function Create-LocalUser {
param (
[string]$computer = $env:computername,
[string]$fullname,
[string]$username,
[string]$password,
[switch]$passworddoesnotexpire,
[string]$addtogroup = 'Administrators',
[switch]$CheckFirst = $true
)
if (!$username -or !$password) {
throw 'no username or password'
}
if ($checkfirst -and ([ADSI]"WinNT://$computer/$username").Name) {
Write-Warning "$username already exists on $computer"
return
}
$objOU = [ADSI]"WinNT://$computer"
$objUser = $objOU.Create('user', $username)
$objUser.SetPassword($password)
$objUser.SetInfo()
$objUser.FullName = $fullname
$objUser.SetInfo()
#$objUser.Description = 'Test user'
#$objUser.SetInfo()
if ($passworddoesnotexpire) {
$objUser.UserFlags = 65536 # password does not expire
$objUser.SetInfo()
}
if ($addtogroup) {
([ADSI]"WinNT://$computer/$addtogroup").Add("WinNT://$computer/$username")
}
}
# Create-LocalUser -computer $env:COMPUTERNAME -fullname 'Test' -username 'test' -password 'Password1' -passworddoesnotexpire -addtogroup 'Administrators'
Comments