Domain User Management Utilities For Windows
Last Updated: 28 Dec 2004
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
*** PLEASE NOTE: Link(s), If Provided, May Be Wrapped ***
Here are some command-line and GUI tools to replace and/or
supplement "User Manager for Domains", especially if you
have to create/modify many accounts at one time:
GUI
• ACCTINFO.DLL ........... Resource Kit -- Server 2003
• User Manager ........... http://www.microsoft.com/downloads/details.aspx?FamilyID=c0011ab8-3178-4701-a791-eafba0f42de2&DisplayLang=en
• AdmWin ................. http://www.admwin.com/
• Domain Assistant ....... http://www.softwareshelf.com/products/domain.asp
• DameWare Utils ......... http://www.dameware.com/
• Hyena .................. http://www.systemtools.com/hyena/
• Network ServaNT ........ http://www.engagent.com/ns/ns_default.asp
• Northern Utilities ..... http://www.northern.net/siteUtilities/
• Special Op Suite ....... http://www.specialoperationssuite.com/
• UltraAdmin ............. http://www.ultraadmin.com/
• User Commander ......... http://www.systemtools.com/uc/
• User Manager Pro ....... http://www.lanicu.com/products/nt_frame.htm
CONSOLE COMMANDS
• LDIFDE ................. Native Command -- Win2K (Active Directory)
• NET USER ............... Native Command
• ADDUSERS ............... Resource Kit
• CUSRMGR ................ Resource Kit -- Win2K
• DSADD .................. Native Command
• DSMOD .................. Native Command
• DSQUERY ................ Native Command
• ADDtoGRP ............... http://www.gbordier.com/gbtools/index.htm
• AINTX Utilities ........ http://www.dwam.net/docs/aintx/
• COPYPWD ................ http://www.systemtools.com/free.htm#copypwd
• DUMPSEC ................ http://www.somarsoft.com/
• EXPORTER ............... http://www.systemtools.com/free_frame.htm
• NETUSERS ............... http://www.systemtools.com/free_frame.htm
• NETVIEW ................ http://www.systemtools.com/free_frame.htm
• NTSEC UTILS ............ http://www.pedestalsoftware.com/
MIGRATION UTILITIES
• ADDUSERS ............... Resource Kit
• ADMT v1 ................ http://www.microsoft.com/windows2000/downloads/tools/admt/
• ADMT v2 ................ http://support.microsoft.com/?KBID=326480
• COPYPWD ................ http://www.systemtools.com/free.htm#copypwd
• User Commander ......... http://www.systemtools.com/uc/
ACCOUNT LOCKOUT AND MANAGEMENT TOOLS
• http://www.microsoft.com/technet/prodtechnol/windowsserver2003/maintain/operate/BPACTLCK.asp
• http://www.microsoft.com/downloads/details.aspx?FamilyID=7AF2E69C-91F3-4E63-8629-B999ADDE0B9E&displaylang=en
CREATING/MODIFYING USERS
Use the following methods to create, delete or modify
USERS and GROUPS in Windows NT/2000/XP:
SAMPLE INFO
Domain Name ............ MYDOMAIN
User's Workstation ..... NYCUSER01
User's Name ............ Joe User
User's Acct Name ....... JoeU
User's Domain Account .. MYDOMAIN\JoeU
• GUI (NT4)
START -> RUN -> USRMGR
USER -> SELECT DOMAIN
Enter "NYCUSER01"
Expand "Local Users and Groups"
Expand "Groups"
Double-Click on "Users" in the Right-Hand Pane
Select "Add"
Type "MYDOMAIN\JOEU" into the appropriate edit box
• GUI (Windows 2000/XP)
Right Click on "My Computer"
Select "Manage"
Right Click on "Computer Management (Local)"
Select "Connect To Another Computer..."
Enter "NYCUSER01"
Expand "Local Users and Groups"
Expand "Groups"
Double-Click on "Users" in the Right-Hand Pane
Select "Add"
Type "MYDOMAIN\JOEU" into the appropriate edit box
Press "Check Names"
• CLI (Ye Ol' Command Line Interface)
Logon to the console of NYCUSER01
START -> RUN -> CMD
NET LOCALGROUP "Users" MYDOMAIN\JoeU /ADD
WHITEPAPERS & TECH DOCUMENTS
• http://www.microsoft.com/windowsxp/home/using/productdoc/en/net_user.asp
• http://www.winnetmag.com/WindowsSecurity/Article/ArticleID/37438/37438.html
• http://support.microsoft.com/?KBID=199878
• http://support.microsoft.com/?KBID=251394
• http://support.microsoft.com/?KBID=137978
• http://support.microsoft.com/?KBID=283791
• http://msdn.microsoft.com/library/periodic/period98/ewn0498.htm
• http://www.microsoft.com/windows2000/techinfo/administration/redir-ldifde.asp
• http://builder.com.com/article.jhtml?id=r00220020605low01.htm
• http://www.jsiinc.com/SUBJ/tip4700/rh4795.htm
• http://www.microsoft.com/technet/prodtechnol/windowsserver2003/proddocs/standard/lsm_overview_01.asp
• http://www.microsoft.com/windowsxp/home/using/productdoc/en/dsmod.asp
PERSONAL NOTES
• XP/2003 have new native commands that allow you to
query, add or modify various account information locally
or in Active Directory:
DSQUERY
DSADD
DSMOD
• The NET USER command supports a /RANDOM parameter which
will generate a random complex password. If you use the
paramater as /RANDOM:xx it will generate a password of
the length represented by XX.
• AdmWin (particularly SetupBatcher) is an excellent
utility for configuring large groups of users.
ADDUSERS is also widely used, but AdmWin is far more
comprehensive.
• For new group memberships to take effect, the affected
user will need to logoff and log back on after then
change is made.
• ADMT (AD Migration Tool) Version 2, which comes with
Windows Server 2003, but will work with NT4 and 2000,
addresses many of the failings of the original version
of the tool, including migrating passwords.
• There is an updated version of User Manager (USRMGR)
for managing Windows NT domains from XP/2003 systems.
