Skip to main content

Use PowerShell to Create New AD Users using a Template

To use and existing account as a template to create new users one would use the good old "Active Directory Users and Computers" , right? by right-clicking on the User to be used as template and selecting "Copy" which will prompt something like below:



But this blog is  meant for doing things using PowerShell.

To quickly get me started I was tempted to use "Active Directory Administrative Center" on Server 2012, so that I could see the PowerShell history for the my actions( Yeah! you can do that now !!) but there was no method to do that in AD Admin Center :O , See below

 

The User "Dexter POSH" is the member of the group "RemotePOSHAdmins" under the OU "POSHAdmins" in my domain. I want to add a new User here using the dexterposh user account as the template.

At first I thought of simply getting the User information using Get-ADUser and piping it into New-ADUser cmdlet (because it accepts pipeline input of type "None or Microsoft.ActiveDirectory.Management.ADUser" and Get-ADUser spits out object of the specified type) , but see below it fails :


See that I used -whatif parameter here to be cautious :)

Now what to do let's go and ask updated Get-Help. After going through help carefully I came to know that the correct parameter to use here is -Instance . So quick info on that is below:




Voila now I know how it will work :)

So I tried



But it failed probably because the "dexterposh" account is enabled and while creating a new user I didn't specify the password. So what I will do is disable it by default while creating it:


So everything worked , I noticed that you need to specify the -path to the desired OU otherwise by default the account is created in "Users" in the domain.

Now this can be used to automate creation of Users by using different templates. What we can do is create a CSV with required information for Account Creation like first name, last name etc and then a field specifying if it needs to copied from an existing account say "tocopy" which will be set to the SamAccountName of the account to be used as template and create the new users using above method.


Popular posts from this blog

Test connectivity via a specific network interface

Recently while working on a Private cloud implementation, I came across a scenario where I needed to test connectivity of a node to the AD/DNS via multiple network adapters.  Many of us would know that having multiple network routes is usually done to take care of redundancy. So that if a network adapter goes down, one can use the other network interface to reach out to the node. In order to make it easy for everyone to follow along, below is an analogy for the above scenario: My laptop has multiple network adapters (say Wi-Fi and Ethernet) connected to the same network. Now how do I test connectivity to a Server on the network only over say Wi-Fi network adapter?

PowerShell + SCCM : Run CM cmdlets remotely

Today I saw a tweet about using implicit remoting to load the Configuration Manager on my machine by Justin Mathews . It caught my eye as I have never really tried it, but theoretically it can be done. Note - The second tweet says "Cannot find a provider with the name CMSite", resolution to which is in the Troubleshooting section at the end.

PowerShell : Trust network share to load modules & ps1

Problem Do you have a central network share, where you store all the scripts or PowerShell modules ? What happens if you try to run the script from a network share ? or if you have scripts (local) which invoke scripts or import PowerShell modules stored on this network share ? Well you would see a security warning like below (Note - I have set execution policy as 'Unrestricted' not 'bypass' here): Run a .ps1 from the network share Well this is a similar warning, which you get when you download scripts from Internet. As the message says run Unblock-File cmdlet to unblock the script and then run it, let's try it.