Active Directory: Get-ADGroup Default and Extended Properties

Active Directory: Get-ADGroup Default and Extended Properties

The concept of default and extended properties available with the PowerShell Active Directory cmdlets are defined in Active Directory: PowerShell AD Module Properties. The PowerShell Get-ADGroup cmdlet supports the default and extended properties in the following table. Many can be assigned values with the Set-ADGroup cmdlet. In the table, default properties are shown with the property name highlighted in cyan. Extended properties are highlighted in pink.


Property Syntax R/RW lDAPDisplayName
CanonicalName String R canonicalName
CN String R cn
Created DateTime R whenCreated
Deleted Boolean R isDeleted
Description String RW description
DisplayName String RW displayName
DistinguishedName String (DN) RW distinguishedName
GroupCategory String RW groupType (bit mask 2147483648)
GroupScope String RW groupType (bit mask 1, 2, 4, or 8)
HomePage String RW wWWHomePage
LastKnownParent String (DN) R lastKnownParent
ManagedBy String (DN) RW managedBy
MemberOf ADCollection R memberOf
Members ADCollection R member
Modified DateTime R whenChanged
Name String R cn (Relative Distinguished Name)
ObjectCategory String R objectCategory
ObjectClass String RW objectClass, most specific value
ObjectGUID Guid RW objectGUID converted to string
ProtectedFromAccidentalDeletion Boolean RW nTSecurityDescriptor
SamAccountName String RW sAMAccountName
SID Sid RW objectSID converted to string
SIDHistory ADCollection R sidHistory


See Also



Leave a Comment
  • Please add 4 and 6 and type the answer here:
  • Post
Wiki - Revision Comment List(Revision Comment)
Comments
  • Richard Mueller edited Revision 9. Comment: Removed (en-US) from title

  • Richard Mueller edited Revision 11. Comment: Added horizontal rules and "Return to Top"

  • Richard Mueller edited Revision 12. Comment: Make default properties bold with light blue background

  • Richard Mueller edited Revision 13. Comment: Explained that properties with lower case initial letter are AD attributes

  • Richard Mueller edited Revision 15. Comment: Used colors to designate default and extended properties

  • Richard Mueller edited Revision 16. Comment: Changed color formatting

  • Richard Mueller edited Revision 17. Comment: Removed lDAPDisplayNames of AD attributes from the table, so it only documents default and extended properties

  • Richard Mueller edited Revision 18. Comment: Changed whenModified to whenChanged

  • Richard Mueller edited Revision 19. Comment: Improve links in See Also, add link to parent article.

  • Richard Mueller edited Revision 20. Comment: Removed "Return to top".

Page 1 of 2 (18 items) 12
Wikis - Comment List
Posting comments is temporarily disabled until 10:00am PST on Saturday, December 14th. Thank you for your patience.
Comments
  • Richard Mueller edited Revision 9. Comment: Removed (en-US) from title

  • Richard Mueller edited Revision 11. Comment: Added horizontal rules and "Return to Top"

  • Richard Mueller edited Revision 12. Comment: Make default properties bold with light blue background

  • Richard Mueller edited Revision 13. Comment: Explained that properties with lower case initial letter are AD attributes

  • Richard Mueller edited Revision 15. Comment: Used colors to designate default and extended properties

  • Richard Mueller edited Revision 16. Comment: Changed color formatting

  • Richard Mueller edited Revision 17. Comment: Removed lDAPDisplayNames of AD attributes from the table, so it only documents default and extended properties

  • Richard Mueller edited Revision 18. Comment: Changed whenModified to whenChanged

  • Richard Mueller edited Revision 19. Comment: Improve links in See Also, add link to parent article.

  • Richard Mueller edited Revision 20. Comment: Removed "Return to top".

  • I decided to remove all AD attributes from the table. The table now only documents the default and extended properties exposed by Get-ADGroup. I decided that the AD attributes in the table were no different from any other attributes appropriate for the class of object. This table was never intended to document all group object attributes.

    When you specify -Properties * with Get-ADGroup, all default and extended properties are retrieved, plus the values of AD attributes that have values. The table originally included some AD attributes, but only because they nearly always have values. When you specify properties using the -Properties parameter, the names are case insensitive. However, when the cmdlet returns property names, all default and extended property names begin with an upper case letter. Any AD attribute names begin with a lower case letter.

  • Nice post

  • Excellent info, Thanks Richard

  • Richard Mueller edited Original. Comment: Updated values in table

  • Richard Mueller edited Revision 1. Comment: Updated values in table, added links in "See Also" section

Page 1 of 2 (22 items) 12