adding windows 2000+ username

[Domino]

BUM!

 

on testing our smoothwall with staff for the first time, I notice something quite worrying.

 

The vast majority of them have no windows 2000+ username (eg: [email protected]l), which is a kicker, becuase NTLM in smoothwall requires this.

 

A quick search shows that this is from when the domain was upgraded from NT, the existing user accounts aren't automatically updated with one. So anyone who was here more than 5 years ago doesn't have one.

 

I want to know if anyone knows of a way to add them to a whole group of people at a time - as I really don't want to have to dig through AD to try to find them.

 

Cheers!

[ChrisH]

There is a program that can do this for you. I had a similar problem and the engineer put me onto it. It is for doing bulk modifications to AD. I cant remember it's name but it has also been mentioned on here.

[ChrisH]

Infact having a quick google I think it's AD modify that I used

 

Using ADModify to Change Exchange Specific AD User Attributes in Bulk

[Ric_]

You could also take the opportunity to 'correct' some of the other fields (surname, forname, display name, etc.) ussing CSVDE. It just requires a bit of CSV hacking.

[ChrisH]

You could also take the opportunity to 'correct' some of the other fields (surname, forname, display name, etc.) ussing CSVDE. It just requires a bit of CSV hacking.

 

Yup yup I used AD modify to fix all my display name. When I scripted user imports I was always setting my CN to the user name which can be a bit hard to browse in a list so I changed them all the their full name.

[Domino]

cheers guys!

 

i'll try both of them when i get in tomorrow, sounds simple enough

[ChrisH]

Mine will be quicker and easier tbh ;-) . Make sure you run it from you local machine and not a share or anything it comes up witha funny error (at least I think it's this program that does that)

[Ric_]

Mine will be quicker and easier tbh ;-)

 

Yes but my way is more complicated, time consuming and prone to error! Surely it's a no brainer!

[CyberNerd]

I had exactly the same problem with smoothwall, we did this:

 

Set objParent = GetObject("LDAP://OU=yeargroup, DC=college,DC=example,DC=com")
objparent.Filter = Array("user")
for each objUser in objParent

    objUser.put "UserPrincipalName", objUser.Get("sAMAccountName") & "@domain.com"
    objuser.Setinfo
    next
Wscript.Echo "Done ;)"

[Domino]

wow, that ADModify is bloody brilliant!

 

only took a couple of seconds, now its all good - and i'll have a dig through the other features in a mo, looks really good.

 

It should be added to the Wiki!

[Patk100]

Thanks for al the comment but it's the field in Delivery Options I want to change the only tool I can find that will do this is AD Manager Plus at 799 per seat.

 

Looking for cheaper alternative.

[ChrisH]

Thanks for al the comment but it's the field in Delivery Options I want to change the only tool I can find that will do this is AD Manager Plus at 799 per seat.

 

Looking for cheaper alternative.

 

Hmm wrong thread maybe?

[diggory]

However we have a util called AD Infinitum.

Found at New FAWM

Wasn't too expensive...

 

Go down to manage object, then select export radio button.

Click on the OU and highlight the users.

 

Select "logon name" from the properties list and add it to the 'to be exported list' TWICE

Untick the "include header row" box.

 

Click the export button and then goto the Import properties radio button.

Click open import file..

 

You should get two columns of user names in the grid.

 

Click on the blank grey heading at the top of the grid, change the first to "logon name"

and the second to userPrincipalName

 

Then click Set Properties button.

 

Finally, go into AD and set the upn suffix (this can be done en-mass)

[wesleyw]

You may be able to do this using the dsmod utility and then create a batch file with them all in?

 

 

Wes