How to copy user accounts from one forest to another

[trinity]

Hi all,

We are going to setup multiple testing environments dev/test/uat, each
environment will run on its own VLan and isolated from the PROD
environment. Each test environments will have its own AD forest with
different domain name. However, my customer would like to copy all the
user accounts from the PROD to all the test environments. They also
want to know if there is a script to reset all the users password to
one generic password in the test environment.

Can someon tell me if there is a tool that allow me to copy the user
accounts from the PROD to each test environment seamlessly?

Is the ADMT is the only tool available? What about a script to change
password for multiple accounts?

We are running Active Directory 2000 on Windows 2000 servers.

Any help on this topic would be greatly appreciated. Thank you all.

Cuong

 

[Tomasz K.]

see LDIF.EXE (posibly in support tools).


Best regards

Thomas

 

[Cary Shultz [A.D. MVP]]

Thomas,

You are correct in suggesting that the original poster use ldifde. I have
done this several times. The wonderful little utility is available out of
the box. There is no need to install the Support Tools to get this (
although installing the Support Tools is a wonderful thing to do...I always
recommend this ).

Trinity, if you need help using ldifde to do this I will gladly offer you
assistance.

--
Cary W. Shultz
Roanoke, VA 24012
Microsoft Active Directory MVP

http://www.activedirectory-win2000.com
http://www.grouppolicy-win2000.com

 

[Ace Fekay [MVP]]

In

Thomas,

You are correct in suggesting that the original poster use ldifde. I
have done this several times. The wonderful little utility is
available out of the box. There is no need to install the Support
Tools to get this ( although installing the Support Tools is a
wonderful thing to do...I always recommend this ).

Trinity, if you need help using ldifde to do this I will gladly offer
you assistance.

Hi Cary,

I think since the poster wants to preserve passwords, ADMT v2 will be the
better bet, but as you guys mentioned, it's not the only tool.




Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

If this post is viewed at a non-Microsoft community website, and you were to
respond to it through that community's website, I may not see your reply
unless that website posts replies back to the original Microsoft forum.
Therefore, please direct all replies ONLY to the Microsoft public newsgroup
this thread originated in so all can benefit or ensure the web community
posts it back to the original forum.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft Windows MVP - Windows Server - Directory Services
Microsot Certified Trainer
Infinite Diversities in Infinite Combinations.
=================================

 

[Herb Martin]

"Ace Fekay [MVP]"

In

Hi Cary,

I think since the poster wants to preserve passwords, ADMT v2 will be the
better bet, but as you guys mentioned, it's not the only tool.

The original poster did NOT ask to maintain passwords but
rather the reset them all to a common password.

"s a script to reset all the users password to
one generic password"

He also mentioned ADMT himself and was seeking another
tool or other choices.

 

[Cary Shultz [A.D. MVP]]

I should have mentioned that there would then be a script necessary that
could then set all of the user account objects' password to a common one (
like p@ssW0rd or something like that ). Additionally, the poster could also
include the "user must change password at next logon' if he/she liked.

But, Ace, thanks for pointing that out. I should have included this in my
initial response. If the poster wants to maintain the passwords then ADMT
v2 would definitely be a really good choice.

--
Cary W. Shultz
Roanoke, VA 24012
Microsoft Active Directory MVP

http://www.activedirectory-win2000.com
http://www.grouppolicy-win2000.com

 

[Ace Fekay [MVP]]

In

The original poster did NOT ask to maintain passwords but
rather the reset them all to a common password.

"s a script to reset all the users password to
one generic password"

He also mentioned ADMT himself and was seeking another
tool or other choices.

Herb,

Yes, I KNOW the original poster mentioned ADMT and wanting a script to
CHANGE passwords, NOT reset them. Apparently YOU didn't copy and paste his
sentence and went by memory when you quoted the original poster.

The poster said. "Is the ADMT is the only tool available? What about a
script to change
password for multiple accounts?"

Maybe I should have said, "The original poster DID mention ADMT..."

Remember, we are here to help. If the poster was already aware of a tool for
a specific task and asking if something else was available but this tool is
the best answer for the job, then so be it. This is why I posted what I said
about ADMT, and specifically, ADMT v2.

Ace

 

[Ace Fekay [MVP]]

In

I should have mentioned that there would then be a script necessary
that could then set all of the user account objects' password to a
common one ( like p@ssW0rd or something like that ). Additionally,
the poster could also include the "user must change password at next
logon' if he/she liked.
But, Ace, thanks for pointing that out. I should have included this
in my initial response. If the poster wants to maintain the
passwords then ADMT v2 would definitely be a really good choice.

Just trying to help out.



Ace

 

[Cary Shultz [A.D. MVP]]

As you always do!!!!!

Hope that all is well with you, Ace!


--
Cary W. Shultz
Roanoke, VA 24012
Microsoft Active Directory MVP

http://www.activedirectory-win2000.com
http://www.grouppolicy-win2000.com



"Ace Fekay [MVP]"

 

[Ace Fekay [MVP]]

In

As you always do!!!!!

Hope that all is well with you, Ace!

Busy at this end. I hope you're doing well! Still in VA with that gig you
moved to for last year?

Ace

 

[Cary Shultz [A.D. MVP]]

Glad to hear that, Ace.

And I have moved on. But, yes, still in Virginia. Really like it here.
Much different from Los Angeles!

--
Cary W. Shultz
Roanoke, VA 24012
Microsoft Active Directory MVP

http://www.activedirectory-win2000.com
http://www.grouppolicy-win2000.com



"Ace Fekay [MVP]"

 

[Ace Fekay [MVP]]

In

Glad to hear that, Ace.

And I have moved on. But, yes, still in Virginia. Really like it
here. Much different from Los Angeles!

I bet is more laid back then LA with all the hustle and bustle out there!

 

[Cary Shultz [A.D. MVP]]

Ace,

As they say here. "I know that's right!".

I often tell my buddies in LA that the people here would have to speed up
just to get to 'slow'. But that is just great. Time to raise a family and
this is a really nice place.

Yak with you later!

--
Cary W. Shultz
Roanoke, VA 24012
Microsoft Active Directory MVP

http://www.activedirectory-win2000.com
http://www.grouppolicy-win2000.com



"Ace Fekay [MVP]"

 

[Ace Fekay [MVP]]

In

Ace,

As they say here. "I know that's right!".

I often tell my buddies in LA that the people here would have to
speed up just to get to 'slow'. But that is just great. Time to
raise a family and this is a really nice place.

Yak with you later!

You got it. Enjoy the laid back life...