Beefy Boxes and Bandwidth Generously Provided by pair Networks
good chemistry is complicated,
and a little bit messy -LW

Re: Using WMI to Move a Computer

by jhourcle (Prior)
on Mar 08, 2005 at 20:28 UTC ( #437720=note: print w/replies, xml ) Need Help??

in reply to Using WMI to Move a Computer

I assume by 'relocate computer accounts' that you're trying to change the dn (distinguished name) of the entry in LDAP (ie, move the accounts within the LDAP tree). You can either use Mozilla::LDAP or Net::LDAP to issue a modifydn command, provided your directory supports it. You can also use one of them to generate walk the tree, and generate an LDIF that you can then apply using ldapmodify. (which is probably what I'd do, just because I'm paranoid, and would want to keep a record of exactly what I changed)

If you're just trying to modify which machines people are able to log into, you probably just need to set something in their record. (PAM uses 'Host', but I have no idea what Active Directory uses to tell what machines a user has access to). I also have no idea if there's anything that would need to be done at the host level, as I don't do windows administration. (in Unix, you'd want to create their home directory, if it isn't on a mount point that's shared between systems, and so would already exist)

Log In?

What's my password?
Create A New User
Domain Nodelet?
Node Status?
node history
Node Type: note [id://437720]
and the web crawler heard nothing...

How do I use this?Last hourOther CB clients
Other Users?
Others chilling in the Monastery: (4)
As of 2023-12-06 21:05 GMT
Find Nodes?
    Voting Booth?
    What's your preferred 'use VERSION' for new CPAN modules in 2023?

    Results (32 votes). Check out past polls.