amoos
asked on
How to export users from active directory 2003??
I have about 1600 users and i need to get a copy of their usernames and full names from active directory. how can i export a list like this??
CSVDE is what you are after for this, this is a good link to work with http://www.computerperformance.co.uk/Logon/Logon_CSVDE_Export.htm
Hello, you can use a command like the following one:
DSQUERY USER DC=YOURDOMAIN,DC=COM -SCOPE SUBTREE | DSGET USER -FN -LN -DISPLAY
You can find more of the options that can be displayed by entering the command DSGET USER /?
There is a list of attributes like -UPN, -SAMID, -OFFICE etc.
Don't forget to replace the string DC=YOURDOMAIN,DC=COM with the real name of your domain.
Also if you want to get a textual output, you can redirect it to a text file like that:
DSQUERY USER DC=YOURDOMAIN,DC=COM -SCOPE SUBTREE | DSGET USER -FN -LN -DISPLAY > C:\my_users_list.txt
HTH
Regards
Martin
DSQUERY USER DC=YOURDOMAIN,DC=COM -SCOPE SUBTREE | DSGET USER -FN -LN -DISPLAY
You can find more of the options that can be displayed by entering the command DSGET USER /?
There is a list of attributes like -UPN, -SAMID, -OFFICE etc.
Don't forget to replace the string DC=YOURDOMAIN,DC=COM with the real name of your domain.
Also if you want to get a textual output, you can redirect it to a text file like that:
DSQUERY USER DC=YOURDOMAIN,DC=COM -SCOPE SUBTREE | DSGET USER -FN -LN -DISPLAY > C:\my_users_list.txt
HTH
Regards
Martin
1.You can install the Windows 2003 support tools (free download from Microsoft Website) and use DSQUERY USER OU=Test,dc=TEST,dc=LOCAL -O UPN
2.If you have powershell you can install the quest tools for free http://www.quest.com/powershell/
Command would be
Get-QADGroup "Group Name" | %{$_.Members}
3.Check out here:
http://www.computerperformance.co.uk/Logon/CSVDE_LDIFDE.htm
http://support.microsoft.com/kb/555634
http://support.microsoft.com/kb/555637
4.Use LDIFDE or CSVDE.
c:\>ldifde -d "BASE DN" -r "(objectClass=user)" -f export.ldf
c:\>ldifde -i -f inport.ldf
c:\>csvde -d "BASE DN" -r "(objectClass=user)" -f export.csv
c:\>csvde -i -f inport.csv
You can also use dsquery,dsget,dsadd,dsmod for scripting.
ref the help url for CSVDE
http://www.computerperformance.co.uk/Logon/Logon_CSVDE_Export.htm
This will be a simple export
CSVDE -d "OU=Newport,DC=cp,dc=com" -f file.csv.
2.If you have powershell you can install the quest tools for free http://www.quest.com/powershell/
Command would be
Get-QADGroup "Group Name" | %{$_.Members}
3.Check out here:
http://www.computerperformance.co.uk/Logon/CSVDE_LDIFDE.htm
http://support.microsoft.com/kb/555634
http://support.microsoft.com/kb/555637
4.Use LDIFDE or CSVDE.
c:\>ldifde -d "BASE DN" -r "(objectClass=user)" -f export.ldf
c:\>ldifde -i -f inport.ldf
c:\>csvde -d "BASE DN" -r "(objectClass=user)" -f export.csv
c:\>csvde -i -f inport.csv
You can also use dsquery,dsget,dsadd,dsmod for scripting.
ref the help url for CSVDE
http://www.computerperformance.co.uk/Logon/Logon_CSVDE_Export.htm
This will be a simple export
CSVDE -d "OU=Newport,DC=cp,dc=com" -f file.csv.
ASKER
all-right it seems to work fine and is giving me the results that i am looking for but since i have 1600 users i need this information for it is giving me a limit error. below is the error i am getting
Dsquery has reached the default limit of 100 results to display; use the -limit option to display more results
so i add at the end of the query -limit 2000 and then it gives me the error again. how do i fix this??? awesome help
Dsquery has reached the default limit of 100 results to display; use the -limit option to display more results
so i add at the end of the query -limit 2000 and then it gives me the error again. how do i fix this??? awesome help
1.I think their a limitation on number of objects that you can query from the DC in a single go.This has been done purposefully keeping mind about the performance of the DC.Below article is somewhat similar to your situation.But I wouldn't recommend you to change the registry
http://support.microsoft.com/kb/262848
but you can try this,
DSQUERY USER OU=Test,dc=TEST,dc=LOCAL -limit 2000 >C:\UsersCN.txt
http://support.microsoft.com/kb/262848
but you can try this,
DSQUERY USER OU=Test,dc=TEST,dc=LOCAL -limit 2000 >C:\UsersCN.txt
ASKER
also how would i write a query to get members in a particular OU?? awesome help
or try this,
DSQUERY USER OU=Test,dc=TEST,dc=LOCAL -limit 0 >C:\UsersCN.txt
You have to use the limit option with 0 (zero):
-limit <NumObjects> Specifies the number of objects matching the
given criteria to be returned, where <NumObjects>
is the number of objects to be returned.
If the value of <NumObjects> is 0, all
matching objects are returned. If this parameter
is not specified, by default the first
100 results are displayed.
DSQUERY USER OU=Test,dc=TEST,dc=LOCAL -limit 0 >C:\UsersCN.txt
You have to use the limit option with 0 (zero):
-limit <NumObjects> Specifies the number of objects matching the
given criteria to be returned, where <NumObjects>
is the number of objects to be returned.
If the value of <NumObjects> is 0, all
matching objects are returned. If this parameter
is not specified, by default the first
100 results are displayed.
You can probably user CSVDE command,
For example, suppose you only wish to export one OU and not the whole Active Directory domain.
Command: CSVDE -d "OU=ou name,DC=cp,dc=com" -f Newport.csv.
What the -d filter does is focus the export on one particular area.
If you try this filter, make sure you substitute your OU for ou name and your domain for dc=cp. Observe carefully the syntax with those speech marks and commas between the elements. Avoid the trap of being so concerned with the -d switch that you forget the -f filename.csv.
Ref the below links for more options,
http://www.computerperformance.co.uk/Logon/Logon_CSVDE_Export.htm
http://www.computerperformance.co.uk/Logon/Logon_LDIFDE_Export.htm
For example, suppose you only wish to export one OU and not the whole Active Directory domain.
Command: CSVDE -d "OU=ou name,DC=cp,dc=com" -f Newport.csv.
What the -d filter does is focus the export on one particular area.
If you try this filter, make sure you substitute your OU for ou name and your domain for dc=cp. Observe carefully the syntax with those speech marks and commas between the elements. Avoid the trap of being so concerned with the -d switch that you forget the -f filename.csv.
Ref the below links for more options,
http://www.computerperformance.co.uk/Logon/Logon_CSVDE_Export.htm
http://www.computerperformance.co.uk/Logon/Logon_LDIFDE_Export.htm
ASKER
awesome. i used the query DSQUERY USER OU=Test,dc=TEST,dc=LOCAL -limit 0 >C:\UsersCN.txt and it worked fine but the results that were displayed were in the format of cn=username,ou=ou name,dc=etc... how do i get it to display the same results as if i used the dsget user command??
press Ctrl-a and copy all the contents from the text file and paste in a excel file....there you can edit the required information (if you are good in excel)
ASKER
awesome it all works. now the last question is when i run these queries do any of the queries delete or mess up anything in active directory?? meaning if i run these queries on the live DC is it going to delete my AD??
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
awesome thank you so much for your help