Re: Import Users into Active Directory

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Eric (renegade_at_news.postalias)
Date: 08/06/04


Date: Fri, 6 Aug 2004 08:16:55 -0700

Wow, is that the only way to get it? It would be hard to
justify spending $300 for a resource kit for an operating
system that we are no longer using to get one dos utility.
I have a TechNet Plus subscription, perhaps it is on one
of the cds? If not, is there a way to buy just the
addusers.exe file or will the windows NT version work?

Thanks,

Eric
>-----Original Message-----
>Hi Eric,
>
>Thank you for posting back!
>
>As I know, addusers command is available in Windows 2000
Resource Kit. It
>can automatically create a number of users and groups
based on the
>information in a text file.
>
>For detailed information, please visit the below article
in Microsoft
>knowledge base:
>
>324222 HOW TO: Migrate User and Group Information
>http://support.microsoft.com/?id=324222
>
>I hope it helps.
>
>Have a nice day!
>
>Thanks & Regards,
>
>Feng Mao [MSFT], MCSE
>Microsoft Online Partner Support
>
>Get Secure! - www.microsoft.com/security
>
>=====================================================
>When responding to posts, please "Reply to Group" via
your newsreader so
>that others may learn and benefit from your issue.
>=====================================================
>This posting is provided "AS IS" with no warranties, and
confers no rights.
>
>
>
>--------------------
>| Content-Class: urn:content-classes:message
>| From: "Eric" <renegade@news.postalias>
>| Sender: "Eric" <renegade@news.postalias>
>| References: <6b0c01c47586$3a9f6a90$a501280a@phx.gbl>
><#cJmcpYdEHA.2544@TK2MSFTNGP10.phx.gbl>
><eV2sE9YdEHA.3016@tk2msftngp13.phx.gbl>
><uE2kUEZdEHA.3528@TK2MSFTNGP12.phx.gbl>
><eHVUFGhdEHA.2376@tk2msftngp13.phx.gbl>
>| Subject: Re: Import Users into Active Directory
>| Date: Thu, 5 Aug 2004 11:01:30 -0700
>| Lines: 79
>| Message-ID: <0db101c47b16$3c5be990$a601280a@phx.gbl>
>| MIME-Version: 1.0
>| Content-Type: text/plain;
>| charset="iso-8859-1"
>| Content-Transfer-Encoding: 7bit
>| X-Newsreader: Microsoft CDO for Windows 2000
>| Thread-Index: AcR7Fjxb8TKAEr0iSB2TBDiQmrliog==
>| X-MimeOLE: Produced By Microsoft MimeOLE
V5.50.4910.0300
>| Newsgroups: microsoft.public.win2000.active_directory
>| Path: cpmsftngxa06.phx.gbl
>| Xref: cpmsftngxa06.phx.gbl
microsoft.public.win2000.active_directory:83466
>| NNTP-Posting-Host: tk2msftngxa14.phx.gbl 10.40.1.166
>| X-Tomcat-NG: microsoft.public.win2000.active_directory
>|
>| Thanks for all the tips. I am surprised to find out
that
>| addusers.exe still works on Active Directory. Is this
>| the same version I used with my NT 4 servers or is
there
>| a new version for AD? If not, where can I get the
latest
>| version?
>|
>| That Ad infinitum sounds like a great program. The
only
>| concern I have is with using a shareware program on my
>| domain. It seems like it would be easy for an
>| unreputable company to setup a stealth account with
admin
>| rights with such a program. If someone has looked
into
>| it however, I would probably use it as it seems like
the
>| best thing out there so far. Sorry, I'm just a little
>| paranoid about security.
>|
>| Thanks a lot!!!
>|
>| Eric
>| >-----Original Message-----
>| >Tomasz,
>| >
>| >Actually I would agree with you. Scripting would be
the
>| best way to do
>| >this. However, I think that I am in the same boat as
a
>| good many in that I
>| >can not script yet. One day, but not today!
>| >
>| >Cary
>| >
>| >"Tomasz Onyszko" <T.Onyszko@w2k.pl> wrote in message
>| >news:uE2kUEZdEHA.3528@TK2MSFTNGP12.phx.gbl...
>| >> Cary Shultz [A.D. MVP] wrote:
>| >>
>| >> > In addition to using csvde ( not sure that this
will
>| do the passwords )
>| >I
>| >> > might suggest that you look at addusers.exe to do
>| this. I know that
>| >this
>| >> > does passwords. ldifde is another possibility,
but
>| if you must have the
>| >> > passwords then you will have a very difficult
time
>| with ldifde.
>| >> >
>| >> > You might want to look at addusers.exe to create
the
>| user account
>| >objects -
>| >> > with passwords - and then look at using ADModify
to
>| make bulk changes
>| >( such
>| >> > as adding the same address to all of your user
>| account objects, for
>| >> > example ).
>| >> >
>| >>
>| >> Yes, You have a right - CSVDE doesn't deal with the
>| passwords, You can
>| >> import users and then You will have to set them
proper
>| passwords and
>| >> force them to change it. This problem is good
>| explained under this uRL:
>| >>
>|
http://www.computerperformance.co.uk/Logon/Logon_CSVDE_Bul
>| k.htm
>| >>
http://www.computerperformance.co.uk/ezine/ezine23.htm
>| >>
>| >> IMO the best way to do this import will be script
>| using ADSI and setting
>| >> up user accounts with passwords.
>| >>
>| >>
>| >> --
>| >> Tomasz Onyszko [MVP]
>| >> T.Onyszko@w2k.pl
>| >> http://www.w2k.pl
>| >
>| >
>| >.
>| >
>|
>
>.
>



Relevant Pages

  • Re: Account lockouts
    ... for reusable passwords and the AAA infrastructures that rely upon them? ... In that context, account lockout policy -- duration, threshold, lockout ... > cracking attacks. ...
    (microsoft.public.security)
  • Re: Deleting Admin Account
    ... administrative level account to change the Type of the Admin account ... created to a limited account (or create yourself a third account - non-admin ... The built-in administrator cannot be changed from the administrative level, ... You should password protect (with different passwords would be best) each ...
    (microsoft.public.windowsxp.setup_deployment)
  • Re: Blank Passwords, Complex Requeirements and Problems...
    ... The account would then have: 544 = normal account with "Password Not Required" bit = on ... wellKnownObjects: B:32:6227F0AF1FC2410D8E3BB10615BB5B0F:CN=NTDS ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... As far as i know, the Win2003 AD never had a "free" Default Domain Policy to allow that, the DDP is the Default since the initial build of th AD. Ok, let's say that an Admin disabled temporarily th DDP for a few moments and allowed certain accouns to be created with blank passwords. ...
    (microsoft.public.win2000.active_directory)
  • Re: OT: dealing with keystroke loggers
    ... what's the practical solution to deal with s/w keystroke loggers ... Researcher refutes Microsoft's account of hijacked Hotmail passwords ... passwords were obtained in a massive phishing attack. ... "Everyone who suspects that their account has been compromised should ...
    (alt.sys.pc-clone.dell)
  • RE: Threat vector of running a service using a domain account
    ... Cachedumps are for local logon password dumps. ... Lsadumps retrieve the passwords in plaintext (each char. ... Cachedump, which again, doesn't work so well against the latest versions ... Threat vector of running a service using a domain account ...
    (Security-Basics)