How to rename massively security groups on AD? [SOLVED with SOLUTION]


i need rename massively security groups on ou.

is there way faster? tools or something?

the security groups 5000 entries.


dpm 2010 latest roll-up (kb2615782) | dell server r710 (windows 2008 r2 sp1) ram: 24gb pf: 36-60gb | dell tl4000 (4 drives) | dell tl2000 (2 drives) | d2t backup no disk pool (electric & disk costly) | , still struggling , monitoring... battle continues... life never happy ever after.. :(


nobody here of giving right answer, turn out endless browsing.
found own solution , below own answer own record , best i'm not microsoft certified person.

my account domain admin account, i'm not global/universal domain admin.
mean can change security groups base on ou.
use power shell command line install on computer , use tool quest software, believe part of dell.

i download this: http://www.quest.com/powershell/activeroles-server.aspx

i put sample 2 condition on ou security group need rename.

001testabcde 001testabcde - local

need rename to:

001newtestabcde 001newtestabcde - local

to make sure use adsi edit microsoft admin pack installed on computer. locate attributes like, below complete path attributes.

cn=001testabcde,ou=security,ou=sin,ou=sg,dc=starbestforall,dc=com cn=001testabcde - local,ou=security,ou=sin,ou=sg,dc=starbestforall,dc=com

to rename below command, there 2 line need execute. because there 2 security groups need rename.

get-qadgroup -name “001testabcde” -searchroot “ou=security,ou=sin,ou=sg,dc=starbestforall,dc=com” -sizelimit 0 | rename-qadobject -newname {$_.name.replace(“001testabcde”,”001newtestabcde”)} | %{set-qadgroup $_ -samaccountname ($_.samaccountname.replace(“001testabcde”,”001newtestabcde”))}
get-qadgroup -name “001testabcde - local” -searchroot “ou=security,ou=sin,ou=sg,dc=starbestforall,dc=com” -sizelimit 0 | rename-qadobject -newname {$_.name.replace(“001testabcde - local”,”001newtestabcde - local”)} | %{set-qadgroup $_ -samaccountname ($_.samaccountname.replace(“001testabcde - local”,”001newtestabcde - local”))}


so moving forward rename more 2 security groups:

1. export list out security groups on ou, done using active directory users , computers microsoft admin pack.

2. export list base on text format (notepad), in point make double copy of export list. first original export list , second other copy result want too. use ctrl+h clear/remove unwanted space on text.

3. use microsoft excel me determined between static command power shell , export list ad container.


4. once done on excel, copy empty notepad. on notepad make sure there no empty space/tab. use ctrl+h again remove unwanted space, final done.

5. notepad copy , paste activeroles management shell 1 download , install.

although, solution not straight forward or simple, give me 100% confident it.




Windows Server  >  Directory Services



Comments

Popular posts from this blog

server manager error: ADAM.events.xml could not be enumerated.

Cannot access Anywhere Access using domain name?

WMI Failure: Unable to update Local Resource Group