Look for a tool from MS called "ADModify.NET". It may do what you are looking for. See http://technet.microsoft.com/en-us/library/aa996216(EXCHG.65).aspx. You may have to do a Google search for a download location.
________________________________ From: James Rankin [mailto:kz2...@googlemail.com] Sent: Tuesday, March 10, 2009 4:20 AM To: NT System Admin Issues Subject: Re: Changing Account Settings en Masse That would be assuming all of your user accounts were in one OU - could be a bit tricky when you have hundreds of OUs and thousands of users 2009/3/9 Len Hammond <lenhamm...@gmail.com> I thought you could select multiple accounts in ADUC and make the change to all of the selected items at the same time. Doesn't ctrl+a select everything at once? Don't have a server available at the moment to try it. I'll be at a client wit one tomorrow and tryit there. On Thu, Mar 5, 2009 at 9:58 AM, John Hornbuckle <john.hornbuc...@taylor.k12.fl.us> wrote: I'm okay with a command line (I grew up in the days of DOS), but given a choice I generally prefer a GUI. Of course, there are some tasks that just don't lend themselves easily to GUIs. From: KenM [mailto:kenmli...@gmail.com] Sent: Thursday, March 05, 2009 8:34 AM To: NT System Admin Issues Subject: Re: Changing Account Settings en Masse John It sounds like you do not like the command line. There are a few other options for this. I am assuming you are running 2003. Using DSA you can highlight multiple users in a OU and make this change. You could also create a search query for user objects and highlight the ones you want and make the change. My preferance would be using a either a vbscript or adfind\admod though. On Thu, Mar 5, 2009 at 6:50 AM, John Hornbuckle <john.hornbuc...@taylor.k12.fl.us> wrote: Thanks! From: !Amado Abenojar [mailto:abe9...@hotmail.com] Sent: Wednesday, March 04, 2009 8:15 PM To: NT System Admin Issues Subject: RE: Changing Account Settings en Masse Try "dsquery" and pipe it into "dsmod" in the command line. i.e. dsquery user "OU=Employees, DC=Domain, DC=Com" -stalepassword 60 | dsmod user -mustchpwd yes this command line queries users in the Employees OU who have not changed their password in 60 days and pipes the list to dsmod which configures each object with "User must change password at next logon" regards Amado Abenojar MCSE,MCSA ====================== ________________________________ From: john.hornbuc...@taylor.k12.fl.us To: ntsysadmin@lyris.sunbelt-software.com Date: Tue, 3 Mar 2009 18:43:11 -0500 Subject: Changing Account Settings en Masse We've previously not allowed users to change their own passwords; we've handled that for them, and in Active Directory have their accounts configured to prevent them from doing it. We're implementing some new policies now, and in the near future users will need to be able to change their own passwords. I feel sure there's a way for me to enable this capability without having to launch ADUC and bring up each user's account individually. Could one of you command line commandos give me a point in the right direction? John Hornbuckle MIS Department Taylor County School District www.taylor.k12.fl.us <http://www.taylor.k12.fl.us/> -- Len Hammond CSI:Hartland lenhamm...@gmail.com ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
