Home / server / Questions / 396148
In Process
newbie
Asked: 2012-06-07 07:53:40 +0800 CST

trying to copy security groups to a user using dsmod group utility in AD

  • 772

I am trying to create a batch file that asks to enter source samid and destination samid. Then using dsquery and dsget find out what security groups source samid is assigned to and assign destination samid to those security groups using dsmod.

Everything works except the dsmod group command. It doesn't do anything and batch file stops. If I literally put "CN=marketing,OU=test group,DC=abc,DC=com" instead of %%g and "CN=test1,OU=test group,DC=abc,DC=com" instead of %dusercn%, it works fine.

any help would be awesome!!!

thank you.

echo off
echo %date% at %time% 
set /p susername=enter source user name:
set /P dusername=enter destination user name:
echo %susername%
echo %dusername%
set dusercn=
%dusercn%=dsquery user -samid %dusername%
echo %dusercn%
for /f "tokens=*" %%g in ('dsquery user -samid %susername% ^|dsget user -memberof') do (
  dsmod group %%g -addmbr %dusercn%
)
echo completed
pause
active-directory batch dsquery

1 Answers

  1. I am posting answer that worked for me. Hopefully it helps other newbies like me.

    echo off
echo %date% at %time%

set /p susername=enter source user name:
set /P dusername=enter destination user name:

rem echo+ is used for new line. echo+
echo entered source user name: %susername%
echo entered destination user name: %dusername%
echo+

set dusercn=0
set lines=0

for /f "tokens=*" %%g in ('dsquery user -samid %susername% ^|dsget user -memberof') do (
    echo %%g
    dsquery user -samid %dusername% | dsmod group %%g -addmbr -c
    set /a lines=lines+1
)

echo+
echo+
echo **************
echo number of lines processed %lines%
echo script completed
echo **************
pause
    • 2