Creating new user in AD

Question

Hi all,
I am trying to write a script to create new user in Active Directory using power-shell
$sam = "13653123"
try{
get-aduser -Identity $sam -ErrorAction Stop
catch [Microsoft.ActiveDirectory.Management.ADIdentityNotFoundException]
$error1= [System.Windows.Forms.MessageBox]::Show("ERROR : Account Not found")
$SamAccountName = $sam
$gn = "Jack Sparrow"
$Initials = "ZX"
$dn = "$gn "+" $Initials"
$Department = "1260"
$title = "AM"
$pwd1 = read-host "Please enter the password"
$pwd2 = read-host "Please enter the password"
if($pwd1 -eq $pwd2)
$pwd = $pwd1 = $pwd2
try
$userprinicpalname = $SamAccountName + "@XXX.com"
New-ADUser -SamAccountName $SamAccountName -UserPrincipalName $userprinicpalname -GivenName $gn -Initials $Initials -Name $dn -DisplayName $dn -Title $title -Department $Department -Office $Department -Path "OU=XXXX,DC=XXX,DC=com" -AccountPassword (ConvertTo-SecureString $pwd -AsPlainText -force) -Enabled $True -PasswordNeverExpires $False -ErrorAction Stop
catch [Microsoft.ActiveDirectory.Management.ADPasswordComplexityException]
$error7= [System.Windows.Forms.MessageBox]::Show("ERROR : The password you entered doesnot meet the complexity set in the Password Policy" )
break
else
$error2= [System.Windows.Forms.MessageBox]::Show("ERROR : passwords donot match")
I am getting issue when The password complexity error is coming. It is showing up the error in the catch, but it is creating the account in AD and disabling it. 
What I want is if any error is found and caught in the catch, then the user should not be created. How to do that?
Please provide your valuable suggestions and help me out
Naveen Basati

Answer 1

This is a good way to get teh paassword to abort when it fails the test.
function Test-Password{
Param($Password)
Try{
$pwd=ConvertTo-SecureString $Password -AsPlainText -force
Set-ADAccountPassword testuser11 -NewPassword $pwd –Reset
# it worked so return the encrypted password
$pwd
Catch{
Throw $_
$sam = "13653123"
if(get-aduser -Filter "SamAccountName -eq $sam"){
Write-Host 'User already exists' -ForegroundColor green
}else{
Try{
$pwdText='x123!heLno34' # 3 levels of compexity plus length > 9
$pwd=Test-Password $pwdText
$given='Jack'
$surname='Sparrow'
$Initials='Z'
$Department='1260'
$title='AM'
$props=@{
SamAccountName=$sam
UserPrincipalName="$[email protected]"
GivenName=$given
Initials=$Initials
Name="$given $initials $surname"
DisplayName="$given $initials $surname"
Title=$title
Department=$Department
Office=$Department
Path='OU=TestOU,DC=testnet,DC=local'
AccountPassword=$pwd
Enabled=$True
PasswordNeverExpires=$False
New-ADUser @props -ErrorAction Stop
Catch{
throw $_
We just re-throw the error and it propagates to the outer try/catch block.
¯\_(ツ)_/¯