Active directory question about ADSI pathname

Posted on 2006-11-17
Last Modified: 2010-04-11
Is their something like a "fully qualified domain name" for active directory objects.  

I need to add a domain account to a local group and have to point to that particular account.

How can I easely retrieve the "full name" of the object ?
Question by:itbabe

Author Comment

ID: 17963601
apparently it is called an ADSI pathname,  how can I retrieve it ?
LVL 11

Expert Comment

ID: 17963611
Hi itbabe,
the syntax is the following:"CN=Username,OU=name of his/her OU, OU=parent ou,OU=....,DC=yourDOMAINName,DC=yourDOMAINsuffix"

LVL 14

Expert Comment

ID: 17963615
Dear itbabe,
Your Domain DNS name normally will be your Fully qualified domain name. When you have created your AD Domain you would have given like or something like that. is called fully qualified domain you can use to add in the local group.

Migrating Your Company's PCs

To keep pace with competitors, businesses must keep employees productive, and that means providing them with the latest technology. This document provides the tips and tricks you need to help you migrate an outdated PC fleet to new desktops, laptops, and tablets.

LVL 11

Assisted Solution

elbereth21 earned 100 total points
ID: 17963639
Inbarasan, I believe he is not talking about "FQDN", which is used in DNS, but about the LDAP "Distinguished Name", used in Active Directory.
LVL 11

Expert Comment

ID: 17963644
Anyway, the DNS domain name is the same appearing under "DC" in LDAP path (DC stands for Domain Component).
LVL 14

Expert Comment

ID: 17963645
Yes elbereth you are right.

Accepted Solution

by: earned 400 total points
ID: 17967819
You could use ADSI Edit.

Make sure you are logged on to the domain.

Here's the full explanation ( with download link ).

Hope this helps,


Featured Post

Announcing the Most Valuable Experts of 2016

MVEs are more concerned with the satisfaction of those they help than with the considerable points they can earn. They are the types of people you feel privileged to call colleagues. Join us in honoring this amazing group of Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article outlines the process to identify and resolve account lockout in an Active Directory environment.
The next five years are sure to bring developments that are just astonishing, and we will continue to try to find the balance between connectivity and security. Here are five major technological developments from the last five years and some predict…
Sending a Secure fax is easy with eFax Corporate ( First, just open a new email message. In the To field, type your recipient's fax number You can even send a secure international fax — just include t…
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …

860 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question