Import bulk users ad

Question

Guys,
I would like to get some more info about the import users through a csv in Ad.
First, i did read some fine articles(like this: http://www.computerperformance.co.uk/Logon/Logon_CSVDE_Bulk.htm) but most of the time i get more questions after reading those and i still cant do the trick.
question 1: i would like to find out what attributes i can use in the csv and what their purpose is
question 2: how should i read the DN attribute, it starts with the name of the server or the domainname?
question 3: what if i want to create users in a nested ou(OU: users: OU: management), how should i do that
thanks for the replies and help

Answer 1

This article documents that attributes that correspond to fields in ADUC:
http://social.technet.microsoft.com/wiki/contents/articles/6822.active-directory-attributes-in-the-aduc-gui-tool.aspx
You can assign values to most of the string and numeric syntax attributes. You may need to ask about specific attributes. For example, some ar DN syntax (distinguished name), so the value must be full distinguished name.
In general distinguished names do not include the name of a server (domain controller). That is one advantage of Active Directory, you don't need to specify a domain controller (dc), they are all alike and you can communicate with the first one to respond.
A typical distinguished name could be similar to:
cn=Jim Smith,ou=Sales,ou=West,dc=MyDomain,dc=com
This object has a common name (the value of the cn attribute) of "Jim Smith". This object resides in an organizational unit (OU) called "Sales", which in turn is nested in the OU called "West", which is in the domain MyDomain.com.
The distinguished name (DN) is a series of components separated by commas, and each component is preceded by a moniker ("cn", "ou", or "dc" for common name, organizational unit, and domain component).
When you create a user object in AD you should specify the parent OU/container where the object will reside. This should handle nested OU's fine, as long as you specify the full distinguished name of the parent OU.
Does this help?
Edit: I should add that when you create a user object in AD, you specify the common name (the value of the cn attribute) and the distinguished name of the parent OU/container. This specifies the distinguished name of the new user object. You don't directly
assign a value to the DN of the user. You should also assign a value for the sAMAccountName attribute (the "pre-Windows 2000 logon name of the user). The value of the cn attribute must be unique in the parent OU/container, while the sAMAccountName must
be unique in the domain. Other requirements for creating new user objects are documented here:
http://social.technet.microsoft.com/wiki/contents/articles/11216.active-directory-requirements-for-creating-objects.aspx
Richard Mueller - MVP Directory Services