| Author | Messages | |
abagnale_lists
Posts:16
 | | 10/03/2005 8:23 AM |
| | Message body was not found. | | | |
| prenouf
Posts:1
 | | 10/03/2005 10:03 AM |
| Hi all,
If you remember some of my previous posts, I've had issues with excessive numbers of Domain Admins and a poorly managed Active Directory network.
I have now managed to control the number of Domain Admins to a suitable manner for our environment and delegated the appropriate permissions for the Service Desk.
I now need ton data 'cleanse' Active Directory due to the number of fields which contain incorrect data which has been manually entered by previous Service Desk users.
The fields which are showing incorrect data are the ones in the General and Organization tabs. Fields such as Description, Office, Title, Department etc are all showing the wrong data and are inconsistent. There are potentially 3500 users which may require account fields to be modified
What I want to do is to clean this up. Is there a way in which I can export this data to an excel spreadsheet and then re-import with out duplicating any accounts? Do I need to script this?(if so, does anyone have any scripts?)
Alternatively, is it worth employing someone to do it manually? time consuming and probably not the most favoured option, though any idea's would be appreciated.
Oh, it's a Single W2k3 domain, 2003 FFL,
thanks...
frank
Yahoo! for GoodClick here to donate to the Hurricane Katrina relief effort. | | | |
| ZJORZ
Posts:129
 | | 10/03/2005 10:28 AM |
| Scripting would be my first
choice...
Script Center has great
examples:
http://www.microsoft.com/technet/scriptcenter/scripts/ad/users/list/default.mspx (Retrieving User Account
Properties)
http://www.microsoft.com/technet/scriptcenter/scripts/ad/users/modify/default.mspx (Modifying User Account
Properties)
http://www.microsoft.com/technet/scriptcenter/scripts/office/excel/default.mspx (Microsoft Excel and
scripts)
Cheers,
Jorge From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of Frank
AbagnaleSent: Monday, October 03, 2005 10:20To:
ActiveSubject: [ActiveDir] Cleanup of Active
Directory...
Hi all,
If you remember some of my previous posts, I've had issues with excessive
numbers of Domain Admins and a poorly managed Active Directory network.
I have now managed to control the number of Domain Admins to a suitable
manner for our environment and delegated the appropriate permissions for the
Service Desk.
I now need ton data 'cleanse' Active Directory due to the number of
fields which contain incorrect data which has been manually entered by previous
Service Desk users.
The fields which are showing incorrect data are the ones in the General and
Organization tabs. Fields such as Description, Office, Title,
Department etc are all showing the wrong data and are
inconsistent. There are potentially 3500 users which may require
account fields to be modified
What I want to do is to clean this up. Is there a way in which I can export
this data to an excel spreadsheet and then re-import with out duplicating any
accounts? Do I need to script this?(if so, does anyone have any scripts?)
Alternatively, is it worth employing someone to do it manually? time
consuming and probably not the most favoured option, though any idea's would be
appreciated.
Oh, it's a Single W2k3 domain, 2003 FFL,
thanks...
frank
Yahoo! for GoodClick here
to donate to the Hurricane Katrina relief effort.
This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you. | | | |
| deji
Posts:150
 | | 10/03/2005 10:35 AM |
| Look at http://www.computerperformance.co.uk/Logon/CSVDE_LDIFDE.htm
HTH
Sincerely,
Dèjì Akómöláfé, MCSE+M MCSA+M MCP+I
Microsoft MVP - Directory Services
www.readymaids.com - we know IT
www.akomolafe.com
Do you now realize that Today is the Tomorrow you were worried about
Yesterday? -anon
________________________________
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx on behalf of Frank Abagnale
Sent: Mon 10/3/2005 1:20 AM
To: Active
Subject: [ActiveDir] Cleanup of Active Directory... Hi all,
If you remember some of my previous posts, I've had issues with excessive
numbers of Domain Admins and a poorly managed Active Directory network.
I have now managed to control the number of Domain Admins to a suitable
manner for our environment and delegated the appropriate permissions for the
Service Desk.
I now need ton data 'cleanse' Active Directory due to the number of fields
which contain incorrect data which has been manually entered by previous
Service Desk users.
The fields which are showing incorrect data are the ones in the General and
Organization tabs. Fields such as Description, Office, Title, Department etc
are all showing the wrong data and are inconsistent. There are potentially
3500 users which may require account fields to be modified
What I want to do is to clean this up. Is there a way in which I can export
this data to an excel spreadsheet and then re-import with out duplicating any
accounts? Do I need to script this?(if so, does anyone have any scripts?)
Alternatively, is it worth employing someone to do it manually? time
consuming and probably not the most favoured option, though any idea's would
be appreciated.
Oh, it's a Single W2k3 domain, 2003 FFL,
thanks...
frank
________________________________
Yahoo! for Good
Click here to donate to the
Hurricane Katrina relief effort.
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ | | | |
| bdesmond
Posts:409
 | | 10/03/2005 10:55 AM |
| You can easily dump all this data with
either csvde or adfind and the included perl script (the latter is probably
better). As for importing it back in, you'll need some sort of simple script
which takes the DN from the csv file and sets the values accordingly.
Thanks,Brian Desmond
brian@xxxxxxxxxxxxxxxx
c -
312.731.3132
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of Frank
AbagnaleSent: Monday, October 03, 2005 4:20 AMTo:
ActiveSubject: [ActiveDir] Cleanup of Active
Directory...
Hi all,
If you remember some of my previous posts, I've had issues with excessive
numbers of Domain Admins and a poorly managed Active Directory network.
I have now managed to control the number of Domain Admins to a suitable
manner for our environment and delegated the appropriate permissions for the
Service Desk.
I now need ton data 'cleanse' Active Directory due to the number of
fields which contain incorrect data which has been manually entered by previous
Service Desk users.
The fields which are showing incorrect data are the ones in the General and
Organization tabs. Fields such as Description, Office, Title,
Department etc are all showing the wrong data and are
inconsistent. There are potentially 3500 users which may require
account fields to be modified
What I want to do is to clean this up. Is there a way in which I can export
this data to an excel spreadsheet and then re-import with out duplicating any
accounts? Do I need to script this?(if so, does anyone have any scripts?)
Alternatively, is it worth employing someone to do it manually? time
consuming and probably not the most favoured option, though any idea's would be
appreciated.
Oh, it's a Single W2k3 domain, 2003 FFL,
thanks...
frank
Yahoo! for GoodClick here
to donate to the Hurricane Katrina relief effort. | | | |
| listmail
Posts:490
 | | 10/04/2005 11:31 AM |
| If you can programmatically determine what is wrong, and
better still, determine what would be right, I would script this operation.
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of Frank
AbagnaleSent: Monday, October 03, 2005 4:20 AMTo:
ActiveSubject: [ActiveDir] Cleanup of Active
Directory...
Hi all,
If you remember some of my previous posts, I've had issues with excessive
numbers of Domain Admins and a poorly managed Active Directory network.
I have now managed to control the number of Domain Admins to a suitable
manner for our environment and delegated the appropriate permissions for the
Service Desk.
I now need ton data 'cleanse' Active Directory due to the number of
fields which contain incorrect data which has been manually entered by previous
Service Desk users.
The fields which are showing incorrect data are the ones in the General and
Organization tabs. Fields such as Description, Office, Title,
Department etc are all showing the wrong data and are
inconsistent. There are potentially 3500 users which may require
account fields to be modified
What I want to do is to clean this up. Is there a way in which I can export
this data to an excel spreadsheet and then re-import with out duplicating any
accounts? Do I need to script this?(if so, does anyone have any scripts?)
Alternatively, is it worth employing someone to do it manually? time
consuming and probably not the most favoured option, though any idea's would be
appreciated.
Oh, it's a Single W2k3 domain, 2003 FFL,
thanks...
frank
Yahoo! for GoodClick here
to donate to the Hurricane Katrina relief effort. | | | |
| AD00000804
Posts:0
 | | 10/04/2005 12:59 PM |
| Yes - you could take the data out with the CSVDE tool and
massage/revise in an Excel .csv spreadsheet and then export back in, but do so
carefully...
Good luck,
Chuck Gafford
Architect 2
Unisys | | | |
| ActiveDirectory@xxxx.yyy
 | | 10/05/2005 2:46 AM |
| You might also try ADModify from the PSS ftp
site. It allows bulk modification and also allows you to narrow down the
focus to certain OU, users etc using limited wildcards.
Bob From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of Brian
DesmondSent: Monday, October 03, 2005 9:14 AMTo:
ActiveDir@xxxxxxxxxxxxxxxxxxSubject: RE: [ActiveDir] Cleanup of
Active Directory...
You can easily dump all this data with
either csvde or adfind and the included perl script (the latter is probably
better). As for importing it back in, you'll need some sort of simple script
which takes the DN from the csv file and sets the values accordingly.
Thanks,Brian Desmond
brian@xxxxxxxxxxxxxxxx
c -
312.731.3132
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of Frank
AbagnaleSent: Monday, October 03, 2005 4:20 AMTo:
ActiveSubject: [ActiveDir] Cleanup of Active
Directory...
Hi all,
If you remember some of my previous posts, I've had issues with excessive
numbers of Domain Admins and a poorly managed Active Directory network.
I have now managed to control the number of Domain Admins to a suitable
manner for our environment and delegated the appropriate permissions for the
Service Desk.
I now need ton data 'cleanse' Active Directory due to the number of
fields which contain incorrect data which has been manually entered by previous
Service Desk users.
The fields which are showing incorrect data are the ones in the General and
Organization tabs. Fields such as Description, Office, Title,
Department etc are all showing the wrong data and are
inconsistent. There are potentially 3500 users which may require
account fields to be modified
What I want to do is to clean this up. Is there a way in which I can export
this data to an excel spreadsheet and then re-import with out duplicating any
accounts? Do I need to script this?(if so, does anyone have any scripts?)
Alternatively, is it worth employing someone to do it manually? time
consuming and probably not the most favoured option, though any idea's would be
appreciated.
Oh, it's a Single W2k3 domain, 2003 FFL,
thanks...
frank
Yahoo! for GoodClick here
to donate to the Hurricane Katrina relief effort. | | | |
| michael@xxxx.yyy
 | | 10/05/2005 2:59 AM |
| admodify.net is better (and replaces that
tool)
http://www.admodify.net From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of
ActiveDirectorySent: Wednesday, October 05, 2005 10:44
AMTo: ActiveDir@xxxxxxxxxxxxxxxxxxSubject: RE: [ActiveDir]
Cleanup of Active Directory...
You might also try ADModify from the PSS ftp
site. It allows bulk modification and also allows you to narrow down the
focus to certain OU, users etc using limited wildcards.
Bob From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of Brian
DesmondSent: Monday, October 03, 2005 9:14 AMTo:
ActiveDir@xxxxxxxxxxxxxxxxxxSubject: RE: [ActiveDir] Cleanup of
Active Directory...
You can easily dump all this data with
either csvde or adfind and the included perl script (the latter is probably
better). As for importing it back in, you'll need some sort of simple script
which takes the DN from the csv file and sets the values accordingly.
Thanks,Brian Desmond
brian@xxxxxxxxxxxxxxxx
c -
312.731.3132
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of Frank
AbagnaleSent: Monday, October 03, 2005 4:20 AMTo:
ActiveSubject: [ActiveDir] Cleanup of Active
Directory...
Hi all,
If you remember some of my previous posts, I've had issues with excessive
numbers of Domain Admins and a poorly managed Active Directory network.
I have now managed to control the number of Domain Admins to a suitable
manner for our environment and delegated the appropriate permissions for the
Service Desk.
I now need ton data 'cleanse' Active Directory due to the number of
fields which contain incorrect data which has been manually entered by previous
Service Desk users.
The fields which are showing incorrect data are the ones in the General and
Organization tabs. Fields such as Description, Office, Title,
Department etc are all showing the wrong data and are
inconsistent. There are potentially 3500 users which may require
account fields to be modified
What I want to do is to clean this up. Is there a way in which I can export
this data to an excel spreadsheet and then re-import with out duplicating any
accounts? Do I need to script this?(if so, does anyone have any scripts?)
Alternatively, is it worth employing someone to do it manually? time
consuming and probably not the most favoured option, though any idea's would be
appreciated.
Oh, it's a Single W2k3 domain, 2003 FFL,
thanks...
frank
Yahoo! for GoodClick here
to donate to the Hurricane Katrina relief effort. | | | |
| TonyTest
Posts:0
 | | 10/05/2005 12:26 PM |
| In my experience this type of thing is very difficult to
script because, whichever way you do it, you end up having too many
exceptions. It might be worth handling the most common problems with
scripting and then using LDIFDE to export the objects to file, which you can
then manipulate manually and import. Unfortunately, you don't have the
option to use CSVDE (which would have been the spreadsheet method), because you
cannot modify existing values with CSVDE.
Once you have the data in a consistent state you might want
to give some thought to how to enforce this on an ongoing basis. Given the
scope for manual errors in ADUC, you could perhaps consider building a proxy
interface that enforces data consistency. If that's not feasible then
consider scheduling a script to report exceptions.
Tony From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of
joeSent: Wednesday, 5 October 2005 12:07 p.m.To:
ActiveDir@xxxxxxxxxxxxxxxxxxSubject: RE: [ActiveDir] Cleanup of
Active Directory...
If you can programmatically determine what is wrong, and
better still, determine what would be right, I would script this operation.
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of Frank
AbagnaleSent: Monday, October 03, 2005 4:20 AMTo:
ActiveSubject: [ActiveDir] Cleanup of Active
Directory...
Hi all,
If you remember some of my previous posts, I've had issues with excessive
numbers of Domain Admins and a poorly managed Active Directory network.
I have now managed to control the number of Domain Admins to a suitable
manner for our environment and delegated the appropriate permissions for the
Service Desk.
I now need ton data 'cleanse' Active Directory due to the number of
fields which contain incorrect data which has been manually entered by previous
Service Desk users.
The fields which are showing incorrect data are the ones in the General and
Organization tabs. Fields such as Description, Office, Title,
Department etc are all showing the wrong data and are
inconsistent. There are potentially 3500 users which may require
account fields to be modified
What I want to do is to clean this up. Is there a way in which I can export
this data to an excel spreadsheet and then re-import with out duplicating any
accounts? Do I need to script this?(if so, does anyone have any scripts?)
Alternatively, is it worth employing someone to do it manually? time
consuming and probably not the most favoured option, though any idea's would be
appreciated.
Oh, it's a Single W2k3 domain, 2003 FFL,
thanks...
frank
Yahoo! for GoodClick here
to donate to the Hurricane Katrina relief effort.
This communication, including any attachments, is confidential.If
you are not the intended recipient, you should not read it - please contact
me immediately, destroy it, and do not copy or use any part of this
communication or disclose anything about it.Thank You.
Please note that this communication does not designate an
information system for the purposes of the NZ Electronic Transactions Act
2002..
This e-mail message has been scanned for Viruses and Content and cleared by
NetIQ MailMarshal at
Gen-i | | | |
|
|