Solved

Report  on AD setting located on the General Tab

Posted on 2006-06-27
3
216 Views
Last Modified: 2012-03-15
Here is our situation:
When we setup our AD environment, old user accounts were carried over from our NT 4.0 domain. When those old IDs are viewed within Active Directory users and Groups, we have noticed something different between the old and newly created IDs.

On the general tab, there appears an icon in the shape of a head. Next to it is some text. This text is shown as the old NT domain user name if the account was carried over. If the account was created with AD, then it shows up as a full name.

Does anyone know what the setting is I can query with AD to obtain the value displayed next to the icon of the head? DisplayName, SAMaccountname, or principalname don't appear to be it.

Thanks,
Michael
0
Comment
Question by:MichaelCohoon
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 84

Accepted Solution

by:
oBdA earned 250 total points
ID: 16996636
That's the user's "Relative Distinguished Name"; together with the parent distinguished name, it forms the user's Distinguished Name, the user's location in ldap.
So if you see "John Doe" next to the head, and the user is in the OU "HR" in the domain "domain.local", the user's DN would be "cn=John Doe,ou=hr,dc=domain,dc=local".
To get a list of all users, open a command prompt and enter
dsquery user -limit 0
0
 

Author Comment

by:MichaelCohoon
ID: 17000658
Thanks oBdA! The terminology you gave me was just what I was looking for. We have a situation where we need to change some user's RDNs. So a bit of googling on your term helped me out. By selecting a user in AD, pressing F2 to rename, I can change the text displayed. Do you by any chance have an idea how I could do it via a script, in case we need to do this on a larger scale?

Thanks again.
Michael
0
 
LVL 84

Expert Comment

by:oBdA
ID: 17000962
Most of the attributes can be set and changed with the ds-tools (dsadd.exe, dsget.exe, dsmod.exe, dsmove.exe, dsquery.exe).
Renaming an AD object is done with dsmove:
dsmove "cn=John Doe,ou=hr,dc=domain,dc=local" -newname "Jane Doe"

The new command-line tools for Active Directory in Windows Server 2003
http://support.microsoft.com/?kbid=298882
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Many of us need to configure DHCP server(s) in their environment. We can do that simply via DHCP console on server or using MMC snap-in on each computer with Administrative Tools installed in a network. But what if we have to configure many DHCP ser…
I've always wanted to allow a user to have a printer no matter where they login. The steps below will show you how to achieve just that. In this Article I'll show how to deploy printers automatically with group policy and then using security fil…

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question