$computer = [ADSI]\"WinNT:\/\/$env:ComputerName\"\n $user = $computer.Create(\"User\", \"MyTestUser\")\n $user.setpassword(\"MyPassword\")\n $user.put(\"description\",\"My description\") \n $user.SetInfo()\n<\/pre>\nWhen we are talking about performing local account management, we are using the Computer Management tool seen in the following image. This tool can be found in the Administrative Tools section on your computer, but we prefer to launch it by typing compmgmt.msc<\/b> in the Start\/Run<\/b> box. On Windows Vista you must start the tool with administrative rights.<\/p>\n
![\"Image](\"http:\/\/img.microsoft.com\/library\/media\/1033\/technet\/images\/scriptcenter\/qanda\/hsg\/2009\/march\/hey0323\/hsg-3-23-9-1.jpg\")
<\/p>\n
<\/p>\n
Though it is true that a local user can be created by right-clicking Users<\/b> and clicking New User<\/b> to display the dialog box seen in the following image, the ability to create a local user from a script adds a useful tool that can be readily used to ease part of the management burden.<\/p>\n
![\"Image](\"http:\/\/img.microsoft.com\/library\/media\/1033\/technet\/images\/scriptcenter\/qanda\/hsg\/2009\/march\/hey0323\/hsg-3-23-9-2.jpg\")
<\/p>\n
<\/p>\n
We do not even need to write a script if we do not want to do so. I can create a new local user account in one line of code from the Windows PowerShell console:<\/p>\n
PS C:\\> (([adsi]\"WinNT:\/\/.\").Create(\"User\",\"MyTestUser\")).SetInfo()<\/pre>\nWe can also create a new local group in one line of code:<\/p>\n
PS C:\\> (([adsi]\"WinNT:\/\/.\").Create(\"Group\",\"MyTestGroup\")).SetInfo()<\/pre>\nThe two lines of code are nearly identical. In fact, we used the up arrow to recall the previous command and changed the type of object to create and the name of the object. Let’s take a closer look at the syntax of the command. We start out with the [adsi]<\/b> type accelerator. We then give it the ADSI provider we wish to use. In most examples, we use the LDAP provider because we are working with Active Directory. But because we are working with local user accounts, we need to use the WinNT provider.<\/p>\n\n<\/thead>\n\n\n| \n The WinNT provider must be typed exactly like this: capital W<\/b>, lower case in<\/b>, and capital NT<\/b>. All the ADSI providers are case sensitive. Remembering this can save you a lot of frustration later on if you are a sloppy typist.<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n The create user<\/b> command that creates a local user named MyTestUser<\/b> is seen in Table 1.<\/p>\n\n\n\n \n\n| \n ADSI type accelerator<\/p>\n<\/td>\n | \n ADSI provider<\/p>\n<\/td>\n | \n Computer Name<\/p>\n<\/td>\n | \n Method<\/p>\n<\/td>\n | \n Type of object<\/p>\n<\/td>\n | \n Object name<\/p>\n<\/td>\n | \n Method<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n <\/div>\n Now that we have some of the preliminaries out of the way, let’s take a detailed look at the CreateLocalUser.ps1<\/b> script. We begin by using the [adsi]<\/b> type accelerator. We feed the [adsi]<\/b> type accelerator the ADSI provider we wish to use. We are using the WinNT provider because we are working with local user accounts. We do not need to tell the command the name of the computer if we do not wish to do so. We could use a period as we did earlier in the command line examples. I chose to include the computer name by reading it from the environmental PSDrive. We store the object that is returned in the $computer<\/b> variable:<\/p>\n$computer = [ADSI]\"WinNT:\/\/$env:ComputerName\"<\/pre>\nNow we need to use the Create<\/b> method so that we can create a new user. The Create<\/b> method takes two arguments. The first argument is the type of object to create, and the second is the name we will give to the newly created object. We store the returned object in the $user<\/b> variable as shown here:<\/p>\n$user = $computer.Create(\"User\", \"MyTestUser\")<\/pre>\nIt is now time to specify the password for the user object. To do this, we use the setpassword<\/b> method and give it the password for the user:<\/p>\n$user.setpassword(\"MyPassword\")<\/pre>\nWe next decide to populate the description<\/b> attribute. To do this, we use the put<\/b> method. The put<\/b> method accepts two arguments: the first is the attribute to modify and the second is the value to put into that attribute. This is illustrated here:<\/p>\n$user.put(\"description\",\"My description\")<\/pre>\nFinally we call the SetInfo<\/b> method just like we do when working with ADSI and Active Directory. The SetInfo<\/b> method commits the changes back to the directory. This is seen here:<\/p>\n$user.SetInfo()<\/pre>\nWell, ZT, that is about all there is to creating a local user account. We saw two methods for performing this feat; however, they use the same technique. Join us tomorrow as Local Account Management Week continues. Until then, peace.<\/p>\n <\/p>\n Ed Wilson and Craig Liebendorfer, Scripting Guys<\/b><\/p>\n","protected":false},"excerpt":{"rendered":" Hey, Scripting Guy! We have an application that runs on our local computers. It is a rather old application, and of course it is mission critical. Because this application is not Active Directory integrated, it means that I need to create a local user account on every computer that is going to run this particular […]<\/p>\n","protected":false},"author":595,"featured_media":87096,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[197,23,24,3,198,45],"class_list":["post-54133","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-scripting","tag-local-account-management","tag-local-accounts-and-windows-nt-4-0-accounts","tag-other-directory-services","tag-scripting-guy","tag-users","tag-windows-powershell"],"acf":[],"blog_post_summary":" Hey, Scripting Guy! We have an application that runs on our local computers. It is a rather old application, and of course it is mission critical. Because this application is not Active Directory integrated, it means that I need to create a local user account on every computer that is going to run this particular […]<\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts\/54133","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/users\/595"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/comments?post=54133"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts\/54133\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/media\/87096"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/media?parent=54133"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/categories?post=54133"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/tags?post=54133"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}} | |
![\"Hey,](\"https:\/\/devblogs.microsoft.com\/wp-content\/uploads\/sites\/29\/2019\/02\/q-for-powertip.jpg\" "\\"Hey,")
<\/h2>\n![\"Spacer\"](\"https:\/\/devblogs.microsoft.com\/scripting\/wp-content\/uploads\/sites\/29\/2019\/05\/spacer.gif\")
![\"Hey,](\"https:\/\/devblogs.microsoft.com\/wp-content\/uploads\/sites\/29\/2019\/02\/a-for-powertip.jpg\" "\\"Hey,")
<\/p>\n