Share via

Querying and Setting Computer Account Attributes Without LDAP

E-8437 21 Reputation points
2025-01-23T09:33:33.5833333+00:00

Hi,

I am looking for a way to query and set specific computer account attributes in Active Directory without using the LDAP protocol. Currently, I am using the DRSUAPI protocol to set the servicePrincipalName property. However, I couldn't find an alternative protocol (other than LDAP) to query the value of msDS-KeyVersionNumber or to set the value of msDS-SupportedEncryptionTypes.

Is there another protocol that can be used to query and set these specific attributes?

Thank you for your assistance.

Windows for business | Windows Client for IT Pros | Directory services | Active Directory
Windows development | Windows Open Specifications
Accepted answer
  1. Obaid Farooqi MSFT 751 Reputation points Microsoft Employee Moderator
    2025-01-27T17:37:07.3466667+00:00

    Hi E-8437:

    Currently LDAP is the only way to set/query the attributes you mentioned.

    Legacy protocols like MS-SAMR are not being enhanced to account for new attributes in AD.

    Please let me know if this does not answer your question.

    Regards,

    Obaid Farooqi -MSFT

    0 comments

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.