This section we'll talk about creating and managing users and groups.
Now when we have a forest and domain installed the next step is to add some users to our domain.
Now we'll start with added simple user then we'll create a group of users will create a new group and
then add a group of users into that group using a filter to ensure that we add to the correct set of
users then we'll create a new organizational unit over you and move users and computers into the old
you.
It's essential for any domain administrator to know how to do these simple tasks will be using the Folarin
active directories in those partial nouns.
Use or Adey group Aidy group member Adeeb account password Adey principle group membership.
Every object and 80 computer will also be used in the following commands.
Import Desch says fi convert to dasht securest dream.
Get this command.
Test this path read dish host Ryders host.
So let's get started with creating users.
We can use you this Adey user comments lead to create new users most Kulick properties can be directly
edited by using the parameters of a new address.
The user command left.
There are a lot of parameters which could be used by this command let the field step will get the user
account which is associated with administrator with get Dash 80 user Desch identity administrator.
This account should be really well secured.
So will add a new account to replace the Administrator account to add a new user to you.
Then you'd Dash 80 user command left.
There are three basic ways to use new address.
A The user command left.
We can create an user by specifying all details on the command line.
We can create a user from a template object either one you create or an existing user or we can use
s.c.s the file to create multiple users from a list of users and properties.
Let's create our first user by specifying all details on the command line.
We need to specify the settings for the new user at the command line.
Then we need to add the user to the appropriate Active Directory domain services security groups.
Now let's add a variable secure password.
We'll call this horrible password.
So let's type Dolor character Basford and it will be equal to read the host command prompt and to parse
14 quotes and we needed a secure stream.
Then we'll use this command and you dash 80 user with the following parameter name account password
same account password display name email address enabled given name and pass through parameter.
Also password never expires parameter.
Surname and user principle name very toast prompt for a password and mosques that the user enters and
the results are then you.
Does the user command is as follows.
Because we've used parse through parameter.
This creates our first user but doesn't make the user a member of any domain security groups except
domain users.
The default one to add the user to security groups we need to use the AT DESK Adey group member command
left.
And because the goal is to give James the same set of security group says that Administrator account
will use Windows power shell to get the list of security groups that the administrator is a member of
and then goes through the list and add James to each of the groups.
So we're using the following code for this as we can tell from the get.
Does the user command in this code count.
James is now a member of five security groups.
Group Policy creator owners domain admins enterprise cerements schema garments and administrators of
the same security groups to which their administrator account belongs will want to come back to as groups
later.
But now let's focus on users first.
There are multiple ways to end users in a batch.
But probably the simplest is to use a C S V file.
You can easily create this file in Microsoft Excel or any plain text editor and then use Windows powers
child to read the values and this is free file and add the users to read this is the file that you import.
Import Dursley come on left.
Now let's recap and take a closer look what we've done.
First we checked the identity of the user administrator.
Then we've created our variable password which will read the host to know what pass for to use for you
then.
Then live used.
New this 80 user will follow in parameters and one of them was the account password.
So we have used the tree and lived inserted before in the past.
First wearable this account in the Active Directory Users and Computers will right click on the domain
and find the needed user will be used for James name.
As you can see this user is created successfully.
After that we've caught that all the groups from Administrator account to Louis James account we've
created a variable super user groups which is equal to the two that follow in command.
Let's we around get this say the user with identity parameter administrator and Propertius parameter.
We are looking for all the properties of a list user.
This asterisks character means that we are looking for all the properties of the Folarin account and
also with looking for the member of property of the full only user.
After that we add in the user James to all the groups of the user administrator.
Now let's check the user James in active directory users and computers and we'll be looking for his
group's properties.
And as you can see the user James is the member of the same groups as the user administrator.
Then they're importune users from the seeis we file first.
I created the file inserts format and put it into a folder on my local drive like check this file.
It contains all the properties which are needed to be added to the new users like display name given
name name surname as a m account name.
Also the property that this account will be enabled after ad in it.
Also we've got password never expires property in place user principal name account password which will
be equal to the following stream.
Now let's find the following user an active directory users and computers will be looking for user John.
And as you can see all the surgeons are in place such as username surname same account name Basford
never expires property.
And as you can imagine you can get as many users as you need to this file.
You can also add those users to the groups unit.
And of course you can add the properties unit to this users like email account department and so on.