Add Employee Number to Active Directory Users and Computers (ADUC)

01 Dec

Add Employee Number to Active Directory Users and Computers (ADUC)

Today I will show you how to add custom attributes to you Active Directory Users and Computers(ADUC).

I thought about using the Employee number for today as this is the most common attribute that users wants added to AD.

In order to add any "Attribute" you will use the following format:

<ldapdisplayname>,<column header>,<default visibility>,<width>,<unused>

OK lets begin.

1. Open ADSI Edit on your Active Directory Server – on server 2008 it would be start > Administrative Tools > ADSI Edit
2. Now ADSI Edit will prompt you with connection settings, ensure that "Select a well known Naming Context:" is set to "Configuration"
3. Now click OK
4. Expand the "Configuration []" Tree
5. Expand "CN=Configuration,"
6. Expand "CN=DisplaySpecifiers"
7. Now Expand "CN=409" (This is just the language code for English)
8. Locate "CN=default-Display" in the right pane
9. Right click "CN=default-Display" and select "Properties"
10. Select the "extraColumns" Attribute in the list and you will notice that your "Edit" button becomes active
11. Now click the edit button
12. In the "Value to add:" field type the following: employeeNumber,Employee Number,0,100,0
13. Now click "Add:"
14. Click "OK"
15. Click "OK" again

Now your Employee Number has been added as a Custom Attribute. To verify this, please do the following.

1. Open ADUC
2. Expand "Saved Queries"
3. Right Click "Saved Queries" select "New > Query"
4. In the "Name:" field type "All Users" and select "Define Query…"
5. On the "Users" tab next to the "Name:" field click on the drop down and select "Has a value"
6. Now Click "OK" and "OK" again
7. Expand "Saved Queries" and select "All Users"
8. Now you will have a list of all your users in the right pane.
9. With the query selected click "View > Add/Remove Columns…" at the top of ADUC
10. Now on the left selection box, locate "Employee Number" and click "Add" to add it to the "Displayed Columns"
11. Click "OK"

Now you will see that the "Employee Number" Column has been added to the query results.

1. In ADUC click "View > Advanced Features"
2. Now right click on your "All Users" saved query and select "Refresh"
3. Next, right click any user in the right pane and click "Employee Number"
4. Now right click the user again and click "Properties"
5. Locate the tab called "Attribute Editor"
6. Press the letter "E" twice on your keyboard, which should take you straight to "employeeNumber"
7. To edit it, simply double click "employeeNumber" or click on the "Edit" button while "employeeNumber" is highlighted 


Posted by on December 1, 2010 in Active Directory


4 responses to “Add Employee Number to Active Directory Users and Computers (ADUC)

  1. Steve Lehman

    October 20, 2011 at 9:18 pm

    With all the posts out there this is probably the most straight forward and understandable. Thanks.
    I am a little confused though. I am running Windows 2003 R2 as my DC. In most posts on the Internet it talks about adding to the Schema first. This I am totally confused about. Using your example I would need to create a new attribute in the User Oject in order to start your example if employeenumber didn’t exist originally?
    When I execute dsa.msc (AD Users and Computers) and the GUI comes up and I right click on a User and select properties I see a pop-up that has mulitple tabs on it. A few of those are General, Address, Account, Profile, Telephones, Organization.
    By adding the Employee number how can I tell ADUC what tab this appears on in the GUI tha comes up? If I want a field to have multiple values how can that be defined? Say a person has mulitple employee numbers, one for each company?

    • iconraja

      November 4, 2011 at 1:29 pm

      This is actually to update additional field in the active directory advance settings. The purpose of doing additional filed is for any development like SharePoint they actually to filter the particular origination Unit and filed to get information from sharepoint user profile.

      If consuming application (SharePoint) needs to show additional information (Vehicle number or Anniversary) on a profile, we can extend AD to have additional attribute.

  2. Geocache Geocaching Geocacher

    June 14, 2012 at 9:51 pm

    Loving the blog thanks for the information.

  3. dbomeara

    March 26, 2013 at 2:41 am

    Thanks! Very helpful. Just what we needed!


Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

%d bloggers like this: