Re: Export/import AD

For the archives, I think this is wrong (I am sure you will correct me
if *I* am!).

>Anyway, for the user account objects try something like this:
>c:\>ldifde -i -f c:\users.ldf -s dc01.yourdomain.com -t 389 -d

-i switch would *import* data into the production AD, would it not?

Also, I think users is 805306368 not (sAMAccountType=805306369), which
seems to be computers.

Peter


On Fri, 19 Aug 2005 06:37:11 -0400, "Cary Shultz [A.D. MVP]"
<cwshultz@xxxxxxxx> wrote:

>Peter,
>
>I would do a search in this NG for postings from me about five to eight
>months ago. If you are using Outlook Express for your NG reader then this
>should be easy to do.
>
>Anyway, for the user account objects try something like this:
>
>c:\>ldifde -i -f c:\users.ldf -s dc01.yourdomain.com -t 389 -d
>"DC=yourdomain,DC=com" -r "(sAMAccountType=805306369)" -p subtree -l
>"cn,sAMAccountName,objectClass,userAccountControl,displayName,givenName,sn"
>
>For the group objects try something like this:
>
>c:\>ldifde -i -f c:\groups.ldf -s dc01.yourdomain.com -t 389 -d
>"DC=yourdomain,DC=com" -r objectClass=group)" -l "cn,groupType,member"
>
>Now, this is a very generic solution. Let's say, for example, that you keep
>all of your user account objects in an OU structure that looks like this:
>
>OU=Offices
>
> OU=Roanoke
> OU=Richmond
> OU=Blacksburg
> OU=Raleigh
>
>
>You search parameter for the user account objects could look like this: -d
>"OU=Offices,DC=yourdomain,DC=com" -p subtree. This might be a little bit
>better.
>
>NOTE: if you use the -m switch, then you can not use -r
>"(sAMAccountType=805306369)". You would have to go with the standard filter
>of -r "(&(objectCategory=person)(objectClass=user))".
>
>What does the -m switch do? It removed 'domain-specific information'. Now,
>what does that mean? Let's say that you have a mailbox size restriction.
>One that you have created with a policy on the Exchange Server. I forget
>the exact attributes but they are something like mbdefaultlimit,
>mboverdefaultlimit and mbhardoverdefaultlimit ( going from memory
>here.....something like this ). Each user account object that was subject
>to this policy would have those attributes and the corresponding value.
>Were you to use the -m switch then you would not see these attributes /
>values since they are specific to that domain!
>
>So, this is what you would run on your production environment. Then,
>recreate the environment on the test / lab server ( run dcpromo, et al ).
>Then, simply run c:\>ldifde -f c:\users.ldf ( assuming that this is where
>you have placed the .ldf file ). Next, run the c:\>ldifde -f c:\group.ldf
>file.
>
>Just make sure that your OU structure is the same in your test environment
>as in your producation environment. If it is not there will be a problem.
>
>Does that clear things up?
>
>Now, for a good into to ldifde and how to use it take a look at the
>following:
>
>http://support.microsoft.com/?id=237677

.

Relevant Pages

  • Re: Export/import AD
    ... >all of your user account objects in an OU structure that looks like this: ... It removed 'domain-specific information'. ... >to this policy would have those attributes and the corresponding value. ... this is what you would run on your production environment. ...
    (microsoft.public.win2000.active_directory)
  • Re: export and import with csvde or ldifde
    ... Simon, hope that you do not mind but I will jump in for a moment. ... To do this you need to know the syntax for ldifde command ... domain level (the -d switch tells you where to start this). ... manual work (in creating the 1800 user account objects from scratch). ...
    (microsoft.public.win2000.active_directory)
  • Re: Import users to another domain with LDIFDE
    ... To do this you need to know the syntax for ldifde command ... domain level (the -d switch tells you where to start this). ... Notepad, not WordPad or MS Word...it must be Notepad! ... manual work (in creating the 1800 user account objects from scratch). ...
    (microsoft.public.win2000.active_directory)
  • Re: Change the CN of all users
    ... > user account objects that you create from this point forward will have the ... This is where ADModify comes in. ... >> by another company, and had to switch everything to Lastname, Firstname. ... It switched the Display name to Lastname, ...
    (microsoft.public.win2000.active_directory)
  • Re: Export/import AD
    ... for the user account objects try something like this: ... For the group objects try something like this: ... this is what you would run on your production environment. ... > changetype: add ...
    (microsoft.public.win2000.active_directory)
Loading