Importing and modifying Active Directory users with AD Bulk Users 4

Importing users into Active Directory (CSV, Excel)

The import file can be formatted using the CSV (comma separated value) format or Excel XLS (2003) and XLSX (Excel 2007 and 2010).

The column headers in your file (CSV/XLS,XLSX) should contain the name of the Active Directory Attribute you want to add the data to. A list of column headers/attributes can be found below. The columns can be in any order and the column headers are not case sensitive but obviously must be spelt correctly for the program to recognize them, if it comes across a column it doesn’t recognize it will ignore that column.

In the example show below I’m using Excel to construct the file and using wildcards to speed up the creation of the file. The first row (1) contains the column headers, these are the attribute names such as givenName (first name). You don’t need to use all the attributes names just those you need, the minimum required to create  a new users are shown below. This example file would create 5 new users.

Import users from SQL Server and ODBC sources

You can use SQL Server, Oracle or other ODBC data sources to store the users to be imported or updated. You first need to create a connection to the data source in Windows using the Data Sources (ODBC) control panel, connections created here will then be visible to the program.

Updating Existing Active Directory User Accounts

AD Bulk Users can be used to update/modify existing Active Directory Users. This is done by adding the column header ‘Modify’ to the import file and setting the value to ‘TRUE’.

To update the ‘description’ and ‘telephoneNumber’ attributes for 5 users you would use a file (saved as CSV or Excel) similar to the example below.

The sAMAccountName (username) is used to locate the user in Active Directory, the Modify column with a value of TRUE tells the program to update an existing user. The other columns\attributes are those to be updated, in this case description and telephoneNumber.

If you want to update many attributes at once you can, simply add the additional column headers to your import file. For example: sAMAccountName,Modify,description,telephoneNumber,initials,employeeID,password.

Command Line Arguments

AD Bulk Users 4 contains a built-in scheduler so you don’t need to use the command line to automate imports but if you prefer to use the Windows Task Scheduler or have another reason to use the command line you can. Use ADBulkUsersCLI.exe from the command line.

You can find the syntax and command line examples for ADBulkUsersCLI.exe below.

ADBulkUsersCLI.exe /?

Microsoft Terminal Services Support

Import and Modify Terminal Services Home Folder and Profile Path for users. See Screenshot

Microsoft Exchange Support

Create Exchange Server Mailbox for users. See Screenshot

Wildcards

To speed up the creation of your import file/table you can use wildcards throughout your CSV file or table. You can create your own wildcards by clicking Wildcards in the ribbon.

%username% (reads the value found in the sAMAccountName column)
%firstname% (reads the value found in the givenName column)
%lastname% (reads the value found in the sn column)
%givenName% (reads the value found in the givenName column)
%sn% (reads the value found in the sn column)
%sAMAccountName% (reads the value found in the sAMAccountName column)
%userPrincipalName% (reads the value found in the userPrincipalName column)
%initials% (reads the value found in the initials column)
%email% (reads the value found in the mail column)
%firstNamefirst% (reads the first letter of the value found in the givenName column)
%firstNamelast% (reads the last letter of the value found in the givenName column)
%lastNamefirst% (reads the first letter of the value found in the sn column)
%lastNamelast% (reads the last letter of the value found in the sn column)

To create a new wildcard click the ‘Add’ button then enter a wildcard name such as employeeID and then select a column that the wildcard will read. You can use a Regular Expression if you want to manipulate the value such as reading the first or last character.

Home Folders

To set the users Home Folder add the column header ‘homeFolder’ to your import file. You can use a local folder such as “c:\User1″ or a UNC path followed by a semi colon and the drive letter to use such as ” \\server\homedrives\;z:”.

Creating the users home folder

When a user is being created AD Bulk Users can create the users home folder and apply the correct permissions to the folder. You can specify where the home folder should be created and what permissions should be applied via the Home Folder option tab.

To create the users home folder add the column ’createHomeFolder’ to your import file and set the value to TRUE for each user.

Importing into multiple OU’s

To import users into multiple OU’s from the same import file add the property ‘destinationOU’ to your import file. An LDAP path placed in this field results in the user being imported into that OU. This overrides the ‘Active Directory Container’ OU found on the settings tab. If the user has a destinationOU value present in the import file then the user is imported into that OU otherwise the user is imported into the OU found on the settings tab.

Manager Property

The manager attribute requires the distinguishedName of an existing Active Directory user, an example value would be:

CN=JBloggs,OU=Managers,DC=Domain,DC=Com

Custom or unlisted attributes

It is possible to add additional and custom attributes to the program. Click Attributes in the ribbon to add a unlisted or custom attribute.

Supported Attributes List

Please note all column headers to be used in the import file are case sensitive.

General Tab
Display Name	Attribute Name (column headers in CSV file)	Example Value
First Name	givenName	John
Initials	initials	JS
Last Name	sn	Smith
Display Name	displayName	“John, Smith”
Description	description	Sales Manager
Office	physicalDeliveryOfficeName	London Office
Telephone Number	telephoneNumber	0123 456 789
Telephone Number (Other)	otherTelephone	0123 4457 89
Email	mail	JSmith@domain.com
Web Page	wWWHomePage	www.johnsmith.com
Web Page (Other)	url	www.John.net,www.John.org
Password	password	JohnsPass321
Destination OU	destinationOU	OU=Sales,DC=Domain,DC=Com
Common Name	CN	John Smith or %lastname% %firstname%
Modify User if already exists	Modify	True or False
Delete User	Delete	True or False
Address Tab
Display Name	Attribute Name (column headers in CSV file)	Example Value
Street	streetAddress	10 Downing St;London  (Use a semi-colon for carriage return)
PO Box	postOfficeBox	Po Box 1
City	l (Lowercase L)	London
State/Province	st	New York
Zip/Postal Code	postalCode	614415
Country	c	GB - (Click here for country codes)
Group Tab
Display Name	Attribute Name (column headers in CSV file)	Example Value
Group	memberOf	CN=ManagersGroup,DC=Domain,DC=Com
Account Tab
Display Name	Attribute Name (column headers in CSV file)	Example Value
User Logon Name	userPrincipalName	JSmith@domain.com
User Logon Name (Pre W2K)	sAMAccountName	JSmith  Mandatory, you must include this
User must change password at next logon	mustChangePassword	True or False
User cannot change password	userCannotChangePassword	True or False
Account is Disabled	accountDisabled	True or False
Use DES encryption	useDES	True or False
Do not require kerberos preauthentication	notRequireKerberos	True or False
Password never expires	passwordNeverExpires	True or False
Account is trusted for delegation	trustedForDelegation	True or False
Store password using reversable encryption	passwordReversable	True or False
Smart card is required for interactive logon	smartCardRequired	True or False
Account is sensitive and cannot be delegated	sensitiveForDelegation	True or False
Account Expires (use same date format as server)	expires	01/01/2007
Profile Tab
Display Name	Attribute Name (column headers in CSV file)	Example Value
Profile Path	profilePath	\\server\profiles
Login Script	scriptPath	logon.bat
Home Folder (local or UNC, see notes above)	homeFolder	\\server\homedir\Jsmith;z:
Drive only	homeDrive	H:
Path only	homeDirectory	\\server\homedir\Jsmith
Create Home Folder and Set Permissions	createHomeDirectory	True
Telephones Tab
Display Name	Attribute Name (column headers in CSV file)	Example Value
Home	homePhone	660 123 122
Home (Other)	otherHomePhone	0661 123 122
Pager	pager	1234
Pager (Other)	otherPager	123
Mobile	mobile	120 456 789
Mobile (Other)	otherMobile	121 456 789
Fax	facsimileTelephoneNumber	122 456 789
Fax (Other)	otherFacsimile TelephoneNumber	0123 456 789
IP Phone	ipPhone	01IP
IP Phone (Other)	otherIpPhone	432493809
Notes	info	General information (Use a semi-colon for carriage return)
Organization Tab
Display Name	Attribute Name (column headers in CSV file)	Example Value
Title	title	Manager
Department	department	Sales
Company	company	Big Corp
Manager	manager	CN=Ste Jobs,OU=Managers,DC=Domain,DC=Com
Employee ID	employeeID
Employee Type	employeeType
Employee Number	employeeNumber
Car License	carLicense
Division	division
Middle Name	middleName
Room Number	roomNumber
Assistant	assistant	CN=Joe Blog,OU=Managers,DC=Domain,DC=Com
jpegPhoto	jpegPhoto	E:\photos\%username%.jpg  (25KB or less, 200×200 pixels or less)
Exchange Tab
Display Name	Attribute Name (column headers in CSV file)	Example Value
Create Mailbox for User	mailboxEnabled	True, Required when creating a mailbox.
Alias	mailNickname	Jsmith   *Required
Email addresses	proxyAddresses	SMTP:JSmith@doamin.com    multiple addresses?
Automatically update based on recipient policy	AutoUpdateOnRecipientPolicy	True or False (True if omitted), can be used in place of proxyAddresses.
Simple Display Name	displayNamePrintable	Jsmith
Forward to	altRecipient	CN=User2,OU=Managers,DC=Domain,DC=Com
Deliver & Forward	deliverAndRedirect	True
Use MAPI Rich Text	mAPIRecipient	True or False
Hide From Address Lists	msExchHideFromAddressLists	True or False
Exchange Store	ExchangeDatabase	Store1
Mail-Enable User	mailEnabled*	True or False *Do not use with mailboxEnabled above.
External Address	targetAddress	Required when mail-enabling a user.
Exchange Attributes
Display Name	Attribute Name (column headers in CSV file)	Example Value
extensionAttribute1	extensionAttribute1
extensionAttribute2	extensionAttribute2
extensionAttribute3	extensionAttribute3
extensionAttribute4	extensionAttribute4
extensionAttribute5	extensionAttribute5
extensionAttribute6	extensionAttribute6
extensionAttribute7	extensionAttribute7
extensionAttribute8	extensionAttribute8
extensionAttribute9	extensionAttribute9
extensionAttribute10	extensionAttribute10
extensionAttribute11	extensionAttribute11
extensionAttribute12	extensionAttribute12
extensionAttribute13	extensionAttribute13
extensionAttribute14	extensionAttribute14
extensionAttribute15	extensionAttribute15
Terminal Services Tab
Display Name	Attribute Name (column headers in CSV file)	Example Value
Profile Path	TSProfilePath	\\server\profiles\%username%
Home Folder	TSHomeFolder	\\server\users\%username%;z:
Create Home Folder	TSCreateHomeDirectory	True or False
Deny Logon	TSDenyLogon	True or False
Dial-In Tab
Display Name	Attribute Name (column headers in CSV file)	Example Value
Allow Dial-In Access	msNPAllowDialin	True or False
Remote Control Tab
Display Name	Attribute Name (column headers in CSV file)	Example Value
Remote Control	EnableRemoteControl	0 = Disable Remote Control, 1 = Require user’s permission, 2 = Do not require user’s permission, 3 = Require user’s permission, View Only, 4 = Do not require user’s permission, View Only