LDIFDE

Creates, modifies, and deletes directory objects on computers running Windows Server 2003 operating systems or Windows XP Professional. You can also extend the schema, export Active Directory user and group information to other applications or services, and populate Active Directory with data from other directory services.

LDIFDE -?

LDIFDE [-a user_dn pass_word] [-b user_name domain pass_word] [-c string1 string2] [-d base_dn] [-f file_name] [-g] [-i] [-j path] [-k] [-l ldap_attribute_list] [-m] [-n] [-o ldap_attribute_list] [-p scope] [-r ldap_filter] [-s server_name] [-t port_number] [-v]

none.

-? (NT2003)

Display help.

-a user_dn pass_word (NT2003)

Sets the command to run using the supplied user_dn and pass_word. By default, it will run using the credentials of the user currently logged on to the network.

-b user_name domain pass_word (NT2003)

Sets the command to run using the supplied user_name domain pass_word. By default, it will run using the credentials of the user currently logged on to the network.

-c string1 string2 (NT2003)

Replaces all occurrences of string1 with string2. This is generally used when importing data from one domain to another and the distinguished name of the export domain (string1) needs to be replaced with that of the import domain (string2).

-d base_dn (NT2003)

Sets the distinguished name of the search base for data export.

-f file_name (NT2003)

Identifies the import or export file name.

-g (NT2003)

Omits paged searches.

-i (NT2003)

Specifies import mode. If omitted, the default mode is export.

-j path (NT2003)

Sets the log file location. The default is the current path.

-k (NT2003)

Ignores errors during the import operation and continues processing. A complete list of ignored errors:

• object is already a member of the group
• object class violation (meaning the specified object class does not exist), if the object being imported has no other attributes
• object already exists
• constraint violation
• attribute or value already exists
• no such object

-l ldap_attribute_list (NT2003)

Sets the list of attributes to return in the results of an export query. If omitted, all attributes are returned.

-m (NT2003)

Omits attributes that only apply to Active Directory objects such as the ObjectGUID, objectSID, pwdLastSet and samAccountType attributes.

-n (NT2003)

Omits export of binary values.

-o ldap_attribute_list (NT2003)

Sets the list of attributes to omit from the results of an export query. Used when exporting objects from Active Directory and then importing them into another LDAP-compliant directory. If attributes are not supported by another directory, you can omit the attributes from the result set using this switch.

-p scope (NT2003)

Sets the search scope. Search scope options are:

• Base
• OneLevel
• SubTree

-r ldap_filter (NT2003)

Creates a LDAP search filter for data export.

-s server_name (NT2003)

Specifies the domain controller to perform the import or export operation. By default, will run on the domain controller on which LDIFDE is installed.

-t port_number (NT2003)

Specifies a LDAP port number. The default LDAP port is 389. The global catalog port is 3268.

-v (NT2003)

Sets verbose mode.

none.

none.

none.

none.

External Resource Kit

DOS

none

Windows

none

Windows NT

NT2003