Dsadd group
Applies To: Windows Server 2008, Windows Server 2012, Windows 8
Adds a single group to the directory.
Dsadd is a command-line tool that is built into Windows Server 2008. It is available if you have the Active Directory Domain Services (AD DS) server role installed. To use dsadd, you must run the dsadd command from an elevated command prompt. To open an elevated command prompt, click Start, right-click Command Prompt, and then click Run as administrator.
For examples of how to use this command, see Examples.
Syntax
dsadd group <GroupDN> [-secgrp {yes | no}] [-scope {l | g | u}] [-samid <SAMName>] [-desc <Description>] [-memberof <Group> ...] [-members <Member> ...] [{-s Server> | -d <Domain>}] [-u <UserName>] [-p {<Password> | *}] [-q] [{-uc | -uco | -uci}]
Parameters
Parameter |
Description |
|---|---|
<GroupDN> |
Required. Specifies the distinguished name of the group that you want to add. If you omit the distinguished name, dsadd takes the name from standard input (stdin). |
-secgrp {yes | no} |
Specifies whether the group that you want to add is a security group (yes) or a distribution group (no). By default, dsadd adds the group as a security group (yes). |
-scope {l | g | u} |
Specifies whether the scope of the group that you want to add is domain local (l), global (g), or universal (u). If the domain is in mixed-mode, then AD DS does not support the universal scope. By default, dsadd sets the scope of the group to global. |
-samid <SAMName> |
Specifies to use the Security Accounts Manager (SAM) name as the unique SAM account name for this group, for example, operators. If you do not specify this parameter, dsadd generates the SAM account name from the relative distinguished name. |
-desc <Description> |
Specifies the description of the group that you want to add. |
-memberof <Group> ... |
Specifies other groups of which the new group that you are adding is a member. |
-members <Member> ... |
Specifies the members to add to the new group. |
{-s <Server> | -d Domain} |
Connects to a remote server or domain that you specify. By default, dsadd connects the computer to the domain controller in the logon domain. |
-u <UserName> |
Specifies the user name with which the user logs on to a remote server. By default, -u uses the user name with which the user logged on. You can use any of the following formats to specify a user name:
|
-p {<Password> | *} |
Specifies to use either a password or a an asterisk (*) to log on to a remote server. If you type *, you are prompted for a password. |
-q |
Suppresses all output to standard output (quiet mode). |
{-uc | -uco | -uci} |
Specifies that dsadd formats output or input data in Unicode. The following list explains each format.
|
/? |
Displays help at the command prompt. |
Remarks
If you do not supply a target object at the command prompt, dsadd obtains the target object from standard input (stdin). Dsadd can accept stdin from the keyboard, from a redirected file, or as piped output from another command. To mark the end of stdin data from the keyboard or in a redirected file, use the end-of-file character (CTRL+Z).
If a value that you supply contains spaces, use quotation marks around the text, for example, "CN=Mike Danseglio,CN=Users,DC=Contoso,DC=Com".
If you supply multiple values for a parameter, use spaces to separate the values, for example, a list of distinguished names.
This command only supports a subset of commonly used object class attributes.
Examples
To create a group account named Sales in the default Users container of northwindtraders.com, type:
dsadd group cn=sales,cn=users,dc=northwindtraders,dc=com
To create a universal group named accounting in an organizational unit (OU) named Departments in a domain named northwindtraders.com, type:
dsadd group cn=accounting,ou=departments,dc=northwindtraders,dc=com –scope u
Additional references
Change History
Date |
Revision |
|---|---|
09/07/2010 |
A new example was to add to show how to add a universal group to an OU. |