{"id":55503,"date":"2008-05-23T01:47:00","date_gmt":"2008-05-23T01:47:00","guid":{"rendered":"https:\/\/blogs.technet.microsoft.com\/heyscriptingguy\/2008\/05\/23\/hey-scripting-guy-how-can-i-use-windows-powershell-to-determine-whether-a-local-user-account-exists\/"},"modified":"2008-05-23T01:47:00","modified_gmt":"2008-05-23T01:47:00","slug":"hey-scripting-guy-how-can-i-use-windows-powershell-to-determine-whether-a-local-user-account-exists","status":"publish","type":"post","link":"https:\/\/devblogs.microsoft.com\/scripting\/hey-scripting-guy-how-can-i-use-windows-powershell-to-determine-whether-a-local-user-account-exists\/","title":{"rendered":"Hey, Scripting Guy! How Can I Use Windows PowerShell to Determine Whether a Local User Account Exists?"},"content":{"rendered":"

\"Hey, <\/p>\n

Hey, Scripting Guy! How can I use Windows PowerShell to determine if a specified local user account exists on a computer?
— MM<\/p>\n

\"Spacer\"\"Hey,\"Script<\/a> <\/p>\n

Hey, MM. Have you ever heard the expression \u201cgood things come to those who wait\u201d? Well, to tell you the truth, the Scripting Guys have never put much credence in that old saying; after all, the Scripting Guy who writes this column has been waiting for years<\/i> for the New York Yankees to call him and ask him to come play outfield for them. So far he\u2019s heard nothing, absolutely nothing.<\/p>\n\n<\/thead>\n\n\n
\n

Note to the <\/b>New York<\/b> Yankees front office.<\/b> If it\u2019s a question about money, then by all means please call this Scripting Guy collect.<\/p>\n

After all, he\u2019ll just charge the call to Microsoft anyway.<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

<\/div>\n

The point is, the Scripting Guy who writes this column has spent the past few years sitting around waiting for the New York Yankees to call. That\u2019s pretty much the same thing many of you have been doing: maybe not waiting for the New York Yankees to call, but instead waiting for the Scripting Guys to write a Windows PowerShell version of the world-famous Scriptomatic<\/b><\/a>. Well, to be honest, that\u2019s not going to happen: the Scripting Guy who writes this column simply can\u2019t afford to leave his desk, go down to the laboratory, and start tinkering with a PowerShell version of the Scriptomatic. After all, what if the Yankees call while he\u2019s down there?<\/p>\n

But you know what? As it turns out, sometimes good things do<\/i> come to those who wait. Granted, the Scripting Guys aren\u2019t going to write a PowerShell version of the Scriptomatic. But that\u2019s OK, because Ed Wilson has<\/i>.<\/p>\n

For those of you don\u2019t know him, Ed Wilson is a Microsoft scripting guru; a world-class educator; and a prolific author. (Prolific? The Scripting Guy who writes this column feels smug because he writes one measly little article each day. Ed Wilson pretty much writes a new book<\/i> each day.) No sooner did Ed finish up with Windows PowerShell Step-by-Step<\/b><\/a> then he turned around and wrote a new book, Windows PowerShell Scripting Guide<\/b><\/a>. And, along with the new book, Ed also found the time to put together the Windows PowerShell Scriptomatic.<\/p>\n\n<\/thead>\n\n\n
\n

Note<\/b>. We have this sinking feeling that the New York Yankees have also called Ed and asked him to take over in centerfield for them. But we\u2019re too afraid to ask Ed about that.<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

<\/div>\n

At any rate, if you\u2019re looking for a quick and easy way to write WMI scripts using Windows PowerShell (and we know that you are), it\u2019s hard to top Ed\u2019s new PowerShell Scriptomatic. For more information, and for a link to the download file, click here<\/b><\/a>.<\/p>\n

No, not here. Click up there.<\/p>\n

That\u2019s better.<\/p>\n

So what does all this have to do with you, MM? Well, now that we think about it, not much. After all, the PowerShell Scriptomatic writes WMI scripts, and you don\u2019t really need to (or want to) use WMI here; instead, you want to do ADSI. In this case, the PowerShell Scriptomatic won\u2019t help you all that much.<\/p>\n

However, this script should help a little (and, believe it or not, it\u2019s a scripting-related item that Ed Wilson didn\u2019t<\/i> write!):<\/p>\n

$objComputer = [ADSI](\"WinNT:\/\/atl-ws-001,computer\")\n\n$colUsers = ($objComputer.psbase.children |\n    Where-Object {$_.psBase.schemaClassName -eq \"User\"} |\n        Select-Object -expand Name)\n\n$blnFound = $colUsers -contains \"kenmyer\"\n\nif ($blnFound)\n    {\"The user account exists.\"}\nelse\n    {\"The user account does not exist.\"}\n<\/pre>\n
Well, there you have it, MM. See you later.<\/p>\n
Oh, right: you\u2019d like an explanation of how<\/i> this script works, wouldn\u2019t you? (Trust us, we\u2019d all<\/i> like an explanation of how this script works; there\u2019s some crazy-looking code in there, isn\u2019t there?) Tell you what: let\u2019s break the code down line-by-line and see what we can come up with.<\/p>\n
And if we can\u2019t come up with something we have no doubt that Ed Wilson will.<\/p>\n
We actually start out in simple enough fashion, using the [ADSI]<\/b> \u201ctype adapter\u201d to make a connection to the computer atl-ws-001. What\u2019s a type adapter? Well, in this case it\u2019s a shortcut way to tell PowerShell that you want to work with ADSI. Could you write this same script without using the type adapter? Sure; however, to do that you\u2019d have to delve into the .NET Framework and create \u2013 and use \u2013 an instance of the System.DirectoryServices.DirectoryEntry class. Needless to say, the type adapter approach is much easier.<\/p>\n
Like we said, line 1 is simple enough. Line 2 is a different story, to say the least:<\/p>\n
$colUsers = ($objComputer.psbase.children |\n    Where-Object {$_.psBase.schemaClassName -eq \"User\"} |\n        Select-Object -expand Name)\n<\/pre>\n
So what\u2019s going on here? Good question. By default, any time you use Windows PowerShell and ADSI to connect to a computer you get back a limited set of properties and methods for that computer; in fact, all you get back are the following:<\/p>\n
Name                        MemberType \n------                      ----------\nConvertDNWithBinaryToString CodeMethod \nConvertLargeIntegerToInt64  CodeMethod \nName                        Property   \nOperatingSystem             Property   \nOperatingSystemVersion      Property   \nOwner                       Property   \nProcessor                   Property   \nProcessorCount              Property\n<\/pre>\n
That\u2019s nice, but \u2013 as you can see \u2013 there\u2019s nothing in the list that suggests we can retrieve a collection of all the user accounts on that computer. Have we already hit a dead end?<\/p>\n
No, far from it. When you use Windows PowerShell to connect to an object (not just a computer but any object) PowerShell often makes a \u201cbest guess\u201d as to which properties and methods you are interested in. (OK, it\u2019s not really a guess; instead PowerShell follows a predetermined recipe for returning properties and methods.) Often times that works just fine, but sometimes it doesn\u2019t; sometimes \u2013 like in this case \u2013 you don\u2019t get back the properties and methods that you really need.<\/p>\n
That\u2019s where the PSBase<\/b> object comes in. As the name implies (kind of, anyway) the PSBase object is the base on which the PowerShell object was built; more important, the PSBase object contains all<\/i> the properties and methods of the object in question. If we look at the properties and methods of $objComputer.PSBase we see, among many<\/i> properties and methods, the following:<\/p>\n
Children                  Property   System.DirectoryServices.DirectoryEntries Children {get;}\n<\/pre>\n
As it turns out, the Children<\/b> property contains all the child objects on the computer; that includes users, groups, printers, services, and what-have-you. In other words, this<\/i> is the property we\u2019ve been looking for.<\/p>\n
Of course, the only children we\u2019re interested in at the moment are user accounts. (Um, no offense, Scripting Son.) That\u2019s why we pipe this data to the Where-Object<\/b> cmdlet:<\/p>\n
Where-Object {$_.psBase.schemaClassName -eq \"User\"}\n<\/pre>\n
And what are we asking Where-Object to do? We\u2019re asking it to filter out anything that doesn\u2019t have a SchemaClassName<\/b> equal to User<\/i>. In other words, all we want to get back are user accounts.<\/p>\n\n<\/thead>\n\n\n
\n
Note<\/b>. Good question: what if we wanted only the group<\/i> accounts? Well, in that case our Where-Object command would look like this:<\/p>\n
Where-Object {$_.psbase.schemaclassname -eq \"Group\"}\n<\/pre>\n
And so on.<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
<\/div>\n
After we\u2019ve run the data through Where-Object we\u2019re left with a collection containing all the information available about all the user accounts on the computer atl-ws-001. That\u2019s great, except we don\u2019t want all the information available about all the user accounts on the computer; all we want to know is if a user account named kenmyer exists on that machine. How are we supposed to determine that<\/i>?<\/p>\n
No doubt there are a number of ways we could do this. For us the easiest approach was to take this collection and pipe it through the Select-Object<\/b> cmdlet, like so:<\/p>\n
Select-Object -expand Name\n<\/pre>\n
What\u2019s the point of doing that? Well, all we really care about is the Name<\/b> property; for this script none of the other user account properties matter to us in the least. Therefore, we use Select-Object to filter out all the properties and property values except for the user Name.<\/p>\n
So then what\u2019s the \u2013expand<\/b> thing for? Well, when you access the Name property each name comes back in the form of an array; if we just did Select-Object Name<\/b> we\u2019d get back something similar to this:<\/p>\n
{Administrator}\n{ASPNET}\n{Guest}\n{HelpAssistant}\n{jonhaas}\n{kenmyer}\n{SUPPORT_388945a0}\n<\/pre>\n
Strange, but true.<\/p>\n
Having each name come back as a little miniature array (each array containing a single name) complicates the process of determining whether a particular user account exists or not. Therefore, we use the \u2013expand<\/b> parameter to tell Select-Object to \u201cexpand\u201d the property value; in the case of an array, that simply means that we want to extract each and every value inside that array. That means that, ultimately, $colUsers will contain the following values:<\/p>\n
Administrator\nASPNET\nGuest\nHelpAssistant\njonhaas\nkenmyer\nSUPPORT_388945a0\n<\/pre>\n
At this point things become pretty easy. You say we need to determine whether or not a user account named kenmyer<\/i> exists on atl-ws-001? That\u2019s fine; after all, we can now use the \u2013contains<\/b> operator to determine whether or not the value kenmyer<\/i> appears as an item in our collection:<\/p>\n
$blnFound = $colUsers -contains \"kenmyer\"\n<\/pre>\n
The \u2013contains operator will return True ($True) if the user account exists, and return False ($False) if the user account doesn\u2019t exist. With that in mind, we can then use the following block of code to check the value of the variable $blnFound, and echo back the appropriate message:<\/p>\n
if ($blnFound)\n    {\"The user account exists.\"}\nelse\n    {\"The user account does not exist.\"}\n<\/pre>\n
And that\u2019s<\/i> how this script works!<\/p>\n
We hope that helps, MM. (Incidentally, we know you have a few other questions about PowerShell, and we\u2019ll see what we can do about answering them as well.) In the meantime, we encourage everyone to check out the Windows PowerShell Scriptomatic<\/b><\/a>. Oh, and we encourage the New York Yankees to give the Scripting Guy who writes this column a call. As you guys know better than anyone, you\u2019re currently paying outfielder Johnny Damon $13 million a year; you\u2019re also currently in last place in the American League East. We thought we should let you know that the Scripting Guy who writes this column is prepared to take Johnny Damon\u2019s place, and for a piddling $3 million a year at that.<\/p>\n
Oh: and that will almost guarantee<\/i> that you\u2019ll remain in last place in the American League East. Something to think about, eh?<\/p>\n","protected":false},"excerpt":{"rendered":"
Hey, Scripting Guy! How can I use Windows PowerShell to determine if a specified local user account exists on a computer?— MM Hey, MM. Have you ever heard the expression \u201cgood things come to those who wait\u201d? Well, to tell you the truth, the Scripting Guys have never put much credence in that old saying; […]<\/p>\n","protected":false},"author":595,"featured_media":87096,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[9,23,24,3,45],"class_list":["post-55503","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-scripting","tag-adsi","tag-local-accounts-and-windows-nt-4-0-accounts","tag-other-directory-services","tag-scripting-guy","tag-windows-powershell"],"acf":[],"blog_post_summary":"
Hey, Scripting Guy! How can I use Windows PowerShell to determine if a specified local user account exists on a computer?— MM Hey, MM. Have you ever heard the expression \u201cgood things come to those who wait\u201d? Well, to tell you the truth, the Scripting Guys have never put much credence in that old saying; […]<\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts\/55503","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/users\/595"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/comments?post=55503"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts\/55503\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/media\/87096"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/media?parent=55503"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/categories?post=55503"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/tags?post=55503"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}