MCITP 70-640: Active Directory Command Line Tools

This videos looks at 5 Active Directory command lines tools that can be used in scripts to speed up administration in your domain. Using these command line tools, the administrator can add, modify, delete and retrieve information about any object in Active Directory.

This video will look at all the Command line tools shown above. Even thought each command line tool performs a different function, you will start to see that the parameters used in different tools are simpler.

DSAdd 0:47
DSGet 04:34
DSMod 05:32
DSRM 06:31
DSQuery 07:43

Distinguished Name
A lot of the commands ask for a parameter called distinguished name. The distinguished name uniquely identifies an object in Active Directory. The same way a full filename and path would identify a file on a hard disk. The Distinguished Name identifies the Active Directory object using the following syntax.
CN Common Name
OU Organizational Unit Name
DC Domain Component

An example of a distinguished name is as follows
cn=Simth,cn=users,dc=ITFreeTraining,dc=local
DSAdd
The DSAdd command allows objects to be created in Active Directory. The parameter supported by the command are computer, contact, group, OU, user and quota.

Examples:
DSAdd user "cn=Simth,cn=users,dc=ITFreeTraining,dc=local" --fn John --ln Simth --pwd P@ssw0rd --mustchpwd yes
DSAdd computer "cn=pc1,cn=computers,dc=ITFreeTraining,dc=local"
DSAdd group "cn=GSales,ou=Users,ou=New York,dc=ITFreeTraining,dc=local" --scope g

DSGet
This command gets information about an object in Active Directory. The command requires the type of object to be retrieve to be given. This can be computer, contact, group, OU, server, user, subnet, site, quote and partition. Following this is the Distinguished Name of the object. After this you need to indicate what information you want to retrieve, for example to retrieve the description for the object you would add -desc
Example:
DSGet user "cn=John Doe,ou=Users,ou=New York,dc=ITFreeTraining,dc=local" --fn --ln -email

DSMod
DSMos allows individual attributes of Active Directory objects to be modified. This command support the following parameters computer, contact, group, OU, server, user, quote and partition.
Example:
dsmod user "cn=Simth,cn=users,dc=ITFreeTraining,dc=local" -pwd P@ssw0rd2 -mustchpwd

DSRM
This command deletes and object in Active Directory. Unlike the other commands, the type of object does not need to be given in the command line. The command support additional parameters like --NoPrompt will remove the prompt asking you to procedure before deleting the object.
Example:
dsrm "OU=Testing,dc=ITFreeTraining,dc=local" --subtree -c

DSQuery
This command queries the Active Directory database for objects. It supports the following parameters computer, contact, group, ou, site, server, user, quote, partition and LDAP queries.
Example:
dsquery ou DC=ITFreeTraining,DC=Local

See http://YouTube.com/ITFreeTraining or http://itfreetraining.com for our always free training videos. This is only one video from the many free courses available on YouTube.

References
"MCTS 70-640 Configuring Windows Server 2008 Active Directory" pg 88-89
DSAdd http://technet.microsoft.com/en-us/li...
DSGet http://technet.microsoft.com/en-us/li...
DSMod http://technet.microsoft.com/en-us/li...
DSRM http://technet.microsoft.com/en-us/li...
DSQuery http://technet.microsoft.com/en-us/li...

1. dsadd user, dsadd command, dsadd group, dsadd quota, dsadd computer, dsadd ou, saddleback college, saddam hussein, dsadd user to group, saddleback church, saddleback leather, dsadd sidhistory, sadness, saddle, dsaads, saddle shoes, asddas, saddleback, sadducees, saddest movies, dsgetdcname, dsget group, dsgetdcname returned information for, dsget group members, dsget command, dsgetdc, dsgetsite, dsgetdcname failed, dsgetdcname function returns 1355, dsget computer, dsgetdcname failed 0x54b, dsget synology, dsget powershell, dsgetjobinfo, dsget.exe, dsget user memberof, dsget parameters, dsget ou, dsget windows 10, dsget user samid, dsmod user, dsmodt, dsmod group, dsmod computer, ds mods, dsmod disable user, dsmod.exe, dsmod powershell, dsmod ou, dsmod remove user from group, dsmod group remove member, dcmodify, dsmod change password, dsmod unlock account, dsmodt dark souls, dsmod group addmbr example, dsmod reset password, dsmod commands, ds model, dsmod group examples, dsrm national bank, dsrm valero, dsrm natl bank, dsrm nt bk, dsrm/valero, dsrm account, dsrm password reset, dsrm national bank credit card, dsrm nt bank, dsrm national bank address, dsrm restore, dsrm username, dsrm.exe, dsm 5, dsrm national, dharma, dsrm user, dsrm credit card, dsrm 200, dsrm.us, dsquery user, dsquery group, dsquery examples, dsquery command, dsquery computer, dsquery windows 10, dsquery group members, dsquery powershell, dsquery download, dsquery user attributes, dsquery fsmo, dsquery is not recognized, dsquery ou, dsquery server, dsquery last logon, dsquery computer inactive, dsquery username, dsquery different domain, dsquery windows 7, dsquery dsget, active directory users and computers, active directory windows 10, active directory domain services, active directory administrative center, active directory federation services, active directory tutorial, active directory tools, active directory ou, active directory ports, active directory recycle bin, active directory download, active directory certificate services, active directory password policy, active directory certification, active directory forest, active directory lightweight directory services, active directory powershell module, active directory ldap, active directory for dummies, active directory management tools, \u003d -570, 70-640 exam, 70-640 certification, 70-640 pdf, 70-640 study guide pdf, 70-640 exam questions pdf, 70-640 pdf ebook, mcitp systems administrator, mcitp vs mcse, mcitp-ea, mcitp enterprise administrator, mcitp server administrator, mcitp 70-640, mcitp salary, mcitp certification course, mcitp microsoft, mcitp practice test, mcitp jobs, mcitp windows 10, mcitp meaning, mcitp family support network, mcitp logo, mcitp replacement, mcitp certification cost, mcitp mcps, mcitp 2008, mcitp mcse mcts, mcts real time, mcts tracker, mctsib, mcts m card, mctssa, mcts route 15, mcts trip planner, mcts bus, mcts route 76, mcts route 27, mcts green line, mcts route 14, mcts route 30, mcts route 19, mcts gold line, mcts route 67, mcts route 23, mcts app, mcts next, mcts 80, itfreetraining youtube, itfreetraining active directory, itfreetraining adfs, itfreetraining dns, itfreetraining 70-410, itfreetraining windows server 2016, itfreetraining windows server 2012, itfreetraining vmware, itfreetraining 70-640, itfreetraining powershell, itfreetraining windows 7, itfreetraining windows 10, itfreetraining hyper v, itfreetraining group policy, itfreetraining groups, itfreetraining dfs, itfreetraining sccm, itfreetraining certificate, itfreetraining linux, itfreetraining 70-411

MCITP 70-640: Active Directory Command Line Tools
39,607 views views	followers
126 Likes	126 Dislikes
Education	Upload TimePublished on 17 Sep 2012