country and countrycode attributes in AD

Question

Hello, I inherited an Active Directory whose users have always been created with a powershell script. The script is not setting a value for countrycode but only for Country. Old users have also the countrycode populated while users created after a certain date, with the same script, have this attribute equal to zero. I read somewhere that countrycode is automatically calculated by AD when Country is populated based on ISO 3166 standards. Is that true? If so, my AD is not anymore populating that attribute. If not, how can I populate it? It seems with Set-ADUser I cannot populate it.
Thanks

Answer 1

Hello,

Thank you so much for posting here.

I did the tests in my lab. Below are the results:

1, If we select a country in the GUI of ADUC, it will assign values to c, co, countryCode attributes.

2, The Country parameter of the Set-ADUser cmdlet assigns a value to the c attribute, but no values are assigned to the co and countryCode attributes. Besides, the country will show in ADUC on the Address tab.

3, So we should assign valid values to all the three attributes in the powershell script, such as

set-aduser -identity susan -Replace @{c="CN";co="China";countrycode=156}

For any question, please feel free to contact us.

Best regards,
Hannah Xiong