DSMOD.exe (Windows XP)
Modify active directory object.
Syntax DSMOD computer Computer_DN options DSMOD contact ContactDN options DSMOD group GroupDN options DSMOD ou OU_DN Organizational_unit_options DSMOD server ServerDN Domain_controller_options DSMOD user User_DN User_options DSMOD quota QuotaDN Quota_options DSMOD partition PartitionDN Partition_options
Key DN=Distinguished Name(s) OU=Organisational Unit Pretty much all the attributes can be modified (Name, display name, tel number etc) run the command with /? for a full list e.g DSMOD USER /?
Commas
Commas must be escaped with the backslash \ character
(other than separators in distinguished names)
e.g.
"CN=Company\, Inc.,CN=Users,DC=ss64,DC=com"
Backslashes
Backslashes used in distinguished names must be escaped with a backslash
(for example,
"CN=Sales\\ Latin America,OU=Distribution Lists,DC=ss64,DC=com").
Redirection
You can pipe results from DSQUERY
into DSMOD in order to modify an object.
e.g. To find all users in the Marketing OU (organizational unit) and add them
to the Sales group:
DSQUERY user –startnode "ou=Marketing,dc=SS64,dc=com" | DSMOD group "cn=Sales,ou=Marketing,dc=SS64,dc=com" -addmbr
Spaces
If any value contains spaces, use quotation marks:
"CN=John Smith,CN=Users,DC=SS64,DC=com"
Special Tokens
The token $username$ (case insensitive) may be used to place the SAM account
name.
Entering * as a password will cause DSMOD to prompt for the new password.
For any DS command you can enter multiple values separated by
spaces.
e.g. to modify several user accounts at once just supply a list of the distinguished
names separated with spaces.
"For a list of all the ways technology has failed to
improve the quality of life, press three". - Alice
Kahn
Related commands:
dsadd - add object
dsget - display object
dsmove - move object
dsquery - find object
dsrm - delete object
CSVDE - Import or export AD info in CSV format.
LDIFDE - Edit AD Objects, extend schema, import or
export AD information.
Equivalent Linux BASH commands:
ldapmodify - Modify Lightweight Directory Access Protocol