Share via

Querying and Setting Computer Account Attributes Without LDAP

E-8437 21 Reputation points
2025-01-23T09:33:33.5833333+00:00

Hi,

I am looking for a way to query and set specific computer account attributes in Active Directory without using the LDAP protocol. Currently, I am using the DRSUAPI protocol to set the servicePrincipalName property. However, I couldn't find an alternative protocol (other than LDAP) to query the value of msDS-KeyVersionNumber or to set the value of msDS-SupportedEncryptionTypes.

Is there another protocol that can be used to query and set these specific attributes?

Thank you for your assistance.

Windows for business Windows Client for IT Pros Directory services Active Directory
Windows development Windows Open Specifications
Accepted answer
  1. Obaid Farooqi MSFT 751 Reputation points Microsoft Employee Moderator
    2025-01-27T17:37:07.3466667+00:00

    Hi E-8437:

    Currently LDAP is the only way to set/query the attributes you mentioned.

    Legacy protocols like MS-SAMR are not being enhanced to account for new attributes in AD.

    Please let me know if this does not answer your question.

    Regards,

    Obaid Farooqi -MSFT

    0 comments

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.