ADSI is the "pot of gold" at the end the KiX/OLE rainbow !

I've been using scripted ADSI to administer our (pure) NT staging domain for a couple of months now.

All that is really required are a few Win2K boxes (or WinNT boxes with the ADSI components installed).

Nothing has to be installed or changed on any of the "administered" workstations or servers !

From these (few or many) administration points, one can build KiX scripts to manage just about everything in your NT domain, for example, one can add, change, or assign:

1) USERS
2) GROUPS
3) USERS TO GROUPS
4) SHARES
5) SERVICES
6) PRINTERS
7) MACHINES
8) DOMAINS
9) MACHINES TO DOMAINS

The list is endless - and it's all scripted (in the purest sense of the word ).

The only caveats here are as follows:

1) Yup - it KiX OLE again. But I think the learning curve here isn't that great and the payoff is tremendous and well worth the investment.

2) It's Active Directory, which at it's heart is very simple, but encompasses so much.

Anyway - I'm not in the office today. If anyone's interested, I can post of few of the scripts we use to add users and create shares. My current project is to build a domain user reporting tool (using KiX/ADSI )that will report on SAM records meeting certain criteria (ie. disabled/lockedout accounts).

Shawn.

[This message has been edited by Shawn (edited 10 August 2000).]