Active Directory custom attribute with security principal editor

Splendidus 1 Reputation point
2020-09-10T11:37:31.813+00:00

I'm trying to create a custom attribute with security principal editor. I've created a custom attribute "TestA1" with the same type as "member" attribute but when I'm editing my custom attribute it has only multi-valued string editor.

23798-image.png

Any ideas how to do it?

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,252 questions
{count} votes

2 answers

Sort by: Most helpful
  1. Daisy Zhou 21,436 Reputation points Microsoft Vendor
    2020-09-11T08:50:57.307+00:00

    Hello @Splendidus ,

    Thank you for posting here.

    Based on the description above, I did a test in my lab and I got the same result as you.

    1.I Add a attribute (test1) with Syntax--Distingguished Name and multi-valued.
    24087-att1.png

    2.Bind the attribute to group object.

    3.We can see the attribute Syntax is the same as member attribute.
    24094-att2.png

    24027-att3.png

    4.The result below is the same as you.
    24114-att4.png

    23938-att5.png

    I am not sure whether we can get the display of custom attribute as the attribute "member". Maybe we can, I ma sorry I can not find a way to acheve the result currently.

    It seems that for the attribute "member“, we can search the object of the specfic member in the domain.

    24028-att6.png

    However, for the most other attributes (single value and multi value), we need to type the value of these attributes.

    Best Regards,
    Daisy Zhou

    ============================================

    If the Answer is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments No comments

  2. Splendidus 1 Reputation point
    2020-09-15T09:11:04.587+00:00

    Hello. Thank you for your research.

    It's sad. I hope we will be able to fix it in the future, because this option is the most valuable in active directory.