Posted On 2009-12-29 by dwirch
Keywords: Command Reference
Tags: Active Directory Windows Commandline Windows Server 2008 Windows Server 2003 Windows
Views: 4730

Dsmod is a command-line tool that is built into Windows Server 2008. It is available if you have the Active Directory Domain Services (AD DS) server role installed.

To use dsmod, you must run the dsmod command from an elevated command prompt. To open an elevated command prompt, click Start, right-click Command Prompt, and then click Run as administrator.


DSMOD computer
DSMOD contact
DSMOD group;
DSMOD server
DSMOD user
DSMOD quota
DSMOD partition


DN=Distinguished Name(s)
OU=Organisational Unit

Pretty much all the attributes can be modified (Name, display name, tel number etc), run the command with /? for a full list

Commas must be escaped with the backslash \ character (other than separators in distinguished names)

"CN=Company\, Inc.,CN=Users,DC=mydomain,DC=com"

Backslashes used in distinguished names must be escaped with a backslash

(for example, "CN=Sales\\ Latin America,OU=Distribution Lists,DC=mydomain,DC=com").

You can pipe results from DSQUERY into DSMOD in order to modify an object. For example, To find all users in the Marketing OU (organizational unit) and add them to the Sales group:
Following is all on one line:

DSQUERY user -startnode "ou=Marketing,dc=mydomain,dc=com" | DSMOD group "cn=Sales,ou=Marketing,dc=mydomain,dc=com" -addmbr

If any value contains spaces, use quotation marks:

"CN=John Smith,CN=Users,DC=mydomain,DC=com"

Special Tokens
The token $username$ (case insensitive) may be used to place the SAM account name. Entering * as a password will cause DSMOD to prompt for the new password.

For any DS command you can enter multiple values separated by spaces, .e.g., to modify several user accounts at once just supply a list of the distinguished names separated with spaces.

About the Author

has posted a total of 190 articles.

Comments On This Post

No comments on this post yet!

Do you have a thought relating to this post? You can post your comment here. If you have an unrelated question, you can use the Q&A section to ask it.

Or you can drop a note to the administrators if you're not sure where you should post.

Your IP address is:

Before you can post, you need to prove you are human. If you log in, this test goes away.

Code Links