AD Bulk Admin Tool Files

http://www.usefulshare.com/adbulkadmin

For the detail please refer to the manual.

ADBulkAdmin is a free tool for AD administrators to manage Active Directory users in bulk. You can use it to check a large number of users¡¯ attributes, get users from OU, get members from Group, get all disabled users, get all locked out users, get users password expiration days, create a large number of AD users with specific attributes, unlock a large number of  users, reset a large number of  users¡¯ passwords, enable or disable a large number of users, remove a large number of users, set a large number of users¡¯ properties, check a large number of  groups, add a large number of  users to group or remove a large number of users from group, test users if using easy password, get user lock status on all the domain controllers.

Prerequisite:

1. .net Framework 4.0 or higher.
2. Office 2007 or higher. Run ADBulkAdmin.exe in 32 or 64 bit Office folder according to your office version. With Office Excel, you can create a large number of users or set properties for users. If you are using Office 2016 and you can¡¯t operate Excel, please download and install Microsoft Access Database Engine 2010 Redistributable from http://www.microsoft.com/en-US/download/details.aspx?id=13255 
3. Files of the tool: ADBulkAdmin.exe, ADBulkAdmin.exe.config, users.xlsx, ADBATData.accdb. (You must not change the name of these files!)
4. User with necessary AD permissions, and run this tool as administrator.

Description:

Unzip the compressed file, make sure the tool ADBulkAdmin.exe, users.xlsx and ADBulkAdmin.exe.config are in the same folder. You can save ADBATData.accdb in the same folder or in a shared path with others. Run ADBulkAdmin.exe as administrator according to your Office version 32bit or 64bit. If your computer has already joined to domain or you run the tool on a domain controller, it can connect to a domain controller automatically, and then you can use it directly. If your computer has not joined to domain yet, you can connect to a domain controller by clicking ¡°Settings¡±. You can specify the logpath, dcpath, select the attributes you want to check user, create new user or set user.

1. Check User: You can input samAccountName, userPrincipalName, mail or displayName to search user. If you select All, it will search all of these attributes and display all results match the value. You also can search via selecting one attribute. Each row with one user, and then you can get the users¡¯ common attributes by clicking Run. I think you must know the common attributes of an AD user.

2. Get Users: Get users from OU, get members from Group, get all disabled users, get all locked out users, get password expiration days users.

3. New User: First select the attributes in Settings->NewUserAttr, then click Save to save the selected attributes to newuser sheet in users.xlsx. If you want to create new user to your specified OU path, you need to check OU in Settings-NewUserAttr and input the ou path like ¡°ou=deptou,dc=domain,dc=com¡± to newuser sheet in users.xlsx, if not you must create an OU named ¡°tempuserou¡± to store new users.Please input the users¡¯ information into Sheet ¡°newuser¡± in users.xlsx, if you don¡¯t want to set the attributes, just leave the data cell blank. You must input the users¡¯ samAccountNames, and then you can choose to input the other attribute values as your necessary. If you don¡¯t set the Password value, the tool will use ¡°abcD.1234¡å as the default password, so you must think if it matches your password policy and you can customize a new password to meet your password policy by inputting the Password data.

For one important thing, if your computer doesn¡¯t join to domain, or you don¡¯t want the user¡¯s UPN to use the default domain name, you must select UNP option in Settings->NewUserAttr and input the UPN value in the Sheet newuser. Then the user¡¯s User Principle Name will be nilejiang@nile.com.

For proxyAddresses attribute, if you have selected to input this value in Setting->NewUserAttr, you have to split the multiple values with ¡®,¡¯ , like:

SMTP:niletest@abc.com,smtp:niletest@nile.com

Or

SMTP:niletest@abc.com

If you are using Exchange on-premises, this value should be generated automatically after you enable user¡¯s mailbox, no necessary to input.

For the new user, its Name is the same to the Display Name, you can decide if user must change password at next logon by clicking ¡°Settings->NewUserAttr->Force Password Change at Next Logon¡±.

For Manager, you need to input the manager¡¯s samAccountName like nilejiang.

For HomeDrive, you just need to input the value like Z:

4. Unlock User: You can unlock users which are locked, just input the users¡¯ samaccountnames in the textbox and click Run, it will unlock all the users. You can check if the users are locked by Check User feature, if the user is locked, its status will be locked and its color will be red.

5. Reset Password: You can reset a large number of users¡¯ passwords to the same password by inputting the ¡°Custom Pwd¡±, if not, the password will be reset to ¡°abcD.1234¡å, and you can choose if user must change password at next logon.

6. Disable/Enable User: You can disable or enable a large number of users by Xable User feature, just input the user¡¯s samAccountNames and choose ¡°Disable User¡± or ¡°Enable User¡±.

7. Remove User: You can remove users from AD by Remove User feature after you input the users¡¯ samAccountNames.

8. Set Properties: Please select the attributes in Settings->SetUserAttr first, then click Save to save the selected attributes to setprop sheet in users.xlsx. You can input the attribute values of the user as necessary, if you don¡¯t want to set the attributes, just leave the data cell blank, if you want to clear the attribute value, just input the word ¡°clear¡± to the cell. The clear function is not used for ¡°NewPassword¡±, ¡°AccountExpires¡± and ¡°NewOU¡±.

If you choose the attribute proxyAddresses, you have to split the multiple address values with ¡®,¡¯ , like:

SMTP:niletest@abc.com,smtp:niletest@nile.com

Or

SMTP:niletest@abc.com

If you are using Exchange on-premises, this value should be generated automatically after you enable user¡¯s mailbox, no necessary to input.

9. Check Group: You can check the group common attributes with Check Group feature, just input the group¡¯s samAccountName.

10. Add to Group: You can add a large number of users to a group by this feature. First input the users¡¯ samAccountNames, then input the group¡¯s samAccountName on the right side. You will get the result after clicking the button Run.

11. Remove from Group: It is the same to Add to Group. You can use it to remove a large number of users from a group.

12. Log View: Every operation you did with ADBulkAdmin will generate logs into the database file ADBATData.accdb. You can use Log View to check all the operations you did, and you can search logs by changing the search conditions.

13. Test Password: This is used for administrators to see if users are using too easy passwords, this feature is locked by default, if you need it please send email to me, maybe you need to pay a little.

14. Lockout&LastLogon: This is used to search user lockout status on all domain controllers, get user locked out time and so on.

15. Export to CSV: You can export any data in the datagridview to a CSV file.

We know that there are many attributes for an AD user, I just use the common attributes. If you want to customize some attributes according to your environment, please feel free to contact me. If you think this tool is helpful for you, please donate a little by clicking Donate. That would be a big encouragement.