Notes

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
=====Contacts=====
**Output a list of all contacts in Active Directory to a text file with current date**
<code>
dsquery contact > "Contacts in AD (%date%).txt"
</code>

**Output a list of all contacts with their emailaddress in Active Directory to a text file with the current date**
<code>
dsquery contact|dsget contact -email -display > "Email Addresses for Contacts (%date%).txt"
</code>

**Output a list of all contacts with their emailaddress in the Contacts.Exchange OU to a text file with the current date**
<code>
dsquery contact "OU=Contacts,OU=Exchange,DC=fabrikam,DC=com"|dsget contact -email -display > "Email Addresses for Contacts OU (%date%).txt"
</code>

**Output a list of all contacts with their emailaddress in the OU that is given when the script runs**
<code>
dsquery contact %1|dsget contact -email -display > "Email Addresses for %2 OU (%date%).txt"
</code>
Above script should be run as follows:
<code>
ShowContactsEmailAddressFor.cmd "OU=Contacts,OU=Exchange,DC=fabrikam,DC=com" "Contacts"
</code>

=====Groups=====
**Copy the group memberships from one user to another**
<code>
dsget user %1 -memberof|dsmod group -c -addmbr %2
</code>
Above script should be run as follows:
<code>
CopyGroupMembership.cmd "CN=SourceUsername,OU=Users,DC=fabrikam,DC=com" "CN=DestinationUserName,OU=Users,DC=fabrikam,DC=com"
</code>

**Copy the group memberschips from one group to another**
<file winbatch CopyGroupMembersToGroup.cmd>
@ECHO OFF
REM CopyGroupMembersToGroup.cmd
REM For copying the members of one group to another.
REM 20100827, v1.
REM 20120621, v2.
REM               Added FOR loop so the script doesn't quit on the first account that already is a member of both groups.
@ECHO ON

FOR /F "tokens=*" %%S IN ('dsget group %1 -members') DO (

	dsmod group %2 -addmbr %%S
	
)

</file>
Above script should be run as follows:
<code>
CopyGroupMembersToGroup.cmd "CN=SourceGroupName,OU=Groups,DC=fabrikam,DC=com" "CN=DestinationGroupName,OU=Groups,DC=fabrikam,DC=com"
</code>

**Get the account names of group members**
<code>
dsget group %1 -members -expand|dsget user -samid -c
</code>
Above script should be run as follows:
<code>
GetGroupMembersAccountName.cmd "CN=GroupName,OU=Groups,DC=fabrikam,DC=com"
</code>

**Get the full name of group members**
<code>
dsget group %1 -members -expand|dsget user -display -c
</code>
Above script should be run as follows:
<code>
GetGroupMembersFullName.cmd "CN=GroupName,OU=Groups,DC=fabrikam,DC=com"
</code>

=====Users=====
====Home directories====
Onderstaand commando haalt alle users uit AD die nu een home directory hebben met "servernaam" in de string en vervangt deze door \\newserver\Home\$username$:
<code>
dsquery user -limit 2000|dsget user -samid -hmdir|find /I "servernaam"|gawk "{print $1}"|tee "c:\temp\usernamesfound.txt"|xargs -n 1 dsquery user -samid |dsmod user -hmdir \\newserver\Home\$username$|tee "c:\temp\dsmodresult.txt"
</code>
Voor dit commando heb je de gawk, tee en xargs utilities voor Windows nodig. Deze kun je halen uit: [[http://unxutils.sourceforge.net/|GNU utilities for Win32]] \\

**Uitleg** 

**dsquery user -limit 2000** \\
Vraagt alle users op in AD en verhoogt de limiet op geretourneerde regels van de standaard 100 naar 2000. \\

**dsget user -samid -hmdir** \\
Vraagt van al deze users het samid en de home directory op. \\

**find /I "servernaam"** \\
Geeft de regels terug waarin servernaam voorkomt en let daarbij niet op hoofdletters. \\

**gawk "{print $1}"** \\
Geef de eerste kolom van het resultaat terug, de samid's. \\

**tee "c:\temp\usernamesfound.txt"** \\
Stopt de uitvoer in zowel het aangegeven bestand als op de console. \\

**xargs -n 1 dsquery user -samid ** \\
Voert dsquery user -samid met daarachter één argument uit de lijst aangegeven door xargs (vergeet niet de spatie na -samid en het pipe symbool!) om de DN van deze useraccount te achterhalen. \\

**dsmod user -hmdir \\newserver\Home\$username$** \\
Past per userDN de home directory aan naar de nieuwe server + share + username. \\

**tee "c:\temp\dsmodresult.txt"** \\
Stopt de uitvoer van dsmod in zowel het aangegeven bestand, als op de console. \\

====List of enabled users====
Requires comm.exe from [[http://sourceforge.net/projects/unxutils/|UnixUtils]] \\
<file winbatch GetActiveUsers.cmd>
@ECHO OFF
REM GetActiveUsers.cmd
REM 20110726, v1.

SET UNIXUTILS=I:\Tools\UnixUtils\usr\local\wbin
SET TMPDIR=C:\Temp

ECHO Getting a list of all user accounts
%SYSTEMROOT%\system32\dsquery.exe user forestroot -o samid -limit 0|sort > "%TMPDIR%\users.txt"

ECHO Getting a list of disabled user accounts
%SYSTEMROOT%\system32\dsquery.exe user forestroot -disabled -o samid -limit 0|sort > "%TMPDIR%\disabled.txt"

ECHO Comparing both lists to filter out the disabled users
%UNIXUTILS%\comm.exe -3 "%TMPDIR%\disabled.txt" "%TMPDIR%\users.txt" > "%TMPDIR%\Enabled-%date%.txt"

ECHO Displaying the end result in Notepad
%SYSTEMROOT%\system32\notepad.exe "%TMPDIR%\Enabled-%date%.txt"

</file>

=====Links=====
[[http://technet2.microsoft.com/windowsserver/en/library/96a4a5ee-ee72-44d5-845f-71b2de33d4411033.mspx?mfr=true|Directory service command-line tools]] \\
[[http://technet2.microsoft.com/windowsserver/en/library/96a4a5ee-ee72-44d5-845f-71b2de33d4411033.mspx?mfr=true|Dsget]] \\
[[http://technet2.microsoft.com/windowsserver/en/library/96a4a5ee-ee72-44d5-845f-71b2de33d4411033.mspx?mfr=true|Dsquery]] \\
[[http://technet2.microsoft.com/windowsserver/en/library/96a4a5ee-ee72-44d5-845f-71b2de33d4411033.mspx?mfr=true|Dsmod]] \\
[[http://www.microsoft.com/technet/scriptcenter/guide/sas_ads_kbwl.mspx?mfr=true|Microsoft Windows 2000 Scripting Guide - ADSI - Modifying Multivalued Attributes]] \\