Set objGroup = objOU.Create('Group', 'cn=HR-Employees') ObjGroup.Put 'groupType', ADS_GROUP_TYPE_LOCAL_GROUPĬreates a global Active Directory security group named HR-Employees. Set objGroup = objOU.Create('Group', 'cn=Vendors') Set objOU = GetObject('LDAP://ou=HR,dc=NA,dc=fabrikam,dc=com')

Const ADS_GROUP_TYPE_GLOBAL_GROUP = &h2Ĭonst ADS_GROUP_TYPE_UNIVERSAL_GROUP = &h8Ĭonst ADS_GROUP_TYPE_SECURITY_ENABLED = &h80000000ĪDS_GROUP_TYPE_GLOBAL_GROUP + ADS_GROUP_TYPE_SECURITY_ENABLEDĬreates a domain local Active Directory distribution group named Vendors. ObjGroup.Put 'managedBy', 'cn=MyerKen,ou=Management,dc=NA,dc=fabrikam,dc=com'Ĭhanges a global distribution group named Scientists to a universal security group. ('LDAP://cn=Scientists,ou=R&D,dc=NA,dc=fabrikam,dc=com') 'cn=MyerKen,ou=Management,dc=NA,dc=fabrikam,dc=com')Īssigns user MyerKen as the manager of the Active Directory security group named Scientists. 'cn=Executives,ou=Management,dc=NA,dc=fabrikam,dc=com', _ ('LDAP://cn=Sea-Users,cn=Users,dc=NA,dc=fabrikam,dc=com')Īrray('cn=Scientists,ou=R&D,dc=NA,dc=fabrikam,dc=com', _ WScript.Echo 'Group1 created and 1000 Users added to the group.'Īdds two groups (Executives and Scientists) and one user account (MyerKen) to the Sea-Users group in Active Directory. ObjGroup.PutEx ADS_PROPERTY_APPEND, 'member', _ StrDN = ',cn=Users,' & faultNamingContext Set objGroup = objContainer.Create('Group', 'cn=Group1')

Set objContainer = GetObject('LDAP://cn=Users,' & _ Set objRootDSE = GetObject('LDAP://rootDSE') This script is not intended for use in a production environment. Returning Managed By Information for a Groupĭemonstration script that creates a security group named Group1, and adds one thousand users (UserNo1 through UserNo10000) to that group. Returns a list of mandatory and optional attributes of the group class (as stored in the Active Directory schema). Retrieving the Active Directory Groups a User Belongs To Removing a User from All Active Directory Security Groups Reading the System Access Control List for a Group Reading the Security Descriptor for a Group Reading the General Properties for a Group

Scripts to manage Active Directory Groups Adding 1,000 Users to a Security GroupĬreating a Domain Local Distribution Groupĭetermining Other Groups a Group Belongs Toĭetermining the Primary Group for a User Account

Vbscript ldap query user attributes