邮件服务器-邮件系统-邮件技术论坛(BBS)

标题: 急!!如何批量更改AD用户属性! [打印本页]

作者: danny1013 时间: 2006-3-6 12:19
标题: 急!!如何批量更改AD用户属性!
各位大侠,如何可以一次批理更改AD用户的属性,如我想把所有用户的属性里的"用户不能更改密码"勾打上,又或者初始所有用户的密码??

作者: danny1013 时间: 2006-3-6 18:41
标题: re:大家帮帮忙吧，不是要我一个个去改吧?
大家帮帮忙吧，不是要我一个个去改吧?

作者: atong999888 时间: 2006-3-7 08:14
标题: re:在AD用户和计算机管理器里，选多个帐号...
在AD用户和计算机管理器里，选多个帐号，按右键的属性，弹出"多重对象属性"，点"帐户"，里面就有许多帐户选项.

作者: feitianxiang 时间: 2006-3-7 11:43
标题: re:可以使用脚本的我也是遇到同样的问题...
可以使用脚本的 
我也是遇到同样的问题的,使用脚本很方便的.很快,一分钟都不到就全部改好了.

作者: asyangzl 时间: 2006-3-7 13:14
标题: re:win2k没有此功能
win2k没有此功能

作者: asyangzl 时间: 2006-3-7 13:15
标题: re:win2k没有此功能
win2k没有此功能

作者: hzhu 时间: 2006-3-8 03:44
标题: re:FYI: http://www.micr...
FYI: <a target=_blank href=http://www.microsoft.com/technet/scriptcenter/scripts/ad/users/pwds/uspwvb04.mspx>http://www.microsoft.com/technet/scriptcenter/scripts/ad/users/pwds/uspwvb04.mspx</a>

作者: danny1013 时间: 2006-3-15 17:01
标题: re:我用的就是win2k server+ex...
我用的就是win2k server+exchange2000呀,脚本怎么写? 
楼上的地址也进不去

作者: kakafaint 时间: 2006-3-15 17:46
标题: re:你进不去就给你贴出来Enable U...
你进不去就给你贴出来 
Enable Users to Change Their Passwords 
 
Description 
 
Disables the User Cannot Change Password option, allowing the user to change their password. 
 
Supported Platforms 
 
Windows Server 2003 Yes 
Windows XP Yes 
Windows 2000 Yes 
Windows NT 4.0 Yes 
Windows 98 Yes 
 
Script Code 
 
Const ADS_ACETYPE_ACCESS_DENIED_OBJECT = &H6 
Const CHANGE_PASSWORD_GUID = _ "{ab721a53-1e2f-11d0-9819-00aa0040529b}" 
Set objUser = GetObject _ ("LDAP://cn=myerken,ou=management,dc=fabrikam,dc=com") 
Set objSD = objUser.Get("nTSecurityDescriptor") 
Set objDACL = objSD.DiscretionaryAcl 
arrTrustees = Array("nt authority\self", "everyone") 
For Each strTrustee In arrTrustees For Each ace In objDACL If(LCase(ace.Trustee) = strTrustee) Then If((ace.AceType = ADS_ACETYPE_ACCESS_DENIED_OBJECT) And _ (LCase(ace.ObjectType) = CHANGE_PASSWORD_GUID)) Then objDACL.RemoveAce ace End If End If Next 
Next 
objUser.Put "nTSecurityDescriptor", objSD 
objUser.SetInfo 
 
For online peer support, join the microsoft.public.windows.server.scripting community on the msnews.microsoft.com news server. To provide feedback or report bugs in sample scripts or the Scripting Guide, please contact Microsoft TechNet. 
 
Disclaimer 
 
The sample scripts are not supported under any Microsoft standard support program or service. The sample scripts are provided AS IS without warranty of any kind. Microsoft further disclaims all implied warranties including, without limitation, any implied warranties of merchantability or of fitness for a particular purpose. The entire risk arising out of the use or performance of the sample scripts and documentation remains with you. In no event shall Microsoft, its authors, or anyone else involved in the creation, production, or delivery of the scripts be liable for any damages whatsoever (including, without limitation, damages for loss of business profits, business interruption, loss of business information, or other pecuniary loss) arising out of the use of or inability to use the sample scripts or documentation, even if Microsoft has been advised of the possibility of such damages.

作者: danny1013 时间: 2006-3-22 17:43
标题: re:真是高手呀!谢谢!
真是高手呀!谢谢!

作者: feitianxiang 时间: 2006-3-22 18:37
标题: re:我发了一个帖子，在精华里有。。我用过...
我发了一个帖子，在精华里有。。 
我用过了，没问题的。。我也是有同样的需求才写的脚本。 
你可以去精华帖子里看看的。

作者: hawks12 时间: 2006-5-18 18:18
标题: re:当用户的"User must chang...
当用户的"User must change password at next logon"开关被Enable了后，需要Disable它。 
在这里推荐一个Resource Kits里面的一个工具 cusrmgr，首先看看它的帮助： 
 
CUsrMgr Ver 1.0 Jan98 by G.Zanzen (c) MCS Central Europe 
Sets a random password to a user 
usage: -u UserName [-m \\MachineName] \\ default LocalMachine Resetting Password Function -p Set to a random password -P xxx Sets password to xxx User Functions -r xxx Renames user to xxx -d xxx deletes user xxx Group Functions -rlg xxx yyy Renames local group xxx to yyy -rgg xxx yyy Renames global group xxx to yyy -alg xxx Add user (-u UserName) to local group xxx -agg xxx Add user (-u UserName) to global group xxx -dlg xxx deletes user (-u UserName) from local group xxx -dgg xxx deletes user (-u UserName) from global group xxx SetProperties Functions -c xxx sets Comment to xxx -f xxx sets Full Name to xxx -U xxx sets UserProfile to xxx -n xxx sets LogonScript to xxx -h xxx sets HomeDir to xxx 
 -H x sets HomeDirDrive to x 
 +s xxxx sets property xxxx -s xxxx resets property xxxx where xxxx can be any of the following properties: MustChangePassword CanNotChangePassword PasswordNeverExpires AccountDisabled AccountLockout RASUser 
 
 
我们激活用户的语法是： 
 
D:\copypwd>cusrmgr -u adam -s MustChangePassword 
 
操作完成...

作者: 钉子 时间: 2006-5-18 22:58
标题: re:这个不错．加精了
这个不错．加精了

欢迎光临邮件服务器-邮件系统-邮件技术论坛(BBS) (http://bbs.5dmail.net/)