AD, changing multiple user accounts

  • Thread starter Thread starter lrpage
  • Start date Start date
L

lrpage

Just upgraded my network to 2000AD. Back in the NT4 days
if I needed to change properties in multiple user accounts
I simply highlight those account, chose properties and I
could change everything except the account name.

I try the same thing in 2000 AD and I see no way to do the
same thing.

I have been trying to find a way to change about 100 users
logon script and home folder for about an hour. In NT4 I
would have been done 50 mins ago. This is supposed to be
better
 
Consider using the following Microsoft PSS tool known as ADmodify -

http://ftp.se.kde.org/pub/vendor/mi...hange Support Tools/ADModify/admodify_1.5.zip

I cannot validate the Microsoft equivalent URL at present as it appears
non-responsive. Please perform any checks you deem suitable against the
unzipped content of the file above.

PS - Further to Jeff's response, it is feasible to perform bulk-modify
operations using the both the command line AND the graphical tools
supplied with the Windows Server 2003 ADMINPAK against a 2000 AD (I
don't believe there are any licensing issues involved with this but,
again, please check that out for yourself). However, at the time of my
last test, it required an "adprep /forestprep" to have been performed
against the 2000 forest before bulk-modify became available within the
GUI (and I'm afraid I don't believe ADprep is provided as part of the
ADMINPAK).

HTH

Dean
 
Just upgraded my network to 2000AD. Back in the NT4 days
if I needed to change properties in multiple user accounts
I simply highlight those account, chose properties and I
could change everything except the account name.

I try the same thing in 2000 AD and I see no way to do the
same thing.

I have been trying to find a way to change about 100 users
logon script and home folder for about an hour. In NT4 I
would have been done 50 mins ago. This is supposed to be
better
Click to expand...
There are a bunch of nice looking scripts at http://www.rlmueller.net/ to
assist with this kind of task. Just found the place myself so I don't
know how well they work.
 
Write a script to do it. Or if possible, upgrade to W2K3.....

Regards,
/Jimmy
 
I'm afraid even that's not sufficient. There are numerous requirements
that must be met in order for the uplevel ADMINPAK GUI to provide the
multi-edit capabilities offered by a native Server 2003 directory. I
have documented the steps that provide an adequate result and have also
tested the resultant behavior should a future Server 2003 upgrade be
required. No problems were encountered using the uplevel GUI, however, I
did encounter some minor complications during the upgrade attempt which
were easily mitigated by manually reversing the objectVersion attribute
of the schema head to a value of 13 (this requirement alone may well be
prohibitive for most).

In short, I use these tools internally to administer a 2000 directory
from 2003/XP members and am pleased with the results.

I most certainly agree that there may well be other complications that
I've not yet encountered but, thus far, they have been resolved to my
satisfaction.

HTH

Dean

--
Dean Wells [MVP / Windows platform]
MSEtechnology
[[ Please respond to the Newsgroup only regarding posts ]]
R e m o v e t h e m a s k t o s e n d e m a i l


Jeff Jones said:
Dean is correct about the GUI. An attribute must be added to the schema for
the displaySpecifier class called adminMultiselectPropertyPages in order for
Active Directory Users & Computers to be able to show the multi-select
property pages. This attribute doesn't get added and populated unless
ADPrep is run. I don't suggest you do this unless you plan on upgrading to
Windows Server 2003. The command line tools do work on multiple objects
without this attribute so you can use them against a Windows 2000 domain
without having to run ADPrep.

--
Jeff Jones [MS]
Active Directory Administration Tools Development
Microsoft Corporation
This posting is provided "AS IS" with no warranties, and confers no rights.



Dean Wells said:
Consider using the following Microsoft PSS tool known as ADmodify -
Click to expand...
http://ftp.se.kde.org/pub/vendor/mi...hange Support Tools/ADModify/admodify_1.5.zip
I cannot validate the Microsoft equivalent URL at present as it appears
non-responsive. Please perform any checks you deem suitable against the
unzipped content of the file above.

PS - Further to Jeff's response, it is feasible to perform bulk-modify
operations using the both the command line AND the graphical tools
supplied with the Windows Server 2003 ADMINPAK against a 2000 AD (I
don't believe there are any licensing issues involved with this but,
again, please check that out for yourself). However, at the time of my
last test, it required an "adprep /forestprep" to have been performed
against the 2000 forest before bulk-modify became available within the
GUI (and I'm afraid I don't believe ADprep is provided as part of the
ADMINPAK).

HTH

Dean

--
Dean Wells [MVP / Windows platform]
MSEtechnology
[[ Please respond to the Newsgroup only regarding posts ]]
R e m o v e t h e m a s k t o s e n d e m a i l


lrpage said:
Just upgraded my network to 2000AD. Back in the NT4 days
if I needed to change properties in multiple user accounts
I simply highlight those account, chose properties and I
could change everything except the account name.

I try the same thing in 2000 AD and I see no way to do the
same thing.

I have been trying to find a way to change about 100 users
logon script and home folder for about an hour. In NT4 I
would have been done 50 mins ago. This is supposed to be
better
Click to expand...
Click to expand...
Click to expand...
 
Back
Top