Bulk creating users in AD?

[BassTech]

Hi all,

 

Recently moved from CC4 > Server 2012 R2 vanilla set-up. So far so good but I'm having a bit of an issue bulk creating users in AD, I'm using this tool: https://gallery.technet.microsoft.com/scriptcenter/New-User-Creation-tool-14fa73cd but I keep getting an error upon trying to create a test user:

 

 

Am am missing something glaringly obvious?

[rob_coles]

https://sourceforge.net/projects/adbulkadmin/

 

Best tool I've found for same job.

[kevin_lane]

Adinfitum is your best bet

[timbo343]

There is this piece of software http://www.edugeek.net/showthread.php?t=90648 which i still have the exe for if interested. It works by importing a csv file.

[BassTech]

I will give these tools a go, I need one that can set their profile & home folder paths, thanks

[kennysarmy]

In case it helps anyone here is my start of year routine:

 

 

Run "C:\Program Files (x86)\ActiveMan\ActiveMan.exe"

Action

New User Wizard

Import Users from a CSV

Tick users must change password

 

create CSV with eg:

5744,Sheppard,Libby,password,[email protected],10,10S1,Sheppard Libby

SAM account, Last name, First name, password, email address, Description, Office, Display name

 

T-accounts

username, Display name, password

 

 

In AD move new pupils to pupils OU - depending on year....

 

In AD add newly created pupils to pupils, papercut users, papercut year group & CAGPupils group highlight all new pupils, right click and choose Add members to group

 

 

 

 

****************************************************

 

EDIT BELOW TEXT FOR CORRECT YEAR GROUP...2013 - etc

 

Run pupils.bat on FP5 - creates folders and share.

 

pupils.bat format is:

 

@call mkdir.bat 7777

@call mkdir.bat 7778

@call mkdir.bat 7779

 

mkdir.bat on FP5 Server:

 

*****

mkdir D:\Users\PupilDrives\2016\%1

mkdir D:\Users\PupilDrives\2016\%1\Documents\Art

mkdir D:\Users\PupilDrives\2016\%1\Documents\Maths

mkdir D:\Users\PupilDrives\2016\%1\Documents\HistoryWork

mkdir D:\Users\PupilDrives\2016\%1\Documents\Geography

mkdir D:\Users\PupilDrives\2016\%1\Documents\Computing

mkdir D:\Users\PupilDrives\2016\%1\Documents\French

mkdir D:\Users\PupilDrives\2016\%1\Documents\Music

mkdir D:\Users\PupilDrives\2016\%1\Documents\Tech

mkdir D:\Users\PupilDrives\2016\%1\Documents\Tech\Food

mkdir D:\Users\PupilDrives\2016\%1\Documents\Tech\Product-Design

mkdir D:\Users\PupilDrives\2016\%1\Documents\Tech\Textiles

mkdir D:\Users\PupilDrives\2016\%1\Documents\PE

mkdir D:\Users\PupilDrives\2016\%1\Documents\RE

mkdir D:\Users\PupilDrives\2016\%1\Documents\Science

mkdir D:\Users\PupilDrives\2016\%1\Documents\Drama

mkdir D:\Users\PupilDrives\2016\%1\Documents\TutorSessions

mkdir D:\Users\PupilDrives\2016\%1\Documents\PSHE

mkdir D:\Users\PupilDrives\2016\%1\Documents\English

net share %1$ /d

net share %1$=D:\Users\PupilDrives\2016\%1 /users:5 /Grant:Everyone,full

echo y|cacls D:\Users\PupilDrives\2016\%1 /t /c /g %1:c "CREATOR OWNER":f "Domain Admins":f Staff:r Administrators:f

*****

 

 

 

 

Run pupils.bat on dc01-v from admin command prompt - create script path and h:\ drive path.

 

pupils.bat format is:

 

@call mkdir.bat 7777

@call mkdir.bat 7778

@call mkdir.bat 7779

 

mkdir.bat on Domain Controller:

 

*****

net user %1 /HOMEDIR:\\FP5\%1$

net user %1 /SCRIPTPATH:pupils.bat

*****

 

 

 

Amend R:\usernames.csv for staff to lookup real names to usernames

 

 

 

 

 

 

VLE:

 

Run Transfer Learners Routine.

 

 

 

 

PaperCut

 

Sync. users

[sparkeh]

Paid for but Dovestones Bulk AD Users is awesome: Active Directory User Import - AD Bulk Users

[SHimmer45]

powershell add user with a CSV works nicely

[sted]

powershell add user with a CSV works nicely

my only problem with powershell is you need a 2nd command to make a user a member of a group iirc whereas ds add you can do it as one long command. I just wrote a spreadsheet that you feed it names and you and it outputs dsadd/md/cacls command to create users/user areas/set permissions

[jtotheb]

Paid for but Dovestones Bulk AD Users is awesome: Active Directory User Import - AD Bulk Users

 

+1 for Dovestones. Used to use a super expensive, but pretty good one. Then used CSVs. This year was the first year of using Dovestones and I loved it, particularly the modify for changing 2000+ display names.

[ataylor]

Hi all,

 

Recently moved from CC4 > Server 2012 R2 vanilla set-up. So far so good but I'm having a bit of an issue bulk creating users in AD, I'm using this tool: https://gallery.technet.microsoft.com/scriptcenter/New-User-Creation-tool-14fa73cd but I keep getting an error upon trying to create a test user:

 

[ATTACH=CONFIG]38577[/ATTACH]

 

Am am missing something glaringly obvious?

 

https://gallery.technet.microsoft.com/scriptcenter/New-User-Creation-tool-14fa73cd

 

I'm using the tool you posted, works fine for me.

Edited September 9, 2016 by ataylor

[SHimmer45]

my only problem with powershell is you need a 2nd command to make a user a member of a group iirc whereas ds add you can do it as one long command. I just wrote a spreadsheet that you feed it names and you and it outputs dsadd/md/cacls command to create users/user areas/set permissions

 

yeah this is true i assume you could nest / chain the add user and group creation together, i still use net share cacls for the folder creation also as it still works nicely

[sted]

yeah this is true i assume you could nest / chain the add user and group creation together, i still use net share cacls for the folder creation also as it still works nicely

oh im sure you can but its still extra coding with an extra step that can go wrong for no real gain

[BassTech]

Paid for but Dovestones Bulk AD Users is awesome: Active Directory User Import - AD Bulk Users

 

Used the trial for Dovestones and managed to do it, it's just what I was looking for! I feel a purchase order coming on Thanks

[kennysarmy]

Used the trial for Dovestones and managed to do it, it's just what I was looking for! I feel a purchase order coming on Thanks

 

I'm trialling this now and it does look good.

[HPlum78]

PowerShell - connect to your golden data source for users (your flavour of MIS system) and have it create and disable users based on their status in the MIS system, while you are at it you can then get them injected it to the correct groups and the likes, also get their home dirs sorted out with the same PowerShell script and if the cloud kittens have got your string then kick of the creation and provisioning for O365 and the likes (can also do on prem exchange).

 

You get the picture I am sure and if you don't maybe Jeff will help you https://channel9.msdn.com/Events/WinOps/WinOps-Conf-2016/Jeffrey-Snover-on-DevOps do you live in Denver? I not saying that off the shelf solutions have not got a place as they do, but being able to taylor your own solutions is a far better place to be not only for your organisation but also for you personally, skill up.

 

https://gallery.technet.microsoft.com/scriptcenter/PowerShell-Create-Active-7e6a3978

 

The above link is just a starter, I know it is not connecting to an SQL data source but use the PS Gallery and PowerShell.org, guess i am saying use the community...

Edited September 15, 2016 by HPlum78
Added link

[kennysarmy]

PowerShell - connect to your golden data source for users (your flavour of MIS system) and have it create and disable users based on their status in the MIS system, while you are at it you can then get them injected it to the correct groups and the likes, also get their home dirs sorted out with the same PowerShell script and if the cloud kittens have got your string then kick of the creation and provisioning for O365 and the likes (can also do on prem exchange).

 

You get the picture I am sure and if you don't maybe Jeff will help you https://channel9.msdn.com/Events/WinOps/WinOps-Conf-2016/Jeffrey-Snover-on-DevOps do you live in Denver? I not saying that off the shelf solutions have not got a place as they do, but being able to taylor your own solutions is a far better place to be not only for your organisation but also for you personally, skill up.

 

https://gallery.technet.microsoft.com/scriptcenter/PowerShell-Create-Active-7e6a3978

 

The above link is just a starter, I know it is not connecting to an SQL data source but use the PS Gallery and PowerShell.org, guess i am saying use the community...

 

Or why re-invent the wheel.

 

[kennysarmy]

If any AD Bulk users can help with this it would be appreciated.

 

I'm trying to create a wildcard so that I can allocate students to a particular group, based on the "description" field.

 

My test CSV works when I use the wildcard in "destinationOU" field, but not in the AddtoGroup one.

 

 

Thanks.

[kennysarmy]

If any AD Bulk users can help with this it would be appreciated.

 

I'm trying to create a wildcard so that I can allocate students to a particular group, based on the "description" field.

 

My test CSV works when I use the wildcard in "destinationOU" field, but not in the AddtoGroup one.

 

[ATTACH=CONFIG]38681[/ATTACH]

 

Thanks.

 

Sorted.

 

memberOf

CN=Year %YearGroup% Group,OU=PaperCut,OU=School,DC=curriculum,DC=local

 

Seems to work.

[pcstru]

Or why re-invent the wheel.

Well, our focus groups didn't like the colour.

 

For me it is about reducing workload and maximising the value we get from our data and our systems. A tool like AD bulk users only goes part of the way to meeting out requirement and since it doesn't plug into the MIS, still leaves a stage where someone would be slicing and dicing data. So we have a few powershell functions :

 

Get-DBStudent - Retrieve student data from the MIS and supplies appropriate attributes for home folder locations, OU's etc. Can be used to retrieve one student, a group or all.

Check-AD - Checks AD to see if our user exists. We store Admission Number in AD so we have a 1:1 link back where there may be name clashes.

CreateStuAcc - Create the Student Account, email, shared storage, etc.

NewAccNotify - Notify tutors, helpdesk, head of ICT of the new account details (on bulk runs only one email is sent per tutor, listing all their new starts).

 

So in powershell creating any required new accounts for students and emailing details to tutors should be as simple as :

 

Get-DBStudent | Check-AD | CreateStuAcc | NewAccNotify

 

So no spreadsheets, no manual interventions to set OU's etc and it can easily be set to run automatically overnight. The downside is maintenance, year to year we seem to change the way we structure some pastoral information which always seems to break something. This year there were quite a lot of such changes but actually few changes in the code. Last year we changed the whole MIS system, but just had to re-write the Get-DBStudent part.

 

I do worry about maintenance if (when!) I leave but IMO the code has already paid for itself so the school can just scrap it all and it will still have been valuable.

[HPlum78]

Like @pcstru says and the simple fact is if the data structure changes you have to rejig the .csv anyhow. If you look @ it from where I sit you are already re-inventing the wheel by having to get data into a .csv. oh and I can also automate you with a simple script! Edited September 16, 2016 by HPlum78

[TheRobins]

I have been using Burconix network tools with great success for 2 years. Burconix Network Management Tools

 

It connects into SIMS and generates accounts for all staff and students. I love some of the features, end of years and start of year procedures take 5 minutes to complete, I have lovely spreadsheet with all new details on ready to give to students/staff on their first day.

 

Some of the great things I use

 

-Password Manager, allows staff to change pupil passwords easily.

-MIS Sync Photos. Takes Photos from SIMS and sync's this to AD, meaning when using Password manager they can see the picture of who they are resetting just to bypass and cheeky ones trying to access each others accounts

-CSV file creator. It will run a mass of reports using the user's details. I found this very handy when updating Show My Homework to work as single sign on and need to pass them a CSV with usernames and emails, took me 20 seconds to create.

-File Connector. Installs a small program on my file server used for student home drives and manages permissions, also deletes all files when students are removed. Can also move all documents seamlessly if I have to change their OU for some reason.

 

There are many more to list I use, simple things such as legal name change for a student which happens now and again, the software will make all these changes without any quibbles, Sounds like a sales pitch but I wouldn't suggest if it wasn't that good.

 

Attached are some screen shots of the user template function. Does what it says on the tin and lets me customise how they are configured, one of the more important tools is the group membership. Not so much for students here, but for staff I can just add of the Office 365 mail security groups into these are not worry about setting up their email membership unless they require specific permissions. Pricing is very fair as well, after looking at many systems wanting four figures for something I use once or twice a month this stood out, so glad I did it too.

 

[Oaktech]

I'm still using Active User Manager...

 

Here's the link to it... https://1drv.ms/f/s!AnkeacnDNvVsgXhbHegD_2_Yn2Em

[Davit2005]

Paid for but Dovestones Bulk AD Users is awesome: Active Directory User Import - AD Bulk Users

 

The support we had from Dovestones was absolutely supperb, we have since moved over to PowerShell but only as I had the time to develop the scripts. The positive thing about the scripts is you know exactly where the information is coming from and going into, completely customizable.

Edited October 13, 2016 by Davit2005

[mavhc]

Well, our focus groups didn't like the colour.

 

For me it is about reducing workload and maximising the value we get from our data and our systems. A tool like AD bulk users only goes part of the way to meeting out requirement and since it doesn't plug into the MIS, still leaves a stage where someone would be slicing and dicing data. So we have a few powershell functions :

 

Get-DBStudent - Retrieve student data from the MIS and supplies appropriate attributes for home folder locations, OU's etc. Can be used to retrieve one student, a group or all.

Check-AD - Checks AD to see if our user exists. We store Admission Number in AD so we have a 1:1 link back where there may be name clashes.

CreateStuAcc - Create the Student Account, email, shared storage, etc.

NewAccNotify - Notify tutors, helpdesk, head of ICT of the new account details (on bulk runs only one email is sent per tutor, listing all their new starts).

 

So in powershell creating any required new accounts for students and emailing details to tutors should be as simple as :

 

Get-DBStudent | Check-AD | CreateStuAcc | NewAccNotify

 

So no spreadsheets, no manual interventions to set OU's etc and it can easily be set to run automatically overnight. The downside is maintenance, year to year we seem to change the way we structure some pastoral information which always seems to break something. This year there were quite a lot of such changes but actually few changes in the code. Last year we changed the whole MIS system, but just had to re-write the Get-DBStudent part.

 

I do worry about maintenance if (when!) I leave but IMO the code has already paid for itself so the school can just scrap it all and it will still have been valuable.

 

Sounds awesome. You should open source it for everyone else, and hopefully they'll support it when you leave