why you changed your name?

christy

DSadd
Example 1 Employing DSadd to Create a User in Users Container
dsadd user “cn=user1, cn=Users, dc=cp, dc=com” –UPN [email protected] –samid user1

Example 2 Using DSadd to Create an Organizational Unit in Windows 2003
dsadd ou "ou=dept1, dc=cp, dc=com"

Example 3 Employing DSadd to Create a User in OU
dsadd user "cn=user2, ou=dept1, dc=cp, dc=com" –UPN [email protected] –samid user2

Example 4 Create user WITH password
dsadd user "cn=user3, ou=dept1, dc=cp, dc=com" –UPN [email protected] –samid user3 -pwd 1234

Example 5 Create group
-scope u Universal group
-scope g Global group
-scope l Domain Local group
-secgrp yes Security group (not distribution)

dsadd group "cn=group1, ou=dept1, dc=cp, dc=com" -secgrp yes -scope l

Example 6 DSadd to control Group Members
dsadd group "cn=group2, ou=dept1, dc=cp, dc=com" -secgrp yes -scope L -members "cn=user2, ou=dept1, dc=cp, dc=com"

DSmod
Example 1 Modify Password
dsmod user "cn=user1, cn=Users, dc=cp, dc=com" -pwd 1234

Example 2 reset Password
dsmod user "cn=user2, ou=dept1, dc=cp, dc=com" -pwd 1234 –mustchpwd yes

Example 3 Disable or Enable user account
dsmod user “cn=user3, ou=dept1, dc=cp, dc=com” –disabled {yes | no}

Example 4 Add member to group
dsmod group "cn=group2, ou=dept1, dc=cp, dc=com" -secgrp yes -scope L -addmbr "cn=user3, ou=dept1, dc=cp, dc=com"

Example 4 remove member from group
dsmod group "cn=group2, ou=dept1, dc=cp, dc=com" -secgrp yes -scope L -rmmbr "cn=user3, ou=dept1, dc=cp, dc=com"

DSMov
Example 1 – Rename object
dsmove "cn=user1, cn=Users ,dc=cp, dc=com" -newname "user99"

Example 2 – Move Object to OU
dsmove " cn=user1, cn=Users ,dc=cp, dc=com " -newparent ou=dept1,dc=cp,dc=com

Example 3 – Move object to OU and rename object
dsmove " cn=user1, cn=Users ,dc=cp, dc=com " -newparent ou=dept1,dc=cp,dc=com -newname "user99"
DSQuery
Example 1 - Finding All Users
dsquery user

Example 2 - DSQuery to list all the OUs in your domain
dsquery ou dc=mydom,dc=com
or
dsquery ou domainroot
Note:   Best of all, you can substitute domainroot for dc=cp.
Example 3 - DSQuery to find all users whose name begins with smith*
dsquery user domainroot -name smith*
or
dsquery user dc=cp, dc=com -name smith*
or
dsquery user smith*
Example 4 - Finding All Disabled Users
dsquery user –disabled

Example 5 – Query Group Member
dsquery group “cn=group2, ou=dept1, dc=cp, dc=com " -members

Example 6 - DSQuery to filter the output with -o rdn
dsquery user -name smith* -o rdn

DSGet
Example 1 Getting User’s Description (-email, -tel, -mgr, -mobile, -office)
dsget user “cn=user1, cn=Users, dc=cp, dc=com” -desc

Example 2 Getting User’s Group Membership
dsget user “cn=user1, cn=Users, dc=cp, dc=com” –memberof

Example 3 Getting Group Member
dsget group "cn=group2, ou=dept1, dc=cp, dc=com" -members

Using PIPE
Example 1 List all user description
dsquery user | dsget user -dn –desc

Example 1 List all user description in OU
dsquery user “ou=dept1, dc=cp, dc=com” | dsget user -dn –desc

Example 2 List all user description begin with user
dsquery user -name user* | dsget user -dn –desc

Example 3 To add the user in dept 1 OU to group2
dsadd group "cn=group2, ou=dept1, dc=cp, dc=com" -secgrp yes -scope L

dsget user "ou=dept1, dc=cp, dc=com" | dsmod group " cn=group2, ou=dept1, dc=cp, dc=com " -addmbr

Example 4 Move numbers of object to OU
dsadd ou “ou=dept2, dc=cp, dc=com”

dsquery user “ou=dept2, dc=cp, dc=com” | dsmove –newparent ou=dept2,dc=cp,dc=com

DSrm
Example 1 delete user or group
dsrm “cn=user3, ou=dept1, dc=cp, dc=com”

Example 2 delete OU
dsrm -subtree -noprompt -c “ou=dept1 ,dc=cp, dc=com

Batch Processing
For /f %I in (c:\users.txt) do dsadd user %I –pwd 1234 –mustchpwd

users.txt
cn=user4, ou=dept1, dc=cp, dc=com
cn=user5, ou=dept1, dc=cp, dc=com
cn=user6, ou=dept1, dc=cp, dc=com
cn=user7, ou=dept1, dc=cp, dc=com

Install Active Directory
*assign static IP DNS:127.0.0.1
Phase 1
1. Install DNS
 -delete root hints-->restart DNS
 -add forwarder point to internet DNS
2. create Reverse lookup zone
 -primary zone
 -allow dynamic update
3. create Forward lookup zone
 -primary zone
 -allow dynamic update
4. Add DNS suffix append to computer name
*computer properties-->computer name
-->more-->fill-in <DNS Zone Name>-->reboot
 -test DNS Dynamic Updates

5. after reboot
   verify A Record and Pointer Record created
   ping FQDN e.g. computername.domain.name
   nslookup 192.168.200.150 <--DC's IP

6. run netdiag and confirm all pass or skip
   *extract from install 2003CD\support\tools\support.cab

7. start-->run-->dcpromo
    *Location of SysVOL cannot be changed
    *confirm no options appear in DNS summary

Phase 2
8. verify DNS Srv record existed

9. verify Domain Share SYSVOL and NETLOGON (512MB space)
   cmd-->net share

10. verify c:\windows\ntds\NTDS.DIT file existed

11. verify start menu-->administrative tools
    Active Directory users and computers
    Active Directory domain and trust
    Active Directory sites and services

12. run dcdiag.exe-->confirm all pass
    extract from 2003 CD\support\tools\support.cab

Phase 3
13. change DNS Zone to Active Directory Integrated Zone
 -right click forward/reverse zone-->
         change-->checkbox store in Active Directory
 -change dynamic update to secure only

Options:
14. select Domain Functional Level
 -Mixed Mode (Default)  NT4 BDC/2K DC/03 DC
 -interim Mode (upgrade NT4 Domain)  NT4 BDC/03 DC
 -2000 native Mode    2K DC/03 DC
 -2003 Mode           03 DC only
 *AD users and Computers-->right Click domain name
  -->raise Domain Functional Level
 *no reverse

15.  select Forest Functional Level (2003 only)
 -2000 mode (default) 2K DC existed in Subdomain
 -2003 mode           03 DC only in all subdomain
 *AD domain and trusts-->right Click AD domain and trusts
  -->raise Forest Functional Level
 *no reverse