Posted On 2009-12-29 by dwirch
Keywords: Command Reference
Tags: Active Directory Windows Commandline Windows Server 2008 Windows Server 2003 Windows
Views: 4640

Dsmod is a command-line tool that is built into Windows Server 2008. It is available if you have the Active Directory Domain Services (AD DS) server role installed.

To use dsmod, you must run the dsmod command from an elevated command prompt. To open an elevated command prompt, click Start, right-click Command Prompt, and then click Run as administrator.


DSMOD computer
DSMOD contact
DSMOD group;
DSMOD server
DSMOD user
DSMOD quota
DSMOD partition


DN=Distinguished Name(s)
OU=Organisational Unit

Pretty much all the attributes can be modified (Name, display name, tel number etc), run the command with /? for a full list

Commas must be escaped with the backslash \ character (other than separators in distinguished names)

"CN=Company\, Inc.,CN=Users,DC=mydomain,DC=com"

Backslashes used in distinguished names must be escaped with a backslash

(for example, "CN=Sales\\ Latin America,OU=Distribution Lists,DC=mydomain,DC=com").

You can pipe results from DSQUERY into DSMOD in order to modify an object. For example, To find all users in the Marketing OU (organizational unit) and add them to the Sales group:
Following is all on one line:

DSQUERY user -startnode "ou=Marketing,dc=mydomain,dc=com" | DSMOD group "cn=Sales,ou=Marketing,dc=mydomain,dc=com" -addmbr

If any value contains spaces, use quotation marks:

"CN=John Smith,CN=Users,DC=mydomain,DC=com"

Special Tokens
The token $username$ (case insensitive) may be used to place the SAM account name. Entering * as a password will cause DSMOD to prompt for the new password.

For any DS command you can enter multiple values separated by spaces, .e.g., to modify several user accounts at once just supply a list of the distinguished names separated with spaces.

About the Author

dwirch has posted a total of 179 articles.

You can find more information from dwirch by visiting

Comments On This Post

No comments on this post yet!

Do you have a thought relating to this post? You can post your comment here. If you have an unrelated question, you can use the Q&A section to ask it.

Or you can drop a note to the administrators if you're not sure where you should post.

Your IP address is:

Before you can post, you need to prove you are human. If you log in, this test goes away.

Recent Forum Posts

Advanced search added
dwirch posted on September 23, 2017 at about 13:44 in Site News

Job Spammer: Gaurav Mehta - AgreeYa Solutions
dwirch posted on September 22, 2017 at about 10:35 in Spammers

Job Spammer: Prutha Siri - Javelin Systems
dwirch posted on September 10, 2017 at about 6:15 in Spammers

New security implemented
dwirch posted on September 7, 2017 at about 7:16 in Site News

Malicious IP Checker Companion Tool
dwirch posted on August 12, 2017 at about 20:24 in Site News

Job Spammer: Steve Adams
dwirch posted on August 8, 2017 at about 7:44 in Spammers