The new DS* commands in Windows 2003 (DSAdd, DSMod etc) are great by they rely on referring to users by common names (CNs). I guess it's because users are just one other AD object type.
My problem is that I like to operate on users wherever OU they are rather than specifying the full CN. For students I can normally derive the username from MIS data but CNs are suceptible to changes in spelling or movements in teaching/tutor groups.
Any ideas? Should I DSQuery to get the CNs then match to the username field and then peform the DSMod with CN?