[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More


Batch processing users via the Active Directory GUI

Published on
3,490 Points
1 Endorsement
Last Modified:
Scripts are great for performing batch jobs against users, however sometimes the GUI is all you need.

The problem:

Many admins need to perform bulk operations on users and other objects and many of us are fine with using scripts or command line tools.  What do you do when you aren't good at scripting or you are intimidated by the command line syntax for some command line tools?  Have no fear, one of the hidden treasures of AD is to be able to perform batch processing of users from within the Active Directory Users and Computers GUI.   So how is this done?


Let say we want to assign or change a logon script for all or some users within an OU. 

  1. Load the Active Directory Users and Computer MMC.
  2. Navigate to the OU that contains the users you want to manage.
  3. Select the users you want by Pressing CTRL-A for all users or Press CTRL and click only the users you want.  You can also use SHIFT and click to select a range of users.
  4. Right click the highlighted users and select Properties.
  5. The Properties for multiple Items dialog will appear.
  6. Select the profile tab and check the logon script and assign a logon script name in the adjacent field.
  7. Click OK to start batch processing.
  8. Each user will now be process sequentially.

That was simple wasn't it.  You could also do the opposite.  Let's say you no longer wanted anyone to have a logon script.  In step 7 above, you would just leave the check in the logon script box, but leave the field blank.

Look around the Properties for multiple items dialog and see what other settings can be configured.  You can also perform functions like enabling or disabling users directly from the right click menu.  You can also perform batch processing on other objects, but it isn't as advanced as it is with user objects.  You can even use saved queries from within the MMC to obtain the objects for you.

This example only touched on what is possible with batch processing via the GUI.  For more advanced changes you will likely still need to use command line tools and scripts to perform bulk operations, but hopefully this article shed some light on some power of the GUI.


Featured Post

Big Business Goals? Which KPIs Will Help You

The most successful MSPs rely on metrics – known as key performance indicators (KPIs) – for making informed decisions that help their businesses thrive, rather than just survive. This eBook provides an overview of the most important KPIs used by top MSPs.

Join & Write a Comment

Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…
Other articles by this author

Keep in touch with Experts Exchange

Tech news and trends delivered to your inbox every month