Bulk Update AD Users

This guide shows you how to bulk Update AD Users using the AD Pro Toolkit.

Read First:

  • Run a small test first – Run a small test to ensure the accounts are being updated as expected. This is a powerful tool and you can mess up a lot of accounts if you don’t test it first.
  • ID Column – One of the following attributes must be present in the CSV template and will be used to identify the accounts to update.
    • SamAccountName (default)
    • EmployeeID
    • EmployeeNumber
    • UserPrincipalName
    • mail
  • CSV Headers are case sensitive – The csv header must match the correct spelling of the LDAP name. You can add and remove columns just make sure they are spelled correctly.
  • CSV Template – The CSV template includes 32 attributes. You can add additional attributes to the CSV. If you add additional attributes and it doesn’t work, please contact support.
  • Existing values – If an attribute already has a value, the tool will replace the value. If the attribute is blank the tool will add that value. If the cell is blank in the CSV then it is ignored.
  • Remove option – You can remove values by adding remove in the CSV file. You can update and remove attributes at the same time.

How to Use the AD Bulk User Update Tool

  1. Open the Bulk User Modification tool (Located under user management tools).
  2. Click the “Download CSV Template” button.
    • Note: You can also generate a template by using the user export tool.
  3. Fill out the CSV with user details.
  4. The CSV must have one of the following headers to identify the accounts:
    • SamAccountName (default)
    • EmployeeID
    • EmployeeNumber
    • UserPrincipalName
  5. Click the update options button and select your ID column.
  6. Select your CSV template and click run.

CSV Example.

Remove User Account Properties

If you want to bulk remove user account properties then just put remove in the CSV column. In this example, I will remove the department information. Here is a screenshot of the CSV.

If any of these users had anything in the department field in Active Directory this tool will remove it.

Now check the logs and Active Directory to verify.

Supported Attributes List

Below is a list of attributes included in the template. The CSV headers are case sensitive and can be in any order. You can delete any columns from the template that you do not need. If a cell has no value (blank) then it will not update the account.

Attribute Name (column headers)Example ValueDescription
sAMAccountNamerobert.allenThis will be the users logon name.
passwordFuutbaal#123The password for the user.
memberofgroup1,group2This will add users to a group. Use the groups name and separate multiple groups with a comma.
giveNameRobertThis is the users first name. (General tab)
initialsRAThe users initials (General tab).
snAllenThis is the users last name (General tab).
displaynameRobert AllenThe users display name (General tab).
descriptionIT staffThis is the description field in Active Directory (General tab).
physicalDeliveryOfficeName1st floorThis is the office field in Active Directory (General tab).
telephoneNumber1-888-214-3802This is the Telephone number field (General tab).
mailrobert@activedirectorypro.comThis is the E-mail field (General tab).
wwwHomepageactivedirectorypro.comWeb page field (General tab).
streetAddress123 W. EagleCrest LNStreet field (Address tab).
postOfficeBoxPO Box 1P.O Box field (Address tab).
lSpringfieldThis is the City field (Address tab).
stMOState/province field (Address tab).
postalCode65802Zip/Postal Code field (Address tab).
cUS2-digit string value
coUnited Statesopen string value
countryCode840integer value
profilePath\file1\profiles\%username%Profile path field (Profile tab).
scriptPathit.batLogon script field (Profile tab).
homeDirectory\file2\users\IT\%usernameThis is the home folder path (Profile tab)
homePhone1-888-214-3802Home phone (Telephones tab)
mobile1-888-214-3802Mobile number (Telephones tab)
ipPhone1-888-214-3802Ip phone (Telephones tab)
titleNetwork ManagerJob title field (Organization tab)
departmentITDepartment field (Organization tab)
companyActive Directory ProCompany field (Organization tab)
employeeID12345This is the employeeID attribute
EmployeeNumber1This is the employeenumber attribute
managerrobert.allenThis will assign a manager to the user account. Use the managers logon name.
This column will add additional proxyAddress to the user.
proxyAddresses_updatesmtp:test.user3@activedirectorypro.comThis will update existing proxyAddresses.

Add Additional Attributes

You can add additional user attributes to the CSV file, you just need to know the LDAP name. You can find the LDAP name by opening the attribute editor in Active Directory Users and Computers. You could also use PowerShell to list all user account properties.

To see the attribute editor you first need to enable the advanced features in Active Directory Users and Computer

Click view from the top menu then select advanced features.

Now when you open an account you will see the attribute editor tab.

The attribute editor screen will show you all the user LDAP properties.

Now just find the attribute name and add it to the CSV. For example, I want to add information to the other Home telephone section for users.

In the attribute editor, I see the name is “otherHomePhone”. I will add this to the CSV.

All done. That is how you add additional attributes to the CSV file to import with new accounts.

Schedule User Updates

You can use the built-in task scheduler to automate updating AD users.

  1. Click on Scheduler.
  2. Click on the Add button.
  3. For the type select “Bulk User update”
  4. Give the task a name.
  5. Set the credentials.
  6. Click Next
  7. Set the schedule frequency. You can choose from Daily, Weekly or Monthly.
  8. Click Next
  9. Select your CSV template. If you need to change the ID column click the options button. When done click Finish.
  10. Your task will now appear in the list.