dsmod/dsadd Active Directory
Posted on 2006-07-10
We want to easily create a large number of guest accounts with minimal interaction. Everything works good except one problem...
I don't want the guest to be part of "Domain Users", which is added by default to new accounts, but I can't remove it with dsmod because it says "can't remove the primary group". Is there some sort of code/script that I can add to this to basically change the primary group from Domain Users to Guest once the account is created?
FOR /L %i in (1,1,10) DO dsadd user "cn=CCU Guest%i,ou=Custom Object,dc=my,dc=domain,dc=edu" -samid CCUGuest%i -fn CCU -ln Guest%i -display "CCU Guest%i" -pwd g5%i2%i9 -disabled no -memberof "CN=Guest,CN=Users,DC=my,DC=domain,DC=edu" "CN=Domain Guests,CN=Users,DC=my,DC=domain,DC=edu"
dsmod group "CN=Domain Users,CN=Users,DC=my,DC=domain,DC=edu" -rmmbr "CN=CCU Guest1,OU=Custom Object,DC=my,DC=domain,DC=edu"