Windows Server Note (vi): Active directory Domain Services: New user

Once you've verified the installation of a domain, the first thing you should do is create a domain account:

A user account represents a physical entity, such as a person. You can also use a user account as a private service account for some applications.

A user account is also known as a security principal. A security principal is a directory object that is automatically assigned a security identifier (SID) that can be used to access domain resources. User accounts are primarily used for:

1, verify the identity of the user:

2. Authorization or denial of access to domain resources

To create a user using the Windows interface:

1. Right click on the OU you want to create the user, or select the OU, right-click on the right blank, and select "New"-"user";

650) this.width=650; "title=" 01.PNG "alt=" Wkiom1pnipxi0096aae3kplyh9m562.png "src=" http://s3.51cto.com/wyfs02/M00/ 3f/fe/wkiom1pnipxi0096aae3kplyh9m562.png "/>

2, fill in the Blank box user basic information, and then select "Next";

650) this.width=650; "title=" 02.PNG "alt=" Wkiol1pni_gxnf-waabyxx5d-ck498.png "src=" http://s3.51cto.com/wyfs02/M02/ 3f/fe/wkiol1pni_gxnf-waabyxx5d-ck498.png "/>

3, enter the user password, select the password attributes (there are 4 kinds); select "Next";

650) this.width=650; "title=" 03.PNG "alt=" Wkiom1pniwvgcnjgaabwmqjchuw720.png "src=" http://s3.51cto.com/wyfs02/M01/ 3f/fe/wkiom1pniwvgcnjgaabwmqjchuw720.png "/>

4, here can see some of the previous settings, select "Done";

650) this.width=650; "title=" 04.PNG "alt=" Wkiol1pnjmir5xddaabkjb8tzmw558.png "src=" http://s3.51cto.com/wyfs02/M00/ 3f/fe/wkiol1pnjmir5xddaabkjb8tzmw558.png "/>

Using commands (cmd or powershell):

1. In cmd: enter "dsadd user cn=pzyu,ou=it,dc=******,dc=local-pwd * * * * * * *"

where "cn=pzyu,ou=it,dc=******,dc=local" is UserDN, the argument behind "-pwd" is the password

Note that if you add the organizational unit is the system default, such as users, then in UserDN to change to "cn=pzyu,cn=users,dc=******,dc=local", there are many properties to create a user to manually add, This includes the user login name (the version after Windows Server 2003 has two methods of login, one is "user name @ domain name"; one is "Domain name \ username"; dsadd user creates only the latter);

650) this.width=650; "title=" 1111.PNG "alt=" Wkiol1pnnjqjmxldaaarta1ucjs058.png "src=" http://s3.51cto.com/wyfs02/ M00/3f/fe/wkiol1pnnjqjmxldaaarta1ucjs058.png "/>

2, PowerShell: In PowerShell can use New-aduser new user, where-name is followed by the display name,-path followed by the path of the account,-samaccountname is the SAM account (that is, the domain \ Account, is the old format of the login method, where you can enter the user name directly, do not use the input domain name \ username,-userprincipalname is the UPN login (that is, the user name @ domain name); More New-aduser parameters can be viewed:/http Technet.microsoft.com/en-us/library/ee617253.aspx

650) this.width=650; "title=" 123333.PNG "alt=" Wkiol1prgzecdqvkaabjqgqgqxc925.png "src=" http://s3.51cto.com/wyfs02/ M01/41/2a/wkiol1prgzecdqvkaabjqgqgqxc925.png "/>

It's easy to create a user, but what if I have dozens of or even hundreds of users?

Then we need to use the batch to create a new user:

1, we put these users into the corresponding parameters, save to CSV format, the preceding parameters I think I do not need to say anything, see the meaning of the word should understand, to say is the last userAccountControl, because Csvde can not set the password, it is recommended to use 514, Disable account; 650) this.width=650; "title=" 14.PNG "alt=" Wkiom1prjkfsc8joaabvbqzy_jk393.png "src=" Http://s3.51cto.com/wyfs02 /m00/41/2a/wkiom1prjkfsc8joaabvbqzy_jk393.png "/>

2, in PowerShell or cmd input: csvde-i-F d:\user.csv (where d:\user.csv is the path of the user to save the file); csvde detailed parameters: http://technet.microsoft.com/ zh-cn/library/cc772704 (ws.10). aspx

650) this.width=650; "title=" 15.PNG "alt=" Wkiom1prju7b0ttwaaai-wvodfk436.png "src=" http://s3.51cto.com/wyfs02/M01/ 41/2a/wkiom1prju7b0ttwaaai-wvodfk436.png "/>

3, after the completion of the command, you will be prompted to command has been completed;

650) this.width=650; "title=" 16.PNG "alt=" Wkiom1prjqhtintdaaa_za2xece068.png "src=" http://s3.51cto.com/wyfs02/M01/ 41/2a/wkiom1prjqhtintdaaa_za2xece068.png "/>

4, but the new user account is disabled, we need to enable the account;

650) this.width=650; "title=" 17.PNG "alt=" Wkiom1prjsvizd7qaacj-ciliie712.png "src=" http://s3.51cto.com/wyfs02/M01/ 41/2a/wkiom1prjsvizd7qaacj-ciliie712.png "/>

5, directly enable, you will find that can not be enabled, because these user account password requirements can not meet the policy requirements;

650) this.width=650; "title=" 18.PNG "alt=" Wkiom1prjxhiymgtaaa0ythqwug191.png "src=" http://s3.51cto.com/wyfs02/M02/ 41/2b/wkiom1prjxhiymgtaaa0ythqwug191.png "/>

6. Create a new text document, enter "for/f" Tokens=1 "%%a in (user.txt) do dsquery user-samid%%a | dsmod user-pwd [email protected] "(quotation marks do not need to input, [email protected] is the set password, User.txt is the input needs to change the password of the user name) saved to User.bat;

650) this.width=650; "title=" A.png "alt=" Wkiol1prkqiasrl0aaaagmz6ww4903.png "src=" http://s3.51cto.com/wyfs02/M01/ 41/2b/wkiol1prkqiasrl0aaaagmz6ww4903.png "/>

7, in User.txt Enter the user name that needs to change the password, double-click Run Setup.bat

650) this.width=650; "title=" 19.PNG "alt=" Wkiom1prj2pwwod9aabz_r8bc-k981.png "src=" http://s3.51cto.com/wyfs02/M00/ 41/2b/wkiom1prj2pwwod9aabz_r8bc-k981.png "/>

Bulk Modify domain user password tool download: http://down.51cto.com/data/1611906

8, after resetting the password, select all the users to enable, right click, select "Enable Account";

650) this.width=650; "title=" 20.PNG "alt=" Wkiom1prkrwrq5g7aad24gbnynk401.png "src=" http://s3.51cto.com/wyfs02/M00/ 41/2b/wkiom1prkrwrq5g7aad24gbnynk401.png "/>

9, enable will prompt has enabled the selected object, select "OK";

650) this.width=650; "title=" 21.PNG "alt=" Wkiol1prlbdzgxdraaavzedmw7u217.png "src=" http://s3.51cto.com/wyfs02/M02/ 41/2b/wkiol1prlbdzgxdraaavzedmw7u217.png "/>

Of course, there are many ways to create new users, such as net user, Ldifde, but I do not feel very convenient, all did not write, if you want to know, you can look at:

Http://baike.baidu.com/link?url=TDXYJnrwVrDhh4joX2N-SpYi3DplfxhU9g8k0pxUyOx6RgPupeWQnxHv59ZAMEsj

http://technet.microsoft.com/zh-cn/library/cc755456 (ws.10). aspx

This article is from the "Snow Orchid" blog, please be sure to keep this source http://yupeizhi.blog.51cto.com/3157367/1530523

Windows Server Note (vi): Active directory Domain Services: New user