User (Internal)¶
OctoSAM Internal Query
Internal queries are advanced queries for analysis of the inner workings of the OctoSAM application. These queries are geared towards administrators with an in-depth knowledge of OctoSAM.
All rows and columns from the User table.
Fields¶
| Name | Type | Visible | Description |
|---|---|---|---|
| ID | numeric | true | OctoSAM internal ID of this entity |
| Organization ID | numeric | true | OctoSAM internal ID of this Organization entity |
| Login Name | string | true | User's login name |
| Domain Name | string | true | NETBIOS Domain name |
| Display Name | string | true | DisplayName attribute from the directory service, |
| User Principal Name | string | true | UserPrincipalName from the directory service, |
| Description | string | true | Description attribute from the directory service, |
| Dns Domain | string | true | The user's DNS domain |
| Import Source ID | numeric | true | Always 1 for current version of OctoSAM Inventory, |
| Last Modification | date | true | Date/Time this entity was last updated. In most cases, this is the time of the last import. In case of re-import of older scan files, LastModification can differ significantly from LastScan. |
| Custom Field1 | string | true | Available for custom data, not used by OctoSAM Inventory, |
| Custom Field2 | string | true | Available for custom data, not used by OctoSAM Inventory, |
| Notes | string | true | Custom notes, |
| Directory Path | string | true | Path to this user or machine object in Active Directoy |
| Directory Container Path | string | true | Path to the container of this user or machine object in Active Directory |
| Importer Instance | string | true | Import instance name if multiple import modules write to the same database.. |
| Last Scan GUID | guid | true | Global Unique IDentifier of the last scan |
| Last Scan | date | true | Date/Time this entity got scanned last |
| SID | string | true | Security Identifier |
| Exclude From Software Inventory | bool | true | If true, software signatures reported by this user are ignored. |
| Ignore New Signatures | bool | true | If true, new signatures reported by this user are ignored. |
| Found In Directory | bool | true | True if the user was found in Active Directory at the last check (usually within 1 day) |
| Last Found In Directory | date | true | Date/Time the user object was last found in Active Directory, |
| Created | date | true | Date/Time this entity was created |
| Created GUID | guid | true | Unique id of the .scan file that created this object |
| Last Machine ID | numeric | true | Internal ID that references the Machine entity (Foreign Key) |
| Most Frequently Used Machine ID | numeric | true | OctoSAM internal ID of the machine this user used most frequently |
| Custom Field3 | string | true | Custom Data - not used by OctoSAM Inventory |
| Custom Field4 | string | true | Custom Data - not used by OctoSAM Inventory |
| Synch Token ID | string | true | Can be used for synchronization with another inventory or CMDB system. Holds the key to the identical item in the CMDB. Not used by OctoSAM Inventory. |
| Synch Last Synch | date | true | Timestamp of last synchoronization of this User with the partner CMDB. Not used by OctoSAM Inventory. |
| Last Modified By | string | true | Windows User that last modified this User record through the OctoSAM UI |
| Res1 | string | true | Reserved for internal use by future versions |
| Res2 | string | true | Reserved for internal use by future versions |
| Directory Ext1 | string | true | Site specific data, can optionally be used to load site-specific extended schema properties. |
| Directory Ext2 | string | true | Site specific data, can optionally be used to load site-specific extended schema properties. |
| Directory Ext3 | string | true | Site specific data, can optionally be used to load site-specific extended schema properties. |
| Directory Ext4 | string | true | Site specific data, can optionally be used to load site-specific extended schema properties. |
| Printable Name | string | true | Combination of attributes for consisten naming on screen or in reports |
| Directory Last Logon Timestamp | date | true | LastLogonTimestamp attribute from Active Directory (updated on import and housekeeping). Resolution: 14 days. |
| Directory User Account Control | numeric | true | UserAccountControl attribute from Active Directory (updated on import and housekeeping) |
| Directory Disabled | bool | true | True if the UserAccountControl attribute has the disable bit set |
| Directory Employee ID | string | true | EmployeeID attribute from Active Directory (updated on import and housekeeping) |
| Directory Department Number | string | true | DepartmentNumber from Active Drectory |
| Directory Department | string | true | Department from Active Directory |
| First Scan | date | true | Date/Time this entity got scanned first |
| Directory Physical Delivery Office Name | string | true | PhysicalDeliveryOfficeName attribute from Active Directory |
| Directory Home Directory | string | true | HomeDirectoy attribute from Active Directory |
| Directory Home Drive | string | true | HomeDrive attribute from Active Directory |
| Directory Title | string | true | Title (JobTitle) attribute from Active Directory |
| Active | bool | true | Reserved for future use |
| Directory Company | string | true | Directory attribute from Active Directory |
| Directory Telephone Number | string | true | TelephoneNumber attribute from Active Directory |
| Directory Mail | string | true | Mail attribute from Active Directory |
| Directory Proxy Addresses | string | true | ProxyAddresses attribute from Active Directory |
| Directory City | string | true | City attribute from Active Directory |
| Directory Postal Code | string | true | PostalCode attribute from Active Directory |
| Directory Street | string | true | Street attribute from Active Directory |
| Directory Street Address | string | true | StreetAddress attribute from Active Directory |
| Directory Extension Attribute1 | string | true | ExtensionAttribute from Active Directory |
| Directory Extension Attribute2 | string | true | ExtensionAttribute from Active Directory |
| Directory Extension Attribute3 | string | true | ExtensionAttribute from Active Directory |
| Directory Extension Attribute4 | string | true | ExtensionAttribute from Active Directory |
| Directory Extension Attribute5 | string | true | ExtensionAttribute from Active Directory |
| Directory Extension Attribute6 | string | true | ExtensionAttribute from Active Directory |
| Directory Extension Attribute7 | string | true | ExtensionAttribute from Active Directory |
| Directory Extension Attribute8 | string | true | ExtensionAttribute from Active Directory |
| Directory Extension Attribute9 | string | true | ExtensionAttribute from Active Directory |
| Directory Extension Attribute10 | string | true | ExtensionAttribute from Active Directory |
| Directory Extension Attribute11 | string | true | ExtensionAttribute from Active Directory |
| Directory Extension Attribute12 | string | true | ExtensionAttribute from Active Directory |
| Directory Extension Attribute13 | string | true | ExtensionAttribute from Active Directory |
| Directory Extension Attribute14 | string | true | ExtensionAttribute from Active Directory |
| Directory Extension Attribute15 | string | true | ExtensionAttribute from Active Directory |
| Directory GUID | guid | true | ObjectGuid attribute from Active Directory |
| Directory Preferred Language | string | true | User's preferred language from ActiveDirectory |
| Directory When Changed | date | true | WhenChanged attribute from Active Directory (updated on import and housekeeping) |
| Directory When Created | date | true | WhenCreated attribute from Active Directory |
| Suggest Software Uninstall | bool | true | If true, suggest this user in reports / queries for software uninstalls. |
| Hint Software Package Usage Start Date | date | true | Min consolidated usage date for this User |
| Hint Software Package Usage End Date | date | true | Max consolidated usage date for this User |
| Hint In Groups | bool | true | True if the User is member in any Group |
| Hint Cloud Services | bool | true | True if the user has any assigned cloud services, |
| Mac Full Name | string | true | For users scanned on Mac, contains the users FullName as seen by system_profiler, |
| Numeric User ID | numeric | true | For users scanned on Unix/Linux/macOS contains the numeric user id |
| Guid | guid | true | A unique ID that can be used to link to this user object by external applications, |
| Directory Ms DS Consistency Guid | guid | true | A unique ID used by Microsoft Entra ID to synchronize user information, |
| Deleted In Directory | bool | true | True, if the user object was deleted from the directory. |
| Deleted In Directory First Detected | date | true | Date/Time the DeletedInDirectory flag was set, |
| Directory Account Expires | date | true | AccountExpires attribute from Active Directory (updated on import and housekeeping), |
| Hint Has Access Log | bool | true | True if user has UAL data available, |
| Analysis Extras | string | true | Holds additional analysis data, |
| Service Now Sys ID | guid | true | Service Now: sys_id of the replicated object, |
| Service Now Last Export | date | true | Date/Time of last export to ServiceNow, |
| Service Now Last Import | date | true | Date/Time of last import from ServiceNow |
| Hint Owns Software Items | bool | true | True if the user owns any software Items, |
| Hint Has Relevant Software Items | bool | true | True if there are software items relevant for this user, |
| Extra Data | string | true | Extra data for this object (JSON) |
| Directory Type | string | true | Directory type that this user was found in., |
| Entra Id Tenant Id | guid | true | Entra ID tenant Id |
| Entra Id On Premises Distinguished Name | string | true | Distinguished name that got replicated from on-site to Entra ID |
| Entra Id On Premises Domain Name | string | true | Domain name that got replicated from on-site to Entra ID |
| Entra Id On Premises Last Sync Date Time | date | true | Date/Time this object was last synchronized from on-site AD |
| Entra Id On Premises SID | string | true | SID of the on-prem user |
| Entra Id On Premises Sync Enabled | bool | true | If true the user object gets synchronized from an on-size AD |
| Entra Id On Premises User Principal Name | string | true | UPN that got synchronized from on-prem AD |
| Entra Id User Type | string | true | Entra ID user type |
| Entra Id Employee Leave Date Time | date | true | Date/Time this employee was left or will leave |
| Entra Id Employee Hire Date | date | true | Date this employee was hired |
| Entra Id Deleted Date Time | date | true | Date/Time this user object was deleted in Azure AD |
| Entra Id Given Name | string | true | Given name of the user |
| Entra Id Surname | string | true | Surname of the user |
| Entra Id Creation Type | string | true | Entra ID creation type |
| Entra Id Cost Center | string | true | Cost center from Entra ID |
| Entra Id Preferred Data Location | string | true | Preferred data location from Entra ID |
| Entra Id Division | string | true | Division from Entra ID |
| Object State ID | numeric | true | Internal ID that references the ObjectState entity (Foreign Key) |
| Mapping Tag | string | true | A field that can be used for custom organization mapping |
| Hint Has Auto Start | bool | true | True if the user has scanned Windows auto start information |
| Hint Has Mui Cache | bool | true | True if the user has scanned MUI Cache information |
| Cloud Provider Account ID | numeric | true | Internal ID that references the CloudProviderAccount entity (Foreign Key) |
| Last Found In Entra Id | date | true | Date/Time this user was last found in Entra ID |
| Entra Id Last Sign In Date Time | date | true | Date/Time this user last signed in to Entra ID. This information may not be available depending on your Entra ID license. |
| Entra Id Last Sign In Request Id | string | true | Request id of the last Entra ID sign in. This information may not be available depending on your Entra ID license. |
| Entra Id Last Non Interactive Sign In Date Time | date | true | Date/Time of the last non-interactive sign in to Entra ID. This information may not be available depending on your Entra ID license. |
| Entra Id Last Non Interactive Sign In Request Id | string | true | Request id of the last non-interactive sign in to Entra ID. This information may not be available depending on your Entra ID license. |
| Hint Has Cloud App Usage | bool | true | True if Microsoft 365 usage data is available in the OctoSAM inventory |
| Entra Id Id | string | true | Microsoft EntraID ID of this user |
| Last Scanner Tag | string | true | Command-line tag that was specified on the last scan of this user |
| Hint Has Office Add Ins | bool | true | True, if Microsoft Office add-ins have been detected on this machine |
| Scanned Distinguished Name | string | true | Distinguished user name as scanned from Octoscan2. Modern Windows that are joined to an Active Directory provide this information locally. |
| Entra Id Account Enabled | bool | true | Entra ID AccountEnabled |
| Entra Id Sync Diagnostics | string | true | Diagnostics message from the OctoSAM Graph Entra ID importer |
| Entra Id Created Date Time | date | true | Date/Time created in Entra ID |
| Cost Center ID | numeric | true | Internal ID that references the CostCenter entity (Foreign Key) |
| Hint Has Browser Extensions | bool | true | |
| Current Date Time | date | false | Date and time the query was run. For reference if you use and save query results. |
Main entities referenced from this query¶
Query information¶
| Property | Value | Description |
|---|---|---|
| Query Guid | 9f12c7e4-5aba-48f2-8268-2f6bc9482c25 | The internal id of the query. Must be unique |
| SupportsDesktop | true | If true, the query can be started from the OctoSAM Windows GUI |
| SupportsWeb | false | If true, the query can be started from the OctoSAM Web UI |