Mark,
Actually for csvde you need the DN and objectClass only -
DN,objectClass
"CN=username,CN=Users,DC=company,DC=com",user
It will override your complexity setting and set it without a password, you can authenticate using a blank password on it (I tried it), but the disabled and change at next logon flags will be set.
The blank password seems to be one of the main reasons people do this with a script, it's pretty easy to write a script to parse a csvde-created csv file.
Rich
Rich Milburn
MCSE, CUSE, CACP
-----Original Message-----
From: Creamer, Mark [mailto:[EMAIL PROTECTED]]
Sent: Friday, December 12, 2003 8:55 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] User export
Thanks Tony. Does the account get created with a blank password if I don't create one myself? If so,
what would happen if the domain policy is set to not allow blank passwords?
<mc>
-----Original Message-----
From: Tony Murray [mailto:[EMAIL PROTECTED]]
Sent: Friday, December 12, 2003 9:43 AM
To: [EMAIL PROTECTED]
Subject: Re: [ActiveDir] User export
There is one mandatory attribute that you need (sAMAccountName), but it is generally useful to also
have the following:
givenName
sn
displayName
userPrincipalName
userAccountControl
If might also want to set the password, which can be quite tricky with LDIF. There's a KB article on
this:
3/9/91.ASP&NoWebContent=1
If you're going to script part of it anyway, you may as well do the whole thing (i.e. export and
import) without LDIFDE. Just a thought.
The main advantage of LDIFDE over CSVDE is the ability to modify existing objects. CSVDE only allows
you to create.
Tony
---------- Original Message ----------------------------------
Wrom: AUTFJMVRESKPNKMBIPBARHDMNNSKVFVWRKJVZ
Reply-To: [EMAIL PROTECTED]
Date: Fri, 12 Dec 2003 09:25:19 -0500
I have a request to export the user objects from our production environment and import them into our
test environment.
If I use LDIF for this, are there required attributes I must include in the export in order to make
the import into the empty test domain successful? I'd like to create a procedure with a script so next
time one of the admins can do it. Finally, are there any advantages to using ldifde vs csvde? Thanks!
Mark Creamer
Systems Engineer
Cintas Corporation
Honesty and Integrity in Everything We Do
List info : http://www.activedir.org/mail_list.htm
List FAQ : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/mail_list.htm
List FAQ : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
-------APPLEBEE'S INTERNATIONAL, INC. CONFIDENTIALITY NOTICE------- PRIVILEGED / CONFIDENTIAL INFORMATION may be contained in this message or any attachments. This information is strictly confidential and may be subject to attorney-client privilege. This message is intended only for the use of the named addressee. If you are not the intended recipient of this message, unauthorized forwarding, printing, copying, distribution, or using such information is strictly prohibited and may be unlawful. If you have received this in error, you should kindly notify the sender by reply e-mail and immediately destroy this message. Unauthorized interception of this e-mail is a violation of federal criminal law. Applebee's International, Inc. reserves the right to monitor and review the content of all messages sent to and from this e-mail address. Messages sent to or from this e-mail address may be stored on the Applebee's International, Inc. e-mail system.
