Many of my customers use specific properties for various things. Most users do not have ADUC installed, and some of our customers even disallow installation of ADUC on end user computers. I recently had a user ask about looking up the contents of a specific attribute (
extensionAttribute6, in case you were wondering).
Luckily, this – and any other attribute – can be easily looked up using the PowerShell
get-aduser command. Format the command like this:
get-aduser "USERNAME" -properties extensionAttribute6.
If you want to look up multiple specific attributes, simply divide them with a comma, like so:
get-aduser "USERNAME" -properties extensionAttribute6,
This method does assume that end users have read access to Active Directory, but I’ve yet to encounter a domain where that isn’t the case.