Dsmod is a command-line tool that is built into Windows Server 2008. It is available if you have the Active Directory Domain Services (AD DS) server role installed.
To use dsmod, you must run the dsmod command from an elevated command prompt. To open an elevated command prompt, click Start, right-click Command Prompt, and then click Run as administrator.
Pretty much all the attributes can be modified (Name, display name, tel number etc), run the command with /? for a full list
Commas must be escaped with the backslash \ character (other than separators in distinguished names)
Backslashes used in distinguished names must be escaped with a backslash
(for example, "CN=Sales\\ Latin America,OU=Distribution Lists,DC=mydomain,DC=com").
You can pipe results from DSQUERY into DSMOD in order to modify an object. For example, To find all users in the Marketing OU (organizational unit) and add them to the Sales group:
Following is all on one line:
DSQUERY user -startnode "ou=Marketing,dc=mydomain,dc=com" | DSMOD group "cn=Sales,ou=Marketing,dc=mydomain,dc=com" -addmbr
If any value contains spaces, use quotation marks:
The token $username$ (case insensitive) may be used to place the SAM account name. Entering * as a password will cause DSMOD to prompt for the new password.
For any DS command you can enter multiple values separated by spaces, .e.g., to modify several user accounts at once just supply a list of the distinguished names separated with spaces.
dwirch has posted a total of 171 articles.
You can find more information from dwirch by visiting .
No comments on this post yet!
Do you have a thought relating to this post? You can post your comment here. If you have an unrelated question, you can use the Q&A section to ask it.
Or you can drop a note to the administrators if you're not sure where you should post.