberotherFacsimileTelephoneNumberotherFacsimileTelephoneNumber otherHomePhoneotherHomePhoneotherHomePhone otherIpPhoneotherIpPhoneotherIpPhone otherMobileotherMobileotherMobile otherPagerotherPagerotherPager otherTelephoneotherTelephoneotherTelephone pagerpagerpager physicalDeliveryOfficeNamephysicalDeliveryOfficeNamephysicalDeliveryOfficeName postalCodepostalCodepostalCode postOfficeBoxpostOfficeBoxpostOfficeBox preferredLanguagepreferredLanguagepreferredLanguage proxyAddressesproxyAddressesproxyAddresses publicDelegatespublicDelegatespublicDelegates pwdLastSetpwdLastSetlastPasswordChangeTimestamp sAMAccountNameaccountNameonPremisesSamAccountName snsnsurname stststate streetAddressstreetAddressstreetAddress targetAddresstargetAddresstargetAddress telephoneAssistanttelephoneAssistanttelephoneAssistant telephoneNumbertelephoneNumbertelephoneNumber thumbnailPhotothumbnailPhotothumbnailPhoto titletitletitle unauthOrigunauthOrigunauthOrig urlurlurl userAccountControlaccountEnabledaccountEnabled wWWHomePagewWWHomePagewWWHomePage

（该列表可能与您的安装有所不同，具体取决于您创建的 Active Directory 扩展）

敏锐的眼睛会在上表中发现一些属性名称在复制过程中发生了变化。

下表列出了在通过 Metaverse 从 AD 传输到 Azure AD 期间名称发生更改的属性：

AD/Metaverse/AAD - 属性名称更改

ADAAD MetaverseAAD cccountryLetterCode cncncommonName cococountry llcity mailNicknamemailNicknamealias msDS-HABSeniorityIndexmsDS-HABSeniorityIndexmsDsHabSeniorityIndex msDS-PhoneticDisplayNamemsDS-PhoneticDisplayNamemsDsPhoneticDisplayName msExchUsageLocationusageLocationusageLocation objectSidobjectSidonPremiseSecurityIdentifier pwdLastSetpwdLastSetlastPasswordChangeTimestamp sAMAccountNameaccountNameonPremisesSamAccountName snsnsurname stststate userAccountControlaccountEnabledaccountEnabled

概括

从上表可以清楚地看出，您需要根据“入口点”通过不同的命名来处理某些属性。本地 Active Directory 可能使用与 Azure AD 不同的属性名称！

由于您的 PowerShell 脚本接口还更改了一些名称，如此处所述，这一事实使情况变得更加复杂。