For the complete documentation index, see llms.txt. This page is also available as Markdown.

FGPP

Field
Type
Possible Operators
Description

Guid

TEXT

LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY

A unique identifier that is a combination of GUID of selected Scan and Active Directory ObjectGUID of the object.

FSName

TEXT

LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY

A special unique identifier that is a combination of the Name of the object and the Fully Qualified Domain Name of the Domain

Name

TEXT

LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY

Name of the specified object. (Ldap Display Name: ou)

DistinguishedName

TEXT

LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY

Active Directory distinguished name of the object. (Ldap Display Name: distinguishedName)

msDSMaximumPasswordAge

TEXT

LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY

Defines the maximum number of days a user password remains valid before it must be changed.

msDSPasswordSettingsPrecedence

NUMBER

EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL

Specifies the precedence of the password policy. Lower numbers have higher priority.

msDSPasswordReversibleEncryptionEnabled

BOOLEAN

N/A (toggle)

Specifies whether reversible encryption is enabled for user passwords.

MinimumPasswordAge

TEXT

LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY

Specifies the minimum number of days a user must wait before changing their password again.

msDSPasswordComplexityEnabled

BOOLEAN

N/A (toggle)

The status of password complexity requirements for user accounts.

msDSLockoutObservationWindow

TEXT

LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY

Specifies the time window (in minutes) during which failed logon attempts are counted before account lockout.

msDSPasswordHistoryLength

NUMBER

EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL

Specifies the number of previous passwords remembered to prevent reuse by the user.

msDSLockoutThreshold

NUMBER

EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL

Specifies the number of failed logon attempts allowed before the user account is locked out.

msDSLockoutDuration

TEXT

LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY

Specifies the duration (in minutes) that a user account remains locked after reaching the lockout threshold.

msDSMinimumPasswordLength

NUMBER

EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL

Specifies the minimum number of characters required in a user password.

IsWeak

BOOLEAN

N/A (toggle)

Shows whether the password policy settings are considered insecure, based on factors like short passwords, lack of complexity, absence of account lockout, or reversible encryption.

Tier

NUMBER

EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL

Tier level Forestall assigned to the object: 0 (Tier 0), 1 (Tier 1) or 2 (Tier 2). Lower is more privileged.

Last updated

Was this helpful?