Scripting Extended Attributes in Active Directory

Question

here's my scenario. We are looking at installing an application which will extend the AD schema by adding a single attribute to the user class. We then need to bulk upload a value into this field for 1000+ users.

Normally I do a dsquery user script, piping the result into dsmod user, but dsmod user has a limited number of attributes that you can modify. I need to be able to script this as data entry by hand is not viable.

Any suggestions?

Thanks

Answer 1

I had to do this exact same thing last week. I wanted to fill in the "extensionAttribute" field for multiple users and ended up having to move to Powershell with the quest cmdlets to do this.

This line should give you the bones of what you need to do:

Import-CSV C:\users.csv | ForEach-Object {
Set-QADUser -Identity $_.”username” -ObjectAttribute @{extensionAttribute1=$heading1}}

Where "username" and "heading1" are columns in your users.csv file. The quest cmdlets will let you alter any field in AD as far as I know.

Answer 2

Joe Richards' admod will do what you're looking for. Joe's tools are excellent and you'll do well to look at the rest of his site.