Load a CSV with any column structure
Auto-discover the AD domain and domain controller via DNS (click Discover or runs on startup)
Built-in port/connectivity health check (DNS, TCP 389, TCP 636, LDAP bind, LDAPS bind)
Dry-run mode to validate before making changes
Actions: enable, disable, add/remove from group, set/force password change
LDAP 389 for normal edits; LDAPS 636 required for password resets

Prerequisites

.NET 8 SDK

Windows

winget install Microsoft.DotNet.SDK.8

Linux (Arch-based)

sudo pacman -S dotnet-sdk-8.0

Linux (Ubuntu / Debian)

# Register Microsoft repository, then:
sudo apt install dotnet-sdk-8.0

Linux (Fedora / RHEL)

sudo dnf install dotnet-sdk-8.0

macOS

brew install dotnet-sdk-8.0

Install & Run

git clone https://gitea.mikisoq.cc/mikisoq/ADBulk.git
cd ADBulk
dotnet restore
dotnet build
dotnet run

On Windows, you can also open the folder in Visual Studio and run from there.

Quick start

Launch the app
Click Discover (or let it auto-detect on startup)
Enter your AD bind username and password
Click Test ports + LDAP/LDAPS to verify connectivity
Load a CSV
Select the username column and an action
Run Preview then Dry run before executing

Safety

Test with a dedicated test OU and test accounts first
Keep Dry run enabled until you are sure the mapping is correct
Password reset actions require LDAPS and are blocked on plain LDAP
Do not use Ignore cert errors in production

LDAPS certificate trust

Linux

# Arch-based:
sudo cp your-root-ca.crt /etc/ca-certificates/trust-source/anchors/
sudo trust extract-compat

# Ubuntu / Debian:
sudo cp your-root-ca.crt /usr/local/share/ca-certificates/
sudo update-ca-certificates

# Fedora / RHEL:
sudo cp your-root-ca.crt /etc/pki/ca-trust/source/anchors/
sudo update-ca-trust

Windows

If the domain controller certificate is already trusted by the domain, nothing extra is needed. Otherwise, import the root CA into the Trusted Root Certification Authorities store.