create-user.ps1

<#
.SYNOPSIS
A simple bulk user import script which reads users from a .csv file and imports them into AD. Requires domain admin.
.DESCRIPTION
A simple bulk user import script which reads users from a .csv file and imports them into AD. Requires domain admin.
.PARAMETER CSVLocation
location of your .csv with usernames (string)
.PARAMETER password
Provide a password for all your users in the .csv file (string)
.PARAMETER IsDisabled 
Is a switch and doesn't require input. Disables the user account on creation (or more correctly: doesn't enable it) 
.EXAMPLE
./createuser.ps1
Reads users from a file named "users.csv", located in the working directory. It also provides the users with a default password of "Shazzamdepus1234" and ENABLES the account
.EXAMPLE
./createuser.ps1 $CSVLocation c:\scripts\bulkimport.csv -password "Test1234" -IsDisabled
Reads users from a file named "bulkimport.csv", located in the c:\scripts directory. It also provides the users with a custom password of "Test1234" and DISABLES the account
.NOTES
Author: Ken Vanden Branden
#>
#Allows extra parameters to be activated eg: -verbose
[CmdletBinding()]
#Either provide the parameters with values when executing the script or they will use the defaults below.
Param (
        [Parameter(Mandatory=$false, position=0)][string]$CSVlocation = ".\users.csv", # users.csv in same dir as the script
        [Parameter(Mandatory=$false, position=1)][string]$Password = "ShazzamDepus1234",
        [switch]$IsDisabled
        )
#See if csv is present
if(Test-Path $CSVlocation -PathType Leaf)
{
write-host "boe"

#Don't change the variables below.
$Domain= Get-ADDomain
$AlreadyExists = $false
$i = 0
$Datum = Get-Date
$Secpass = ConvertTo-SecureString $password -AsPlainText -Force
$Users = Import-Csv $CSVlocation | ForEach-Object {
$i++
#$AccountExist = get-aduser -Identity "$($_.GivenName)$($_.Surname)"
#write-host $AccountExist
        #Create the user with some properties
        #Other properties can be added as long as both the csv file and the new-aduser cmdlet are altered.
        if($_.Givenname.Length -GT 0 -and $_.surname.Length -GT 0 -and $_.Department.Length -GT 0 -and $_.title.length -GT 0)
        {
            try
            {
            #$_ gets lost between try and catch. Redefining.
            $Erroruser = $_
            new-aduser -GivenName $_.GivenName -Surname $_.Surname -Department $_.Department -Title $_.title -Name "$($_.GivenName) $($_.Surname)" -SamAccountName "$($_.GivenName)$($_.Surname)" -UserPrincipalName "$($_.GivenName).$($_.Surname)@$($domain.Forest)" -Description $datum -ErrorAction Stop
            Write-Verbose "$($Erroruser.GivenName) $($Erroruser.Surname) created"
            "$($Erroruser.GivenName) $($Erroruser.Surname) created" | Out-File c:\Create-user-log.txt -Append
            }
            catch
            {
            Write-Warning "$($Erroruser.GivenName) $($Erroruser.Surname) already exists, skipping creation"
            "$($Erroruser.GivenName) $($Erroruser.Surname) already exists, skipping creation"| Out-File c:\Create-user-errors.txt -Append
            #Set a flag to prevent changing an existing user's password.
            $AlreadyExists = $true
            }
                #Set users' password. Unless already exists
                if (-not($AlreadyExists))
                {
                Set-ADAccountPassword -Identity "$($_.GivenName)$($_.Surname)" -NewPassword $secpass -Reset
                #Force a user to change his pw at next logon
                Set-ADUser -ChangePasswordAtLogon:$true -Identity "$($_.GivenName)$($_.Surname)" -SmartcardLogonRequired:$false
                }
                    #Enable users' account unless the Isdisabled switch is used
                    if(-Not ($Isdisabled))
                    {
                    Enable-ADAccount -Identity "$($_.GivenName)$($_.Surname)"
                    }
        #Make sure the account is secure
        Set-ADAccountControl -AccountNotDelegated:$false -AllowReversiblePasswordEncryption:$false -CannotChangePassword:$false -DoesNotRequirePreAuth:$false `
        -Identity "$($_.GivenName)$($_.Surname)" -PasswordNeverExpires:$false -UseDESKeyOnly:$false
        
        
        }
        else
        {
        Write-warning "Info missing, some or all at line $i : Givenname, surname, department and title are required"
        "Info missing, some or all at line $i : Givenname, surname, department and title are required" | Out-File c:\Create-user-errors.txt -Append
        } 
       } 
}
else
{
"$Csvlocation does not exist" | Out-File c:\Create-user-errors.txt -Append
Write-warning "$Csvlocation does not exist"
}