![]() ![]() ![]() Get Active Directory User Last LogonĬreate an Active Directory test domain similar to the production one This posting is provided "AS IS" with no warranties or guarantees, and confers no rights. There might extra permissions that the product need and that need to be delegated in AD. To be sure that you can query your AD with no problems with a user account, you can runĬMD or Powershell with the credentials of the user account and test some LDAP queries.įor Websense related questions, you need to contact the vendor technical support for assistance. This is true unless if your containers / OUs / objects ACLs were changed to explicitly deny this querying. A normal user account should be able to do LDAP queries. Join 214 other followers Follow Mohamed Ashiq Faleel on WordPress.I would agree with others. ![]() For more information about different endpoint, refer this documentation from Microsoft. So the other option is to use the Graph Endpoint if you need those information for your application customization.Įndpoint point to get a specific attribute is SharePoint UPS synchronizes the AD data of all users in schedule basis. For e.g Location, OnPremisesextensionAttributes etc information is not available. The User profile service Rest API endpoint in SharePoint does not provide all the active directory information. The beta ME endpoint gives more information of the user Refer the documentation from Microsoft on the different available AD endpoints Graph Explorer Graph explorer is a nice tool to test the Graph endpoints. $select=jobTitle,department,displayName, OnPremisesExtensionattributes In bigger active directory implementation, there will also be information stored on the Extension attributes, to get the information you will have to pass the name of the attribute “OnPremisesExtensionattributes” as a query string in the format as ![]() To get a specific user’s information the endpoint should be įor getting any specific AD attribute you can pass the required attribute as a query string $select=jobTitle,department,displayName The me endpoint gives your profile information. Using graph API you can access all the Active directory attributes. ![]()
0 Comments
Leave a Reply. |
Details
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |