6.5. Moving a User
Problem
You want to move a user
object to a
different
container or OU.
Solution
Using a graphical user interface
Open the Active Directory Users and Computers snap-in.
If you need to change domains, right-click on “Active Directory Users and Computers” in the left pane, select Connect to Domain, enter the domain name, and click OK.
In the left pane, right-click on the domain and select Find.
Type the name of the user and click Find Now.
In the Search Results, right-click on the user and select Move.
Browse to the new parent container or OU and click on it.
Click OK.
Using a command-line interface
> dsmove "<UserDN
>" -newparent "<NewParentDN
>"
Using VBScript
' This code moves a user from one container to another. ' ------ SCRIPT CONFIGURATION ------ strUserDN = "<UserDN>
" ' e.g. cn=rallen,cn=users,dc=rallencorp,dc=com strOUDN = "<NewParentDN>
" ' e.g. ou=Sales,dc=rallencorp,dc=com ' ------ END CONFIGURATION --------- Set objUser = GetObject("LDAP://" & strUserDN) Set objOU = GetObject("LDAP://" & strOUDN) objOU.MoveHere objUser.ADsPath, objUser.Name
Discussion
Moving a user
object between OUs in the same
domain has no direct impact to the actual user. The only thing to be
cautious of is the impact of moving the user to a new OU that may
have different security or GPOs applied to it.
See Also
Recipe 4.17 for moving objects between OUs
Get Active Directory Cookbook now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.