Schema of Windows Integration Data

The integration data schema defines what data is imported within the Windows integration. In this section:

  • Account
  • Resource Types
    • WindowsServer
  • Permission Types
    • WindowsGroup

Account

The user objects are imported from Windows and displayed as the Account objects in ObserveID. The attributes of users are displayed as Additional Properties objects of the Account.

Account Property

Type

Description

Full name

String

The user's full name rather than a user name.

Comment

String

Descriptive comment about the user's account. This comment can have as many as 48 characters. This string can be a null string.

User’s comment

String

Specifies that an administrator can add or change the "User comment" for the account.

Country / region code

String

The operating system Country/Region codes to implement the specified language files for a user's Help and error messages. A value of 0 signifies the default Country/Region code.

Account active

Boolean

It is a true\false parameter. If true, it indicates that the the user account is enabled.

Account expires

DateTime

The date when the account expires. A value of 0 indicates that the account never expires.

Password last set

DateTime

The date and time that the password for this account was last changed.

Password expires

DateTime

The date and time when the password expires.

Password changeable

DateTime

Specifies whether users can change their own password. The default is yes.

Password required

Boolean

It is a true \ false parameter. If true, it indicates that the password is required. The default is true.

Workstations allowed

String

Lists as many as eight workstations from which a user can log on to the network. Separate multiple entries in the list with commas. If /workstations has no list or if the list is an asterisk (*), users can log on from any computer.

Logon script

String

The path for the user's logon script. <Path> cannot be an absolute path. <Path> is relative to %systemroot%\System32\Repl\Import\Scripts.

User profile

String

The path for the user's logon profile. This path points to a registry profile. This path must exist.

Home directory

String

The path for the user's home directory. The path must exist.

Last logon

DateTime

Specifies when the last logon occurred. A value of zero means that the last logon time is unknown.

Logon hours allowed

String

Time periods for each day of the week during which logons are permitted for the user. Represented as a table of Boolean values for the week, each indicating if that time slot is a valid logon time. Be aware that the representation is provider and directory-specific.

Resource Types

The resource objects are imported from Windows and displayed as the resources of the Windows integration in ObserveID. Each resource is represented with a resource type. The attributes of the resource are displayed in ObserveID as Additional Properties of a resource according to the resource type.

Resource Property

Type

Description

WindowsServer

Domain Name

String

Reference to a domain that is associated with a certification authority.

Permission Types

The table below provides a list of schema attributes imported from Windows and defining the permissions according to their permission type. The attributes are stored in ObserveID as Additional Properties of the permissions of the respective permission types.

Permission Property

Type

Description

WindowsGroup

Description

String

Description to display for an object.