Missing something when adding AD users with powershell

Question

I'm going round in circles and hoping someone can point me in the right direction...

I have created a .csv file as follows

SamAccountName,Name,GivenName,Surname,DisplayName,Type,Path,Logon Name,UserPrincipleName,ScriptPath,Password
fredflinstone,Fred Flinstone,Fred,Flinstone,Fred Flinstone,User,"CN=users,DC=Test,DC=local",fredf@test.local,fredf@test.local,login.bat,Yabba

I go to powershell, run

import-module activedirectory
Import-CSV C:\Users1.csv | New-ADUser

It successfully adds the users but the issues I have are

it doesn't actually put in the Account User login name but does put in the pre 2000 name.
it doesn't put in the password
Even if I put in the Enabled field with the value $true they are still disabled

Any help would be appreciated

score 7 · Answer 1 · answered Mar 15 '11 at 14:15

Logon Name is not one of the parameters that New-ADUser takes. See http://technet.microsoft.com/en-us/library/ee617253.aspx for a list of what you can use.
Password won't work this way, as it has to be a SecureString for security reasons. If you want to load the password from the cSV you'll have to turn this into a fuller script that can convery the value form the CSV into a secureString.
I wonder if enabled is being set with the string "$true" instead of the boolean value,a s a result of coming thru a CSV file?

Also, it's UserPrincipalName, not UserPrincipleName. – pk. Mar 15 '11 at 21:15 — pk., Mar 15 '11 at 21:15

Lachie White · Answer 2 · 2016-11-30T08:23:39.833

2

The Above are correct, you need to have UserPrincipalName something like this if gabbing information from an CSV:

-UserPrincipalName ($_.SamAccountName + '@' + $_.DomainName)

SamAccountName and DomainName are both Columns in my CSV spreadsheet.

edited Nov 30 '16 at 08:23

answered Jun 12 '15 at 02:58

Lachie White

155
8

This works nicely, but isn't required--you can still manually specify the UPN if you want to. – SamErde Jun 12 '15 at 13:50
Yes, of course just like everything to be automatic :) thanks for the comments guys, just getting started here! – Lachie White Jun 15 '15 at 05:26

score 0 · Answer 3 · answered Mar 29 '11 at 07:35

0

You need to populate "userPrincipalName" for the "User Login Name".
Get-Help Set-ADAccountPassword -examples : the first one shows you how to set an AD password.
As you haven't set a password, you can't enable the account regardless.

So your script will have three calls:

Create the user (New-ADUser)
Set the password (Set-ADAccountPassword)
Enable the user (Set-ADUser)

answered Mar 29 '11 at 07:35

Neobyte

3,179
1
26
31

Thanks guys. I did have the spelling for Principal incorrect in the CSV file...that was my first issue. Since then we have completed this particular job. I just did a generic password manually and let them all set them. – Fred Mar 30 '11 at 08:38

score 0 · Answer 4 · edited Jan 24 '18 at 08:14

0

Here is a variable option:

$a = Get-Date
$Man = $a.Month
$ti = $a.Hour
$min =$a.Minute
-AccountPassword (ConvertTo-SecureString -AsPlainText "Password$Man$ti$min" -Force)

edited Jan 24 '18 at 08:14

Gerald Schneider

23,274
8
57
89

answered Jan 24 '18 at 08:11

Chris

1

2

what is adding random numbers to the password supposed to accomplish? – Gerald Schneider Jan 24 '18 at 08:16

score -1 · Answer 5 · edited Jan 24 '18 at 08:15

-1

The password part can be solved by this

-AccountPassword (ConvertTo-SecureString -AsPlainText "12345678" -Force)

where you can swap 12345678 with a variable.

edited Jan 24 '18 at 08:15

Gerald Schneider

23,274
8
57
89

answered Dec 12 '17 at 08:45

Per

1

Missing something when adding AD users with powershell

5 Answers5