The biggest problem you'll face will likely be
automated leveling of accounts across resources such as Exchange and
databases. The rest of it's really easy to script. Lifecycle
management is better handled with third-party tools or MIIS since they
handle the removal of accounts from systems as well. This too can be
scripted, but it's not as clean IMHO for large scale usage. A DB is needed
for a better, audited solution.
MIIS is a good piece
of technology that can help with this; I'd investigate it to see what it can do
for your situation. Two other options that come to
mind:
Find something already written from a third party or change
your licensing agreement with Microsoft and get the MPS system http://www.microsoft.com/serviceproviders/mps/default.asp and
write a custom app ;) Why it's only available to the service providers is
beyond me, but that's the current licensing agreement according to the web
page.
My random thoughts anyway.
If you need some sample scripts search the archives or ping
off-line.
Al
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nathan Henderson
Sent: Tuesday, July 27, 2004 12:50 PM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Batch Account Creation and Removal
Anyone have any
great tips for batch creation and removal of accounts? We want to be able
to batch create accounts for our students based off either a database or even
text file and create their user account, e-mail (in a separate message store),
and add them to the correct OUs and groups.
Is there anything
native that could accomplish this or is the best option a third-party
app?
-Nate
_________________
Nathan Henderson
Network Engineer
Northwest University
ph: 425.889.5358
fax:
425.827.2807
