Active Directory bulk user modification

Overview

Apply changes to many user accounts at once instead of editing each account individually using ADManager Plus' Active Directory bulk user modification feature. The available actions span general account attributes, Exchange and mailbox settings, Exchange limits, and Terminal Services properties. Each action can target users selected by search or imported from a CSV file.

This is used during routine administration and large-scale changes such as reorganizations, onboarding and offboarding waves, and policy rollouts, where the same change must be applied consistently across a defined set of users.

How it works

Every bulk modification action in this module follows the same general pattern:

  • The admin opens the specific management action page (for example, Profile Attributes, Group Attributes, or Move Users).
  • The action-specific inputs are configured. For Profile Attributes, this includes the home folder path, profile path, and logon script; for Group Attributes, this is the add, remove, or set primary group operation along with the target group; for Move Users, this is the destination OU; and so on. A few actions (including Unlock Users, Delete Users, and Restore Deleted Users) require no configuration and proceed directly to target selection.
  • The admin selects the source domain and can narrow down their selection to one or more OUs.
  • The target user accounts are identified through one of two common selection methods.
  • The admin selects the users from the resulting list and clicks Apply.
  • The change summary and the status of each user's modification are displayed for verification.

Prerequisites

  • The technician account must have the rights to modify the targeted attributes for the selected users. For more details about the required permission, click here.
  • For Exchange and mailbox actions, the users' Exchange environment must be configured in the product.

Common selection methods

Every bulk action uses one of two methods to identify the target user accounts after the domain and (optionally) the OUs are selected. These methods are referenced from each action's steps below.

Option 1: CSV import

  1. Import a CSV file containing the list of user accounts to be processed. A sample CSV file can be downloaded directly from the page for reference.
  2. After import, use the drop-down menu on the right side to select the LDAP attribute that should be used to match each CSV row to a user in Active Directory.

Sample CSV format:

name,givenName,sAMAccountName,displayName

smith,smith,smithpaul,smithpaul

Robert,Robert,RobertJig,RobertJig

Option 2: Search

Use the search field to find users by name or any supported identifier. To search for multiple users, enter their names separated by commas (e.g., John, Jane, Smith). To list every user in the selected domain or OU, click the Search button without typing anything in the search box.

After either selection method, use the check boxes to select the specific user accounts to act on, then click Apply. The change summary and per-user status are displayed for review.

Tips

  • Before applying a modification to hundreds of accounts, run it against a small set (a short search result or a CSV file containing only a few rows) and review the change summary and status. This catches errors in attribute values or scoping before they affect everyone.
  • Use the Add OUs option to confine a modification to the intended OUs rather than the entire domain. This matters most for irreversible management actions such as Delete Users or Disable.
  • To review a history of changes made by help desk technicians, use the Audit Logs feature under the Delegation tab.
  • Bulk modifications can also be triggered automatically using Event-driven Automation.