--- title: Unset LDAP Initial distinguished name \[Updated in Security Center 1.3 and removed in 2.0\] description: Use this property to manage the distinguished name of a LDAP Server record. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/platform-security/instance-security-hardening-settings/sc-ldap-initial-distinguished-name.html release: australia product: Instance Security Hardening Settings classification: instance-security-hardening-settings topic_type: reference last_updated: "2026-03-12" reading_time_minutes: 1 breadcrumb: [Validation, sanitization, and encoding, Hardening settings, Platform Security] --- # Unset LDAP Initial distinguished name \[Updated in Security Center 1.3 and removed in 2.0\] Use this property to manage the distinguished name of a LDAP Server record. This property controls the distinguished name of a LDAP Server record which is inserted when running an out-of-the-box \(OOB\) fix script. If it is set to the recommended value of "" or blank, then LDAP server data can be enumerated by a lower privilege user. ## More information
| Attribute | Description |
|---|---|
| Configuration name | **glide.ldap.initial.dn** |
| Configuration type | System Properties \(/sys\_properties\_list.do\) |
| Data type | string |
| Recommended value | blank |
| Default value | blank |
| Category | [Validation, sanitization, and encoding](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/validation-sanitization-encoding.md) |
| Security risk | - Severity score: 2.7 - CVSS score: Low - Security risk details: Setting the property value to "" or blank could make LDAP server data accessible to a lower privilege user. |
| Dependencies and prerequisites | None |