Solved

AD User Template

Posted on 2004-10-15
4
296 Views
Last Modified: 2011-09-20
Recently I spent some time going through AD adding phone numbers, addresses, departments, locations and all for every user.  I'm hoping that I'm missing something, but is there an easy way to create a template for certain OUs so when we create new users in any OU so all this information is automatically populated?  I tried doing a copy of an existing user and only one or two fields came over when I did that.  Is there another way to to this, or how to other admins keep all this information filled out when adding several users?
0
Comment
Question by:Eagle6990
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 21

Expert Comment

by:marc_nivens
ID: 12323628
You can use the admodify utility to modify all of those properties (plus many more) in bulk.  The interface is even designed after the users and computers GUI.  You can download it here:

http://gotdotnet.com/Workspaces/Workspace.aspx?id=f5cbbfa9-e46b-4a7a-8ed8-3e44523f32e2

You'll need the .NET framework installed to run it.
0
 
LVL 17

Author Comment

by:Eagle6990
ID: 12323925
That is actually what I used to do the first modification of all my users.  My problem now is that when I add a new user, they don't have all of the same information set as those I did the bulk modify to.  Now that all old users are in sync with each other I want to be able to create new users that have the same settings without needing to go back through ADModify.
0
 
LVL 21

Accepted Solution

by:
marc_nivens earned 250 total points
ID: 12336084
The only way to do this in Windows 2000 is to modify the schema.  The searchFlags property of the attribute is what tells ADU&C whether or not to copy the attribute when copying a current user account.  This value is bitwise, and the flag that turns the copy feature on is decimal 16.  

So, if you want to do this you will first need to follow this article to allow you to make the proper schema change:

216060 Registry Modification Required to Allow Write Operations to Schema
http://support.microsoft.com/?id=216060

Note that this does NOT work for Windows 2003.  Now, open ADSIEdit, go to the schema, and find the attribute you want copied.  Find the searchFlags attribute value.  Open calculator, type in the current searchFlags value, hit OR, and type in 16 and hit enter.  If you place the resulting value back into searchFlags and apply it, it will now be included in the list of attributes that are copied when you copy a user account.

If you're not comfortable modifying the schema, you can always use the cmd version of admodify and batch it out to run when you need it to.
0
 
LVL 17

Author Comment

by:Eagle6990
ID: 12405664
Sorry, I've been on vacation.  

I think batching ADmodify is exactly what I'm looking for.  I didn't realize I could batch it.  Do you trust the download source you listed? It feels like I could get a bunk version pretty easily from there, but the version that I got from Microsoft's site hasn't been updated since 7/21/2004 and the telephone option doesn't work properly for ADModify.net
0

Featured Post

Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
Dramatic changes are revolutionizing how we build and use technology. Every company is automating, digitizing, and modernizing operations. We need a better, more connected way to work together as teams so we can harness the insights from our system…
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question