Method for Creating User ID’s In Windows Server 2003 Active Directory
Active Directory, Active Directory Migration Tool, Open IT Forum, Windows Login, Windows Security, Windows Server 2003, Windows Server Management
We are getting ready to migrate our W2K AD to W2K3. Currently our user ID's are first initial of the first name the full last name.
We would like to get away from those types of user ID's and go with something random, easy to manage, want allow duplicates and is not associated with the user’s name. So John Smith might be we5184.
I’m just wondering if others/you have ran into this and care to share what you have done and are doing now. Also are there any applications or tools that you use to help in the process? Your advice and help is greatly appreciated. Thanks!
Software/Hardware used:
Windows 2000 32 Bit STD, Windows 2003 32 Bit Std
We would like to get away from those types of user ID's and go with something random, easy to manage, want allow duplicates and is not associated with the user’s name. So John Smith might be we5184.
I’m just wondering if others/you have ran into this and care to share what you have done and are doing now. Also are there any applications or tools that you use to help in the process? Your advice and help is greatly appreciated. Thanks!
Software/Hardware used:
Windows 2000 32 Bit STD, Windows 2003 32 Bit Std
ASKED:
June 8, 2011 2:15 PM
UPDATED:
June 8, 2011 2:32 PM
Answer Wiki:
Having duplicates is a bad idea from an admin point of view and generally considered bad practice.
export everything from your current AD regarding the users you wish to change details for. Change the details in the exported file and use something like dsadd on the command line or powershell to import the ammeded details back in.
If you are moving from 2000 to 2003 you are just raising the domain function level. This means you will still have all the same users and user details in AD after you have done this.
To completly change everything use the modify command dsmod. be sure to get the fully qualified names correct though (user=user1,ou=staff,ou=x,domain=y) or the commands will fail.
before raising the functional level take a full back up and test a restore to a mock up of your network. Once you raise a domain function level you cannot undo it. However you can roll back to an earlier backup. Test fully before changing anything. This includes the modification of user details when such a large change will be taking place.
use this for reference
http://technet.microsoft.com/en-us/library/cc755470(WS.10).aspx
To see all answers submitted to the Answer Wiki: View Answer History.
RSS - Discussions Help
Discuss This Question:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
