Link to home
Start Free TrialLog in
Avatar of amoos
amoos

asked on

How to export users from active directory 2003??

I have about 1600 users and i need to get a copy of their usernames and full names from active directory.  how can i export a list like this??
Avatar of Bertling
Bertling
Flag of United Kingdom of Great Britain and Northern Ireland image

CSVDE is what you are after for this, this is a good link to work with http://www.computerperformance.co.uk/Logon/Logon_CSVDE_Export.htm
Hello, you can use a command like the following one:
DSQUERY USER DC=YOURDOMAIN,DC=COM -SCOPE SUBTREE | DSGET USER -FN -LN -DISPLAY

You can find more of the options that can be displayed by entering the command DSGET USER /?
There is a list of attributes like -UPN, -SAMID, -OFFICE etc.

Don't forget to replace the string DC=YOURDOMAIN,DC=COM with the real name of your domain.
Also if you want to get a textual output, you can redirect it to a text file like that:

DSQUERY USER DC=YOURDOMAIN,DC=COM -SCOPE SUBTREE | DSGET USER -FN -LN -DISPLAY > C:\my_users_list.txt
HTH

Regards
Martin
Avatar of sk_raja_raja
sk_raja_raja

1.You can install the Windows 2003 support tools (free download from Microsoft Website) and use DSQUERY USER  OU=Test,dc=TEST,dc=LOCAL  -O UPN

2.If you have powershell you can install the quest tools for free http://www.quest.com/powershell/

Command would be
Get-QADGroup "Group Name" | %{$_.Members}

3.Check out here:
http://www.computerperformance.co.uk/Logon/CSVDE_LDIFDE.htm
http://support.microsoft.com/kb/555634
http://support.microsoft.com/kb/555637

4.Use LDIFDE or CSVDE.

c:\>ldifde -d "BASE DN" -r "(objectClass=user)" -f export.ldf
c:\>ldifde -i -f inport.ldf

c:\>csvde -d "BASE DN" -r "(objectClass=user)" -f export.csv
c:\>csvde -i -f inport.csv
You can also use dsquery,dsget,dsadd,dsmod for scripting.
ref the help url for CSVDE

http://www.computerperformance.co.uk/Logon/Logon_CSVDE_Export.htm

This will be a simple export
CSVDE -d "OU=Newport,DC=cp,dc=com" -f file.csv.
Avatar of amoos

ASKER

all-right it seems to work fine and is giving me the results that i am looking for but since i have 1600 users i need this information for it is giving me a limit error.  below is the error i am getting

Dsquery has reached the default limit of 100 results to display; use the -limit option to display more results

so i add at the end of the query -limit 2000 and then it gives me the error again.  how do i fix this???  awesome help
1.I think their a limitation on number of objects that you can query from the DC in a single go.This has been done purposefully keeping mind about the performance of the DC.Below article is somewhat similar to your situation.But I wouldn't recommend you to change the registry
http://support.microsoft.com/kb/262848

but you can try this,
DSQUERY USER  OU=Test,dc=TEST,dc=LOCAL  -limit 2000 >C:\UsersCN.txt

Avatar of amoos

ASKER

also how would i write a query to get members in a particular OU??  awesome help
or try this,
DSQUERY USER  OU=Test,dc=TEST,dc=LOCAL  -limit 0 >C:\UsersCN.txt

You have to use the limit option with 0 (zero):

-limit <NumObjects>         Specifies the number of objects matching the
                            given criteria to be returned, where <NumObjects>
                            is the number of objects to be returned.
                            If the value of <NumObjects> is 0, all
                            matching objects are returned. If this parameter
                            is not specified, by default the first
                            100 results are displayed.
You can probably user CSVDE command,
 For example, suppose you only wish to export one OU and not the whole Active Directory domain.  

Command: CSVDE -d "OU=ou name,DC=cp,dc=com" -f Newport.csv.
What the -d filter does is focus the export on one particular area.
If you try this filter, make sure you substitute your OU for ou name and your domain for dc=cp.  Observe carefully the syntax with those speech marks and commas between the elements.  Avoid the trap of being so concerned with the -d switch that you forget the -f filename.csv.

Ref the below links for more options,
http://www.computerperformance.co.uk/Logon/Logon_CSVDE_Export.htm
http://www.computerperformance.co.uk/Logon/Logon_LDIFDE_Export.htm

Avatar of amoos

ASKER

awesome.  i used the query DSQUERY USER  OU=Test,dc=TEST,dc=LOCAL  -limit 0 >C:\UsersCN.txt  and it worked fine but the results that were displayed were in the format of cn=username,ou=ou name,dc=etc...  how do i get it to display the same results as if i used the dsget user command??
press Ctrl-a and copy all the contents from the text file and paste in a excel file....there you can edit the required information (if you are good in excel)
Avatar of amoos

ASKER

awesome it all works.  now the last question is when i run these queries do any of the queries delete or mess up anything in active directory??  meaning if i run these queries on the live DC is it going to delete my AD??
ASKER CERTIFIED SOLUTION
Avatar of sk_raja_raja
sk_raja_raja

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of amoos

ASKER

awesome thank you so much for your help