Update / Modify existing users attribute in AD

Dear all,
I have several 100 users across a few OUs and I need to mass update the mailNickname attribute for them.
To explain further there are a lot of users which have their mailNickname attribute set so FirstnameSurame and I want to change it to FirstIntial.Surname. Can I do this with a csv file?

This script from the repository could help get you where you need to be:
Update User attributes from CSV
What verison OS are your DCs running?
This could help if you need VB
Update User Attributes from CSV File (v1.1)
And last maybe a freeware like below could help
Bulk AD Users
If it answered your question, remember to “Mark as Answer”.
If you found this post helpful, please “Vote as Helpful”.
Postings are provided “AS IS” with no warranties, and confers no rights.
Active Directory: Ultimate Reading Collection

Similar Messages

Modify bulk users attribute

Hi All,
I'm not really expert on vbscript and been trying to search from internet about the problem that i have but just couldn;t find any solution. We are currently making a review on our AD and found users having wrong attributes.
Now, we want this to be modified in bulk. Hoping this forum could help me out.
Here's my request. I have a list of users in text file (logonname or SAMAccount). And I want to modify their country code to AU.
The script should be like this.
cscript <script name> /File:<location of the txt file> /attribute:<target attribute> /Value: <value of the attribute>
So in short, my tasks should be like this.
cscript <script name> /File:"c:\users.txt" /attribute:countryCode /Value:"AU"

These are the first few results for a search of 'how to use admodify.net':
http://exchangeis.com/exchange-tutorial/using-admodify-a-real-world-example-2/
http://www.msexchange.org/articles-tutorials/exchange-server-2003/tools/ADModify-Change-Exchange-Specific-AD-User-Attributes.html
http://www.activedir.org/Articles/tabid/54/articleType/ArticleView/articleId/45/Default.aspx
I recommend continuing to search if these results do not push you in the right direction. If none of this even makes sense, I'd also suggest the consultant route.
Don't retire TechNet! -
(Don't give up yet - 13,085+ strong and growing)

Update to existing User Tip

This is an update to Date and Time in the Menu Bar (10.3, 10.4) to account for the fact that it is also applicable in 10.5.
In addition it corrects the appearance of 4 horizontal rules in the table which appear because the Jive software is broken if you give it valid HTML. I cannot correct the double spacing in the table, which again is Jive misbehaving with stuff between <pre> and </pre> tags. If you know a way around this, while preserving the single horizontal spacing to keep the table aligned, please modify it accordingly.
Tip follows:
Put the Date in the Menu Bar (10.3, 10.4, 10.5)
To put the date, as well as the time, into the Menu Bar in 10.3 or higher is not the same as in 10.2 and earlier (see the corresponding FAQ for 10.2), and to complicate things further, the format strings used are different. I have run this on an English language version for several years with no apparent problems – others have reported that it works on systems localised to French and German.
This change can only be accomplished using the Terminal application, which you will find in /Applications/Utilities. If you are not comfortable using commands at a command line prompt, do not attempt this change.
Note You should not attempt to type these commands directly, rather use copy and paste to get the commands into a Textedit document (set to Plain Text from the Format menu). Be warned that sometimes copying and pasting from a browser window puts an additional space at the end of a line, so if a command wraps, check that the line has exactly one space where it wraps, and no end-of-line character there. Extra space happens to matter in the "defaults" command because the line wrap tends to occur inside a quoted format string.
The commands below will give, for example, "Thu 2 Dec, 02:15 pm" in the menu bar. If you're in the USA, you might prefer to have the month precede the day, so you would reverse the order of the 'd' and 'MMM' format specifiers. Note that if you put the day-of-week format specifier (EEE) in the string, you will get two days listed if the "Show the day of the week" box is checked in System Preferences > Date & Time > Clock, so un-check that.
Edit the format to your choice (see below for the different codes), then when you are happy with it, paste it into Terminal, and press the return key. If it works, Unix won't tell you – it is very concise. So, one command at a time, and press return after each.
First, take a backup of the existing preference file. Only do this the first time you attempt this – the idea is to keep a copy of the original Apple file. The first command gets to the right directory:
cd ~/Library/Preferences
Then copy the existing file, preserving modification dates, etc:
cp -p .GlobalPreferences.plist .GlobalPreferences.plist.orig
Now set our desired format ALL ONE LINE, please:
defaults write -g AppleICUTimeFormatStrings -dict-add 2 "d MMM, hh':'mm':'ss' 'a"
It is important now to immediately reset the Menu Bar, or our changes will be undone!
killall SystemUIServer
This will cause your Right Hand Menu Bar to disappear and then re-appear in the new format. (This often resets the "Show the day of the week" and "Show seconds" options in "Date & Time", so you may wish to change these). If all looks OK, it is a good idea to save a copy (but you need to have executed the 'cd' command above first):
cp .GlobalPreferences.plist .GlobalPreferences.plist.bak
My experience with this indicates that your changes can be lost if you go into System Preferences > International > Formats and click either of the "Customise" buttons for Date and Time (even if you then "Cancel"). If this happens, it is easy to restore things from this copy:
cd ~/Library/Preferences
cp .GlobalPreferences.plist.bak .GlobalPreferences.plist
killall SystemUIServer
To go back to the Apple default settings, use the same command sequence but replace ".bak" by ".orig".
Formats for Date/Time
<pre> Symbol Meaning Presentation Example
G era designator (Text) AD
y year (Number) 1996
M month in year (Text & Number) July & 07
d day in month (Number) 10
h hour in am/pm (1~12) (Number) 12
H hour in day (0~23) (Number) 0
m minute in hour (Number) 30
s second in minute (Number) 55
S millisecond (Number) 978
E day of week (Text) Tuesday
e day of week/local (1~7) (Number) 2
D day of year (Number) 189
F day of week in month (Number) 2 (2nd Wed in July)
w week in year (Number) 27
W week in month (Number) 2
a am/pm marker (Text) PM
k hour in day (1~24) (Number) 24
K hour in am/pm (0~11) (Number) 0
z time zone (Text) Pacific Standard Time
' escape for text
'' single quote '</pre>
The count of pattern letters determines the format, as follows:
(Text): 4 or more, use full form, (Number): the minimum number of digits. Shorter numbers are zero-padded to this amount (e.g. if "m" produces "6", "mm" produces "06"). Year is handled specially; that is, if the count of 'y' is 2, the Year will be truncated to 2 digits. (e.g., if "yyyy" produces "1997", "yy" produces "97".)
(Text & Number): 3 or over, use text, otherwise use number. (e.g., "M" produces "1", "MM" produces "01", "MMM" produces "Jan", and "MMMM" produces "January".)
This table, with additional notes, can be found at the International Components for Unicode (ICU) User Guide website. Reprinted by permission from International Business Machines Corporation copyright (2000 - 2004).

Put the Date in the Menu Bar (10.3, 10.4, 10.5)
To put the date, as well as the time, into the Menu Bar in 10.3 or higher is not the same as in 10.2 and earlier (see the corresponding FAQ for 10.2), and to complicate things further, the format strings used are different. I have run this on an English language version for several years with no apparent problems – others have reported that it works on systems localised to French and German.
This change can only be accomplished using the Terminal application, which you will find in /Applications/Utilities. If you are not comfortable using commands at a command line prompt, do not attempt this change.
Note You should not attempt to type these commands directly, rather use copy and paste to get the commands into a Textedit document (set to Plain Text from the Format menu). Be warned that sometimes copying and pasting from a browser window puts an additional space at the end of a line, so if a command wraps, check that the line has exactly one space where it wraps, and no end-of-line character there. Extra space happens to matter in the "defaults" command because the line wrap tends to occur inside a quoted format string.
The commands below will give, for example, "Thu 2 Dec, 02:15 pm" in the menu bar. If you're in the USA, you might prefer to have the month precede the day, so you would reverse the order of the 'd' and 'MMM' format specifiers. Note that if you put the day-of-week format specifier (EEE) in the string, you will get two days listed if the "Show the day of the week" box is checked in System Preferences > Date & Time > Clock, so un-check that.
Edit the format to your choice (see below for the different codes), then when you are happy with it, paste it into Terminal, and press the return key. If it works, Unix won't tell you – it is very concise. So, one command at a time, and press return after each.
First, take a backup of the existing preference file. Only do this the first time you attempt this – the idea is to keep a copy of the original Apple file. The first command gets to the right directory:
cd ~/Library/Preferences
Then copy the existing file, preserving modification dates, etc:
cp -p .GlobalPreferences.plist .GlobalPreferences.plist.orig
Now set our desired format ALL ONE LINE, please:
defaults write -g AppleICUTimeFormatStrings -dict-add 2 "d MMM, hh':'mm':'ss' 'a"
It is important now to immediately reset the Menu Bar, or our changes will be undone!
killall SystemUIServer
This will cause your Right Hand Menu Bar to disappear and then re-appear in the new format. (This often resets the "Show the day of the week" and "Show seconds" options in "Date & Time", so you may wish to change these). If all looks OK, it is a good idea to save a copy (but you need to have executed the 'cd' command above first):
cp .GlobalPreferences.plist .GlobalPreferences.plist.bak
My experience with this indicates that your changes can be lost if you go into System Preferences > International > Formats and click either of the "Customise" buttons for Date and Time (even if you then "Cancel"). If this happens, it is easy to restore things from this copy:
cd ~/Library/Preferences
cp .GlobalPreferences.plist.bak .GlobalPreferences.plist
killall SystemUIServer
To go back to the Apple default settings, use the same command sequence but replace ".bak" by ".orig".
Formats for Date/Time
Symbol Meaning Presentation Example
G era designator (Text) AD
y year (Number) 1996
M month in year (Text & Number) July & 07
d day in month (Number) 10
h hour in am/pm (1~12) (Number) 12
H hour in day (0~23) (Number) 0
m minute in hour (Number) 30
s second in minute (Number) 55
S millisecond (Number) 978
E day of week (Text) Tuesday
e day of week/local (1~7) (Number) 2
D day of year (Number) 189
F day of week in month (Number) 2 (2nd Wed in July)
w week in year (Number) 27
W week in month (Number) 2
a am/pm marker (Text) PM
k hour in day (1~24) (Number) 24
K hour in am/pm (0~11) (Number) 0
z time zone (Text) Pacific Standard Time
' escape for text
'' single quote '
The count of pattern letters determines the format, as follows:
(Text): 4 or more, use full form, (Number): the minimum number of digits. Shorter numbers are zero-padded to this amount (e.g. if "m" produces "6", "mm" produces "06"). Year is handled specially; that is, if the count of 'y' is 2, the Year will be truncated to 2 digits. (e.g., if "yyyy" produces "1997", "yy" produces "97".)
(Text & Number): 3 or over, use text, otherwise use number. (e.g., "M" produces "1", "MM" produces "01", "MMM" produces "Jan", and "MMMM" produces "January".)
This table, with additional notes, can be found at the International Components for Unicode (ICU) User Guide website. Reprinted by permission from International Business Machines Corporation copyright (2000 - 2004).

Modify an user attribute using Powershell script

In the current account creation script I am setting the following two attributes targetAddress and proxyAddressess:
$UserAttributes[0].Add('targetAddress', $User.mail)
$UserAttributes[0].Add('proxyAddresses', "SMTP:" + $User.mail)
I need to be able to change these values sometimes. I thought if I replaced add with replace that would work it did not.
Ideas?
Here is the whole function:
$AttributeItems=$UserAttributes[0].GetEnumerator()
ForEach ($AttributeItem in $AttributeItems) {
  $AIKey=$AttributeItem.Key
  $NewAttribute=$AttributeItem.Value
  $ADAttribute=$FullUser.$AIKey
  if ($ADAttribute -ne $NewAttribute) {
   Set-ADUser $User.sAMAccountName -Replace @{$AIKey=$NewAttribute}
$UserAttributes[0].Add('targetAddress', $User.mail)
$UserAttributes[0].Add('proxyAddresses', "SMTP:" + $User.mail)
$ClearCount=$UserAttributes[1].Count
If ($UserAttributes[1].Count -gt 0) {
  Set-ADUser $User.sAMAccountName -Clear $UserAttributes[1]
$enattendantgodot='Hold on there pardner!'

I'm using example 4.
This is what I have:
$UpdateUserAttributesArray = 'sn','givenName','initials','displayName','info','mail','departmentNumber','department','telephoneNumber','ipPhone','title','physicalDeliveryOfficeName','employeeType'
Function StudentNameChange {
    $Attributes=BuildUserTable $UpdateUserAttributesArray
    Set-ADuser $User.sAMAccountName -Replace @{mail="$User.mail";targetAddress="$User.mail";proxyAddressess="SMTP:$User.mail";sn="$User.sn";cn="$User.sn + $User.givename"}
$UpdateUserAttributesArray sets the value for the import file.
StudentNameChange should set the updated value has needed.
The script runs but no settings are changed.
Set-AdUser $User.sAMAccountName -mail $User.mail -surname $User.sn
Like that.,
Replace is only for optional attribute.
Function does not specifi $user so that may also be missing.
I think you need to spend some time learning the basics of PowerShell. It looks like you are just gluing things together thazt you have found with no understranding of how any of the bits work.
Try just setting one user at a command prompt until you see how the CmdLet and PowerShell work. Post single simple questions as you try each parameter.
# build a test user object
$user New-Object PsObject@{
SamAccoutnName='somename'
Mail='[email protected]'
SN='lastname'
GivenName='John'
proxyAddresses='...<list of addresses>'
#start like this and add items until you understand what is working.
Get-AdUser $user.SamAccountName |
Set-AdUser -Surname $user.sn -GivenName $user .GivenName -Replace @{Mail='$($user.Mail'}
#use Rename-Object to change CN.
You need to learn the simple bits before you try to do grand things.
¯\_(ツ)_/¯

Disable User on updating an User attribute in OIM

Hi,
I have OIM 11g R2 with LDAP SYNC enabled with OID through OVD.
I want to trigger Disable user on modifying an UDF attribute of user.
Like if attribute1 of user is set to true then disabke user operation should be triggered for the user.
So first in my adapter i will check whether attribute is true and then trigger disable user.
In 11g R2 as mapping adapters attached to Users form in dataobject manager is not supported i am not able to map to the userdefinition and hence not able to check if attribute1 is true or false.
Please help and let me know if this can be achieved in any other way.
Edited by: 988070 on Mar 20, 2013 3:55 AM

You can write a post process event handler:
It will update the user status to disable when UDF attrtibute is set to true.
For this, you need to set the condition as:
Get the value of user defined attribute and store it in a variable "flag".
disable UserManagerResult disable(java.lang.String attributeName, java.lang.Object attributeValue) //attributeName will be user defined fieldm value will be "true"
throws ValidationFailedException,
oracle.iam.platform.authz.exception.AccessDeniedException,
UserDisableException,
NoSuchUserException,
SearchKeyNotUniqueException
Disables the user account matching the search criteria.
Parameters:
attributeName - - The attribute name for the search criteria.
attributeValue - - The attribute value for the search criteria.
Returns:
UserManagerResult containing the entity id of the disabled user.
Cheers,
Vamsi.

PF attribute modification in Access Policy for existing users.

Hi Guys,
I have an access policy for provisioning a resource. Suppose if I make some changes for the process form attribute value inside the access policy,How can I have the same attribute value reflected in the process form of users who are already provisioned by the access policy?
Direct database update wont be a good idea here as I am having multiple access policies for the same resource. Is there any table which is having the relation between provisioned resource and curresponding access policy if at all I have to go for a custom scheduled task?
Thanks,

Does this solution also supposed to work in OIM 11g? I Tried it but data on the main form does not get reflected on the process form of existing users. For child data it does work.
Edited by: bsteen on Aug 5, 2011 5:21 AM

Script to modify the location attribute in an existing subnet registered on AD sites

Could anyone help me to make an script to modify the location attribute in an existing subnet registered on AD sites and services.
Using the script to create subnet, like this one below, occurs error because the subnet already exist:
Set objRootDSE = GetObject("LDAP://RootDSE")
strConfigurationNC = objRootDSE.Get("configurationNamingContext")
strSiteObjectDN = strSiteObjectRDN & ",cn=Sites," & strConfigurationNC
strSubnetsContainer = "LDAP://cn=Subnets,cn=Sites," & strConfigurationNC
'-- Create Subnet --
Set objSubnetsContainer = GetObject(strSubnetsContainer)
Set objSubnet = objSubnetsContainer.***MODIFY/UPDATE***("subnet", strSubnetRDN)
objSubnet.Put "siteObject", strSiteObjectDN
objSubnet.Put "description", strDescription
objSubnet.Put "location", strLocation
objSubnet.SetInfo
Thanks,

Just get the subnet by name:
subnet = "192.168.1.0\/24"
Set objRootDSE = GetObject("LDAP://RootDSE")
strConfigurationNC = objRootDSE.Get("configurationNamingContext")
strSiteObjectDN = strSiteObjectRDN & ",cn=Sites," & strConfigurationNC
strSubnet = "LDAP://CN=" & subnet & ",cn=Subnets,cn=Sites," & strConfigurationNC
Set objSubnet = GetObject(strSubnet)
objSubnet.Put "description", strDescription
objSubnet.Put "location", strLocation
objSubnet.SetInfo
¯\_(ツ)_/¯

How to modify user attributes in Microsoft IAS or Active Directory??

Anyone have an idea?? What I'm trying to do is to authenticate management access to an ACE 4710 against a Microsoft IAS server.
According to the document below:
http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/ace_appliances/vA1_7_/configuration/security/guide/aaa.html#wp1519045
it sounds like I need to be able to modify user attributes similar to what I know is doable in ACS. I base my assumption on this because of the following statement in the link above:
"Step 3 Go to the User Setup section of the Cisco Secure ACS HTML interface and double-click the name of an existing user that you want to define a user profile attribute for virtualization. The User Setup page appears.
Step 4 Under the TACACS+ Settings section of the page, configure the following settings:
â¢Click the Shell (exec) check box.
â¢Click the Custom attributes check box.
â¢In the text box under the Custom attributes, enter the user role and associated domain for a specific context in the following format:
shell:<contextname>=<role> <domain1> <domain2>...<domainN>"
Is something like this possible in IAS??
I have the authentication piece working for the ACE however when I login, I'm assigned an ACE defined default role of 'network-monitor' which gives me only read-only access. The way I'm interpreting what needs to be done to resolve this is to have the authentication server send an attribute value that states that the user is in the role 'Admin' in which case I'll have unlimited access to my ACE.
Make sense?? Any thoughts??
Thanks in advance.
-Lloyd

Lloyd,
It is possible via Radius and not TACACS. On the same link if you scroll down, you will see option of doing it via Radius.
"Defining Private Attributes for Virtualization Support in a RADIUS Serve"
Find attached the doc that explains about setting up user attributes on IAS.
Regards,
~JG
Do rate helpful posts

Updating values dynamically in an user attribute which is lookup field

Hi All,
Can I have a pre process event handler to update the values in the lookup field on my create user page? I have two user attributes - one is the default organization and the other is a user created Country attribute. Both of these are Lookup fields. I want to update the country lookup field by checking what is selected in the organization lookup field. Is this possible in OIM?
Not sure if pre process event handler is the way to go but this is what I want to achieve. Can anybody guide me regarding the same?
Thanks,
$id

OK, here's my shot at a walkthrough... let me know if I missed any steps.
1. From your original post, you are using two lookup fields. I'm use a base VM for testing, so I needed to create two. I went with City and State (I know they are OOB, but this is just an example).
- Created Lookup.Custom.City and Lookup.Custom.State Samples:
Lookup.Custom.City
Code Key-Decode
Miami-Florida
Orlando-Florida
New Orleans-Louisiana
Lookup.Custom.State
Code Key-Decode
Florida-Florida
Lousiana-Louisiana
- Creating Custom UDF Attributes: Advanced->User Configuration->Actions->User Attributes (LOV's)
-- Office City and Office State
2. Use weblogicExportMetadata.sh to export /metadata/iam-features-requestactions/model-data/CreateUserDataSet.xml
3. Edit CreateUserDataSet.xml to add:
<AttributeReference name="Office State" attr-ref="Office State" available-in-bulk="false" type="String" length="20" widget="lookup" lookup-code="Lookup.Custom.State" required="false" mls="false"/>
<AttributeReference name="Office City" attr-ref="Office City" type="String" length="30" widget="lookup-query" available-in-bulk="false">
<lookupQuery lookup-query="select City.LKV_ENCODED as City from (Select LKV_ENCODED , LKV_DECODED from LKU LKU, LKV LKV where lku_type_String_key = 'Lookup.Custom.City' and lku.lku_key = lkv.lku_key) City, (Select LKV_ENCODED, LKV_DECODED from LKU LKU, LKV LKV where lku_type_String_key = 'Lookup.Custom.State' and lku.lku_key = lkv.lku_key and lkv_decoded='$Form Data.Office State') State where State.LKV_ENCODED = City.LKV_DECODED order by City" display-field="City" save-field="City"/>
</AttributeReference>4. Use weblogicImportMetadata.sh to import CreateUserDataSet.xml
5. Run ./PurgeCache ALL (same directory)
6. Go to request - create user (this example is for request based provisioning)
7. If all went ok, when you select State, let's say Florida, then when you then click on city lookup, you will only see Orlando and Miami. If you toggle the state to Louisiana, you'll need to click search again on city and New Orleans should be the only one that comes up.

Is there any method or function to update/modify an existing trip data?

Hey, ABAP gurus,
Is there any method or function to update/modify an existing trip (PR05) receipts data and cost distribution data?
Thanks in advance!
Fisher

Hi Fisher,
Please try HRTRV_IF_MODIFY_TRIP.
Regards,
Dilek

I changed emails. My user ID will not let me get into my phone to do any updates, but the user id is associated with an email address that no longer exists

I changed emails. My user ID will not let me get into my phone to do any updates, but the user id is associated with an email address that no longer exists

What a mess the Apple ID, and associating emails, ID etc has got itself in
I have a new iPad but after 2 days of trying all sorts still can't sync it because it is says it is associated to the other via the iCloud
I can't use my alternate email address to setup a new Apple ID account as it says it's already used or associated, but I haven't knowingly done anything
One message says "This email address is already in use or you may already have an Apple ID associated with this email address. Please try again or sign in using your existing Apple ID."
I am at a complete loss on what to do

Updates are not installing already exists, will modify existing instance.

hi all
I have published updates via scup and seeing below message in update store log its not updating old version what is this message means
Update status from update (c2f61a88-730e-47af-8119-6e3b5a789764) already exists, will modify existing instance.
ankith

That just means that the client already scanned for compliance, scanned again now and found out that the state for that patch (installed, required, etc) has changed.
Torsten Meringer | http://www.mssccmfaq.de

How to do the new created field in User Attributes, show in Manager GTC

Hello Guys,
I have a Connector GTC working perfectly. Now I created a new field in User Attributes and I need make this field appear in "Modify Connector Configuration" of "Manage Generic Connector" without having to create a new Connector.
If I create a new Connector this field is showed normally, but this connector has a lot of mapping between the existing fields, I need only that a new field is displayed.
How to I do this?
Thanks

Not sure what version of OIM you are using but check Bug: 12812650
-Bikash

OIM 11g: UDF disappears from User Attributes page

Hi,
I was modifying a user defined attribute using the 11.1.1.3 User Attributes configuration page. All I did was change its category to move it to another section of the user profile page. The last remaining field in the category 'disappeared'. It just went from the list of fields in the category. The field still exists on the USR object and still contains all the values. But it's gone from the UI.
I exported the /file/User.xml from MDS and sure enough the missing attribute is not present in the User.xml file. It is there for the mapping to the back end column, and in another element. But the element that describes the field proper is not there. I've since added the attribute element back in manually and re-imported the metadata using the weblogic environment manager, but the field still does not appear.
So, my question is does anybody know where else OIM stores the attribute details? Is it in the DB somewhere and merely mirrored in the MDS? What do I need to do to restore the field? (I can't add it in because it says it already exists.)
Thanks

PeachEye,
I was unable to see the UDF's I had created on the user form until I set up a policy for them. Please check the policy around the UDF's.
I am hoping this can help you.
From Oracle documentation:
User's Guide for Oracle Identity Manager
11g Release 1 (11.1.1)
E14316-03
User-defined fields (UDFs) can be added by creating a policy and
adding attributes in the self service user management
administration policy in Oracle Identity Administration. To add
the User defined attributes for view or modification under the
Attributes tab, these UDFs need to be added to the modify user
data set for self-service. Also, a custom policy needs to be created
under self service user management to grant permission to view
and/or modify these attributes.
For details on authorization policies, refer "Creating and Managing
Authorization Policies" on page 15-2.

Add existing users LDAP in Delegated Administrator

Hello, We have installed and configurated the Sun Comm-Suite 7 with Calendar server 6.3 and all its work fine.
The problem is that in the LDAP datastore contains a users who do not appears in the DA. In this post explain how to make reverse engineer for create atributes (mail and calendar) for the existent users.
http://forums.sun.com/thread.jspa?forumID=708&threadID=5248388
But, how to show the existent users in the DA admin page?
And, how to asigned a mailbox a existent user?

isaaccasanovas wrote:
shjorth wrote:
"How were these LDAP users provisioned? Were they manually added using ldap commands (e.g. ldapmodify) or some kind of "sync" process?"
I change the objectclass for the existing users with ldapmodify command and I can create calendar with ldapmodify in the corresponding attributes (now, I don't know how to created a mailbox). To change any attribute how name, email, etc I use the commadmin user modify and the changes applies ok.Once again, where did the "existing users" information come from?
If I user commadmin admin add for append a existen users to administrators group, the command reply: user does not exist.As I have already stated, you need to compare the LDIF of a valid working DA user with the LDIF of the "existing user" which cannot be "seen" by DA to see what objectclasses/attributes are missing.
Add these missing objectclasses/attributes one at a time until DA can "see" the user.
Regards,
Shane.

Update / Modify existing users attribute in AD

Similar Messages

Maybe you are looking for