Active Directory Bulk Modify Tool (Command Line Version) There is also a GUI for this tool called admodify.exe
Syntax admodcmd [-dn BaseDN] [-p pagesize] [-s] [-server servername] [-f LDAPFilter] [modification] Key -dn BaseDN Base DN to begin the LDAP query. modification Modification to perform: Terminal Server Attributes | Exchange Related Attributes Mailbox Rights | User Account Settings | Custom Attributes -p pagesize LDAP Page size to use for query. -s Perform a subtree search (Default = one level search) -server servername The server to make the changes to. by default, changes are made locally if on a DC. If on a member, DNS is used to find a DC. -f LDAPFilter A Valid LDAP filter to use when enumerating objects The default filter is (objectClass=user).
Changes made with ADModcmd can be undone, as long as the xml log file that logged the changes still exists. These log files are typically located in the same folder as the admodify executable.
Syntax: admodcmd [-dn BaseDN] [-p pagesize] [-s] [-server servername] -undo logfilename -server servername] Key: logfilename The log file that contains the changes to be undone.
servername The DC to write the changes to. by default, changes are made locally if on a DC. If on a member, DNS is used to find a DC.
For information on users that were skipped during an undo process, refer to the undo.log file.
“A free people claim their rights as derived from the laws of nature, and not as the gift of their magistrate” - Thomas Jefferson
DSQuery - Search for items in active directory (user group computer)
DSMod - Modify items in active directory (user group computer)