ADmodcmd

ADmodcmd.exe

Active Directory Bulk Modify Tool (Command Line Version) There is also a GUI for this tool called admodify.exe

Syntax

      admodcmd [-dn BaseDN] [-p pagesize] [-s] [-server servername]

     [-f LDAPFilter] [modification]

Key

   -dn BaseDN      Base DN to begin the LDAP query.

   modification    Modification to perform:

                   Terminal Server Attributes | Exchange Related Attributes

                   Mailbox Rights | User Account Settings | Custom Attributes                  

   -p pagesize     LDAP Page size to use for query.

   -s              Perform a subtree search 

                   (Default = one level search)

   -server servername

                   The server to make the changes to.

                   by default, changes are made locally if on a DC.

                   If on a member, DNS is used to find a DC.

   -f LDAPFilter   A Valid LDAP filter to use when enumerating objects

                   The default filter is (objectClass=user).   

Changes made with ADModcmd can be undone, as long as the xml log file that logged the changes still exists. These log files are typically located in the same folder as the admodify executable.

Syntax:

      admodcmd [-dn BaseDN] [-p pagesize] [-s] [-server servername]

         -undo logfilename -server servername]

Key: 

   logfilename     The log file that contains the changes to be undone.

   servername      The DC to write the changes to.

                   by default, changes are made locally if on a DC.

                   If on a member, DNS is used to find a DC.

For information on users that were skipped during an undo process, refer to the undo.log file.