Maester Packs
HighBinary packFree

AD User Attributes

Checks that Active Directory users have the attributes HR processes, Entra Connect sync and address books depend on, that those values are formatted consistently, and that they use your approved values and office locations.

Version
0.3.2
Tests
25
Connectors
1
Published
9 Nov 2026

DevClate · devclate.ad-user-attributes · 0 stars · Open source · MIT

PowerShell 
Install-MtPack DevClate/maester-pack-adua

Install only packs from sources you trust. This pack is made by DevClate, not by Maester. The site only indexes and scans it: Install-MtPack downloads it straight from github.com/DevClate/maester-pack-adua.

maester-packs.lock.json entry 
{  "Id": "devclate.ad-user-attributes",  "Source": "DevClate/maester-pack-adua",  "Version": "0.3.2",  "Commit": "33e16c74cae035b3068786259858c0d71bfb2272",  "Digest": "sha256:7f38679dcfc7e7044b9b10fe36ad7ba32a1f3e34c026f48f49db2979f22b4a1a"}

← All tests

MP.CLT.ADUA.1008 All Active Directory users have a mobile phone.

Severity: LowCLT.ADUA.Ldap

Checks that every enabled Active Directory user has a mobile phone (mobile).

mobile is synced to Microsoft Entra ID as mobilePhone and shown in the address book. Many organisations leave it blank on purpose, so this test carries the tag Optional.

Remediation action

  1. In Active Directory Users and Computers, open each user listed below and go to the Telephones tab.
  2. Fill in Mobile and select OK.
  3. For many users, use PowerShell with the ActiveDirectory module (RSAT): Set-ADUser -Identity <sAMAccountName> -MobilePhone '+14255550101'.
  4. If the value comes from an HR system or a provisioning tool, fix it there, or the next import overwrites your change.
  5. If an account legitimately has no value (a service or resource account), leave it out with ExcludedUsers, ExcludedGroups or the pack-wide CLT.ADUA.ExcludedOUs in maester-config.json rather than filling in a placeholder.

Related links

%TestResult%