Creating user from template in powershell - Server 2012 R2

I've been research online how to create a user from a template in powershell and so far can't get it to work. Here is what I'm using:
$instance = Get-ADUser –identity template_user
New-ADUser –SamAccountName Test_Scripts –Instance $instance –Name “Test Scripts” –Enabled:$false
I'm getting an error saying the operation failed because UPN value is not unique. This is a very strange error to me, because it is saying that about the "-Instance" account. But of course that one isn't unique. That's the template.
If I remove "-Instance $instance" from the code, it works just fine and creates the account, just not from a template, obviously.
Any ideas? Below is the entire pasted error.
New-ADUser : The operation failed because UPN value provided for addition/modification is not unique forest-wide
At line:1 char:1
+ New-ADUser –SamAccountName Test_Scripts –Instance $instance –Name “Test Scripts” ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (CN=Test Scripts...domain,DC=com:String) [New-ADUser], ADException
+ FullyQualifiedErrorId : ActiveDirectoryServer:8648,Microsoft.ActiveDirectory.Management.Commands.NewADUser

Hi,
You'll need to supply a unique UPN for the new user by adding in the -UserPrincipalName parameter.
http://ss64.com/ps/new-aduser.html
Don't retire TechNet! -
(Don't give up yet - 13,225+ strong and growing)

Similar Messages

Integration pack to create user from template

Does anybody know if the Orchestrator 2012 Sp1 active directory integration pack has a way to create user from a template?
I believe there is a create user but not from a template.
Thanks
Lance
Thanks Lance

Hi Lance,
you are right. There's no "Create User from template" or "Copy User" Activity in the Integration pack for Active Directory in System Center SP1 or R2.
Perhaps, you can use "Get User" to get some settings from the template and subscribe the results to "Create User" Activity.
Regards,
Stefan
www.sc-orchestrator.eu ,
Blog sc-orchestrator.eu

User Rights Delegation via Powershell (Server 2012)

Hi
In the Exam Ref 70-414 book the author refers the the following powershell cmdlets in server 2012 to assign /delegate user rights by using the constant names.
The cmdlets;
Get-privilege
Grant-privilege
Revoke-privilege
Test-privilege
I am not sure if i'm missing something blatantly, but i seem not to find any information or syntax on this, even after updating powershell help, it doesn't recognize the cmdlets.
Any help will be appreciated.

Here this will tide you over:
PS C:\scripts> function Get-Privileges{whoami /priv /fo csv|Out-String|convertFrom-Csv}
PS C:\scripts> Get-Privileges
Privilege Name Description State
SeShutdownPrivilege Shut down the system Disabled
SeChangeNotifyPrivilege Bypass traverse checking Enabled
SeUndockPrivilege Remove computer from docking station Disabled
SeIncreaseWorkingSetPrivilege Increase a process working set Disabled
SeTimeZonePrivilege Change the time zone Disabled
¯\_(ツ)_/¯

ABAP class to create doc. from template

Hi all,
Does anybody know if is there any ABAP class which can call the "Create with template" functionality?
The idea is to create an action associated with the Service Ticket, which will create a document from template (Content Management functionality) when the Service Ticket is closed.
We could use SmartForms, but it seems to have some restrictions:
. Template maintenance is not so user frindly (the content management templates can be created/mantained in MS Word)
. The document is not stored within the Service Ticket context
Kind regards,
Dora

Hi Lance,
you are right. There's no "Create User from template" or "Copy User" Activity in the Integration pack for Active Directory in System Center SP1 or R2.
Perhaps, you can use "Get User" to get some settings from the template and subscribe the results to "Create User" Activity.
Regards,
Stefan
www.sc-orchestrator.eu ,
Blog sc-orchestrator.eu

Bulk Create Users from CSV: Error: "Put": "There is no such object on the server."?

Hi,
I'm using the below PowerShell script, by @hicannl which I found on the MS site, for bulk creating users from a CSV file.
I've had to edit it a bit, adding some additional user fields, and removing others, and changing the sAMAccount name from first initial + lastname, to firstname.lastname. However now when I run it, I get an error saying:
"[ERROR] Oops, something went wrong: The following exception occurred while retrieving member "Put": "There is no such object on the server."
The account is created in the default OU, with the correct firstname.lastname format, but then it seems to error at setting the "Set an ExtensionAttribute" section. However I can't see why!
Any help would be appreciated!
# ERROR REPORTING ALL
Set-StrictMode -Version latest
# LOAD ASSEMBLIES AND MODULES
Try
Import-Module ActiveDirectory -ErrorAction Stop
Catch
Write-Host "[ERROR]`t ActiveDirectory Module couldn't be loaded. Script will stop!"
Exit 1
#STATIC VARIABLES
$path = Split-Path -parent $MyInvocation.MyCommand.Definition
$newpath = $path + "\import_create_ad_users_test.csv"
$log = $path + "\create_ad_users.log"
$date = Get-Date
$addn = (Get-ADDomain).DistinguishedName
$dnsroot = (Get-ADDomain).DNSRoot
$i = 1
$server = "localserver.ourdomain.net"
#START FUNCTIONS
Function Start-Commands
Create-Users
Function Create-Users
"Processing started (on " + $date + "): " | Out-File $log -append
"--------------------------------------------" | Out-File $log -append
Import-CSV $newpath | ForEach-Object {
If (($_.Implement.ToLower()) -eq "yes")
If (($_.GivenName -eq "") -Or ($_.LastName -eq ""))
Write-Host "[ERROR]`t Please provide valid GivenName, LastName. Processing skipped for line $($i)`r`n"
"[ERROR]`t Please provide valid GivenName, LastName. Processing skipped for line $($i)`r`n" | Out-File $log -append
Else
# Set the target OU
$location = $_.TargetOU + ",$($addn)"
# Set the Enabled and PasswordNeverExpires properties
If (($_.Enabled.ToLower()) -eq "true") { $enabled = $True } Else { $enabled = $False }
If (($_.PasswordNeverExpires.ToLower()) -eq "true") { $expires = $True } Else { $expires = $False }
If (($_.ChangePasswordAtLogon.ToLower()) -eq "true") { $changepassword = $True } Else { $changepassword = $False }
# A check for the country, because those were full names and need
# to be land codes in order for AD to accept them. I used Netherlands
# as example
If($_.Country -eq "Netherlands")
$_.Country = "NL"
ElseIf ($_.Country -eq "Austria")
$_.Country = "AT"
ElseIf ($_.Country -eq "Australia")
$_.Country = "AU"
ElseIf ($_.Country -eq "United States")
$_.Country = "US"
ElseIf ($_.Country -eq "Germany")
$_.Country = "DE"
ElseIf ($_.Country -eq "Italy")
$_.Country = "IT"
Else
$_.Country = ""
# Replace dots / points (.) in names, because AD will error when a
# name ends with a dot (and it looks cleaner as well)
$replace = $_.Lastname.Replace(".","")
$lastname = $replace
# Create sAMAccountName according to this 'naming convention':
# <FirstName>"."<LastName> for example
# joe.bloggs
$sam = $_.GivenName.ToLower() + "." + $lastname.ToLower()
Try { $exists = Get-ADUser -LDAPFilter "(sAMAccountName=$sam)" -Server $server }
Catch { }
If(!$exists)
# Set all variables according to the table names in the Excel
# sheet / import CSV. The names can differ in every project, but
# if the names change, make sure to change it below as well.
$setpass = ConvertTo-SecureString -AsPlainText $_.Password -force
Try
Write-Host "[INFO]`t Creating user : $($sam)"
"[INFO]`t Creating user : $($sam)" | Out-File $log -append
New-ADUser $sam -GivenName $_.GivenName `
-Surname $_.LastName -DisplayName ($_.LastName + ", " + $_.GivenName) `
-StreetAddress $_.StreetAddress -City $_.City `
-Country $_.Country -UserPrincipalName ($sam + "@" + $dnsroot) `
-Company $_.Company -Department $_.Department `
-Title $_.Title -AccountPassword $setpass `
-PasswordNeverExpires $expires -Enabled $enabled `
-ChangePasswordAtLogon $changepassword -server $server
Write-Host "[INFO]`t Created new user : $($sam)"
"[INFO]`t Created new user : $($sam)" | Out-File $log -append
$dn = (Get-ADUser $sam).DistinguishedName
# Set an ExtensionAttribute
If ($_.ExtensionAttribute1 -ne "" -And $_.ExtensionAttribute1 -ne $Null)
$ext = [ADSI]"LDAP://$dn"
$ext.Put("extensionAttribute1", $_.ExtensionAttribute1)
Try { $ext.SetInfo() }
Catch { Write-Host "[ERROR]`t Couldn't set the Extension Attribute : $($_.Exception.Message)" }
# Move the user to the OU ($location) you set above. If you don't
# want to move the user(s) and just create them in the global Users
# OU, comment the string below
If ([adsi]::Exists("LDAP://$($location)"))
Move-ADObject -Identity $dn -TargetPath $location
Write-Host "[INFO]`t User $sam moved to target OU : $($location)"
"[INFO]`t User $sam moved to target OU : $($location)" | Out-File $log -append
Else
Write-Host "[ERROR]`t Targeted OU couldn't be found. Newly created user wasn't moved!"
"[ERROR]`t Targeted OU couldn't be found. Newly created user wasn't moved!" | Out-File $log -append
# Rename the object to a good looking name (otherwise you see
# the 'ugly' shortened sAMAccountNames as a name in AD. This
# can't be set right away (as sAMAccountName) due to the 20
# character restriction
$newdn = (Get-ADUser $sam).DistinguishedName
Rename-ADObject -Identity $newdn -NewName ($_.LastName + ", " + $_.GivenName)
Write-Host "[INFO]`t Renamed $($sam) to $($_.GivenName) $($_.LastName)`r`n"
"[INFO]`t Renamed $($sam) to $($_.GivenName) $($_.LastName)`r`n" | Out-File $log -append
Catch
Write-Host "[ERROR]`t Oops, something went wrong: $($_.Exception.Message)`r`n"
Else
Write-Host "[SKIP]`t User $($sam) ($($_.GivenName) $($_.LastName)) already exists or returned an error!`r`n"
"[SKIP]`t User $($sam) ($($_.GivenName) $($_.LastName)) already exists or returned an error!" | Out-File $log -append
Else
Write-Host "[SKIP]`t User $($sam) ($($_.GivenName) $($_.LastName)) will be skipped for processing!`r`n"
"[SKIP]`t User $($sam) ($($_.GivenName) $($_.LastName)) will be skipped for processing!" | Out-File $log -append
$i++
"--------------------------------------------" + "`r`n" | Out-File $log -append
Write-Host "STARTED SCRIPT`r`n"
Start-Commands
Write-Host "STOPPED SCRIPT"

Here is one I have used. It can be easily updated to accommodate many needs.
function New-RandomPassword{
$pwdlength = 10
$bytes = [byte[]][byte]1
$pwd=[string]""
$rng=New-Object System.Security.Cryptography.RNGCryptoServiceProvider
while (!(($PWD -cmatch "[a-z]") -and ($PWD -cmatch "[A-Z]") -and ($PWD -match "[0-9]"))){
$pwd=""
for($i=1;$i -le $pwdlength;$i++){
$rng.getbytes($bytes)
$rnd = $bytes[0] -as [int]
$int = ($rnd % 74) + 48
$chr = $int -as [char]
$pwd = $pwd + $chr
$pwd
function AddUser{
Param(
[Parameter(Mandatory=$true)]
[object]$user
$pwd=New-RandomPassword
$random=Get-Random -minimum 100 -maximum 999
$surname="$($user.Lastname)$random"
$samaccountname="$($_.Firstname.Substring(0,1))$surname"
$userprops=@{
Name=$samaccountname
SamAccountName=$samaccountname
UserPrincipalName=“$[email protected]”)
GivenName=$user.Firstname
Surname=$surname
SamAccountName=$samaccountname
AccountPassword=ConvertTo-SecureString $pwd -AsPlainText -force
Path='OU=Test,DC=nagara,DC=ca'
New-AdUser @userprops -Enabled:$true -PassThru | |
Add-Member -MemberType NoteProperty -Name Password -Value $pwd -PassThru
Import-CSV -Path c:\users\administrator\desktop\users.csv |
ForEach-Object{
AddUser $_
} |
Select SamAccountName, Firstname, Lastname, Password |
Export-Csv \accountinformation.csv -NoTypeInformation
¯\_(ツ)_/¯

Error has come while creating USER from SU01

Dear Expert,
I have got typical error while creating user from T-Code SU01.
Problem is like that : I suppose to use SU01 and "User Maintanace: Initial Screen
has come. Now I put the new user name like ABAP2008 or FI2008 (what ever the name thats hardly matter) and click on CREAT button then next screen Maintain User has been appeared.In this screen Address TAB is on and asking for fillup all the required user information.So I have been made all information like :First name /Last name /Tele ph/Fax / email etc etc. After complete this tab when I clicked on next tab is called "LOGON DATA, it has been given a error "Specify a valid country indicator
Message no. T5027" . Even thogh I didn't able to go to next screen LOGON DATA.Because of these problem I doesn't able to creat a user.
SAP : IDES version ECC 6
DB:SQL2005
OS: Windows 2003 server
Please do the needfull
Thanks & Regards
Pavel

Hey Pavel,
Are you using ECC with ISU.. ? I am not sure but I feel your issue can be solved with information provided in SAPnote,
Note 1046566 - EC70: address-independent telephone number no country.
The system does not transfer any country from the master data template with the address-independent telephone number. The system issues the warning message T5027 "Specify a valid country indicator".
All the best !

Cannot create Hyper-V external virtual switch Server 2012 R2

Hi,
I am unable to create an external virtual switch on server 2012 R2. I have two Broadcom NICS bridged on a DC fully functional now. I can install Hyper-V but the option is grayed out to create an external switch. I try binding it to the
network bridge, connecting my two NICS and it makes no difference.
Am I correct in assuming that I cannot use Hyper-V on this server if the two NICS are bridged?

try command "New-VMSwitch" from Powershell to get more information
Windows 2012 & Hyper-V: Converged Network and QoS
Hyper-V Virtual Switch 101: How to create and use Virtual Switches to connect Virtual Machines to Network
Have a nice day !!!

Can't create VM from template

Hello,
I'm getting this error when creating VM from template:
failed: <Exception: Error updating the image.> StackTrace: File "/opt/ovs-agent-2.2/OVSSiteVM.py", line 471, in config_vm raise Exception("Error updating the image.")
The VM is actually created despite this message bot when I try to power it up I'm getting another error:
failed:<Exception: ['xm', 'list', '478_CITConnect_Internal_TEST']=>Error: Domain '478_CITConnect_Internal_TEST' does not exist. > StackTrace: File "/opt/ovs-agent-2.2/OVSXXenStore.py", line 192, in xen_get_vnc_port vm_id = xen_get_vm_id(vm_path) File "/opt/ovs-agent-2.2/OVSXXenStore.py", line 34, in xen_get_vm_id stdout = run_cmd(args = ["xm", "list", vm_name]) File "/opt/ovs-agent-2.2/OVSCommons.py", line 98, in run_cmd raise Exception('%s=>%s' % (cmdlist, p.childerr.read()))
The template was copied from another VM pool (where it works fine, version 2.1.1) to a newly configured VM Server (2.1.5).
The new server is configured for HA (shared storage) and I was able to create VM from ISO without any problem there.
The template was created from existing VM (Oracle EL4 PV) running on the "old" server.
Any ideas where I should look into?
Thanks
Jan
Edited by: Honza on Jul 9, 2009 10:48 AM

It's all sorted now.
What I've learnt: OVS/Xen hypervisor doesn't seem to handle 4kB iSCSI block sizes.
I had to change it to 512 bytes (configuration on the iSCSI storage - nothing on the Oracle VM side) and re-create all volumes.
Just in case you experience something similar...
Honza

Remove Templates from Create Incident From Template Selection

Originally all users had access to all of the templates created, however now that we have been using SCSM for a while the number of templates created has started to grow and make the Create Incident From Template Screen difficult to navigate. I am
trying to limit the number of templates each team sees based on security group, however when I uncheck the templates from the Form Templates section of the User Role, they continue to display for all users. Is there somewhere else I have to go in and
change this that I am missing?

Hi,
Take a look at this thread:
http://social.technet.microsoft.com/Forums/systemcenter/en-US/d0b64ab8-ea5a-4426-968e-77675193473f/hiding-templates-from-console-users-while-still-effectively-using-the-end-user-role?forum=administration
(By default the End User role has access to all templates, and the members of that role is Authenticated Users)
Regards
//Anders
Anders Asp | Lumagate | www.lumagate.com | Sweden | My blog: www.scsm.se

How to create user defined metrics for SQL Server target?

The customer is not able to create a user defined metrics for SQL Server target.
This is very important for him to use this product.
He is asking how to create user defined metrics?
I sent him Note 304952.1 How to Create a User-Defined SQL Metric in EM 10g Grid Control
But it would work for an Oracle DB, but his target is SQL Server DB
Not able to find the "User-Defined Metrics" link from Database home page.
How to create user defined metrics for SQL Server target?

http://download-uk.oracle.com/docs/cd/B14099_19/manage.1012/b16241/Monitoring.htm

Is there an application to monitor users who log into Windows Server 2012 R2?

I'm looking at Family Safety Feature in Windows 8 and like what they can do. I have a request to monitor, track users who log into Windows Server 2012 R2 to see how many users login, how long each login is for each user so a monthly report can be generated.
1. I just wonder if Windows Essential 2012 can be used for this purpose or not. If it can, is Windows Essential 2012 a feature can be added or installed on Windows Server 2012 R2?
2. If Window Essential 2012 cannot be used for this purpose, is there any feature in Windows Server 2012 R2 that can be used for this purpose?
3. Is there any other suggestions?
Thank you for your help.
Thanks and Regards,
Hien Phan

Hi Hien,
Anything updates?
It seems that there is no feature can do that. I agree with Tim that you can check the event logs. In general, the event 4624 would be created when a user was logged on, and the event 4634 would be created when a user account was logged
off.
More information:
Tracking User Logon Activity Using Logon Events
Best regards,
Susie
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Password Violation error while creating users from Admin interface

Guys,
The Sun Identity Manager system throws policy violation error while creating users from Sun Identity Manager Admin interface.
Current System:
1. I have configured TAM Pass-Thru authentication for End User Login Application.
2. I have an admin user 'testsjimadmin1' who has admin capabilities. testsjimadmin1 user has default SJIM password policy.
3. I have custom password policies configured for different orgainizatoions
Problem:
1. The Sun Identity Manager throws a password policy violation error when 'testsjimadmin1' tries to create an user with valid or invalid password from Sun Identity Manager Admin interface.
2. If TAM Pass-thru authentication is removed for 'End User Login Application' and Sun Identity Manager default authentication is configured for 'End User Login Application' then testsjimadmin1 was able to create user successfully without any errors.
Please let me know if any configurations are required to be made on Sun Identity Manager for TAM Pass-Thru authentication so that admin users can create users successfully from admin interface.
Appreciate your help!!!
Thanks
Vijay

Guys,
The Sun Identity Manager system throws policy violation error while creating users from Sun Identity Manager Admin interface.
Current System:
1. I have configured TAM Pass-Thru authentication for End User Login Application.
2. I have an admin user 'testsjimadmin1' who has admin capabilities. testsjimadmin1 user has default SJIM password policy.
3. I have custom password policies configured for different orgainizatoions
Problem:
1. The Sun Identity Manager throws a password policy violation error when 'testsjimadmin1' tries to create an user with valid or invalid password from Sun Identity Manager Admin interface.
2. If TAM Pass-thru authentication is removed for 'End User Login Application' and Sun Identity Manager default authentication is configured for 'End User Login Application' then testsjimadmin1 was able to create user successfully without any errors.
Please let me know if any configurations are required to be made on Sun Identity Manager for TAM Pass-Thru authentication so that admin users can create users successfully from admin interface.
Appreciate your help!!!
Thanks
Vijay

Can't create VM from template on iSCSI

Hello,
I'm trying to create new VM from original Oracle template "OVM_EL5U3_X86_64_PVM_4GB" on iSCSI device without a success.
Steps to reproduce:
1) /OVS is mounted as iSCSI block device
2) Original Oracle template is copied into /OVS/seed_pool/OVM_EL5U3_X86_64_PVM_4GB
3) Oracle VM Manager - Import template (no problem)
4) Oracle VM Manager - Create VM from template
Result: Files are copied into running_pool, vm.cfg is updated, new VM is visible in VM Manager but with this message:
failed: <Exception: Error updating the image.> StackTrace: File "/opt/ovs-agent-2.2/OVSSiteVM.py", line 471, in config_vm raise Exception("Error updating the image.")
5) Oracle VM Manager - Start new VM
Result:
Status in VM is Running
I can connect using VNC console
But the VM is constantly rebooting with these messages on the console:
Registering block device major 202
xvda: xvda1 xvda2 xvda3
xvda: p2 exceeds device capacity
xvda: p3 exceeds device capacity
Waiting for driver initialization.
xvda: rw=0, want=101530648, limit-12707414
attemp to access beyond end of device
switchroot: mount failed: No such file or directory
Kernel panic - not syncing: Attempted to kill init!
Looks like there is a problem with partition sizes within the VM image file (xvda: p2 exceeds device capacity)
I've tried to mount iSCSI formated with ocsf2 and ext3 - I'm getting the same error.
However there is no problem when I mount /OVS as NFS or local drive and repeat the steps above.
Any suggestion would be highly appreciated,
Honza

It's all sorted now.
What I've learnt: OVS/Xen hypervisor doesn't seem to handle 4kB iSCSI block sizes.
I had to change it to 512 bytes (configuration on the iSCSI storage - nothing on the Oracle VM side) and re-create all volumes.
Just in case you experience something similar.
Honza
Edited by: Honza on Jul 21, 2009 3:00 PM

Workflow - create document from template

Hi,
Could anyone tell me what could be the possible use of Create Document from Template step in workflow...

Hi vijay,
1)Open the PC application by choosing the entry Double-click to create in the Document templates tray by double-clicking or choose in the step definition of the document generation.
The PC application that you last used to create a template is opened in the Workflow Builder. The system fields and the container elements of the workflow container are offered for selection in the navigation area. They can be transferred into the template by double-clicking.
You cannot use any multiline container elements in your template.
All relationships created between container elements/system fields and the document template are displayed in the object area.
It is not possible to insert system fields and container elements into all types of document template.
2) If you want to create a document template of a different class, select Change document class and choose the new type of document template.
3) Select to assign a name for the document template.
4) Create the document template in the usual way in your PC application. You can use all the functions of the PC application.
5) Insert container elements and/or system fields from the object area into your template by double-clicking. These fields are replaced with the content of the container elements/system fields at runtime.
6) Select to save your document template.
Hope this helps u,
Regards,
Nagarajan.

BAPI/FM to Create Projects from Templates

Is there any BAPI/FM that can create Operative Project Structures referring the Standard WBS including all objects i.e, WBS,N/W,Activities,Milestone of standard project?
If not, what could be the work around?
Regards
Sreenivas

Hi Robin !
        I have the same issue here, to create projects from a template, using a Function Module to do that, and I tryed to use the FM CJWB_PROJECT_COPY as you suggested, and I achieved to create project from template but, for any reason not known by me, the project is created without status object, so I can´t open it on any transaction(CJ02/CJ03/CJ20n...). I have tested it in SE37, using test sequences, so I call it and BAPI_TRANSACTION_COMMIT to save the data.
        To make the projects available to work, I needed to run a report named CNSTATUS as explained on SAP Note 170948.
        Do you know why using CJWB_PROJECT_COPY created the projects without status object assignment ? I could not find any documentation about this function, so maybe the problem can be caused by some wrong parameter that I was passed to it.
        Do you already used it ? If yes, can you send a sample code ?
        Thank you in advance, and best regards !
        Wilson

Creating user from template in powershell - Server 2012 R2

Similar Messages

Maybe you are looking for