AD User Attributes Bulk Modification

[JosPhantasmE]

My first post in this forum.

I just started working with windows server 2008 r2 and as a apprentice it have been a pleasure to work with WS2008R2. But, now I came across with this problem where I have over 100 users and I need to modify some attributes of each one of them, to be more specific in the "Sessions" and "Environment" tabs.

Is just a tedious task to do and I would like to know if there is any tool, script or anything else that can help me get this job done by bulk...?

Thanks.

[pcstru]

You can do it in Powershell. There's a script here which is a good starting point. You just need to mod it to modify attributes of objects that already exist.

[Marci]

Bulk AD Users

[Arthur]

If you need to clear AD attributes you could use this script as a starting point.

Import-Module ActiveDirectory

$users = Import-Csv -Path C:\Scripts\adtest.csv
                        
foreach ($user in $users) {
# Search in specified OU and Update existing attributes
 Get-ADUser -Filter "SamAccountName -eq '$($user.samaccountname)'" -Properties * -SearchBase "cn=Users,DC=manticore,DC=org" |
  Set-ADUser -Clear l, physicalDeliveryOfficeName, division
}

... or this one to modify values.

Import-Module ActiveDirectory
            
$users = Import-CSV -Path C:\Scripts\adtest.csv

foreach ($user in $users) {
# Search in specified OU and Update existing attributes
 Get-ADUser -Filter "SamAccountName -eq '$($user.samaccountname)'" -Properties * -SearchBase "cn=Users,DC=manticore,DC=org" |
  Set-ADUser -City $($user.City) -Office $($user.Office) -Division $($user.Division)
}

Bulk AD Users is also good.

[mdrabble]

Another nice little tool is ADModify. I used this when I had to tweak AD attributes for Exchange.

[3s-gtech]

ADModify.net is ace. USed it to add all sorts of things - main thing was adding the mandatory profile path to 850 users in five minutes!

[Duke5A]

Use dsquery and pipe its output to dsmod.

dsquery user "ou=2013,ou=grad year,ou=students,ou=users someschool,dc=someschooldistrict,dc=com" | dsmod user -pwdneverexpires no -canchpwd yes

The above would modify every user in that OU to having their password expire and be given ability to change it.

[Jamo]

Use dsquery and pipe its output to dsmod.

dsquery user "ou=2013,ou=grad year,ou=students,ou=users someschool,dc=someschooldistrict,dc=com" | dsmod user -pwdneverexpires no -canchpwd yes

The above would modify every user in that OU to having their password expire and be given ability to change it.

Bulk AD Users is an amazing tool, cant recommend enough

[plexer]

ADModify.net is ace. USed it to add all sorts of things - main thing was adding the mandatory profile path to 850 users in five minutes!

If running 2008 R2 possibly 2008 as well that is one property you can bulk change from ADUC.

Ben

[JosPhantasmE]

I have tried "Bulk AD Users", but it have never worked for me. Apparently is only compatible with WS2003 only. Same thing happened with "ADModify.net"

[3s-gtech]

Doesn't it work? I've used admodify.net with a Server 2008 R2 DC, last time I used it, it was running on 2008 functional level so may not work now on 2008 R2 but should do.

Much better that it's in ADUC now, common sense really.

[JosPhantasmE]

With "Bulk AD Users" I get this error: "Failure: TsUserEx.dll is required to read/modify terminal services attributes. You might need to install the Windows 2003 Administrative Tools Pack. (Which is not compatible with windows server 2008 R2)" And then, when I try to use ADmodify.Net all options are grayed out and I got this message at the bottom "Terminal Server and CDOEXM Modifications Disabled."

[JosPhantasmE]

ADModify.net is ace. USed it to add all sorts of things - main thing was adding the mandatory profile path to 850 users in five minutes!

What OS where you using?

[3s-gtech]

2008 R2, but also 2003 in the past.

[JosPhantasmE]

So there is not an easy way to do this...?