| Guid |
TEXT |
LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY |
A unique identifier that is a combination of GUID of selected Scan and Active Directory ObjectGUID of the object. |
| FSName |
TEXT |
LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY |
A special unique identifier that is a combination of the Name of the object and the Fully Qualified Domain Name of the Domain |
| Name |
TEXT |
LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY |
Name of the specified object. (Ldap Display Name: ou) |
| DistinguishedName |
TEXT |
LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY |
Active Directory distinguished name of the object. (Ldap Display Name: distinguishedName) |
| msDSMaximumPasswordAge |
TEXT |
LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY |
Defines the maximum number of days a user password remains valid before it must be changed. |
| msDSPasswordSettingsPrecedence |
NUMBER |
EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL |
Specifies the precedence of the password policy. Lower numbers have higher priority. |
| msDSPasswordReversibleEncryptionEnabled |
BOOLEAN |
N/A (toggle) |
Specifies whether reversible encryption is enabled for user passwords. |
| MinimumPasswordAge |
TEXT |
LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY |
Specifies the minimum number of days a user must wait before changing their password again. |
| msDSPasswordComplexityEnabled |
BOOLEAN |
N/A (toggle) |
The status of password complexity requirements for user accounts. |
| msDSLockoutObservationWindow |
TEXT |
LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY |
Specifies the time window (in minutes) during which failed logon attempts are counted before account lockout. |
| msDSPasswordHistoryLength |
NUMBER |
EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL |
Specifies the number of previous passwords remembered to prevent reuse by the user. |
| msDSLockoutThreshold |
NUMBER |
EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL |
Specifies the number of failed logon attempts allowed before the user account is locked out. |
| msDSLockoutDuration |
TEXT |
LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY |
Specifies the duration (in minutes) that a user account remains locked after reaching the lockout threshold. |
| msDSMinimumPasswordLength |
NUMBER |
EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL |
Specifies the minimum number of characters required in a user password. |
| IsWeak |
BOOLEAN |
N/A (toggle) |
Shows whether the password policy settings are considered insecure, based on factors like short passwords, lack of complexity, absence of account lockout, or reversible encryption. |
| Tier |
NUMBER |
EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL |
Tier level Forestall assigned to the object: 0 (Tier 0), 1 (Tier 1) or 2 (Tier 2). Lower is more privileged. |