Forum Discussion

Copper Contributor

Dec 14, 2017

Using the extensionAttributes in Active Directory

So I'm working on expanding the data stored about User Objects in an Active Directory, but we are looking for possible candidates to store the data in, as a lot of the fields have already been used. ...

azure active directory

identity and access management

Vineet Arora

Brass Contributor

Dec 15, 2017

Hi,

You can use extension attributes to store additional data like 'employee ID' etc.

Just document the change, so you know what it was used for.

They will not be removed.

And no system uses them normally and if they do they document it.

Dylan Martens

Copper Contributor

Dec 15, 2017

But if you do a search on them, it appears the data stored in these attributes will be removed when a mailbox is disabled. Can you elaborate?

Vineet Arora
Brass Contributor
Dec 15, 2017
Hi,

You are right. Then the only option is to extend the AD Schema.

https://social.technet.microsoft.com/wiki/contents/articles/20319.how-to-create-a-custom-attribute-in-active-directory.aspx
- Bran Koprivica
  Copper Contributor
  Jul 16, 2018
  That is not a good option