|
Home > Archive > Server 2003 > November 2003 > remote administration of server2003
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
remote administration of server2003
|
|
| shadoe 2003-11-11, 6:14 am |
| I have a server2003 setup along with a Winxp machine. How can I manage the users in the domain from the xp client machine ?
(eg. Unlocking accounts, changing passwords, etc,....) | |
| jeff_j_black 2003-11-11, 8:29 am |
| You can install ADMINPAK.MSI from the Windows Server 2003 \I386 folder. The other tools you can install include Resource Kit Tools (download) and Support Tools off the Windows Server 2003 CD. Make sure to install GPMC and the remote desktop plug in, as well. | |
| Tarzanboy 2003-11-11, 2:19 pm |
| You could install the Adminpak.msi from WS2k3 and use the command line to change the password, if logged in with sufficient privs in the same domain and same logon server as the user, otherwise there would need to be some additional flags:
dsmod user userDN -pwd N3w!paSs -mustchpwd yes
Cheers,
TB | |
| Tarzanboy 2003-11-11, 3:19 pm |
| After a little accidental testing, apparently adding on "-disabled no" will unlock the account.
For instance, to unlock and change the password on an account called Test Account in the OU, Test OU, in the Nothing.here domain:
dsmod user "CN=Test Account,OU=Test OU,DC=Nothing,DC=Here" -pwd N3w!paSs -mustchpwd yes -disabled no
Cheers,
TB | |
| jeff_j_black 2003-11-11, 6:20 pm |
| TB is getting his DS commands down! | |
| shadoe 2003-11-12, 6:57 am |
| Thanks , I will try it | |
| Clangashe 2003-11-16, 6:08 am |
| Very interesting ad informative thread.
Thanks
Is there something similar in W2k. | |
| jeff_j_black 2003-11-16, 9:06 am |
| The DS Commands are new for 2003 , but I'm sure they work on 2000. | |
| B4yaman3 2003-11-16, 11:12 am |
| Some of them do Jeff but not all. | |
|
|
|
|
|
|
| Tarzanboy 2003-11-23, 10:36 pm |
| This is kind of stupid, but something I ran across nonetheless. You can add group membership via DSADD, but you cannot through DSMOD. So basicly, if you forget to add it when you do a DSADD, you get to do it through a whole different method...
Good:
dsadd user "CN=Bob,OU=User Accounts,DC=Nothing,DC=Here" -pwd paS$w3rd -canchpwd yes -disabled no -memberof "CN=Domain Admins,CN=Users,DC=Nothing,DC=
Here"
Bad:
dsmod user "CN=Bob,OU=User Accounts,DC=Nothing,DC=Here" -pwd paS$w3rd -canchpwd yes -disabled no -memberof "CN=Domain Admins,CN=Users,DC=Nothing,DC=
Here"
Cheers,
TB | |
| Tarzanboy 2003-11-30, 9:58 pm |
| Another item of note is that if you use remdirusr or remdircmp in a WS03 environment, dsadd will still require the full DN of the account and will place it in the location that the DN states, regardless of redirection.
Cheers,
TB |
|
|
|
|