In today’s fast-paced IT environments, efficiently managing user accounts is crucial. Whether you’re setting up a new department or onboarding a group of employees, creating multiple user accounts can be time-consuming. This is where PowerShell comes to the rescue! In this post, we’ll explore a script that automates the process of creating multiple Active Directory users from a CSV file.

The Problem: You need to create numerous user accounts in Active Directory, each with specific attributes, and doing this manually is error-prone and time-consuming.

The Solution: A PowerShell script that reads user information from a CSV file and creates corresponding Active Directory accounts.

Here’s the script:

# Import the Active Directory module
Import-Module ActiveDirectory

# Specify the path to your CSV file
$csvPath = "C:\Scripts\NewUsers.csv"

# Import the CSV file
$users = Import-Csv -Path $csvPath

# Loop through each user in the CSV
foreach ($user in $users) {
    # Generate a username (first initial + last name)
    $username = ($user.FirstName.Substring(0,1) + $user.LastName).ToLower()
    
    # Generate an email address
    $email = "$username@yourdomain.com"
    
    # Create a secure password
    $securePassword = ConvertTo-SecureString $user.Password -AsPlainText -Force
    
    # Specify the OU where the user account will be created
    $ou = "OU=NewUsers,DC=yourdomain,DC=com"
    
    # Create the new user account
    New-ADUser -Name "$($user.FirstName) $($user.LastName)" `
               -GivenName $user.FirstName `
               -Surname $user.LastName `
               -SamAccountName $username `
               -UserPrincipalName $email `
               -Path $ou `
               -AccountPassword $securePassword `
               -ChangePasswordAtLogon $true `
               -Enabled $true `
               -EmailAddress $email `
               -Title $user.JobTitle `
               -Department $user.Department
    
    Write-Host "Created user account for $($user.FirstName) $($user.LastName)"
}

Write-Host "User creation process complete!"

How it works:

1. The script imports the Active Directory module.
2. It reads user information from a specified CSV file.
3. For each user in the CSV, it:
   • Generates a username and email address.
   • Creates a secure password object.
   • Creates a new AD user with specified attributes.
4. It provides feedback for each created user.

To use this script:

1. Prepare a CSV file (NewUsers.csv) with columns: FirstName, LastName, Password, JobTitle, Department.
2. Modify the $csvPath variable to point to your CSV file.
3. Adjust the $ou variable to specify the correct Organizational Unit.
4. Update the email domain in the $email variable.
5. Run the script in PowerShell with appropriate permissions.

Example CSV content:

CopyFirstName,LastName,Password,JobTitle,Department
John,Doe,P@ssw0rd123!,Manager,Sales
Jane,Smith,Str0ngP@ss!,Developer,IT

Important considerations:

• Ensure you have the necessary permissions to create AD users.
• Be cautious with password handling; consider using a more secure method in production environments.
• Always test scripts in a non-production environment first.
• Comply with your organization’s security policies and password requirements.

This script can save hours of manual work when onboarding multiple users. You can easily extend it to include additional attributes or perform extra actions like adding users to specific groups.

PowerShell’s ability to interact with Active Directory makes it an invaluable tool for IT administrators. By automating repetitive tasks like user creation, you can focus on more strategic aspects of your role.

Remember, with great power comes great responsibility. Always double-check your CSV data and script logic before running bulk operations in your Active Directory environment.