Microsoft Secure Tech Accelerator
Apr 03 2024, 07:00 AM - 11:00 AM (PDT)
Microsoft Tech Community

Using the extensionAttributes in Active Directory

Copper Contributor

So I'm working on expanding the data stored about User Objects in an Active Directory, but we are looking for possible candidates to store the data in, as a lot of the fields have already been used.

We found the fields 'extensionAttribute(1-15)' and looked online for some information about them.

I couldn't find a lot of information about them. What I found was they are a result of implementing Exchange to your system.

Are they suited for adding extra data to an User Object?

Will they not be removed at a point?
 
Can I find some more documentation about them somewhere?

Won't they be affected when we may want to implement other systems in the future?

5 Replies

Hi, 

 

You can use extension attributes to store additional data like 'employee ID' etc.

 

Just document the change, so you know what it was used for.

 

They will not be removed.

 

And no system uses them normally and if they do they document it.

But if you do a search on them, it appears the data stored in these attributes will be removed when a mailbox is disabled. Can you elaborate?

There is already employeeID attribute in AD


@Vineet Arora wrote:

Hi, 

 

You can use extension attributes to store additional data like 'employee ID' etc.

 

Just document the change, so you know what it was used for.

 

They will not be removed.

 

And no system uses them normally and if they do they document it.


 

That is not a good option