ADmodcmd.exe

Active Directory Bulk Modify Tool (Command Line Version) There is also a GUI for this tool called admodify.exe

Syntax
      admodcmd [-dn BaseDN] [-p pagesize] [-s] [-server servername]
        [-f LDAPFilter] [modification]

Key
   -dn BaseDN      Base DN to begin the LDAP query.

   modification    Modification to perform:
                   Terminal Server AttributesExchange Related Attributes
                   Mailbox RightsUser Account SettingsCustom Attributes                  

   -p pagesize     LDAP Page size to use for query.

   -s              Perform a subtree search 
                   (Default = one level search)

   -server servername
                   The server to make the changes to.
                   by default, changes  are made locally if on a DC.
                   If on a member, DNS is used to find a DC.

   -f LDAPFilter   A Valid LDAP filter to use when enumerating objects
                   The default filter is (objectClass=user).   

Changes made with ADModcmd can be undone, as long as the xml log file that logged the changes still exists. These log files are typically located in the same folder as the admodify executable.

Syntax:
      admodcmd [-dn BaseDN] [-p pagesize] [-s] [-server servername]
         -undo logfilename -server servername]

Key: 
   logfilename     The log file that contains the changes to be undone.
   servername      The DC to write the changes to.
                   by default, changes  are made locally if on a DC.
                   If on a member, DNS is used to find a DC.

For information on users that were skipped during an undo process, refer to the undo.log file.

“A free people claim their rights as derived from the laws of nature, and not as the gift of their magistrate” ~ Thomas Jefferson

Related commands

DSQuery - Search for items in active directory (user group computer)
DSMod - Modify items in active directory (user group computer)


 
Copyright © 1999-2024 SS64.com
Some rights reserved