Modifying user attributes in AD can be time consuming when you have a large number of users to edit. You can use VBS to speed the process, and Windows 2003 domains have some ability to mass edit AD users. ADModify is a free tool that allows you to mass edit users in Windows 2000 and 2003 domains.
ADModify is a stand-alone tool that requires no installation. Simply download and unzip the file and then launch ADModify.exe. There is a command line component as well if you are a CLI junkie.
Once ADModify is launched you have three options
- Modify Attributes
- Undo Changes
- Import Mailbox Rights
One very cool option with ADModify is that all changes are recorded in an XML file and allow for easy undo operations if you make a bad change.
Click on Modify Attributes and you will need to supply the domain and domain controller information and then press the green arrow to populate the Domain Tree List.
Select a container and then click Add to list. In the right pane you can then select the users whose attributes you wish to edit before clicking Next.
You now have a familiar looking AD users property page with which you can change an attribute, or attributes, for all the users you selected.
Once you have made the changes press Go to have them applied.
So now that you made your changes what happens if you goofed and need to revert back to the old setting? Simple, launch ADModify and select Undo Changes, browse to the XML file that recorded the changes and then click Undo.
The last option can be used to import/export Exchange 2000/2003 mailbox rights in XML format.
For more information see:
Download ADModify.NET Here