Location: List Archives

List Archives

This forum is an archive of all posts to our mailing list over the past few years.  The forum is set read only therefore to contribute you will need to join our list community.  See more info about this here.

 

When subscribed to the list you should use your standard email client to send your posts to ActiveDir@mail.activedir.org.

List Archives

Subject: [ActiveDir] Cleanup of Active Directory...
Prev Next
You are not authorized to post a reply.

AuthorMessages
abagnale_listsUser is Offline

Posts:16

10/03/2005 8:23 AM  
Message body was not found.
prenoufUser is Offline

Posts:1

10/03/2005 10:03 AM  
Hi all,

If you remember some of my previous posts, I've had issues with excessive numbers of Domain Admins and a poorly managed Active Directory network.

I have now managed to control the number of Domain Admins to a suitable manner for our environment and delegated the appropriate permissions for the Service Desk.

I now need ton data 'cleanse' Active Directory due to the number of fields which contain incorrect data which has been manually entered by previous Service Desk users.

The fields which are showing incorrect data are the ones in the General and Organization tabs. Fields such as Description, Office, Title, Department etc are all showing the wrong data and are inconsistent. There are potentially 3500 users which may require account fields to be modified


What I want to do is to clean this up. Is there a way in which I can export this data to an excel spreadsheet and then re-import with out duplicating any accounts? Do I need to script this?(if so, does anyone have any scripts?)


Alternatively, is it worth employing someone to do it manually? time consuming and probably not the most favoured option, though any idea's would be appreciated.

Oh, it's a Single W2k3 domain, 2003 FFL,

thanks...

frank


Yahoo! for GoodClick here to donate to the Hurricane Katrina relief effort.
ZJORZUser is Offline

Posts:129

10/03/2005 10:28 AM  
Scripting would be my first
choice...

Script Center has great
examples:
http://www.microsoft.com/technet/scriptcenter/scripts/ad/users/list/default.mspx (Retrieving User Account
Properties)
http://www.microsoft.com/technet/scriptcenter/scripts/ad/users/modify/default.mspx (Modifying User Account
Properties)
http://www.microsoft.com/technet/scriptcenter/scripts/office/excel/default.mspx (Microsoft Excel and
scripts)

Cheers,
Jorge
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of Frank
AbagnaleSent: Monday, October 03, 2005 10:20To:
ActiveSubject: [ActiveDir] Cleanup of Active
Directory...

Hi all,

If you remember some of my previous posts, I've had issues with excessive
numbers of Domain Admins and a poorly managed Active Directory network.

I have now managed to control the number of Domain Admins to a suitable
manner for our environment and delegated the appropriate permissions for the
Service Desk.

I now need ton data 'cleanse' Active Directory due to the number of
fields which contain incorrect data which has been manually entered by previous
Service Desk users.

The fields which are showing incorrect data are the ones in the General and
Organization tabs. Fields such as Description, Office, Title,
Department etc are all showing the wrong data and are
inconsistent. There are potentially 3500 users which may require
account fields to be modified

What I want to do is to clean this up. Is there a way in which I can export
this data to an excel spreadsheet and then re-import with out duplicating any
accounts? Do I need to script this?(if so, does anyone have any scripts?)

Alternatively, is it worth employing someone to do it manually? time
consuming and probably not the most favoured option, though any idea's would be
appreciated.

Oh, it's a Single W2k3 domain, 2003 FFL,

thanks...

frank


Yahoo! for GoodClick here
to donate to the Hurricane Katrina relief effort.
This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you.
dejiUser is Offline

Posts:150

10/03/2005 10:35 AM  
Look at http://www.computerperformance.co.uk/Logon/CSVDE_LDIFDE.htm

HTH


Sincerely,

Dèjì Akómöláfé, MCSE+M MCSA+M MCP+I
Microsoft MVP - Directory Services
www.readymaids.com - we know IT
www.akomolafe.com
Do you now realize that Today is the Tomorrow you were worried about
Yesterday? -anon

________________________________

From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx on behalf of Frank Abagnale
Sent: Mon 10/3/2005 1:20 AM
To: Active
Subject: [ActiveDir] Cleanup of Active Directory...
Hi all,

If you remember some of my previous posts, I've had issues with excessive
numbers of Domain Admins and a poorly managed Active Directory network.

I have now managed to control the number of Domain Admins to a suitable
manner for our environment and delegated the appropriate permissions for the
Service Desk.

I now need ton data 'cleanse' Active Directory due to the number of fields
which contain incorrect data which has been manually entered by previous
Service Desk users.

The fields which are showing incorrect data are the ones in the General and
Organization tabs. Fields such as Description, Office, Title, Department etc
are all showing the wrong data and are inconsistent. There are potentially
3500 users which may require account fields to be modified

What I want to do is to clean this up. Is there a way in which I can export
this data to an excel spreadsheet and then re-import with out duplicating any
accounts? Do I need to script this?(if so, does anyone have any scripts?)

Alternatively, is it worth employing someone to do it manually? time
consuming and probably not the most favoured option, though any idea's would
be appreciated.

Oh, it's a Single W2k3 domain, 2003 FFL,

thanks...

frank



________________________________

Yahoo! for Good
Click here to donate to the
Hurricane Katrina relief effort.
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
bdesmondUser is Offline

Posts:409

10/03/2005 10:55 AM  
You can easily dump all this data with
either csvde or adfind and the included perl script (the latter is probably
better). As for importing it back in, you'll need some sort of simple script
which takes the DN from the csv file and sets the values accordingly.


Thanks,Brian Desmond
brian@xxxxxxxxxxxxxxxx

c -
312.731.3132



From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of Frank
AbagnaleSent: Monday, October 03, 2005 4:20 AMTo:
ActiveSubject: [ActiveDir] Cleanup of Active
Directory...

Hi all,

If you remember some of my previous posts, I've had issues with excessive
numbers of Domain Admins and a poorly managed Active Directory network.

I have now managed to control the number of Domain Admins to a suitable
manner for our environment and delegated the appropriate permissions for the
Service Desk.

I now need ton data 'cleanse' Active Directory due to the number of
fields which contain incorrect data which has been manually entered by previous
Service Desk users.

The fields which are showing incorrect data are the ones in the General and
Organization tabs. Fields such as Description, Office, Title,
Department etc are all showing the wrong data and are
inconsistent. There are potentially 3500 users which may require
account fields to be modified

What I want to do is to clean this up. Is there a way in which I can export
this data to an excel spreadsheet and then re-import with out duplicating any
accounts? Do I need to script this?(if so, does anyone have any scripts?)

Alternatively, is it worth employing someone to do it manually? time
consuming and probably not the most favoured option, though any idea's would be
appreciated.

Oh, it's a Single W2k3 domain, 2003 FFL,

thanks...

frank


Yahoo! for GoodClick here
to donate to the Hurricane Katrina relief effort.
listmailUser is Offline

Posts:490

10/04/2005 11:31 AM  
If you can programmatically determine what is wrong, and
better still, determine what would be right, I would script this operation.

From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of Frank
AbagnaleSent: Monday, October 03, 2005 4:20 AMTo:
ActiveSubject: [ActiveDir] Cleanup of Active
Directory...

Hi all,

If you remember some of my previous posts, I've had issues with excessive
numbers of Domain Admins and a poorly managed Active Directory network.

I have now managed to control the number of Domain Admins to a suitable
manner for our environment and delegated the appropriate permissions for the
Service Desk.

I now need ton data 'cleanse' Active Directory due to the number of
fields which contain incorrect data which has been manually entered by previous
Service Desk users.

The fields which are showing incorrect data are the ones in the General and
Organization tabs. Fields such as Description, Office, Title,
Department etc are all showing the wrong data and are
inconsistent. There are potentially 3500 users which may require
account fields to be modified

What I want to do is to clean this up. Is there a way in which I can export
this data to an excel spreadsheet and then re-import with out duplicating any
accounts? Do I need to script this?(if so, does anyone have any scripts?)

Alternatively, is it worth employing someone to do it manually? time
consuming and probably not the most favoured option, though any idea's would be
appreciated.

Oh, it's a Single W2k3 domain, 2003 FFL,

thanks...

frank


Yahoo! for GoodClick here
to donate to the Hurricane Katrina relief effort.
AD00000804User is Offline

Posts:0

10/04/2005 12:59 PM  
Yes - you could take the data out with the CSVDE tool and
massage/revise in an Excel .csv spreadsheet and then export back in, but do so
carefully...

Good luck,

Chuck Gafford
Architect 2
Unisys
ActiveDirectory@xxxx.yyy

10/05/2005 2:46 AM  
You might also try ADModify from the PSS ftp
site.  It allows bulk modification and also allows you to narrow down the
focus to certain OU, users etc using limited wildcards.

Bob
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of Brian
DesmondSent: Monday, October 03, 2005 9:14 AMTo:
ActiveDir@xxxxxxxxxxxxxxxxxxSubject: RE: [ActiveDir] Cleanup of
Active Directory...

You can easily dump all this data with
either csvde or adfind and the included perl script (the latter is probably
better). As for importing it back in, you'll need some sort of simple script
which takes the DN from the csv file and sets the values accordingly.


Thanks,Brian Desmond
brian@xxxxxxxxxxxxxxxx

c -
312.731.3132



From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of Frank
AbagnaleSent: Monday, October 03, 2005 4:20 AMTo:
ActiveSubject: [ActiveDir] Cleanup of Active
Directory...

Hi all,

If you remember some of my previous posts, I've had issues with excessive
numbers of Domain Admins and a poorly managed Active Directory network.

I have now managed to control the number of Domain Admins to a suitable
manner for our environment and delegated the appropriate permissions for the
Service Desk.

I now need ton data 'cleanse' Active Directory due to the number of
fields which contain incorrect data which has been manually entered by previous
Service Desk users.

The fields which are showing incorrect data are the ones in the General and
Organization tabs. Fields such as Description, Office, Title,
Department etc are all showing the wrong data and are
inconsistent. There are potentially 3500 users which may require
account fields to be modified

What I want to do is to clean this up. Is there a way in which I can export
this data to an excel spreadsheet and then re-import with out duplicating any
accounts? Do I need to script this?(if so, does anyone have any scripts?)

Alternatively, is it worth employing someone to do it manually? time
consuming and probably not the most favoured option, though any idea's would be
appreciated.

Oh, it's a Single W2k3 domain, 2003 FFL,

thanks...

frank


Yahoo! for GoodClick here
to donate to the Hurricane Katrina relief effort.
michael@xxxx.yyy

10/05/2005 2:59 AM  
admodify.net is better (and replaces that
tool)

http://www.admodify.net
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of
ActiveDirectorySent: Wednesday, October 05, 2005 10:44
AMTo: ActiveDir@xxxxxxxxxxxxxxxxxxSubject: RE: [ActiveDir]
Cleanup of Active Directory...

You might also try ADModify from the PSS ftp
site.  It allows bulk modification and also allows you to narrow down the
focus to certain OU, users etc using limited wildcards.

Bob
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of Brian
DesmondSent: Monday, October 03, 2005 9:14 AMTo:
ActiveDir@xxxxxxxxxxxxxxxxxxSubject: RE: [ActiveDir] Cleanup of
Active Directory...

You can easily dump all this data with
either csvde or adfind and the included perl script (the latter is probably
better). As for importing it back in, you'll need some sort of simple script
which takes the DN from the csv file and sets the values accordingly.


Thanks,Brian Desmond
brian@xxxxxxxxxxxxxxxx

c -
312.731.3132



From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of Frank
AbagnaleSent: Monday, October 03, 2005 4:20 AMTo:
ActiveSubject: [ActiveDir] Cleanup of Active
Directory...

Hi all,

If you remember some of my previous posts, I've had issues with excessive
numbers of Domain Admins and a poorly managed Active Directory network.

I have now managed to control the number of Domain Admins to a suitable
manner for our environment and delegated the appropriate permissions for the
Service Desk.

I now need ton data 'cleanse' Active Directory due to the number of
fields which contain incorrect data which has been manually entered by previous
Service Desk users.

The fields which are showing incorrect data are the ones in the General and
Organization tabs. Fields such as Description, Office, Title,
Department etc are all showing the wrong data and are
inconsistent. There are potentially 3500 users which may require
account fields to be modified

What I want to do is to clean this up. Is there a way in which I can export
this data to an excel spreadsheet and then re-import with out duplicating any
accounts? Do I need to script this?(if so, does anyone have any scripts?)

Alternatively, is it worth employing someone to do it manually? time
consuming and probably not the most favoured option, though any idea's would be
appreciated.

Oh, it's a Single W2k3 domain, 2003 FFL,

thanks...

frank


Yahoo! for GoodClick here
to donate to the Hurricane Katrina relief effort.
TonyTestUser is Offline

Posts:0

10/05/2005 12:26 PM  
In my experience this type of thing is very difficult to
script because, whichever way you do it, you end up having too many
exceptions.  It might be worth handling the most common problems with
scripting and then using LDIFDE to export the objects to file, which you can
then manipulate manually and import.  Unfortunately, you don't have the
option to use CSVDE (which would have been the spreadsheet method), because you
cannot modify existing values with CSVDE.

Once you have the data in a consistent state you might want
to give some thought to how to enforce this on an ongoing basis.  Given the
scope for manual errors in ADUC, you could perhaps consider building a proxy
interface that enforces data consistency.  If that's not feasible then
consider scheduling a script to report exceptions. 

Tony
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of
joeSent: Wednesday, 5 October 2005 12:07 p.m.To:
ActiveDir@xxxxxxxxxxxxxxxxxxSubject: RE: [ActiveDir] Cleanup of
Active Directory...

If you can programmatically determine what is wrong, and
better still, determine what would be right, I would script this operation.

From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of Frank
AbagnaleSent: Monday, October 03, 2005 4:20 AMTo:
ActiveSubject: [ActiveDir] Cleanup of Active
Directory...

Hi all,

If you remember some of my previous posts, I've had issues with excessive
numbers of Domain Admins and a poorly managed Active Directory network.

I have now managed to control the number of Domain Admins to a suitable
manner for our environment and delegated the appropriate permissions for the
Service Desk.

I now need ton data 'cleanse' Active Directory due to the number of
fields which contain incorrect data which has been manually entered by previous
Service Desk users.

The fields which are showing incorrect data are the ones in the General and
Organization tabs. Fields such as Description, Office, Title,
Department etc are all showing the wrong data and are
inconsistent. There are potentially 3500 users which may require
account fields to be modified

What I want to do is to clean this up. Is there a way in which I can export
this data to an excel spreadsheet and then re-import with out duplicating any
accounts? Do I need to script this?(if so, does anyone have any scripts?)

Alternatively, is it worth employing someone to do it manually? time
consuming and probably not the most favoured option, though any idea's would be
appreciated.

Oh, it's a Single W2k3 domain, 2003 FFL,

thanks...

frank


Yahoo! for GoodClick here
to donate to the Hurricane Katrina relief effort.


This communication, including any attachments, is confidential.If
you are not the intended recipient, you should not read it - please contact
me immediately, destroy it, and do not copy or use any part of this
communication or disclose anything about it.Thank You.
Please note that this communication does not designate an
information system for the purposes of the NZ Electronic Transactions Act
2002..
This e-mail message has been scanned for Viruses and Content and cleared by
NetIQ MailMarshal at
Gen-i
You are not authorized to post a reply.
Forums >ActiveDir Mail List Archive >List Archives > [ActiveDir] Cleanup of Active Directory...



ActiveForums 3.7
AdventNet Banner
Friends

Friends

Namescape
Members

Members

MembershipMembership:
Latest New UserLatest:NilsK
New TodayNew Today:1
New YesterdayNew Yesterday:1
User CountOverall:4316

People OnlinePeople Online:
VisitorsVisitors:46
MembersMembers:0
TotalTotal:46

Online NowOnline Now:

Ads

Copyright 2008 ActiveDir.org
Terms Of Use