Best Practice Ezine #60 ADModifyI count my blessings being an ezine editor. It is a wonderful feeling when a reader like Sean Hook writes in with a solution to a problem. You may remember that in last week’s ezine I looked at ADSI Edit. In particular how you could adjust the way ‘Name’ displays in Active Directory Users and Computers, and more importantly the display in Exchange’s Global Address List. Debate centred on whether you prefer Firstname, Lastname, or Lastname, Firstname. The problem was that while ADSI Edit could change the createDialog property and so alter the display of new users, unfortunately, existing users were not affected. Consequently this tip was for academic interest only unless you had a brand new domain. Calculating IP Address ranges is a black art, which many network managers solve by creating custom Excel spreadsheets. IPAT cracks this problem of allocating IP addresses in networks in two ways: For Mr Organized there is a nifty subnet calculator, you enter the network address and the subnet mask, then IPAT works out the usable addresses and their ranges. For Mr Lazy IPAT discovers and then displays the IP addresses of existing computers. Download the Free IP Address Tracker Now at this point Sean rode to the rescue with ADModify. Here is a wonderful utility that will not only will change existing users, but also change new users. Even better, with ADModify you can make a zillion other changes to Active Directory. ADModify is a free utility from Microsoft’s PSS (Product Support Team) team, here following are instructions to get you started. However, you may be better off visiting my web site and viewing the screen shots, not to mention getting a free copy of ADModify. See full instructions and get a free download of ADModify here Guy Recommends: Tools4ever’s UMRA Tired of writing scripts? The User Management Resource Administrator solution by Tools4ever offers an alternative to time-consuming manual processes. It features 100% auto provisioning, Helpdesk Delegation, Connectors to more than 130 systems/applications, Workflow Management, Self Service and many other benefits. Click on the link for more information onUMRA. ADModify InstructionsTo change the display of the ‘Name’ column in Active Directory Users and Computers. I have divided this project into 4 stages, but to tell the truth, configuring ADModify is straightforward and you could just follow your nose. Stage 1 Launch ADModify Select ‘Modify Attributes When you get to the Menu on the right, click on the drop down menus to select your domain. Optionally, Select a Domain Controller. Decide if you want to show all objects, or just Users. If in doubt, go for consistency and leave all objects ticked. Click on the large green arrow.
Stage 2 It is important to maximise the ADModify Window. For your first try, select a test OU, just in case something goes wrong. You need the correct sequence here, click Add to List. Now you are ready to Select All. Click on the small Next>>> button.
Stage 3 Scroll down to the bottom of the page. Tick the box: Change CN (RDN). Remember your goal and click LastName, FirstName. Note the syntax, especially the percentage signs and the comma. Decide if you want to keep the comma. (Most people prefer the comma)
Stage 4 If the test OU worked as expected, and the ‘Name’ column is now sorted by LastName and not FirstName, then you could run ADModify again, but this time leave the focus at the domain level when you Select All. See more on ADModify Here
See more interesting permissions and Active Directory articles• E 63 Catalog • E 60 ADModify • E 59 ADSIEdit • E 58 FSMO •Free CSV Import Utility • E 52 Wins • E 46 Logs •E 45 LDAP Tips •E 26 MMC • E 21 Users Template • E 17 CACLS • Ezines •E 12 SQL • E 8 Security Permissions •Review of Solarwinds Permissions Monitor for AD | 
