Active Directory – How to Create User Account with PowerShell

active-directorypowershell

I am constantly setting up research and development environments that require active directory accounts. Since we place these environments in isloated networks each environment needs its own active directory. How can I create a new active directory account using powershell.

Best Answer

I'm not sure if you are looking for a script that will take a list of names, passwords, etc, but the following command works to create one new user. UserPrincipalName is optional. In this case, email is not used.

New-ADUser -SamAccountName nnn2 -Name "nnn2" -UserPrincipalName nnn2@jj -AccountPassword (ConvertTo-SecureString -AsPlainText "somePassword" -Force) -Enabled $true -PasswordNeverExpires $true -Path 'CN=Users,DC=jjdomain,DC=net'

If you wish to create a user in a trusted domain, add -server dns.domain to above command

Related Solutions

Ldap – How to migrate user-accounts from OpenLDAP to Active-Directory

Unlikely you'll be able to get the passwords out of OpenLDAP unless it operates in a manner different than the typical directory.

What some customers do in this scenario is stand up a middle layer for authentication that first checks the user's password against the source and then writes it to AD if it is valid prior to authenticating them. If you do this with a few key services, over a short period of time you'll capture most of the passwords.

Batch update users on Active Directory

I asume you have (or can create) a textfile with the accountname and the employeeID in it. If so you can run this command to read the file and process the changes.

for /f "tokens=1,2 delims=;" %a in (AD_EmployeeID.txt) do dsquery user -name "%a"|dsmod user -empid "%b"

The file must be in the current directory and must be named AD_EmployeeID.txt. The file must be a semicolmn seperated file where the first field is the accountname and the last is the employeeID.

e.g.

John;1234

Jane;1235

I hope this helps.

NOTE 1: if you use this command in a batchfile, replace % with %%

NOTE 2: modify delims=; if the seperator is not a semicolmn but some other character

Best Answer

Related Solutions

Ldap – How to migrate user-accounts from OpenLDAP to Active-Directory

Batch update users on Active Directory

Related Topic