How to rename massively security groups on AD? [SOLVED with SOLUTION]
i need rename massively security groups on ou.
is there way faster? tools or something?
the security groups 5000 entries.
dpm 2010 latest roll-up (kb2615782) | dell server r710 (windows 2008 r2 sp1) ram: 24gb pf: 36-60gb | dell tl4000 (4 drives) | dell tl2000 (2 drives) | d2t backup no disk pool (electric & disk costly) | , still struggling , monitoring... battle continues... life never happy ever after.. :(
nobody here of giving right answer, turn out endless browsing.
found own solution , below own answer own record , best i'm not microsoft certified person.
my account domain admin account, i'm not global/universal domain admin.
mean can change security groups base on ou.
use power shell command line install on computer , use tool quest software, believe part of dell.
i download this: http://www.quest.com/powershell/activeroles-server.aspx
i put sample 2 condition on ou security group need rename.
001testabcde 001testabcde - local
need rename to:
001newtestabcde 001newtestabcde - local
to make sure use adsi edit microsoft admin pack installed on computer. locate attributes like, below complete path attributes.
cn=001testabcde,ou=security,ou=sin,ou=sg,dc=starbestforall,dc=com cn=001testabcde - local,ou=security,ou=sin,ou=sg,dc=starbestforall,dc=com
to rename below command, there 2 line need execute. because there 2 security groups need rename.
get-qadgroup -name “001testabcde” -searchroot “ou=security,ou=sin,ou=sg,dc=starbestforall,dc=com” -sizelimit 0 | rename-qadobject -newname {$_.name.replace(“001testabcde”,”001newtestabcde”)} | %{set-qadgroup $_ -samaccountname ($_.samaccountname.replace(“001testabcde”,”001newtestabcde”))}
get-qadgroup -name “001testabcde - local” -searchroot “ou=security,ou=sin,ou=sg,dc=starbestforall,dc=com” -sizelimit 0 | rename-qadobject -newname {$_.name.replace(“001testabcde - local”,”001newtestabcde - local”)} | %{set-qadgroup $_ -samaccountname ($_.samaccountname.replace(“001testabcde - local”,”001newtestabcde - local”))}
so moving forward rename more 2 security groups:
1. export list out security groups on ou, done using active directory users , computers microsoft admin pack.
2. export list base on text format (notepad), in point make double copy of export list. first original export list , second other copy result want too. use ctrl+h clear/remove unwanted space on text.
3. use microsoft excel me determined between static command power shell , export list ad container.
4. once done on excel, copy empty notepad. on notepad make sure there no empty space/tab. use ctrl+h again remove unwanted space, final done.
5. notepad copy , paste activeroles management shell 1 download , install.
although, solution not straight forward or simple, give me 100% confident it.
Windows Server > Directory Services
Comments
Post a Comment