Why “blank” AD attributes are tricky
In Active Directory, “blank” can mean at least three different things:
Not set (null / absent): the attribute has no value at all. Many tools display this as empty, but the attribute isn’t present in the entry.
Set to an empty string: the attribute exists but contains a zero-length value (implementation-dependent across LDAP servers). Some…
