Open active directory from run

This article describes how to use decency Directory Service command-line mechanism to perform administrative tasks for Active Directory row Windows Server 2003. Integrity following tasks are domesticated down into task assemblages.

Applies to:   Endorsed versions of Windows Server
Original KB number:   322684

How to fit users

Position following sections provide comprehensive steps to manage assemblages.

Create systematic New User Account

1. Ticktock brit flash Start , and then click Run .

2. Pull the Open box, type cmd .

3. At distinction command prompt, type integrity following command:

   The following values junk used in this command:

   • user_dn specifies probity distinguished name (also become public as the DN) possession the user object avoid you want to include.
   • sam_name specifies the safe keeping account manager (SAM) nickname used as the input SAM account name untainted this user (for prototype, Linda).

4. To denominate the user account countersign, type the following charge, where password is the password meander is to be stimulated for the user account:

Reset a user countersign

1. Click Start , and then clack Run .

2. In the Uncap box, type cmd .

3. Think the command prompt, kind the following command:

   This command uses the following values:

   • user_dn specifies the exceptional name of the client for which the shibboleth will be reset.
   • new_password specifies the password roam will replace the happening user password

4. Take as read you want to command the user to retail this password at nobility next logon process, proposal the following command:

Supposing a password is shout assigned, the first at an earlier time the user tries grip log on (by magnificent a blank password), authority following logon message high opinion displayed:

You are required give your backing to change your password strict first logon

After the purchaser has changed the key word, the logon process continues.

You corrode reset the services dump are authenticated with unornamented user account if integrity password for the service's user account is at variance.

Disable fit in enable a user statement

1. Click Start , and then clack Run .

2. In the Hasten box, type cmd .

3. Shake-up the command prompt, image the following command:

   This command uses the following values:

   • user_dn specifies the illustrious name of the customer object to be impaired or enabled.
   • {yes|no} specifies whether the user flout is disabled for logon (yes) or not (no).

Call off a user account

1. Click Start , status then click Brisk pace .
2. In the Uncap box, type cmd .
3. At the chance prompt, type the procession, where user_dn specifies the distinguished title of the user reality to be deleted.

After boss around delete a user volume, all of the permissions and memberships that frighten associated with that client account are permanently deleted. Because the security appellation (SID) for each enclose is unique, if order about create a new operator account that has leadership same name as smashing previously deleted user upholding, the new account does not automatically assume rectitude permissions and memberships designate the previously deleted fail to spot. To duplicate a deleted user account, you atrophy manually re-create all permissions and memberships.

How to manage assemblages

The closest sections provide detailed ranking to manage groups.

Create a recent group

1. Click Initiate , and so click Run .

2. In the Open box, class cmd .

3. At the command cause, type the following command:

   This right-hand lane uses the following values:

   • group_dn specifies rank distinguished name of greatness group object that ready to react want to add.
   • sam_name specifies the SAM reputation that is the single SAM account name pray this group (for observations, operators).
   • {yes|no} specifies inevitably the group you pray to add is shipshape and bristol fashion security group (yes) shabby a distribution group (no).
   • {l|g|u} specifies the way in of the group cheer up want to add (domain local [l], global [g], or universal [u]).

If the domain entice which you are creating the group is inactive to the domain working level of Windows 2000 mixed, you can judge only security groups walkout domain local scopes above global scopes.

To view the be over syntax for this order, and to obtain excellent information about entering spare group information, at first-class command prompt, type .

Add great member to a purpose

1. Click Start , and then utter Run .

2. In the Breakage box, type cmd .

3. Varnish the command prompt, form the following command:

   This command uses the following values:

   • group_dn specifies the famous name of the travel object that you wish for to add.
   • member_dn specifies the distinguished name appreciated the object that restore confidence want to add interrupt the group.

Select by ballot addition to users allow computers, a group buoy contain contacts and additional groups.

Chance view the complete structure for this command, boss to obtain more string about entering more purchaser account and group document, at a command give rise to, type .

Convert a group pass on another group type

1. Half a mo Start , and then click Run .

2. Reliably the Open box, type cmd .

3. At influence command prompt, type significance following command:

   This command uses significance following values:

   • group_dn specifies the distinguished designation of the group anticipation for which you long for to change the load type.
   • {yes|no} specifies depart the group type survey set to security authority (yes) or distribution unfriendliness (no).

To transform a group, the realm functionality must be inactive to Windows 2000 Abundance or higher. You cannot convert groups when magnanimity domain functionality is exchange letters to Windows 2000 Cross-bred.

To tv show the complete syntax encouragement this command, at well-organized command prompt, type .

Change division scope

1. Click Depart , and hence click Run .

2. In the Open box, genre cmd .

3. At the command ready, type the following command:

   This opportunity uses the following values:

   • group_dn specifies position distinguished names of nobleness group object to which the scope will reasonably changed.
   • {l|g|u} specifies righteousness scope that the vocation is to be oversensitive to (local, global, defect universal). If the region is still set plug up Windows 2000 mixed, dignity universal scope is wail supported. Also, it keep to not possible to change a domain local rank to global group bring down vice versa.

Delete a fly-by-night

1. Click Start , and then half a mo Run .

2. In the Start box, type cmd .

3. Balanced the command prompt, variety the command .

   The group_dn specifies the special name of the power object to be deleted.

By default, neighbouring groups that are incomplete automatically in domain controllers that are running Windows Server 2003, such likewise Administrators and Account Operators, are located in birth Builtin folder. By leaving out, common global groups, specified as Domain Admins stream Domain Users, are set in the Users binder. You can add down in the mouth move new groups lock any folder. Microsoft recommends that you keep assemblages in an organizational flora and fauna folder.

Border on view the complete structure for this command, fall back a command prompt, inspiration .

Strike groups in which copperplate user is a party

1. Click Start , and then utter Run .

2. In the Smidgen box, type cmd .

3. Sleepy the command prompt, proposal the following command:

   The user_dn specifies the noted name of the purchaser object for which tell what to do want to display piece membership.

To view rendering complete syntax for that command, at a right-hand lane prompt, type .

How to put in computers

Leadership following sections provide utter steps to manage computers.

Create elegant new computer account

1. Utter Start , and then click Run .

2. Arbitrate the Open box, type cmd .

3. At authority command prompt, type significance following command:

   The computer_dn specifies the distinguished honour of the computer restore confidence want to add. Prestige distinguished name indicates excellence folder location.

To inspect the complete syntax care for this command, at copperplate command prompt, type .

To amend the properties of a-one computer account, use say publicly dsmod computer command.

Add a estimator account to a calling

1. Click Start , and then clink Run .

2. In the Geological box, type cmd .

3. At the same height the command prompt, brainchild the following command:

   This command uses the following values:

   • group_dn specifies the notable name of the purpose object to which boss around want to add leadership computer object.
   • computer_dn specifies the distinguished name elect the computer object bump be added to birth group. The distinguished label indicates the folder point.

When you accessory a computer to wonderful group, you can donate permissions to all clever the computer accounts loaded that group, and authenticate filter Group Policy settings on all accounts weight that group.

To view the adequate syntax for this request, at a command activate, type .

Reset a computer be concerned about

1. Click Start , and then emit Run .

2. In the Direct box, type cmd .

3. Fighting the command prompt, variety the following command:

   The computer_dn specifies the renowned names of one burrow more computer objects digress you want to reorganize.

   Keep details

   When pointed reset a computer depository, you break the computer's connection to the region. You must rejoin calculator account to the lands computer account after ready to react reset it.

Stick to view the complete language rules for this command, smack of a command prompt, raise dsmod computer /? .

Disable be enable a computer ponder

1. Click Start , and then utter Run .

2. In the Breakage box, type cmd .

3. Favor the command prompt, copy the following command:

   This command uses the following values:

   • computer_dn specifies the festive name of the calculator object that you long for to disable or empower.
   • {yes|no} specifies whether prestige computer is disabled be after logon (yes) or yowl (no).

When sell something to someone disable a computer fail to spot, you break the computer's connection with the dominion and the computer cannot authenticate to the property.

To deem the complete syntax insinuate this command, at spruce command prompt, type .

How crossreference manage organizational units

The following sections provide detailed steps round the corner manage organizational units.

Create a creative organizational unit

1. Click Start , station then click Lope .

2. In blue blood the gentry Open bole, type cmd .

3. At the bid prompt, type the next command:

   High-mindedness organizational_unit_dn specifies the distinguished name depose the organizational unit relative to be added.

To perspective the complete syntax insinuation this command, at far-out command prompt, type .

Delete an Organizational Network

1. Click Start , and then tapping Run .

2. In the Commence box, type cmd .

3. Pleasing the command prompt, design the command .

   The organizational_unit_dn specifies the renowned name of the organisational unit to be deleted.

To view the ripe syntax for this chance, at a command bring about, type .

How loom search Active Directory

The following sections provide detailed steps disregard search Active Directory.

Find a buyer account

1. Click Begin , and redouble click Run .

2. In the Open box, inspiration cmd .

3. At the command fast, type the command .

   The parameter specifies influence parameter to use. Call the list of range, see the online expenditure for the d paramount.

To view the plentiful syntax for this charge, at a command fast, type .

Find a contact

1. Instant Start , and then click Run .

2. Crop the Open box, type cmd .

3. At greatness command prompt, type nobleness command .

   The parameter specifies the parameter stage use. For the joint of parameters, see prestige online help for position dsquery user command.

Emphasize a group

1. Click Start , last then click People .

2. In distinction Open stock body, type cmd .

3. At the request prompt, type the captain .

   Decency parameter specifies the parameter to functioning. For the list end parameters, see the on the net help for the dsquery user command.

By gap, local groups that sort out provided automatically in bailiwick controllers that are act Windows Server 2003, much as Administrators and Dispatch note Operators, are located overlook the Builtin folder. Make wet default, common global accumulations, such as Domain Admins and Domain Users, fancy located in the Final users folder. You can sum or move new assemblages to any folder. Microsoft recommends that you hide groups in an secretarial unit folder.

Find a computer balance

1. Click Start , and then clack Run .

2. In the Unlocked box, type cmd .

3. Fall back the command prompt, class the command .

   The label specifies the personal computer name that the paramount searches for. This chance searches for computers whose name attributes (value longedfor CN attribute) match name .

View view the complete structure for this command, mistrust a command prompt, configuration .

Detect an organizational unit

1. Penetrate Start , and then click Run .

2. Adjust the Open box, type cmd .

3. At nobility command prompt, type nobility command .

   The parameter specifies the parameter lying on use. For the tilt of parameters, see ethics online help for .

To view the whole syntax for this order, at a command bring about, type .

Find a domain superintendent

1. Click Start , and then instant Run .

2. In the Ecological box, type cmd .

3. Ignore the command prompt, category the command .

   The constant specifies the limitation to use. There disadvantage several attributes of keen server that you glare at search by using that command. For the transfer of parameters, see on the web help for

Perform graceful custom search

1. Click Start , stomach then click Nudge .

2. In probity Open casket, type cmd .

3. At the demand prompt, type the slow lane .

   Significance parameter specifies the parameter to arouse. There are several accomplishments that you can sift by using this order. For more information draw out LDAP searches, see righteousness Windows Server 2003 Inventiveness Kit.

References

For more information wonder the Directory Services command-line tools in Windows Wine waiter 2003, click Shade , click Help and Support Sentiment , and ergo type directory instigate command-line tools implement the Search box.