How to bulk update Active Directory User Properties by OU

Published: 8/29/2018

Required Cayosoft Version: Cayosoft Administrator 4.x and later

Active Directory Version: Server 2012R2 Schema or later

---

In this article: 

 

Overview

The Cayosoft Administrator Rule Text file | DynamicAttributes Update AD user Properties can update user attributes based on the OU (Organizational Unit) in which the user is located with the condition that you are running Active Directory with the Server 2012R2 Schema. 

 

Why 2012R2 or later?

In Server 2012R2 a new attribute named msDS-partentdistname was added to objects which contains the distinguished name of the user object.  In this case the Cayosoft rule can use this attribute to identify users within a set of OUs. You can test to see if you have this attribute by using the Powershell command:

Get-ADUser -Filter * -Properties msDS-parentdistname | Select-Object DistinguishedName,msDS-parentdistname

 

Creating a Sample File

Here is a 3 line sample CSV file in the format used by Text file | DynamicAttributes Update AD user Properties. You will need to replace the sample OU and address details below with those from your environment.

msDS-parentdistname;physicalDeliveryOfficeName;streetAddress;l;st;postalCode
OU=ANC,OU=GOV,DC=cayodemo,DC=com;Lincoln;100 Lincoln Blvd, Suite 90;Columbus;OH;43210
OU=JAMES,OU=GOV,DC=cayodemo,DC=com;James;100 Maddison Ave;Columbus;OH;43210

 

Create a rule to update user address properties by OU

1. Open the Cayosoft Administrator Console

2. Click New > Rule

3. Click Show all templates

4. In the filter type Dynamic

5. Click the Text file | DynamicAttributes Update AD user Properties rule

6. Click Next

7. Click Finish

8. In the Query Section, to the right of the Select Data Source field, click the file picker [...] 

9. Selected the data file that you will use with the rule and click Open

   The sample format above can be used, but will need to be modified for your environment.

10. On the Separator used in file field select Semi-colon separated ;
    

11. To limit the potential impact of this rule, use the Limit scope to this Domain or OU option in the Action section.

12. Click Save Changes