DSQUERY Dsadd Pg. 118; Windows Server 2008 Active Directory Configuration. 70-640.
DSADD
Dsadd
The DS tools consist of the following commands DSQUERY - search for active directory objects matching criteria DSGET - retrieves selected attributes from active directory objects DSMOD - modify attributes for one or more active directory objects DSADD - create active directory objects DSMOVE - move active directory objects DSRM - removes/deletes active directory objects
DSQUERY
The following command-line tools can be used to manage Active Directory CSVDE Import and export Active Directory data using comma-separated format. Dsadd Add users, groups, computers, contacts, and organizational units to Active Directory. Dsmod Modify an existing object of a specific type in the directory. The types of objects that can be modified are: users, groups, computers, servers, contacts, and organizational units. Dsrm Remove objects of the specified type from Active Directory. Dsmove Rename an object without moving it in the directory tree, or move an object from its current location in the directory to a new location within a single domain controller. (For cross-domain moves, use the Movetree command-line tool.) Dsquery Query and find a list of objects in the directory using specified search criteria. Use in a generic mode to query for any type of object or in a specialized mode to query for for selected object types. The specific types of objects that can be queried through this command are: computers, contacts, subnets, groups, organizational units, sites, servers and users. Dsget Display selected attributes of specific object types in Active Directory. Attributes of the following object types can be viewed: computers, contacts, subnets, groups, organizational units, servers, sites, and users. LDIFDE Ceate, modify, and delete directory objects. This tool can also be used to extend the schema, export Active Directory user and group information to other applications or services, and populate Active Directory with data from other directory services. Ntdsutil General purpose Active Directory management tool. Use Ntdsutil to perform database maintenance of Active Directory, to manage single master operations, and remove metadata left behind by domain controllers that were removed from the network without being properly uninstalled.
DSADD can add user,computers and groups all
The following command-line tools can be used to manage Active Directory CSVDE Import and export Active Directory data using comma-separated format. Dsadd Add users, groups, computers, contacts, and organizational units to Active Directory. Dsmod Modify an existing object of a specific type in the directory. The types of objects that can be modified are: users, groups, computers, servers, contacts, and organizational units. Dsrm Remove objects of the specified type from Active Directory. Dsmove Rename an object without moving it in the directory tree, or move an object from its current location in the directory to a new location within a single domain controller. (For cross-domain moves, use the Movetree command-line tool.) Dsquery Query and find a list of objects in the directory using specified search criteria. Use in a generic mode to query for any type of object or in a specialized mode to query for for selected object types. The specific types of objects that can be queried through this command are: computers, contacts, subnets, groups, organizational units, sites, servers and users. Dsget Display selected attributes of specific object types in Active Directory. Attributes of the following object types can be viewed: computers, contacts, subnets, groups, organizational units, servers, sites, and users. LDIFDE Ceate, modify, and delete directory objects. This tool can also be used to extend the schema, export Active Directory user and group information to other applications or services, and populate Active Directory with data from other directory services. Ntdsutil General purpose Active Directory management tool. Use Ntdsutil to perform database maintenance of Active Directory, to manage single master operations, and remove metadata left behind by domain controllers that were removed from the network without being properly uninstalled.
TO ADD OR CREATE Dsadd is a command-line tool that is built into Windows Server 2008. It is available if you have the Active Directory Domain Services (AD DS) server role installed. To use dsadd, you must run the dsadd command from an elevated command prompt. To open an elevated command prompt, click Start, right-click Command Prompt, and then click Run as administrator. Dsadd computer:Adds a single computer to the directory Dsadd contact:Adds a single contact to the directory Dsadd group:Adds a single group to the directory. Dsadd ou:Adds a single organizational unit to the directory. Dsadd user:Adds a single user to the directory Dsadd quota:Adds a quota specification to a directory partition. TO MODIFY Dsmod is a command-line tool that is built into Windows Server 2008. It is available if you have the Active Directory Domain Services (AD DS) server role installed. To use dsmod, you must run the dsmod command from an elevated command prompt. To open an elevated command prompt, click Start, right-click Command Prompt, and then click Run as administrator. Dsmod computer:Modifies attributes of one or more existing computers in the directory. Dsmod contact:Modifies attributes of one or more existing contacts in the directory. Dsmod group:Modifies attributes of one or more existing groups in the directory. Dsmod ou:Modifies attributes of one or more existing organizational units (OUs) in the directory. Dsmod server:Modifies properties of a domain controller. Dsmod user:Modifies attributes of one or more existing users in the directory. Dsmod quota:Modifies attributes of one or more existing quota specifications in the directory. Dsmod partition:Modifies attributes of one or more existing partitions in the directory.
user
The Active Directory Schema defines the types of user,printer objects to be created in the domain
LDAP
Domain