The bulk user updater tool is used to bulk update active directory user account attributes. You can
choose to remove or update multiple users attributes at once. A CSV template is included that you fill
out with the user accounts and attributes you want to update.
Table of contents
- Read First
- How to update or add user account properties
- How to remove user account properties
- CSV Template Setup
- Adding additional user fields to the CSV
- Run a small test to ensure the accounts are being updated as expected. This is a powerful tool and you can mess up a lot of accounts if you don’t test first.
- The sAMAccountName field is used to identify the account that you want to update. Do not remove this column from the CSV.
- DO NOT modify the csv headers. The tool may not process correctly if you remove or move around the CSV headers.
- The CSV template includes 32 attributes. You can add additional attributes to the CSV. If you add additional attributes and it doesn’t work, please let me know.
- If an attribute already has a value, the tool will replace the value. If the attribute is blank the tool will add that value.
- Use the remove option to remove any attribute value. You can update and remove attributes atthe same time.
How to update or add user account properties
Make sure you read the READ FIRST section. It has important information for running this tool.
If you are not familiar with the CSV columns please refer to the CSV Setup section.
Step 1: Generate CSV Template
You can rename the template and save it anywhere you like.
Step 2: Fill out the CSV
Now fill in the CSV with the user accounts and details you want to update. Just fill out the columns that you want to update, the rest can be left blank. You do not need to remove columns that are not used.
You must enter the user’s sAMAccountName into column A. You can use the bulk export tool to export this for all accounts or from an OU.
For this example, I’m going to update several user’s displayname, Office, and street addresses. Here is a screenshot of my CSV.
Again if any of these attributes have data the tool will update it, if blank it will add it.
Save the CSV and move to step 3.
Step 3: Run Bulk Updater
- Select CSV
- Select update users
- Click run
When the updater is done click on the logs button. It is always a good idea to check the logs for any errors during the update.
Now go check one of the accounts in Active Directory.
How to remove use account properties
If you want to bulk remove user account properties then just put remove in the CSV column. In this example, I will remove the street address. Here is a screenshot of the CSV.
If any of these users had anything in the street address field in Active Directory this tool will remove it.
Now check the logs and Active Directory to verify.
CSV template setup
The provided CSV template includes 32 user attributes you can use. You can add additional attributes if needed. Active Directory uses LDAP attribute names to store most account information. This means the user fields you see in Active Directory Users and Computers do not always match with the LDAP attribute name. To update user accounts you must use the LDAP names.
In this section, I’ll walk through the provided CSV template, explain what each column means and provide a screenshot.
The sAMAccountName attribute is the pre-Windows 2000 account logon name. Even though it says pre-Windows 2000 Microsoft still requires it. This is a required field.
Use this field to place the accounts in specific organizational units. This needs to be the distinguishedName of the organizational unit.
Use this field to place accounts into Active Directory groups. You can put users into multiple groups, just separate the groups with a comma. Use the group name.
Use this field to set the userPrincipalName and domain.
Use this attribute to set the users first name
Use this field to set the users initials
Use this field to set the users last name
Use this to set the users displayname. You can set this to whatever you want.
Use this to give the user account a description
Use this to set the users office field
Use this field to set the users Telephone number
Use this to set the users email address
Use this field to set the users web page
Use this to set the users street
Use this to set the users P.O Box
Used to set the City attribute
Use this attribute to set the users State
Use this attribute to set a users Zip/Postal Code
Use to set a users Country
Used to set a users profile path
Use to set a users logon script
Used to set the path for connecting a drive
Used to set the home telephone number
Used to set the Mobile telephone number
Used to set the IP phone
Used to set a users Job title
Used to set the department field
Used to set the company field
Use this attribute to set the employeeid.
Use this attribute to set the user employeenumber
Used to set the Manager
Use to set the proxyaddresses attribute. You can set multiple addresses, separate them with a comma.
See Active Directory LDAP Field Mappings guide for more info. This guide includes screenshots and a table view of the LDAP to Active Directory names.
Adding additional user fields to the CSV
You can add additional user attributes to the CSV file, you just need to know the LDAP name. You can find the LDAP name by opening the attribute editor in Active Directory Users and Computers. You could also use PowerShell to list all user account properties.
To see the attribute editor you first need to enable the advanced features in Active Directory Users and Computer
Click view from the top menu then select advanced features.
Now when you open an account you will see the attribute editor tab.
The attribute editor screen will show you all the user LDAP properties.
Now just find the attribute name and add it to the CSV. For example, I want to add information to the other Home telephone section for users.
In the attribute editor, I see the name is “otherHomePhone”. I will add this to the CSV.
All done. That is how you add additional attributes to the CSV file to import with new accounts.
If you need help or have questions contact us via our contact page.