Skip to content

FGPP

Copy page
Field Type Possible Operators Description
Guid TEXT LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY A unique identifier that is a combination of GUID of selected Scan and Active Directory ObjectGUID of the object.
FSName TEXT LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY A special unique identifier that is a combination of the Name of the object and the Fully Qualified Domain Name of the Domain
Name TEXT LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY Name of the specified object. (Ldap Display Name: ou)
DistinguishedName TEXT LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY Active Directory distinguished name of the object. (Ldap Display Name: distinguishedName)
msDSMaximumPasswordAge TEXT LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY Defines the maximum number of days a user password remains valid before it must be changed.
msDSPasswordSettingsPrecedence NUMBER EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL Specifies the precedence of the password policy. Lower numbers have higher priority.
msDSPasswordReversibleEncryptionEnabled BOOLEAN N/A (toggle) Specifies whether reversible encryption is enabled for user passwords.
MinimumPasswordAge TEXT LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY Specifies the minimum number of days a user must wait before changing their password again.
msDSPasswordComplexityEnabled BOOLEAN N/A (toggle) The status of password complexity requirements for user accounts.
msDSLockoutObservationWindow TEXT LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY Specifies the time window (in minutes) during which failed logon attempts are counted before account lockout.
msDSPasswordHistoryLength NUMBER EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL Specifies the number of previous passwords remembered to prevent reuse by the user.
msDSLockoutThreshold NUMBER EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL Specifies the number of failed logon attempts allowed before the user account is locked out.
msDSLockoutDuration TEXT LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY Specifies the duration (in minutes) that a user account remains locked after reaching the lockout threshold.
msDSMinimumPasswordLength NUMBER EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL Specifies the minimum number of characters required in a user password.
IsWeak BOOLEAN N/A (toggle) Shows whether the password policy settings are considered insecure, based on factors like short passwords, lack of complexity, absence of account lockout, or reversible encryption.
Tier NUMBER EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL Tier level Forestall assigned to the object: 0 (Tier 0), 1 (Tier 1) or 2 (Tier 2). Lower is more privileged.

Was this page helpful?

Thank you for your feedback.