AdMod will not populate membership that way currently unfortunately. You could populate a list of groups with a single member or export membership for a group to a CSV file, change the DN on the group and then use AdMod to import. It is something that I think about occasionally on how to get it in there without really whacking the parameter structure too much.
Shouldn't that be dsget instead of dsquery? Interesting on the no output if the group is 1586 members... If you have K3 that is just after the value ranging cut off but I would expect the ds* tools would do ranging... I have never really played with them that much to find out, the command line parameter system annoys me, I much prefer adfind. :) Anyway, you should be able to get a quoted list of members of a group which is what I believe dsmod wants for that command with something like adfind -b whatever_base -f whatever_filter member -qlist Like so G:\>adfind -default -f name="domain admins" member -qlist "CN=user\, test,OU=Users,OU=TestOU,DC=test,DC=loc" "CN=$joe,OU=Users,OU=My,DC=test,DC=loc" "CN=Administrator,CN=Users,DC=test,DC=loc" And if it doesn't return a list that exceeds 1500 members, let me know because it absolutely should. joe -- O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ziots, Edward Sent: Thursday, January 11, 2007 2:47 PM To: [email protected] Subject: [ActiveDir] Adfind and ADMOD question Joe got an idea on how to use Adfind and Admod to do this one. I have a group with an _ in it, that I cant seem to dump the members from the group with the dsget group and dsmod group commands. The syntax of the command I am using is such, and I have tried it with other groups with _ and it works fine. (Note this group has 1,586 users) other groups I have queried have a lot less. Dsquery group "CN=Group_Name,OU=Groups,OU=Mydomain,DC=ChildDomain,DC=RootDomain,DC=ORG " -members | dsmod "CN=Group2,OU=Groups,OU=MYDomain,DC=ChildDomain,DC=RootDomain,DC=ORG" -addmbr It seems I get no input on the first part of the query, Dsquery group "CN=Group_Name,OU=Groups,OU=Mydomain,DC=ChildDomain,DC=RootDomain,DC=ORG " -members But I can do an easy showmbrs Childdomain\Group_Name and dump all the members. Any ideas, totally stuck, looks like an issue with the number of users in the group being too large. Z Edward E. Ziots Network Engineer Lifespan Organization MCSE,MCSA,MCP+I,M.E,CCA,Network+, Security + email:[EMAIL PROTECTED] cell:401-639-3505 List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ma/default.aspx List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ma/default.aspx
