3 Administering User Accounts

Question 0

Explain the different methods for import/export automation.

Answer 0

CSVDE and LDIFDE can import and export objects. Both commands are in the export mode by default and require the -i parameter to import. Only LDIFDE is capable of modifying existing objects or removing objects.
DSAdd can specify a user’s password, and you can import a user’s password with LDIFDE, but not with CSVDE. If you create users within a domain with a policy requiring passwords, the accounts will be disabled until you reset their passwords and enable them.

Question 1

What options are copied from template account?

Answer 1

General tab - none
Address tab - all except street address
Account tab - Logon hours, logon workstations, account options and account expiration
Profile tab - Profile path, logon script, home drive and home folder path
Organization tab - Department, company and manager
Member Of tab - Group membership and primary group

Question 2

What properties are available for multiediting?

Answer 2

General - Description, Office, Telephone Number, Fax, Web Page, E-mail
Account - UPN Suffix, Logon Hours, Computer Restrictions (logon workstations), all Account Options, Account Expires
Address - Street, P.O. Box, City, State/Province, ZIP/Postal Code, Country/Region
Profile - Profile Path, Logon Script, and Home Folder
Organization - Title, Department, Company, Manager

Question 3

What is specific difference between DS command and GUI?

Answer 3

The username token for the DS commands is $username$, not %username%.