Active Directory 和 Office 365 属性命名
正如我在上一篇文章中指出的那样，Active Directory 和 Azure AD 用户属性命名有点混乱！
当您拥有 Office 365 并且属性从本地 AD 同步到 Azure AD (AAD) 时，属性名称似乎会随机更改：
- 从 AD 复制到 Azure AD Connect Metaverse 时，某些属性名称可能会更改
- 从 Azure AD Connect Metaverse 复制到 Azure AD 时，某些属性名称可能会更改
此外，某些属性名称可能会根据您使用的 Office 365 脚本界面而变化。
作为参考，本地 AD <-> AAD Connect Metaverse <-> AAD 复制如下所示：
请务必阅读本文以充分了解 Azure AD Connect 复制和 Metaverse。
本文将为您提供 AD 到 AAD 复制期间转换的各种属性名称的完整概述。
属性名称从 AD 更改为 AAD 将 Metaverse 连接到 AAD (Office 365)
首先，让我们概述一下 AD 到 AAD 连接到 AAD 复制中的整个属性映射（我使用此脚本来提取信息）。
下表显示了 AD 用户属性的 LDAP 显示名称、Azure AD Connect Metaverse 中的属性名称以及 Azure AD (Office 365) 中的属性名称：
AD/Metaverse/AAD - 属性名称
| AD | AAD Metaverse | AAD |
|---|---|---|
| altRecipient | altRecipient | altRecipient |
| assistant | assistant | assistant |
| authOrig | authOrig | authOrig |
| c | c | countryLetterCode |
| cn | cn | commonName |
| co | co | country |
| company | company | company |
| countryCode | countryCode | countryCode |
| department | department | department |
| description | description | description |
| dLMemRejectPerms | dLMemRejectPerms | dLMemRejectPerms |
| dLMemSubmitPerms | dLMemSubmitPerms | dLMemSubmitPerms |
| employeeID | employeeID | employeeID |
| extensionAttribute1 | extensionAttribute1 | extensionAttribute1 |
| extensionAttribute10 | extensionAttribute10 | extensionAttribute10 |
| extensionAttribute11 | extensionAttribute11 | extensionAttribute11 |
| extensionAttribute12 | extensionAttribute12 | extensionAttribute12 |
| extensionAttribute13 | extensionAttribute13 | extensionAttribute13 |
| extensionAttribute14 | extensionAttribute14 | extensionAttribute14 |
| extensionAttribute15 | extensionAttribute15 | extensionAttribute15 |
| extensionAttribute2 | extensionAttribute2 | extensionAttribute2 |
| extensionAttribute3 | extensionAttribute3 | extensionAttribute3 |
| extensionAttribute4 | extensionAttribute4 | extensionAttribute4 |
| extensionAttribute5 | extensionAttribute5 | extensionAttribute5 |
| extensionAttribute6 | extensionAttribute6 | extensionAttribute6 |
| extensionAttribute7 | extensionAttribute7 | extensionAttribute7 |
| extensionAttribute8 | extensionAttribute8 | extensionAttribute8 |
| extensionAttribute9 | extensionAttribute9 | extensionAttribute9 |
| facsimileTelephoneNumber | facsimileTelephoneNumber | facsimileTelephoneNumber |
| givenName | givenName | givenName |
| homePhone | homePhone | homePhone |
| info | info | info |
| initials | initials | initials |
| ipPhone | ipPhone | ipPhone |
| l | l | city |
| legacyExchangeDN | legacyExchangeDN | legacyExchangeDN |
| mailNickname | mailNickname | alias |
| manager | manager | manager |
| middleName | middleName | middleName |
| mobile | mobile | mobile |
| msDS-HABSeniorityIndex | msDS-HABSeniorityIndex | msDsHabSeniorityIndex |
| msDS-PhoneticDisplayName | msDS-PhoneticDisplayName | msDsPhoneticDisplayName |
| msExchArchiveGUID | msExchArchiveGUID | msExchArchiveGuid |
| msExchArchiveName | msExchArchiveName | msExchArchiveName |
| msExchAssistantName | msExchAssistantName | msExchAssistantName |
| msExchAuditAdmin | msExchAuditAdmin | msExchAuditAdmin |
| msExchAuditDelegate | msExchAuditDelegate | msExchAuditDelegate |
| msExchAuditDelegateAdmin | msExchAuditDelegateAdmin | msExchAuditDelegateAdmin |
| msExchAuditOwner | msExchAuditOwner | msExchAuditOwner |
| msExchBlockedSendersHash | msExchBlockedSendersHash | msExchBlockedSendersHash |
| msExchBypassAudit | msExchBypassAudit | msExchBypassAudit |
| msExchDelegateListLink | msExchDelegateListLink | msExchDelegateListLink |
| msExchELCExpirySuspensionEnd | msExchELCExpirySuspensionEnd | msExchElcExpirySuspensionEnd |
| msExchELCExpirySuspensionStart | msExchELCExpirySuspensionStart | msExchElcExpirySuspensionStart |
| msExchELCMailboxFlags | msExchELCMailboxFlags | msExchElcMailboxFlags |
| msExchEnableModeration | msExchEnableModeration | msExchEnableModeration |
| msExchHideFromAddressLists | msExchHideFromAddressLists | msExchHideFromAddressLists |
| msExchImmutableId | msExchImmutableId | msExchImmutableId |
| msExchLitigationHoldDate | msExchLitigationHoldDate | msExchLitigationHoldDate |
| msExchLitigationHoldOwner | msExchLitigationHoldOwner | msExchLitigationHoldOwner |
| msExchMailboxAuditEnable | msExchMailboxAuditEnable | msExchMailboxAuditEnable |
| msExchMailboxAuditLogAgeLimit | msExchMailboxAuditLogAgeLimit | msExchMailboxAuditLogAgeLimit |
| msExchMailboxGuid | msExchMailboxGuid | msExchMailboxGuid |
| msExchModeratedByLink | msExchModeratedByLink | msExchModeratedByLink |
| msExchModerationFlags | msExchModerationFlags | msExchModerationFlags |
| msExchRecipientDisplayType | msExchRecipientDisplayType | msExchRecipientDisplayType |
| msExchRemoteRecipientType | msExchRemoteRecipientType | msExchRemoteRecipientType |
| msExchRequireAuthToSendTo | msExchRequireAuthToSendTo | msExchRequireAuthToSendTo |
| msExchResourceCapacity | msExchResourceCapacity | msExchResourceCapacity |
| msExchResourceDisplay | msExchResourceDisplay | msExchResourceDisplay |
| msExchResourceMetaData | msExchResourceMetaData | msExchResourceMetadata |
| msExchResourceSearchProperties | msExchResourceSearchProperties | msExchResourceSearchProperties |
| msExchRetentionComment | msExchRetentionComment | msExchRetentionComment |
| msExchRetentionURL | msExchRetentionURL | msExchRetentionUrl |
| msExchSafeRecipientsHash | msExchSafeRecipientsHash | msExchSafeRecipientsHash |
| msExchSafeSendersHash | msExchSafeSendersHash | msExchSafeSendersHash |
| msExchSenderHintTranslations | msExchSenderHintTranslations | msExchSenderHintTranslations |
| msExchUsageLocation | usageLocation | usageLocation |
| objectSid | objectSid | onPremiseSecurityIdentifier |
| otherFacsimileTelephoneNumber | otherFacsimileTelephoneNumber | otherFacsimileTelephoneNumber |
| otherHomePhone | otherHomePhone | otherHomePhone |
| otherIpPhone | otherIpPhone | otherIpPhone |
| otherMobile | otherMobile | otherMobile |
| otherPager | otherPager | otherPager |
| otherTelephone | otherTelephone | otherTelephone |
| pager | pager | pager |
| physicalDeliveryOfficeName | physicalDeliveryOfficeName | physicalDeliveryOfficeName |
| postalCode | postalCode | postalCode |
| postOfficeBox | postOfficeBox | postOfficeBox |
| preferredLanguage | preferredLanguage | preferredLanguage |
| proxyAddresses | proxyAddresses | proxyAddresses |
| publicDelegates | publicDelegates | publicDelegates |
| pwdLastSet | pwdLastSet | lastPasswordChangeTimestamp |
| sAMAccountName | accountName | onPremisesSamAccountName |
| sn | sn | surname |
| st | st | state |
| streetAddress | streetAddress | streetAddress |
| targetAddress | targetAddress | targetAddress |
| telephoneAssistant | telephoneAssistant | telephoneAssistant |
| telephoneNumber | telephoneNumber | telephoneNumber |
| thumbnailPhoto | thumbnailPhoto | thumbnailPhoto |
| title | title | title |
| unauthOrig | unauthOrig | unauthOrig |
| url | url | url |
| userAccountControl | accountEnabled | accountEnabled |
| wWWHomePage | wWWHomePage | wWWHomePage |
（该列表可能与您的安装有所不同，具体取决于您创建的 Active Directory 扩展）
敏锐的眼睛会在上表中发现一些属性名称在复制过程中发生了变化。
下表列出了在通过 Metaverse 从 AD 传输到 Azure AD 期间名称发生更改的属性：
AD/Metaverse/AAD - 属性名称更改
| AD | AAD Metaverse | AAD |
|---|---|---|
| c | c | countryLetterCode |
| cn | cn | commonName |
| co | co | country |
| l | l | city |
| mailNickname | mailNickname | alias |
| msDS-HABSeniorityIndex | msDS-HABSeniorityIndex | msDsHabSeniorityIndex |
| msDS-PhoneticDisplayName | msDS-PhoneticDisplayName | msDsPhoneticDisplayName |
| msExchUsageLocation | usageLocation | usageLocation |
| objectSid | objectSid | onPremiseSecurityIdentifier |
| pwdLastSet | pwdLastSet | lastPasswordChangeTimestamp |
| sAMAccountName | accountName | onPremisesSamAccountName |
| sn | sn | surname |
| st | st | state |
| userAccountControl | accountEnabled | accountEnabled |
概括
从上表可以清楚地看出，您需要根据“入口点”通过不同的命名来处理某些属性。本地 Active Directory 可能使用与 Azure AD 不同的属性名称！
由于您的 PowerShell 脚本接口还更改了一些名称，如此处所述，这一事实使情况变得更加复杂。