User-Workstations

Contains the NetBIOS names of the workstations from which the user can log on.

Attribute propertyValueDescription
adminDisplayNameUser-Workstations Display name of this object for use in directory service administrative tools.
adminDescriptionUser-Workstations Description of this object for use in directory service administrative tools.
cnUser-Workstations Common name.
lDAPDisplayNameuserWorkstations The name used by LDAP clients to refer to the object's class.
attributeID1.2.840.113556.1.4.86 A unique OID that identifies the attribute.
objectClassAttribute-SchemaThe class of which this object is an instance.
objectCategoryAttribute-SchemaReference to an object class or one of its superclasses, which is used when searching for this object.
schemaIDGUID{BF9679D7-0DE6-11D0-A285-00AA003049E2} A GUID that uniquely identifies this object. You can use this string value in an ACE to control access to objects of this object.
attributeSyntax2.5.5.12 An OID of a syntax. The combination of the attributeSyntax and oMSyntax properties determines the syntax of an attribute.
oMSyntax64 Syntax of this attribute as defined by the XAPIA XOM (X/Open Object Model) specification.
isSingleValuedTRUE TRUE means that the attribute has a single value, FALSE means that the attribute can have multiple values.
rangeUpper1024 Upper bounds of the value range for this attribute.
attributeSecurityGUID-- not set -- An optional GUID that identifies the attribute as a member of an attribute set(also known as a property set).
searchFlags16 An integer value whose least significant bit indicates whether the attribute is indexed. The four bit flags in this value are:
1 = Index over attribute only
2 = Index over container and attribute
4 = Add this attribute to the Ambiguous Name Resolution set, used together with 0x0001
8 = Preserve this attribute in the tombstone object for deleted objects.
showInAdvancedViewOnlyTRUE TRUE means that the object will apear in the Advanced View of the Users and Computers snap-in only, but not in the Windows shell.
FALSE means that the object will appear in Normal view of the Users and Computers snap-in and the Windows shell.
systemFlags16 An integer value that contains flags that define additional properties of this object. Category 1 classes or attributes have the 0x10 bit set by the system and cannot be set by users. They are shipped with Active Directory. For more information, see ADS_SYSETMFLAG_ENUM enumeration in ADSI Reference.
systemOnlyFALSE TRUE means that only Active Directory can modify the class of this object. FALSE means users can make the modification as well.

RemarksEach NetBIOS name is separated by a comma. The NetBIOS name of a computer is the sAMAccountName property of a computer object.
If there are no values set, it indicates that there is no restriction. To disable logons from all workstations to this account, set the UF_ACCOUNTDISABLE value in the userAccountControl property.
This value is defined in LMACCESS.H.