Solved

script export+import group and user from forest A to Forest B

Posted on 2014-04-17
5
1,703 Views
Last Modified: 2014-05-13
hello,

i need to export user and group from my Active directory production forest to my lab forest.

AD 2008 R2.

i need to export all group  and user from specific organisationnel unit.

i need to keep the member of group from forest a to forest b.

thanks
0
Comment
Question by:cawasaki
  • 3
  • 2
5 Comments
 
LVL 13

Expert Comment

by:Santosh Gupta
ID: 40006300
Hi,

Use LDIFDE to import and export directory objects to Active Directory. its very easy.

firstly export groups then users.

CSVDE -f adusers.csv

CSVDE -i -f Newport.csv


http://support.microsoft.com/kb/237677
0
 

Author Comment

by:cawasaki
ID: 40006936
hello,

ok i have success to export and inport user, but i have a problem to import group, so any one have a working script to export and import group with memeber if possible?
0
 
LVL 13

Accepted Solution

by:
Santosh Gupta earned 500 total points
ID: 40007187
ldifde -f c:\LDIFDE_export\export_Groups_WITH_Members.ldf -s <DC NAME> -d "<DOMAIN DN>" -p subtree -r "(&(ObjectCategory=group)(objectClass=group)(name=*)(member=*))" -l "member" -j c:\

http://social.technet.microsoft.com/Forums/windowsserver/en-US/1b24edf2-9af5-447c-9f15-631e88eefe8c/exporting-users-groups-and-their-members-from-a-currently-installed-and-importing-them-to-a-new
0
 

Author Comment

by:cawasaki
ID: 40008303
i have already test this and import not work:

Logging in as current user using SSPI
Importing directory from file "c:\temp\export_Groups_WITH_Membersv3.ldf"
Loading entries......................
Add error on entry starting on line 244: Unwilling To Perform
The server side error is: 0x209a Access to the attribute is not permitted becaus
e the attribute is owned by the Security Accounts Manager (SAM).
The extended server error is:
0000209A: SvcErr: DSID-031A0FBB, problem 5003 (WILL_NOT_PERFORM), data 0

0 entries modified successfully.
An error has occurred in the program
No log files were written.  In order to generate a log file, please
specify the log file path via the -j option.

Open in new window

0
 
LVL 13

Expert Comment

by:Santosh Gupta
ID: 40009146
Hi,

see the url for import error.. http://support.microsoft.com/kb/276382
0

Featured Post

NAS Cloud Backup Strategies

This article explains backup scenarios when using network storage. We review the so-called “3-2-1 strategy” and summarize the methods you can use to send NAS data to the cloud

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this article, I am going to show you how to simulate a multi-site Lab environment on a single Hyper-V host. I use this method successfully in my own lab to simulate three fully routed global AD Sites on a Windows 10 Hyper-V host.
This article shows how to deploy dynamic backgrounds to computers depending on the aspect ratio of display
The viewer will learn how to create a basic form using some HTML5 and PHP for later processing. Set up your basic HTML file. Open your form tag and set the method and action attributes.: (CODE) Set up your first few inputs one for the name and …
In this fourth video of the Xpdf series, we discuss and demonstrate the PDFinfo utility, which retrieves the contents of a PDF's Info Dictionary, as well as some other information, including the page count. We show how to isolate the page count in a…

828 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question