dvarozza
asked on
How can I popluate batches of global groups from CSV
2003 Active Directory. Trying to create hundreds of Global Security Groups from csv files. Using cusrmgr.exe from the resource kit I am able to do mostly what I need which is to populate gloabal groups with users based on csv files.
For example the following work fine
cusrmgr -u MyDomain\UsernameToAdd -agg NameofGlobalGroupToAddUser
However many of my Global Groups have nested Global Groups so GlobalGroup1 contains GlobalGroup2. The problem is when I try to use cusrmgr.exe to add these nested Global Groups it always fails. Here are exampes of my attempts and failures:
cusrmgr -u anygroupname1 -agg anygroupname2
CUsrMgr Ver 1.0 Jan98 by G.Zanzen (c) MCS Central Europe
Adding emp\anygroupname1 to anygroupname2 failure
I have tried other syntax's including using MyDomain\GroupName but that fails as well. I am not partial to cusrmgr if anyone has any other suggestions that could work. I have tries Net Group and that had similar problems.
For example the following work fine
cusrmgr -u MyDomain\UsernameToAdd -agg NameofGlobalGroupToAddUser
However many of my Global Groups have nested Global Groups so GlobalGroup1 contains GlobalGroup2. The problem is when I try to use cusrmgr.exe to add these nested Global Groups it always fails. Here are exampes of my attempts and failures:
cusrmgr -u anygroupname1 -agg anygroupname2
CUsrMgr Ver 1.0 Jan98 by G.Zanzen (c) MCS Central Europe
Adding emp\anygroupname1 to anygroupname2 failure
I have tried other syntax's including using MyDomain\GroupName but that fails as well. I am not partial to cusrmgr if anyone has any other suggestions that could work. I have tries Net Group and that had similar problems.
Last Comment
ASKER CERTIFIED SOLUTION
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
Use NET GROUP instead:
NET GROUP "Group Name1" "Group Name 2" /ADD [/DOMAIN]
NET GROUP "Group Name1" "Group Name 2" /ADD [/DOMAIN]
SOLUTION
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
ASKER
I went to the url (http://www.computerperformance.co.uk/ezine/ezine37.htm) that mpfister directed me to and while browsing around saw mention of "DS Tools" I looked at that a little closer and found that DSMOD.EXE which is built in to 2003 Server would do exactly what I needed. While mpister's advise did not exactly solve my problem I do appreciate the help and it did lead me to the solution I needed so a big thanks for that. If anyone is curious I ended up geting this command to work for adding nested global groups:
>dsmod globalgroup1 -addmbr globalgroup2
>dsmod globalgroup1 -addmbr globalgroup2
Active Directory
Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.
86K
Questions
--
Followers
--
Top Experts
Get a personalized solution from industry experts
TRUSTED BY
ASKER
When I right click my domain and check properties it shows:
Domain functional level = Windows 2000 native
Forest functional level = Windows 2000
Are these functional levels not sufficient for what I am trying to do? Seems funny that it will work if I manually do it and not through cusrmgr.exe?