如何获取所有 Active Directory 用户对象属性

上周，当我深入研究 Azure AD Connect 用户属性映射和复制时，我想到了一个问题：

Active Directory 用户对象可能具有哪些属性？不仅仅是填充的属性。不仅仅是 AD 用户和计算机高级视图中可见的内容。但是：他们所有人！

我环顾四周，发现了几个半答案。一篇文章建议查看 AD 架构中用户对象的 mayContain 和 systemMayContain 属性。此外，在论坛中，您会看到这个有趣问题的部分答案。

要获得完整的答案，您需要了解 Active Directory 架构类继承其属性的方式。

Active Directory 类和属性继承

在 Active Directory 架构中，您将找到类和属性的所有定义。

一个类可以分为三种类型：

• 结构性 - 您可以从此类类型创建实际对象
• Abstract - 可以继承此类但不能创建对象
• Auxiliary - 定义由类实现的补充类

一个类（任何类型）的定义中最多可以包含四个属性列表。这些列表在以下类属性中定义：

• 可能含有
• 必须包含
• 系统可能包含
• 系统必须包含

此外，所有类都继承自父类（除了所有类的根，即“顶级”类）。

下图显示了如何在 Active Directory 架构中设计用户类：

它继承自organizationPerson 类，该类又继承自person 类，后者又继承自顶层类。

用户类包括来自在auxiliaryClass 和systemAuxiliaryClass 属性中定义的许多补充类的类定义（更多属性！）。

用户类、所有继承类和所有补充类定义了可以包含在用户对象中的属性（在上图中，为简单起见，仅针对用户类显示了 mayContain、mustContain、systemMayContain 和 systemMustContain）。

扩展 AD 管理以包括 Office 365

使用 Easy365Manager 等第三方工具，您可以直接从 AD 用户和计算机管理 Office 365 许可证和邮箱：

借助 Easy365Manager，您不再需要登录多个 Web 控制台并拥有本地 Exchange Server 来管理您的混合 Office 365 环境。

使用 PowerShell 列出所有 AD 用户属性

根据之前的 AD 类概述，您需要检查以下内容以获取任何类定义的潜在属性的完整列表：

• 查找该类继承的所有类的列表（继承链）
• 查找上一步中找到的类的所有补充（辅助）类的列表
• 查找前两个找到的类的四个mustContain/mayContain属性中的所有属性列表（不要忘记类本身）

执行此任务的 PowerShell 脚本可能如下所示：

Import-Module ActiveDirectory
$Loop = $True
$ClassName = "User"
$ClassArray = [System.Collections.ArrayList]@()
$UserAttributes = [System.Collections.ArrayList]@()
# Retrieve the User class and any parent classes
While ($Loop) {
  $Class = Get-ADObject -SearchBase (Get-ADRootDSE).SchemaNamingContext -Filter { ldapDisplayName -Like $ClassName } -Properties AuxiliaryClass, SystemAuxiliaryClass, mayContain, mustContain, systemMayContain, systemMustContain, subClassOf, ldapDisplayName
  If ($Class.ldapDisplayName -eq $Class.subClassOf) {
    $Loop = $False
  }
  $ClassArray.Add($Class)
  $ClassName = $Class.subClassOf
}
# Loop through all the classes and get all auxiliary class attributes and direct attributes
$ClassArray | % {
  # Get Auxiliary class attributes
  $Aux = $_.AuxiliaryClass | % { Get-ADObject -SearchBase (Get-ADRootDSE).SchemaNamingContext -Filter { ldapDisplayName -like $_ } -Properties mayContain, mustContain, systemMayContain, systemMustContain } |
  Select-Object @{n = "Attributes"; e = { $_.mayContain + $_.mustContain + $_.systemMaycontain + $_.systemMustContain } } |
  Select-Object -ExpandProperty Attributes
  # Get SystemAuxiliary class attributes
  $SysAux = $_.SystemAuxiliaryClass | % { Get-ADObject -SearchBase (Get-ADRootDSE).SchemaNamingContext -Filter { ldapDisplayName -like $_ } -Properties MayContain, SystemMayContain, systemMustContain } |
  Select-Object @{n = "Attributes"; e = { $_.maycontain + $_.systemmaycontain + $_.systemMustContain } } |
  Select-Object -ExpandProperty Attributes
  # Get direct attributes
  $UserAttributes += $Aux + $SysAux + $_.mayContain + $_.mustContain + $_.systemMayContain + $_.systemMustContain
}
$UserAttributes | Sort-Object | Get-Unique

脚本的输出当然取决于您正在运行的架构版本和扩展。在我的测试实验室中，输出如下所示：

accountExpires
accountNameHistory
aCSPolicyName
adminCount
adminDescription
adminDisplayName
allowedAttributes
allowedAttributesEffective
allowedChildClasses
allowedChildClassesEffective
altRecipient
altRecipientBL
altSecurityIdentities
assistant
attributeCertificate
attributeCertificateAttribute
audio
authOrig
authOrigBL
autoReply
autoReplyMessage
badPasswordTime
badPwdCount
bridgeheadServerListBL
businessCategory
businessRoles
c
canonicalName
carLicense
cn
co
codePage
comment
company
controlAccessRights
countryCode
createTimeStamp
dBCSPwd
defaultClassStore
deletedItemFlags
delivContLength
deliverAndRedirect
deliveryMechanism
delivExtContTypes
department
departmentNumber
description
desktopProfile
destinationIndicator
directReports
displayName
displayNamePrintable
distinguishedName
division
dLMemDefault
dLMemRejectPerms
dLMemRejectPermsBL
dLMemSubmitPerms
dLMemSubmitPermsBL
dnQualifier
dSASignature
dSCorePropagationData
dynamicLDAPServer
employeeID
employeeNumber
employeeType
enabledProtocols
expirationTime
extensionAttribute1
extensionAttribute10
extensionAttribute11
extensionAttribute12
extensionAttribute13
extensionAttribute14
extensionAttribute15
extensionAttribute2
extensionAttribute3
extensionAttribute4
extensionAttribute5
extensionAttribute6
extensionAttribute7
extensionAttribute8
extensionAttribute9
extensionData
extensionName
facsimileTelephoneNumber
flags
folderPathname
formData
forwardingAddress
fromEntry
frsComputerReferenceBL
fRSMemberReferenceBL
fSMORoleOwner
garbageCollPeriod
gecos
generationQualifier
gidNumber
givenName
groupMembershipSAM
groupPriority
groupsToIgnore
heuristics
homeDirectory
homeDrive
homeMDB
homeMTA
homePhone
homePostalAddress
houseIdentifier
importedFrom
info
initials
instanceType
internationalISDNNumber
internetEncoding
ipPhone
isCriticalSystemObject
isDeleted
isPrivilegeHolder
isRecycled
jpegPhoto
kMServer
l
labeledURI
language
languageCode
lastKnownParent
lastLogoff
lastLogon
lastLogonTimestamp
legacyExchangeDN
lmPwdHistory
localeID
lockoutTime
loginShell
logonCount
logonHours
logonWorkstation
mail
mailNickname
managedObjects
manager
mAPIRecipient
masteredBy
maxStorage
mDBOverHardQuotaLimit
mDBOverQuotaLimit
mDBStorageQuota
mDBUseDefaults
memberOf
mhsORAddress
middleName
mobile
modifyTimeStamp
msCOM-PartitionSetLink
msCOM-UserLink
msCOM-UserPartitionSetLink
msDFSR-ComputerReferenceBL
msDFSR-MemberReferenceBL
msDRM-IdentityCertificate
msDS-AllowedToActOnBehalfOfOtherIdentity
msDS-AllowedToDelegateTo
msDS-Approx-Immed-Subordinates
msDS-AssignedAuthNPolicy
msDS-AssignedAuthNPolicySilo
msDS-AuthenticatedAtDC
msDS-AuthenticatedToAccountlist
msDS-AuthNPolicySiloMembersBL
msDS-Cached-Membership
msDS-Cached-Membership-Time-Stamp
msDS-ClaimSharesPossibleValuesWithBL
msDS-CloudAnchor
msDS-cloudExtensionAttribute1
msDS-cloudExtensionAttribute10
msDS-cloudExtensionAttribute11
msDS-cloudExtensionAttribute12
msDS-cloudExtensionAttribute13
msDS-cloudExtensionAttribute14
msDS-cloudExtensionAttribute15
msDS-cloudExtensionAttribute16
msDS-cloudExtensionAttribute17
msDS-cloudExtensionAttribute18
msDS-cloudExtensionAttribute19
msDS-cloudExtensionAttribute2
msDS-cloudExtensionAttribute20
msDS-cloudExtensionAttribute3
msDS-cloudExtensionAttribute4
msDS-cloudExtensionAttribute5
msDS-cloudExtensionAttribute6
msDS-cloudExtensionAttribute7
msDS-cloudExtensionAttribute8
msDS-cloudExtensionAttribute9
mS-DS-ConsistencyChildCount
mS-DS-ConsistencyGuid
mS-DS-CreatorSID
msDS-EnabledFeatureBL
msDS-ExternalDirectoryObjectId
msDS-FailedInteractiveLogonCount
msDS-FailedInteractiveLogonCountAtLastSuccessfulLogon
msDS-GeoCoordinatesAltitude
msDS-GeoCoordinatesLatitude
msDS-GeoCoordinatesLongitude
msDS-HABSeniorityIndex
msDS-HostServiceAccountBL
msDS-IsDomainFor
msDS-IsFullReplicaFor
msDS-IsPartialReplicaFor
msDS-IsPrimaryComputerFor
msDS-KeyCredentialLink
msDS-KeyPrincipalBL
msDS-KeyVersionNumber
msDS-KrbTgtLinkBl
msDS-LastFailedInteractiveLogonTime
msDS-LastKnownRDN
msDS-LastSuccessfulInteractiveLogonTime
msDS-LocalEffectiveDeletionTime
msDS-LocalEffectiveRecycleTime
msDs-masteredBy
msds-memberOfTransitive
msDS-MembersForAzRoleBL
msDS-MembersOfResourcePropertyListBL
msds-memberTransitive
msDS-NCReplCursors
msDS-NCReplInboundNeighbors
msDS-NCReplOutboundNeighbors
msDS-NC-RO-Replica-Locations-BL
msDS-NcType
msDS-NonMembersBL
msDS-ObjectReferenceBL
msDS-ObjectSoa
msDS-OIDToGroupLinkBl
msDS-OperationsForAzRoleBL
msDS-OperationsForAzTaskBL
msDS-parentdistname
msDS-PhoneticCompanyName
msDS-PhoneticDepartment
msDS-PhoneticDisplayName
msDS-PhoneticFirstName
msDS-PhoneticLastName
msDS-PrimaryComputer
msDS-PrincipalName
msDS-PSOApplied
msDS-ReplAttributeMetaData
msDS-ReplValueMetaData
msDS-ReplValueMetaDataExt
msDS-ResultantPSO
msDS-RevealedDSAs
msDS-RevealedListBL
msDS-SecondaryKrbTgtNumber
msDS-Site-Affinity
msDS-SourceAnchor
msDS-SourceObjectDN
msDS-SupportedEncryptionTypes
msDS-SyncServerUrl
msDS-TasksForAzRoleBL
msDS-TasksForAzTaskBL
msDS-TDOEgressBL
msDS-TDOIngressBL
msds-tokenGroupNames
msds-tokenGroupNamesGlobalAndUniversal
msds-tokenGroupNamesNoGCAcceptable
msDS-User-Account-Control-Computed
msDS-UserPasswordExpiryTimeComputed
msDS-ValueTypeReferenceBL
msExchADCGlobalNames
msExchAddressBookFlags
msExchAggregationSubscriptionCredential
msExchALObjectVersion
msExchAlternateMailboxes
msExchApprovalApplicationLink
msExchArbitrationMailbox
msExchArchiveAddress
msExchArchiveDatabaseBL
msExchArchiveDatabaseLink
msExchArchiveGUID
msExchArchiveName
msExchArchiveQuota
msExchArchiveStatus
msExchArchiveWarnQuota
msExchAssistantName
msExchAuditAdmin
msExchAuditDelegate
msExchAuditDelegateAdmin
msExchAuditOwner
msExchAvailabilityOrgWideAccountBL
msExchAvailabilityPerUserAccountBL
msExchBlockedSendersHash
msExchBypassAudit
msExchBypassModerationBL
msExchBypassModerationFromDLMembersBL
msExchBypassModerationFromDLMembersLink
msExchBypassModerationLink
msExchCalculatedTargetAddress
msExchCalendarRepairDisabled
msExchCapabilityIdentifiers
msExchCoManagedObjectsBL
msExchConferenceMailboxBL
msExchConfigurationUnitBL
msExchContentConversionSettings
msExchControllingZone
msExchCU
msExchCustomProxyAddresses
msExchDelegateListBL
msExchDelegateListLink
msExchDeviceAccessControlRuleBL
msExchDirsyncID
msExchDirsyncSourceObjectClass
msExchDisabledArchiveDatabaseLink
msExchDisabledArchiveGUID
msExchDumpsterQuota
msExchDumpsterWarningQuota
msExchEdgeSyncCookies
msExchEdgeSyncRetryCount
msExchEdgeSyncSourceGuid
msExchELCExpirySuspensionEnd
msExchELCExpirySuspensionStart
msExchELCMailboxFlags
msExchEnableModeration
msExchEwsApplicationAccessPolicy
msExchEwsEnabled
msExchEwsExceptions
msExchEwsWellKnownApplicationPolicies
msExchExpansionServerName
msExchExternalDirectoryObjectId
msExchExternalOOFOptions
msExchExternalSyncState
msExchFBURL
msExchForeignGroupSID
msExchGenericForwardingAddress
msExchHABRootDepartmentBL
msExchHABShowInDepartments
msExchHideFromAddressLists
msExchHomeServerName
msExchHouseIdentifier
msExchIMACL
msExchIMAddress
msExchIMAP4Settings
msExchIMAPOWAURLPrefixOverride
msExchIMMetaPhysicalURL
msExchImmutableId
msExchIMPhysicalURL
msExchIMVirtualServer
msExchInconsistentState
msExchIntendedMailboxPlanBL
msExchIntendedMailboxPlanLink
msExchInterruptUserOnAuditFailure
msExchIsMSODirsynced
msExchLabeledURI
msExchLastExchangeChangedTime
msExchLicenseToken
msExchLitigationHoldDate
msExchLitigationHoldOwner
msExchMailboxAuditEnable
msExchMailboxAuditLastAdminAccess
msExchMailboxAuditLastDelegateAccess
msExchMailboxAuditLastExternalAccess
msExchMailboxAuditLogAgeLimit
msExchMailboxFolderSet
msExchMailboxFolderSet2
msExchMailboxGuid
msExchMailboxMoveBatchName
msExchMailboxMoveFlags
msExchMailboxMoveRemoteHostName
msExchMailboxMoveSourceArchiveMDBBL
msExchMailboxMoveSourceArchiveMDBLink
msExchMailboxMoveSourceMDBBL
msExchMailboxMoveSourceMDBLink
msExchMailboxMoveSourceUserBL
msExchMailboxMoveStatus
msExchMailboxMoveStorageMDBBL
msExchMailboxMoveTargetArchiveMDBBL
msExchMailboxMoveTargetArchiveMDBLink
msExchMailboxMoveTargetMDBBL
msExchMailboxMoveTargetMDBLink
msExchMailboxMoveTargetUserBL
msExchMailboxOABVirtualDirectoriesLink
msExchMailboxPlanType
msExchMailboxSecurityDescriptor
msExchMailboxTemplateLink
msExchMailboxUrl
msExchManagementSettings
msExchMasterAccountSid
msExchMaxBlockedSenders
msExchMaxSafeSenders
msExchMDBRulesQuota
msExchMessageHygieneFlags
msExchMessageHygieneSCLDeleteThreshold
msExchMessageHygieneSCLJunkThreshold
msExchMessageHygieneSCLQuarantineThreshold
msExchMessageHygieneSCLRejectThreshold
msExchMobileAllowedDeviceIDs
msExchMobileBlockedDeviceIDs
msExchMobileDebugLogging
msExchMobileMailboxFlags
msExchMobileMailboxPolicyLink
msExchMobileRemoteDocumentsAllowedServersBL
msExchMobileRemoteDocumentsBlockedServersBL
msExchMobileRemoteDocumentsInternalDomainSuffixListBL
msExchMobileSettings
msExchModeratedByLink
msExchModeratedObjectsBL
msExchModerationFlags
msExchObjectCountQuota
msExchObjectID
msExchOmaAdminExtendedSettings
msExchOmaAdminWirelessEnable
msExchOnPremiseObjectGuid
msExchOrganizationsAddressBookRootsBL
msExchOrganizationsGlobalAddressListsBL
msExchOrganizationsTemplateRootsBL
msExchOriginatingForest
msExchOURoot
msExchOWAAllowedFileTypesBL
msExchOWAAllowedMimeTypesBL
msExchOWABlockedFileTypesBL
msExchOWABlockedMIMETypesBL
msExchOWAForceSaveFileTypesBL
msExchOWAForceSaveMIMETypesBL
msExchOWAPolicy
msExchOWARemoteDocumentsAllowedServersBL
msExchOWARemoteDocumentsBlockedServersBL
msExchOWARemoteDocumentsInternalDomainSuffixListBL
msExchOWASettings
msExchOWATranscodingFileTypesBL
msExchOWATranscodingMimeTypesBL
msExchParentPlanBL
msExchParentPlanLink
msExchPartnerGroupID
msExchPfRootUrl
msExchPoliciesExcluded
msExchPoliciesIncluded
msExchPolicyEnabled
msExchPolicyOptionList
msExchPOP3Settings
msExchPreviousAccountSid
msExchPreviousHomeMDB
msExchPreviousMailboxGuid
msExchProvisioningFlags
msExchProxyCustomProxy
msExchQueryBaseDN
msExchRBACPolicyBL
msExchRBACPolicyLink
msExchRecipientDisplayType
msExchRecipientTypeDetails
msExchRecipientValidatorCookies
msExchRecipLimit
msExchRemoteRecipientType
msExchRequireAuthToSendTo
msExchResourceCapacity
msExchResourceDisplay
msExchResourceGUID
msExchResourceMetaData
msExchResourceProperties
msExchResourceSearchProperties
msExchRetentionComment
msExchRetentionURL
msExchRMSComputerAccountsBL
msExchRMSComputerAccountsLink
msExchSafeRecipientsHash
msExchSafeSendersHash
msExchSendAsAddresses
msExchSenderHintTranslations
msExchServerAssociationBL
msExchServerAssociationLink
msExchServerSiteBL
msExchSetupStatus
msExchShadowAssistantName
msExchShadowC
msExchShadowCo
msExchShadowCompany
msExchShadowCountryCode
msExchShadowDepartment
msExchShadowDisplayName
msExchShadowFacsimileTelephoneNumber
msExchShadowGivenName
msExchShadowHomePhone
msExchShadowInfo
msExchShadowInitials
msExchShadowL
msExchShadowMailNickname
msExchShadowManagerLink
msExchShadowMobile
msExchShadowOtherFacsimileTelephone
msExchShadowOtherHomePhone
msExchShadowOtherTelephone
msExchShadowPager
msExchShadowPhysicalDeliveryOfficeName
msExchShadowPostalCode
msExchShadowProxyAddresses
msExchShadowSn
msExchShadowSt
msExchShadowStreetAddress
msExchShadowTelephoneAssistant
msExchShadowTelephoneNumber
msExchShadowTitle
msExchShadowWindowsLiveID
msExchShadowWWWHomePage
msExchSharingAnonymousIdentities
msExchSharingPartnerIdentities
msExchSharingPolicyLink
msExchSignupAddresses
msExchSMTPReceiveDefaultAcceptedDomainBL
msExchSupervisionDLBL
msExchSupervisionDLLink
msExchSupervisionOneOffBL
msExchSupervisionOneOffLink
msExchSupervisionUserBL
msExchSupervisionUserLink
msExchSyncAccountsPolicyDN
msExchTextMessagingState
msExchThrottlingPolicyDN
msExchTransportInboundSettings
msExchTransportOutboundSettings
msExchTransportRecipientSettingsFlags
msExchTUIPassword
msExchTUISpeed
msExchTUIVolume
msExchUCVoiceMailSettings
msExchUMAddresses
msExchUMAudioCodec
msExchUMAudioCodec2
msExchUMCallingLineIDs
msExchUMDtmfMap
msExchUMEnabledFlags
msExchUMEnabledFlags2
msExchUMFaxId
msExchUMListInDirectorySearch
msExchUMMailboxOVALanguage
msExchUMMaxGreetingDuration
msExchUMOperatorNumber
msExchUMPhoneProvider
msExchUMPinChecksum
msExchUMRecipientDialPlanLink
msExchUMServerWritableFlags
msExchUMSpokenName
msExchUMTemplateLink
msExchUnmergedAttsPt
msExchUsageLocation
msExchUseOAB
msExchUserAccountControl
msExchUserBL
msExchUserCulture
msExchVersion
msExchVoiceMailboxID
msExchWhenMailboxCreated
msExchWindowsLiveID
msIIS-FTPDir
msIIS-FTPRoot
mSMQDigests
mSMQDigestsMig
mSMQSignCertificates
mSMQSignCertificatesMig
msNPAllowDialin
msNPCallingStationID
msNPSavedCallingStationID
msOrg-LeadersBL
msPKIAccountCredentials
msPKI-CredentialRoamingTokens
msPKIDPAPIMasterKeys
msPKIRoamingTimeStamp
msRADIUSCallbackNumber
msRADIUS-FramedInterfaceId
msRADIUSFramedIPAddress
msRADIUS-FramedIpv6Prefix
msRADIUS-FramedIpv6Route
msRADIUSFramedRoute
msRADIUS-SavedFramedInterfaceId
msRADIUS-SavedFramedIpv6Prefix
msRADIUS-SavedFramedIpv6Route
msRADIUSServiceType
msRASSavedCallbackNumber
msRASSavedFramedIPAddress
msRASSavedFramedRoute
msSFU30Name
msSFU30NisDomain
msSFU30PosixMemberOf
msTSAllowLogon
msTSBrokenConnectionAction
msTSConnectClientDrives
msTSConnectPrinterDrives
msTSDefaultToMainPrinter
msTSExpireDate
msTSExpireDate2
msTSExpireDate3
msTSExpireDate4
msTSHomeDirectory
msTSHomeDrive
msTSInitialProgram
msTSLicenseVersion
msTSLicenseVersion2
msTSLicenseVersion3
msTSLicenseVersion4
msTSLSProperty01
msTSLSProperty02
msTSManagingLS
msTSManagingLS2
msTSManagingLS3
msTSManagingLS4
msTSMaxConnectionTime
msTSMaxDisconnectionTime
msTSMaxIdleTime
msTSPrimaryDesktop
msTSProfilePath
msTSProperty01
msTSProperty02
msTSReconnectionAction
msTSRemoteControl
msTSSecondaryDesktops
msTSWorkDirectory
name
netbootSCPBL
networkAddress
nonSecurityMemberBL
ntPwdHistory
nTSecurityDescriptor
o
objectCategory
objectClass
objectGUID
objectSid
objectVersion
operatorCount
otherFacsimileTelephoneNumber
otherHomePhone
otherIpPhone
otherLoginWorkstations
otherMailbox
otherMobile
otherPager
otherTelephone
otherWellKnownObjects
ou
ownerBL
pager
partialAttributeDeletionList
partialAttributeSet
personalPager
personalTitle
photo
physicalDeliveryOfficeName
pOPCharacterSet
pOPContentFormat
possibleInferiors
postalAddress
postalCode
postOfficeBox
preferredDeliveryMethod
preferredLanguage
preferredOU
primaryGroupID
primaryInternationalISDNNumber
primaryTelexNumber
profilePath
protocolSettings
proxiedObjectName
proxyAddresses
publicDelegates
publicDelegatesBL
pwdLastSet
queryPolicyBL
registeredAddress
replicatedObjectVersion
replicationSensitivity
replicationSignature
replPropertyMetaData
replUpToDateVector
repsFrom
repsTo
revision
rid
roomNumber
sAMAccountName
sAMAccountType
scriptPath
sDRightsEffective
secretary
securityIdentifier
securityProtocol
seeAlso
serialNumber
serverReferenceBL
servicePrincipalName
shadowExpire
shadowFlag
shadowInactive
shadowLastChange
shadowMax
shadowMin
shadowWarning
showInAddressBook
showInAdvancedViewOnly
sIDHistory
siteObjectBL
sn
st
street
streetAddress
structuralObjectClass
submissionContLength
subRefs
subSchemaSubEntry
supplementalCredentials
supportedAlgorithms
systemFlags
targetAddress
telephoneAssistant
telephoneNumber
teletexTerminalIdentifier
telexNumber
terminalServer
textEncodedORAddress
thumbnailLogo
thumbnailPhoto
title
tokenGroups
tokenGroupsGlobalAndUniversal
tokenGroupsNoGCAcceptable
uid
uidNumber
unauthOrig
unauthOrigBL
unicodePwd
unixHomeDirectory
unixUserPassword
unmergedAtts
url
userAccountControl
userCert
userCertificate
userParameters
userPassword
userPKCS12
userPrincipalName
userSharedFolder
userSharedFolderOther
userSMIMECertificate
userWorkstations
uSNChanged
uSNCreated
uSNDSALastObjRemoved
USNIntersite
uSNLastObjRem
uSNSource
versionNumber
wbemPath
wellKnownObjects
whenChanged
whenCreated
wWWHomePage
x121Address
x500uniqueIdentifier

概括

如图所示，列出模式类定义的所有属性并不是一个超级简单的任务。

您需要考虑家长课程和补充课程。

另外，您需要查看与该类关联的每个类定义的四个不同的类属性。

但到那时，也只有到那时，你才会看清一切！ ?