Solved

Report  on AD setting located on the General Tab

Posted on 2006-06-27
3
212 Views
Last Modified: 2012-03-15
Here is our situation:
When we setup our AD environment, old user accounts were carried over from our NT 4.0 domain. When those old IDs are viewed within Active Directory users and Groups, we have noticed something different between the old and newly created IDs.

On the general tab, there appears an icon in the shape of a head. Next to it is some text. This text is shown as the old NT domain user name if the account was carried over. If the account was created with AD, then it shows up as a full name.

Does anyone know what the setting is I can query with AD to obtain the value displayed next to the icon of the head? DisplayName, SAMaccountname, or principalname don't appear to be it.

Thanks,
Michael
0
Comment
Question by:MichaelCohoon
  • 2
3 Comments
 
LVL 82

Accepted Solution

by:
oBdA earned 250 total points
Comment Utility
That's the user's "Relative Distinguished Name"; together with the parent distinguished name, it forms the user's Distinguished Name, the user's location in ldap.
So if you see "John Doe" next to the head, and the user is in the OU "HR" in the domain "domain.local", the user's DN would be "cn=John Doe,ou=hr,dc=domain,dc=local".
To get a list of all users, open a command prompt and enter
dsquery user -limit 0
0
 

Author Comment

by:MichaelCohoon
Comment Utility
Thanks oBdA! The terminology you gave me was just what I was looking for. We have a situation where we need to change some user's RDNs. So a bit of googling on your term helped me out. By selecting a user in AD, pressing F2 to rename, I can change the text displayed. Do you by any chance have an idea how I could do it via a script, in case we need to do this on a larger scale?

Thanks again.
Michael
0
 
LVL 82

Expert Comment

by:oBdA
Comment Utility
Most of the attributes can be set and changed with the ds-tools (dsadd.exe, dsget.exe, dsmod.exe, dsmove.exe, dsquery.exe).
Renaming an AD object is done with dsmove:
dsmove "cn=John Doe,ou=hr,dc=domain,dc=local" -newname "Jane Doe"

The new command-line tools for Active Directory in Windows Server 2003
http://support.microsoft.com/?kbid=298882
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

Learn about cloud computing and its benefits for small business owners.
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now