<###########################################################
# Modified From Marius / Hican - http://www.hican.nl - @hicannl
# Original Script From https://gallery.technet.microsoft.com/scriptcenter/PowerShell-Create-Active-7e6a3978
# Excel file / Input CSV structure
# Implement | Name | Mail | Country | Company | Department | Title | MobilePhone | Password | PasswordNeverExpires | Enabled | TargetOU
# yes/no | YourName | your@example.com | China | Tech.Ltd | IT | Engineer | 12345678911 | plain-text-password | true/false | true/false | OU=xxx,OU=yyy
############################################################>
# ERROR REPORTING ALL
Set-StrictMode -Version latest
#----------------------------------------------------------
# LOAD ASSEMBLIES AND MODULES
#----------------------------------------------------------
Try
{
Import-Module ActiveDirectory -ErrorAction Stop
}
Catch
{
Write-Host "[ERROR]`t ActiveDirectory Module couldn't be loaded. Script will stop!"
Exit 1
}
#----------------------------------------------------------
#STATIC VARIABLES
#----------------------------------------------------------
$path = Split-Path -parent $MyInvocation.MyCommand.Definition
$newpath = $path + "\import_create_ad_users.v2.csv"
$log = $path + "\create_ad_users.v2.log"
$date = Get-Date
$addn = (Get-ADDomain).DistinguishedName
$dnsroot = (Get-ADDomain).DNSRoot
$i = 1
#----------------------------------------------------------
#START FUNCTIONS
#----------------------------------------------------------
Function Start-Commands
{
Create-Users
}
Function Create-Users
{
"Processing started (on " + $date + "): " | Out-File $log -append
"--------------------------------------------" | Out-File $log -append
Import-CSV $newpath | ForEach-Object {
If (($_.Implement.ToLower()) -eq "yes")
{
# Set the target OU
$location = $_.TargetOU + ",$($addn)"
# Set the Enabled and PasswordNeverExpires properties
If (($_.Enabled.ToLower()) -eq "true") { $enabled = $True } Else { $enabled = $False }
If (($_.PasswordNeverExpires.ToLower()) -eq "true") { $expires = $True } Else { $expires = $False }
# A check for the country, because those were full names and need
# to be land codes in order for AD to accept them. I used Netherlands
# as example
If($_.Country -eq "Netherlands")
{
$_.Country = "NL"
}
Else
{
$_.Country = "CN"
}
# Create sAMAccountName according to mail address:
# <FirstLetterInitials><FirstFourLettersLastName> for example
# htehp
$sam = $_.Mail.split('@')[0].ToLower()
# Try { $exists = Get-ADUser -LDAPFilter "(sAMAccountName=$sam)" }
# Catch { }
Try { $exists = @(dsquery user -samid $sam).count }
Catch { }
# If(!$exists)
If($exists -eq 0)
{
# Set all variables according to the table names in the Excel
# sheet / import CSV. The names can differ in every project, but
# if the names change, make sure to change it below as well.
$setpass = ConvertTo-SecureString -AsPlainText $_.Password -force
Try
{
Write-Host "[INFO]`t Creating user : $($_.Name)"
"[INFO]`t Creating user : $($_.Name)" | Out-File $log -append
New-ADUser $_.Name -SAMAccountName $sam -DisplayName $_.Name `
-givenName $_.Name -EmailAddress $_.Mail -MobilePhone $_.MobilePhone `
-Country $_.Country -UserPrincipalName ($sam + "@" + $dnsroot) `
-Company $_.Company -Department $_.Department `
-Title $_.Title -AccountPassword $setpass `
-Enabled $enabled -PasswordNeverExpires $expires
Write-Host "[INFO]`t Created new user : $($_.Name)"
"[INFO]`t Created new user : $($_.Name)" | Out-File $log -append
$dn = (Get-ADUser $sam).DistinguishedName
# Move the user to the OU ($location) you set above. If you don't
# want to move the user(s) and just create them in the global Users
# OU, comment the string below
If ([adsi]::Exists("LDAP://$($location)"))
{
Move-ADObject -Identity $dn -TargetPath $location
Write-Host "[INFO]`t User $_.Name($sam) moved to target OU : $($location)"
"[INFO]`t User $_.Name($sam) moved to target OU : $($location)" | Out-File $log -append
}
Else
{
Write-Host "[ERROR]`t Targeted OU $($location) couldn't be found. Newly created user wasn't moved!"
"[ERROR]`t Targeted OU $($location) couldn't be found. Newly created user wasn't moved!" | Out-File $log -append
}
# Rename the object to a good looking name (otherwise you see
# the 'ugly' shortened sAMAccountNames as a name in AD. This
# can't be set right away (as sAMAccountName) due to the 20
# character restriction
# $newdn = (Get-ADUser $_.Name).DistinguishedName
# Rename-ADObject -Identity $newdn -NewName ($_.GivenName + " " + $_.LastName)
# Write-Host "[INFO]`t Renamed $($_.Name) to $($_.GivenName) $($_.LastName)`r`n"
# "[INFO]`t Renamed $($_.Name) to $($_.GivenName) $($_.LastName)`r`n" | Out-File $log -append
}
Catch
{
Write-Host "[ERROR]`t Oops, something went wrong: $($_.Exception.Message)`r`n"
}
}
Elseif($exists -eq 1)
{
Try
{
Write-Host "[INFO]`t User $($_.Name) already exists and modifying!`r`n"
"[INFO]`t Modifying user : $($_.Name)" | Out-File $log -append
Set-ADUser -Identity $sam -DisplayName $_.Name `
-givenName $_.Name -EmailAddress $_.Mail -MobilePhone $_.MobilePhone `
-Country $_.Country -UserPrincipalName ($sam + "@" + $dnsroot) `
-Company $_.Company -Department $_.Department `
-Title $_.Title -Enabled $enabled -PasswordNeverExpires $expires
Write-Host "[INFO]`t Modified user : $($_.Name)"
"[INFO]`t User $($_.Name) already exists and modified!" | Out-File $log -append
}
Catch
{
Write-Host "[ERROR]`t Oops, something went wrong: $($_.Exception.Message)`r`n"
}
}
else
{
Write-Host "[SKIP]`t User $($_.Name) returned an error!`r`n"
"[SKIP]`t User $($_.Name) returned an error!" | Out-File $log -append
}
}
Else
{
Write-Host "[SKIP]`t User ($($_.Name)) will be skipped for processing!`r`n"
"[SKIP]`t User ($($_.Name)) will be skipped for processing!" | Out-File $log -append
}
$i++
}
"--------------------------------------------" + "`r`n" | Out-File $log -append
}
Write-Host "STARTED SCRIPT`r`n"
Start-Commands
Write-Host "STOPPED SCRIPT"
