How to use CSVDE.EXE to back up and restore connection agreements (276440)

MORE INFORMATION

Csvde.exe is a Windows 2000 command-line utility that is located in the SystemRoot\System32 folder after you install Windows 2000. Csvde.exe is similar to Ldifde.exe but it extracts information in a comma-separated value (CSV) format. This section describes the command-line parameters.

CSV Directory Exchange

General Parameters

Parameter	Description
-i	Turn on Import mode (The default mode is Export)
-f `filename`	Input or Output file name
-s `servername`	The server to bind to (The default is the domain controller of the domain that is logged on)
-c fromDN toDN	Replace occurrences of FromDN to ToDN
-v	Turn on Verbose mode
-j	Log file location
-t	Port number (default = 389)
-u	Use Unicode format
-?	Help

Export Specific

Parameter	Description
-d rootDN	The root of the LDAP search (defaults to Naming Context)
-r filter	LDAP search filter (defaults to "(objectClass=*)")
-p searchscope	Search Scope (Base/OneLevel/Subtree)
-l list	List of attributes (comma-separated) to look for in an LDAP search
-o list	List of attributes (comma-separated) to omit from input
-g	Disable paged search.
-m	Enable the Security Accounts Manager (SAM) logic on export
-n	Do not export binary values

Import Specific

Parameter	Description
-k	The import continues to ignore "Constraint Violation" and "Object Already Exists" errors

Establishing Credentials

NOTE: If no credentials are specified, Csvde.exe binds as the currently logged on user by using Microsoft Security Support Provider Interface (SSPI).

For simple authentication: -a userdn [password | *]
For SSPI bind method: -b username domain [password | *]

Examples

If you want to perform a simple import of the current domain, use the following command:

csvde -i -f inpute.csv

If you want to perform a simple export of the current domain, use the following command:

csvde -f output.csv

If you want to export a specific domain with credentials, use the following command:

csvde -m -f output.csv
-b usernamedomainname *
-s servername
-d "cn=users,dc=domainname,dc=microsoft,dc=com"
-r "(&(objectCategory=person)(objectClass=user))"

To extract all existing Connection Agreements into one file, use the following parameters, for example:

csvde -f output.csv -d "cn=active directory connections,cn=microsoft
exchange,cn=services,cn=configuration,dc=domainname,dc=com"

To extract individual Connection Agreements, specify the distinguished name (also known as DN) for the particular connector, for example:

csvde -f output.csv -d "cn=exchange to windows ca,cn=active directory
connections,cn=microsoft exchange,cn=services,cn=configuration,dn=domainname,dn=com"

To import this information and re-create Connection Agreements, delete the globally unique identifier (GUID) value from the output file for each of the Connection Agreements. You must do so because Active Directory stores the GUID values and does not allow another object to be created with the same GUID. A new GUID is generated for the Connection Agreement upon import. To locate the GUID, check the first line of the export file. The first line of the export file defines each field. The "Object GUID" data has been removed, but the comma that defines that field remains. Note the following example, where Input.csv represents the modified output file:

csvde -I -f input.csv