HOW TO CREATE LOCAL USER PROFILE

SIR,
OS - WINDOWS SERVER 2008 R2
SYSTEM - IBM MACHINE X3400 SERIES
1. HOW TO CREATE A USER IN WINDOWS SERVER 2008 R2 WITHOUT ACTIVE DIRECTORY
2. AFTER CREATE USER IN WINDOWS SERVER 2008 R2 BUT USER PROFILE NOT CREATE .

Hi,
>>1. HOW TO CREATE A USER IN WINDOWS SERVER 2008 R2 WITHOUT ACTIVE DIRECTORY
>>2. AFTER CREATE USER IN WINDOWS SERVER 2008 R2 BUT USER PROFILE NOT CREATE
Creating an user account on the computer doesn't create a profile for that user. The profile is created the first time the user interactively logs on at the computer. After the user logs onto the computer for the first time, the user's local profile
will be created in a folder with the name of the user under the systemroot/Users folder.
Best regards,
Frank Shen

Similar Messages

How Make TS local User Profile After Install Windows 7 without Domain

Hi,
I make TS to install Windows 7 Is success But after finish install i cannot login
If something need to add TS user local profile after install Windows 7 Without Join the Domain And make the user Administrator LocalGroup
Thank for Help

Let's start with the fact that you are missing a key element in your task sequence. You need to have the step
Setup Windows and ConfigMgr to perform the transition from Windows PE to the new operating system. This task sequence step is a required part of any operating system deployment. It installs the Configuration Manager client into the new operating
system and prepares for the task sequence to continue execution in the new operating system. See also for more information:
http://technet.microsoft.com/en-us/library/hh846237.aspx#BKMK_SetupWindowsandConfigMgr
About your screenshots:
With the first screenshot you not enabling the local administrator. Is that what you want?
With the second screenshot your only creating a user account and not adding it to the local administrators group. That would need an additional action like this
cmd.exe /c net localgroup /add administrators User01.
My Blog: http://www.petervanderwoude.nl/
Follow me on twitter: pvanderwoude

Create unique user profiles for each separate session

Hi,
How can I configure TS environment so that each user (who logs onto Windows using the same generic Windows user ID) gets their own unique Windows user profile.
For example, imagine a scenario where the users are logging onto Windows using the shared user "SYSTEMAPP"
The intention is to configure the TS server's Windows, so that it creates unique user profiles for each separate session, for example:
- SYSTEMAPP
- SYSTEMAPP.000
- SYSTEMAPP.001
- SYSTEMAPP.002 (etc...)
The server version for TS is Windows Server 2012 and not joined to AD. User IDs are created at Local Users and Groups.
Kindly advise.

Hi Susie,
Just to illustrate my point further. Let's say a user logged into the server using user ID SYSTEMAPP for the first session. So, if
you browse the folders in the server, you'll be able to see this:
C:\Users\SYSTEMAPP
Then, another user logged into the same server as SYSTEMAPP user using other session. In this case, my intention is to configure the
server to create another unique user profile as below:
C:\Users\SYSTEMAPP.000
Subsequently, if more users logged in using the same account, the unique counter number will keep on adding...
C:\Users\SYSTEMAPP.001
C:\Users\SYSTEMAPP.002
C:\Users\SYSTEMAPP.003
Previously, I checked from my third party software vendor that this can be done but I still cracking my head on this which is why led me
to this forum.
Kindly advise.

How to Move Local Users to Network Domain Users

Before you follow these instructions...... I'm a rank amateur so I'd check to see if the smart kids have corrected my errors or improved on the method in the replies below
The reason for the post is I have good and established local user accounts on all the computers and moving them to domain controlled accounts is the one topic I could not find a script to follow that worked for my low level of knowledge of OS X.
Let me first explain my setup and needs. I'm replacing a Windows Home Server (WHS) with the Mac Mini Server. My goal was to have the Mac Mini as the server holding all our photos, data, etc. and running a user account to run the family iTunes account to feed the Apple TV and be the backup / sync point for a family sized set of iPod Touches, iPads and iPhones. I want to be able to log into each mac and have the same information setting, links, etc........ basically walk around the house, find any mac shaped device not used by someone else, log in and carry on where I was before - with the MacBook Air having a portable account so it can come travelling with us.
The key hardware is...
Mac Mini Server running Snow Leopard 10.6.8
Apple TV
2 x iMac Running Lion 10.7.1 [upgraded from 10.6.8]
MacBook Air running Lion 10.7.1 [upgraded from 10.6.8]
Normal stuff like wifi, hubs and a router doing the DHCP (and for me reserving IP addresses based on the 'MAC Address' to save me having to manually configure all the IP addresses)
Key Resources I used as I learnt how to do this; to level set you all, I'm a relative newcomer to OS X having had a Windows life with Linux for fun, so i'm not a mac or IT specialist but like to play around.
Apple's podcast series 'Apple Quick Tour of Leopard Server' - this is great, it informed me and kept me motivated through all the bah moments, all 33 episodes and it's in the iTunes store as a podcast.
The book 'Mac OS X Snow Leopard Server For Dummies' - I bought this about half way through the whole process and wish i'd bought it earlier, my reccomendation would be get the Kindle version so you can search it for advice.
The excellent information on DNS from Hoffman Labs http://labs.hoffmanlabs.com/node/1436
The video 'Setting up a primary DNS zone.....' from Lynda.com on youtube http://www.youtube.com/watch?v=OOEgQY9oFK4
The Series of PDF document on Snow Leopard Server from Apple http://support.apple.com/manuals#mac%20os%20x%20server%20v10.6
And finally this excellent post from Joe Ferrante which was the core of what I used http://joeferrante.net/how-to-migrate-local-user-account-to-network-user-account -with-networked-home-folder-on-snow-leopard-server/
Right off we go....
Setting up the Server [this took me 6 goes to get it right as I learnt a little each time].
So i'm not going to go through this step by step because it in the 'dummies' book and the videos from Apple above and those will be better than anything I write but here's my details/advice.
I split the primary disc into 2 partitions using disk utility so I could reformat the operating system without moving my data.
100GB for the OS X system
400GB for user data
Install OS X from the DVD, press the buttons based on your desires but stop at the bit about naming you computer titled Network Names
READ UP ON DNS - this one of the reason I had so many goes as it was the 1st time i've set up a server like this using DNS and guessing didn't get me there.
If you don't have one buy a domain name for your network it make it much easier in the long run & is $10 well spent
The name needs to be [the computer name].[your domain name].[com or net or org, etc]
So if you want you computer to be called fred and you bought or have the domain location.com enter fred.location.com in the primary DNS name box
This shoud automatically put fred in the computer name box.
Follow along with the set up guide to finish
After you have finished the set up test the DNS with NSLOOKUP in a terminal window
nslookup fred.location.com in my example and you should get the IP
Add your servers IP address to the list of DNS servers in network preferences on the client mac.
Bind [link] the client computers to the server in Accounts on the client computer - I used the 'dummies' book for this but there's lots of data on the web.
Clean up the user profile on the client to reduce the size of the Home folder as much as possible or the data transfer is loooooooonnnnng - i also connect the iMac on a cable rather than wifi to speed it up.
Read Joe's post http://joeferrante.net/how-to-migrate-local-user-account-to-network-user-account -with-networked-home-folder-on-snow-leopard-server/ and follow along.useful info I learnt somewhere - to get the paths to the folders correct in the terminal window go to the folder in Finder and then drag it to the terminal window and let go - this will put the correct link in the instruction.
You now need to be on a terminal window on your server, with a finder window open and logged into the client as the user you are moving
THE CLIENT COMPUTER NEEDS TO BE LOGGED OUT or logged in as a different user than the one you're trying to move.
so when you're at the right point - type sudo cp -R then hit the space bar, drag the existing user folder onto the finder window, add the /* and hit space then find the users folder on the server and drag that onto the terminal window to complete the instruction.
Hit enter and wait a while assuming it starts ok - i used network traffic on the Activity Monitor utility to check if it was working.
If you got this far and it all worked - login to the profle you moved on any computer linked to the server or the server but not the original client computer to see if it worked and all your setting and data are intact and then delete the profile off the original client if it was ok [archiving the home directory took ages for me].
As you can probably guess most of this was good learning for me and it worked successfully for me in the end, moving all my history, saved password, etc, etc without any problems.
Hope this helps other in the same situation & feel free to expand or correct this if I've missed anything.
Ed

Hi,
I was unable to access the Joe Ferrante information (it appears to now requrie a password and was not able to determine how a username and password were assigned) Would you happen to have a copy of the post that you refer to above?
I am still at the early stages of this process but am hoping that the steps you refer to are going to get me where I want to be. Your stated end goal is where I hope to get to.
Thanks,
Sean

How to create a user in Opensso Identity Service Webservices api?

Hi All,
I am getting struck with the creation of user in OpenSSO through the webservices api they are providing.
I used the following wsdl link to create the API's. http://localhost:8080/opensso/identityservices?WSDL
Now my requirement is, i have to create a user profile through the program which has the api create(identity,admin) created by the WSDL link.
Here identity is the com.sun.idsvcs.IdentityDetails and admin is the com.sun.idsvcs.Token. I want to append givenName,cn,sn,userPassword in that. But dont have any idea how to given these details in IdentityDetails. If anyone give any sample solution i can follow.
Any Help Greatly Appreciated.
Thanks in Advance.
With Regards,
Nithya.

Hey, I've managed to implement OpenSSO user registration through SOAP.
My code is:
package ru.vostrets.service.implementation.helper.opensso;
import ru.vostrets.model.person.Person;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Service;
import ru.vostrets.dao.PropertiesDao;
import ru.vostrets.exception.FatalError;
import com.sun.identity.idsvcs.opensso.*;
import java.util.HashMap;
import java.util.Map;
import org.slf4j.LoggerFactory;
import org.slf4j.Logger;
import ru.vostrets.exception.ConfigurationError;
* @author Kuchumov Nikolay
* email: [email protected]
@Service
public class OpenSsoPersonServiceHelper
     private enum AttributeName
          USER_NAME("uid"),
          PASS_WORD("userpassword"),
          GIVEN_NAME("givenname"),
          FAMILY_NAME("sn"),
          FULL_NAME("cn"),
          EMAIL("mail");
          private final String name;
          AttributeName(String name)
               this.name = name;
          public String getName()
               return name;
     private static final Logger LOG = LoggerFactory.getLogger(OpenSsoPersonServiceHelper.class);
     private PropertiesDao propertiesDao;
     public void create(Person person)
          try
               IdentityServicesImplService service = new IdentityServicesImplService();
               IdentityServicesImpl servicePort = service.getIdentityServicesImplPort();
               java.util.List<java.lang.String> attributeNames = null;
               Token subject = new Token();
               subject.setId(request.getParameter("token"));
               UserDetails results = servicePort.attributes(attributeNames, subject);
               for (Attribute attribute : results.getAttributes())
                    LOG.info("************ Attribute: Name = " + attribute.getName() + ", Values = " + attribute.getValues());
               LOG.info("Roles = " + results.getRoles());
               IdentityDetails identity = newIdentity
                         person.getCredentials().getUserName(),
                         getAttributes(person)
                * Creates an identity object with the specified attributes.
                * @param admin Token identifying the administrator to be used to authorize
                * the request.
                * @param identity object containing the attributes of the object
                * to be created.
                * @throws NeedMoreCredentials when more credentials are required for
                * authorization.
                * @throws DuplicateObject if an object matching the name, type and
                * realm already exists.
                * @throws TokenExpired when subject's token has expired.
                * @throws GeneralFailure on other errors.
               servicePort.create
                         identity,
                         authenticateAdministrator()
          catch (DuplicateObject_Exception exception)
               throw new UserAlreadyExistsError();
          catch (Exception exception)
               //GeneralFailure_Exception
               //NeedMoreCredentials_Exception
               //TokenExpired_Exception
               throw new FatalError(exception);
     private Token authenticateAdministrator()
          try
               IdentityServicesImplService service = new IdentityServicesImplService();
               IdentityServicesImpl servicePort = service.getIdentityServicesImplPort();
               if (propertiesDao.get().getAuthentication().getOpenSso().getAdministrator().getUserName() == null
                         || propertiesDao.get().getAuthentication().getOpenSso().getAdministrator().getPassWord() == null)
                    throw new ConfigurationError("OpenSSO administration properties not initialized");
                * Attempt to authenticate using simple user/password credentials.
                * @param username Subject's user name.
                * @param password Subject's password
                * @param uri Subject's context such as module, organization, etc.
                * @return Subject's token if authenticated.
                * @throws UserNotFound if user not found.
                * @throws InvalidPassword if password is invalid.
                * @throws NeedMoreCredentials if additional credentials are needed for
                * authentication.
                * @throws InvalidCredentials if credentials are invalid.
                * @throws GeneralFailure on other errors.
               Token token = servicePort.authenticate
                         propertiesDao.get().getAuthentication().getOpenSso().getAdministrator().getUserName(),
                         propertiesDao.get().getAuthentication().getOpenSso().getAdministrator().getPassWord(),
               LOG.info("******************************** Admin token: " + token.getId());
               return token;
          catch (Exception exception)
               throw new FatalError(exception);
          com.sun.identity.idsvcs.opensso.IdentityServicesImplService service = new com.sun.identity.idsvcs.opensso.IdentityServicesImplService();
          QName portQName = new QName("http://opensso.idsvcs.identity.sun.com/" , "IdentityServicesImplPort");
          String request = "<authenticate xmlns=\"http://opensso.idsvcs.identity.sun.com/\"><username>ENTER VALUE</username><password>ENTER VALUE</password><uri>ENTER VALUE</uri></authenticate>";
          try
               // Call Web Service Operation
               Dispatch<Source> sourceDispatch = null;
               sourceDispatch = service.createDispatch(portQName, Source.class, Service.Mode.PAYLOAD);
               Source result = sourceDispatch.invoke(new StreamSource(new StringReader(request)));
          catch (Exception exception)
               // TODO handle custom exceptions here
     private Attribute newAttribute(AttributeName name, Object value)
          Attribute attribute = new Attribute();
          attribute.setName(name.getName());
          attribute.getValues().add(value.toString());
          return attribute;
     private Map<AttributeName, Object> fillAttributes(Map<AttributeName, Object> attributes, Person person)
          attributes.put(AttributeName.USER_NAME, person.getCredentials().getUserName());
          attributes.put(AttributeName.PASS_WORD, person.getCredentials().getPassWord());
          attributes.put(AttributeName.GIVEN_NAME, person.getPersonal().getGivenName());
          attributes.put(AttributeName.FAMILY_NAME, person.getPersonal().getFamilyName());
          attributes.put(AttributeName.FULL_NAME, person);
          attributes.put(AttributeName.EMAIL, person.getContacts().getEmail());
          return attributes;
     private Map<AttributeName, Object> getAttributes(Person person)
          return fillAttributes(new HashMap<AttributeName, Object>(), person);
     private IdentityDetails newIdentity(Object name, Map<AttributeName, Object> attributes)
          IdentityDetails identity = new IdentityDetails();
          identity.setName(name.toString());
          return fillAttributes(identity, attributes);
     private IdentityDetails fillAttributes(IdentityDetails identity, Map<AttributeName, Object> rawAttributes)
          for (Map.Entry<AttributeName, Object> rawAttribute : rawAttributes.entrySet())
               identity.getAttributes().add(
                         newAttribute(rawAttribute.getKey(), rawAttribute.getValue()));
          return identity;
     @Autowired
     public void setPropertiesDao(PropertiesDao propertiesDao)
          this.propertiesDao = propertiesDao;
}

How to create Mobile User Account

Hi all,
I have a dumb question but it makes me crazy !!!
I'm new in CRM 5.2 and in mobile as weel.
My question is : How to create a user acount into my mobile infrastructure ?
I've followed the following explanation but I don't find the solution :
[help|http://help.sap.com/saphelp_crm60/helpdata/de/c8/2ae1a3c73245c8aef8c4b69c2ff072/content.htm]
In there, it tells me to go thought User Management tool of Mobile Application Studio ( is it Microsoft Visual Studio ?) but in there i do not find any tools.
Thanks for your future help
Regards

hi,
Creation of User Accounts
Purpose
This process describes the steps required to create user accounts for secured and controlled access to the Mobile Application Repository (MAR). User accounts are created for consultants, who intend to customize mobile client applications using Mobile Application Studio (MAS). User account allows a consultant to log on to MAS.
Process Flow
       1.      During the installation of MAR, the system enables the User Management feature.
If MAR is upgraded from a release prior to 3.0 to the current release, the User Management feature must be enabled manually by system administrator. This is done by changing the umfrc parameter value to YES in the ARS_SYSTABLE.
       2.      The CRM technical administrator creates a DSN to access MAR by using the default internal login arsdb with password arsdb.
       3.      The CRM technical administrator carries out the following tasks using the User Manager tool of MAS:
                            a.      Creates user accounts.
                            b.      Associates each user account with a standard MAR profile. For more information, see Profiles of the Mobile Application Repository.
                            c.      Specifies a password for each user account.
Login IDs of the Mobile Application Repository
Definition
A login ID is a source through which users log on to Mobile Application Studio, and connect to the Mobile Application Repository (MAR). When MAR is installed, standard login IDs are available by default. While creating user accounts, the system administrator associates a standard login ID with the profile of each user account.
Structure
Login ID
Allows you to:
ARSAdmin
·        Perform administrative activities in MAR.
·        Create and modify development objects in MAR.
·        Modify the password of a user account.
ARSDeveloper
·        Create and modify development objects in MAR.
·        Modify your own password.
ARSUser
·        View development objects in MAR.
·        Modify your own password.
ARSSys
·        Get information about the MAR.
·        Validate MAR users.
ARSdb
Create a DSN for MAR. The default password for this login is arsdb.
Profiles of the Mobile Application Repository
Definition
A profile of the Mobile Application Repository (MAR) is a collection of access rights defined for:
·        Development objects, like tiles, tile sets and business objects of mobile client applications
·        Services of MAR like change lists and namespaces
Structure
The standard profiles that are available are listed below.
Profile name
Associated login ID
Allows you to:
Administrator
ARSAdmin
·        Perform administrative activities like creating and maintaining users.
·        Read and write repository specific information (ARS_SYSTABLE).
·        Create and modify development objects in MAR.
·        Release and revert a change list.
·        Transfer the ownership of objects to another MAR.
·        Create link objects to integrate tile set help.
·        Create and modify framework objects in MAR.
ROGuest
ARSUser
·        View development objects in MAR.
·        Modify your own password.
Developer
ARSDeveloper
·        Read repository specific information (ARS_SYSTABLE).
·        Create and modify development objects in MAR.
·        Release change lists that have been created only by you.
·        Modify your own password.
·        Transfer the ownership of objects to another MAR.
SPDeveloper
ARSDeveloper
·        Read repository specific information (ARS_SYSTABLE).
·        Modify your own password.
·        Create and modify development objects in MAR.
This profile does not allow you to release change lists.
QMResponsible
ARSDeveloper
·        Read repository specific information (ARS_SYSTABLE).
·        Create and modify development objects in MAR.
·        Modify your own password.
·        Transfer the ownership of objects to another MAR.
·        Release and revert change lists.
This profile does not allow you to create a change list.
Coordinator
ARSDeveloper
·        Read repository specific information (ARS_SYSTABLE).
·        Create and modify development objects in MAR.
·        Release and revert change lists.
·        Modify your own password.
·        Transfer the ownership of objects to another MAR.
Frwkuser
ARSDeveloper
·        Read repository specific information (ARS_SYSTABLE).
·        Create and modify development objects in MAR.
·        Release the change list you have created.
·        Transfer the ownership of objects to another MAR.
·        Create and modify framework objects in MAR.
Infodeveloper
ARSDeveloper
·        Read repository specific information (ARS_SYSTABLE).
·        Create and modify development objects in MAR.
·        Release the change list you have created.
·        Create link objects to integrate tile set help.
thanks
karthik
ifhelpfull reward me some points

How to create new user and How can i assign end user roles

Hi,
I am new to SAP, please explain how to create end users and their roles
Thanks
ravi

Hi,
Roles are decided by IT managers. Suppose if Persons who are working in shopfloor or production side
give authorization to Production order create , change and Confirm like that etc
1. In role maintenance (transaction PFCG), choose the Authorizations tab page.
2. To change the authorization data for the transactions assigned to the role, choose Change Authorization Data or Expert Mode for Profile Generation. Otherwise, a dialog box appears in expert mode (see Regenerating an Authorization Profile After Changes).
Please take telp from Basis person also refer this link,
http://help.sap.com/saphelp_46c/helpdata/EN/52/6714a9439b11d1896f0000e8322d00/frameset.htm
Thanks

How to create a content profile and Why this need

how to create a content profile and Why this need

Hi,
You will need profiles to control the following behavior:
- Which metadata to be shown in the checkin form and search form
- Define default values to certain metadata
- Make metadata editable, hidden, info only etc
- Allow the user to see only relevant metadata, for example you could have 50 metadata defined, but all you need for the user to input is 10 for say HR documents, you can show only these 10 metadata for the user to contribute
HTH
Regards,
- Anand

Deleting local user profile on RDS without reboot

I need to delete the local profile for a user on our RDS server, because of a problem with this user.
Since the user was using RDS a few days ago, and RDS wasn’t rebooted since, I can’t delete the local profile. When I go to advanced system settings—user
profiles. The ‘delete’ option is greyed out.
I know that I can reboot the server then will be able to delete it, but since this server is serving many users, it means they all have to stop using it.
Is there a way to delete this user’s profile without rebooting the server?
I use sever 2008 R2.
Thanks

Hi,
A local user profile is created the first time a user logs on to a computer. The profile is stored on the computer's local hard disk. Changes made to the local user
profile are specific to the user and to the computer on which the changes are made.
Windows security requires a user profile for each user account on a computer. The system automatically creates a local user profile for each user when the user logs
on to the computer for the first time. The system automatically maintains the settings for each user's work environment in a user profile on the local computer.
Windows Vista and later: User profiles are managed through the
User Accounts control (UAC) panel item.
You can open the
Control Panel and click User Accounts, then click the Change User Account Control setting, dropped to the lowest turn off UAC. Press OK.
Then you can use administrator account try again to see whether you can delete the local user profile or not.
More information:
http://blogs.msdn.com/b/rds/archive/2009/06/02/user-profiles-on-windows-server-2008-r2-remote-desktop-services.aspx
Technology changes life……

Project Server 2010: We want to create the User Profile Service but it keeps hanging when attempted from Central Administration. Any PowerShell commands to do this instead?

We want to create the User Profile service in Project Service 2010. Are there any PowerShell commands that can be used to achieve this?
Thanks in advance.

Hello,
See the links below for examples:
http://www.harbar.net/archive/2010/10/30/avoiding-the-default-schema-issue-when-creating-the-user-profile.aspx
http://thesharepointfarm.com/2011/03/configuring-user-profile-service-and-user-profile-synchronization-service-via-powershell/
http://blogs.msdn.com/b/rcormier/archive/2012/05/10/how-to-create-a-sharepoint-user-profile-service-application-with-powershell.aspx
I'd also review this is if it is stuck starting:
http://www.harbar.net/articles/sp2010ups2.aspx
Paul
Paul Mather | Twitter |
http://pwmather.wordpress.com | CPS

How to Check authorizations (user profiles) using eCATT?

Hi All,
Please tell me how to Check authorizations (user profiles) using eCATT?
Thanks in advance.
Regards
Kalyani

Hello ,
Create a script for SU02 transaction in the SAPGUI mode, in the script move to the profiles tab and GETGUI the first profile and loop to all the profiles assigned to the user until you find your required profile.
Other way is to identify the table where the profiles are stored and then create script using GETTAB , pass the user name and retreive all the profiles assigned to tht particular user, loop through profiles untill you find your required profile.
Thanks & Best regards,
Ajay

How to create many user in the same database

hi
my question is "How to create many user in the same database(application)?"
for example, i have students, teachers, and staffs user using my application.
i can create many users to use the same application right?, how ^^''' ???
(right now i can only create application and then it shows every data in my DB
but i want it to show only the data for the user who login to that application)
Thanks.
ps. i'm newbie, please help T^T

You need to create a user table within your application that maintains their privileges. If you have LDAP you could use this for authorisation otherwise the table would handle that as well (store passwords etc). Your reports etc would then be filtered on information from this table.
Check out some of the sample applications to see how authorisation and access is implemented (Online store is one). The how-to on the issue tracking system should also have some useful pointers.
http://download-west.oracle.com/docs/cd/B31036_01/doc/appdev.22/b28839/issue_track.htm#BABBGBJG
cheers,
Ron

How to create a user in UME Database using web dynpro java custom application

Hi,
Can you please suggest me how to create a user in UME Database using web dynpro java custom application.
My Requirement is user can register his/her user id in SAP Portal 7.3 UME database.
Please suggest me.
Thanks and Regards,
Amit

Hi Amit,
Generated Documentation (Untitled)
This is what you're looking for, there's no real cook-book -- though Amey mentioned there might be some material on SDN, perhaps some tutorials.
You should be looking into com.sap.security.api.IUserFactory, methods newUser(String) which gives you and IUserMaint and commitUser(IUserMaint, IUserAccount) -- IUserAccount can be obtained using com.sap.security.api.IUserAccountFactory, method newUserAccount(String)
Hope it helps,
D.

How to create the user on Internet Application Server(IAS) control console

Hi All,
My Client is asking me for How to create the user on Internet Application Server(IAS) control console 10.1.2( 10g release 2).
If anyone have the document for How to Create the User on Internet Application Server (IAS) console 10g release 2 , then please send me the document and help me out from this Concern.
Regards,
Yadav@intelli.
Edited by: 851080 on Apr 8, 2011 6:31 PM

Are you using OID? Can you provide more details about your iAS environment?

How to create a user account by mirroring another account in PowerShell (Trying to learn to use Powshell for some daily AD tasks intead of the GUI)

Hi,
I am trying to create user accounts via PowerShell instead of the Gui in server 2008 R2 (PowerShell 2.0).
I know how to create a user account with the following Power Shell command below is one from a dummy domain I created to practice.
PS C:\Users\Administrator> New-ADUser -SamAccountName "TestOut" -UserPrincipalNa
me "[email protected]" -GivenName "Test" -Surname "out" -DisplayName "Testou
t" -Name "Testout" -Enabled $true -Path "CN=users,DC=bwcat,DC=net,DC=int" -Accou
ntPassword (Read-Host -AsSecureString "Enter Account Password")
However when doing day to day tasks where I work normally we have a new hire, they contact IT and ask that a user account is created. I will ask who they would like to mirror.
I then would go into the gui pull up the user that they want to mirror right click him and choose copy. This would create a new user account that I would then fill out.
I am wondering if its possible to do this same thing via PowerShell, or if its not an option because it takes more work type up everything than it does to go into the gui and do it.
Anyway thanks for the help.

Hi Wilder, hi Mark,
first of all: The tutorial sources Mark posted - especially the book "Powershell 3 in A month of lunches" - are good to get a baseline start. A really great reference, especially when you try to learn it while still dealing with your daily business.
On another note, Wilder: While I fully agree that learning things sequentially is usually the best, I too jumped right in instead of learning how to walk first (though it's been some time now. Fewer years than you'd think, but still ...). So I thought I'd
give you a little aid with that function husk, so you could just stuff interesting bits into an available structure, making use of the fun tools in a useful context (It's fun fiddling around with the commands, but if you have to type in all of them manually
each time, using the GUI is often just faster. Doing fun things and being efficient with it feels even better though ...). So ... while I
do agree with yourself, learn it the Correct & Proper Way, I also do
intend to finish this little explanation about the husk, all the way to the end.
Everything below this paragraph is part of this.
function Copy-ADUser
<#
.SYNOPSIS
A brief description of the Copy-ADUser function.
.DESCRIPTION
A detailed description of the Copy-ADUser function.
.PARAMETER GivenName
A description of the GivenName parameter.
.PARAMETER Surname
A description of the Surname parameter.
.PARAMETER Template
A description of the Template parameter.
.EXAMPLE
PS C:\> Copy-ADUser -GivenName "Max" -Surname "Mustermann" -Template "Jonny.Normal"
.NOTES
Additional information about the function.
#>
[CmdletBinding()]
Param (
[Parameter(Mandatory = $true)]
[string]
$Surname,
[Parameter(Mandatory = $true)]
[string]
$GivenName,
[Parameter(Mandatory = $true)]
[string]
$Template
) # Create finished Strings
$JoinedName = $GivenName + "." + $Surname
# Create new User
$NewUser = New-ADUser -Surname $Surname -GivenName $GivenName -DisplayName "$Surname, $GivenName" -SamAccountName $JoinedName -Name "$Surename, $GivenName" -PassThru
# Copy from old User
$NewUser | Add-ADPrincipalGroupMembership -MemberOf (Get-ADPrincipalGroupMembership $Template | Where { $_.Name -ne 'Domain Users' })
# Do Whatever else you feel like doing
This is again the same function husk I posted earlier. Only this time, I filled a little logic (the pieces that were already posted in this thread). This time, I'll not only go over each part again ... I'll do it by reposting the segments and trying to show
some examples on how to modify the parts. Thus some of it will be repetitive, but this way all the info is in one spot.
Segment: Comment Based Help
<#
.SYNOPSIS
A brief description of the Copy-ADUser function.
.DESCRIPTION
A detailed description of the Copy-ADUser function.
.PARAMETER GivenName
A description of the GivenName parameter.
.PARAMETER Surname
A description of the Surname parameter.
.PARAMETER Template
A description of the Template parameter.
.EXAMPLE
PS C:\> Copy-ADUser -GivenName "Max" -Surname "Mustermann" -Template "Jonny.Normal"
.NOTES
Additional information about the function.
#>
That's the premier documentation part of a function, that teaches a user what the function does and how to use it. It's what's shown when using the Get-Help cmdlet.
Comment texts are not restricted to single lines however. For example you could replace ...
.EXAMPLE
PS C:\> Copy-ADUser -GivenName "Max" -Surname "Mustermann" -Template "Jonny.Normal"
... with ...
.EXAMPLE
PS C:\> Copy-ADUser -GivenName "Max" -Surname "Mustermann" -Template "Jonny.Normal"
Creates a new user named Max Mustermann and copies the group memberships of the already existing user Jonny Normal to this new User
... and get an explanation on what the example does when using Get-Help with the
-Detailed parameter (Explaining examples is always a good idea).
Segment: Parameter
[CmdletBinding()]
Param (
[Parameter(Mandatory = $true)]
[string]
$Surname,
[Parameter(Mandatory = $true)]
[string]
$GivenName,
[Parameter(Mandatory = $true)]
[string]
$Template
This is the segment that tells Powershell what input your function accepts. Each parameter of Copy-ADUser you set will be available in the next segment as a variable of the same name. You can add additional parameters if you need more information for your
logic. For example, let's add a parameter that allows you to specify what Organization the new user should belong to:
[CmdletBinding()]
Param (
[Parameter(Mandatory = $true)]
[string]
$Surname,
[Parameter(Mandatory = $true)]
[string]
$GivenName,
[string]
$Organization,
[Parameter(Mandatory = $true)]
[string]
$Template
That's how that would look like. You may notice that I didn't add the line with
"[Parameter(Mandatory = $true)] this time. This means you
may add the Organization parameter when calling Copy-ADUser, but you need not.
Segment: Logic
# Create new User
$NewUser = New-ADUser -Surname $Surname -GivenName $GivenName -DisplayName "$Surname, $GivenName" -SamAccountName "$GivenName.$Surename" -Name "$Surename, $GivenName" -PassThru
# Copy from old User
$NewUser | Add-ADPrincipalGroupMembership -MemberOf (Get-ADPrincipalGroupMembership $Template | Where { $_.Name -ne 'Domain Users' })
# Do Whatever else you feel like doing
This is the part of the function that does the actual work. Compared to the first husk I posted, this time there are two commands in it (and some comments). First, I create a new user, using the information passed into
the parameters -Surname and -GivenName. Then I Copy the group memberships of the user identified by the information given by the
-Template parameter.
So, let's modify it!
# Tell the user you are starting
Write-Host "Starting to create the user account for $GivenName $Surname"
# Create new User
$NewUser = New-ADUser -Surname $Surname -GivenName $GivenName -DisplayName "$Surname, $GivenName" -SamAccountName "$GivenName.$Surename" -Name "$Surename, $GivenName" -PassThru
# Tell the user you are copying Group Memberships
Write-Host "Copying the group-memberhips of $Template to $GivenName $Surname"
# Copy from old User
$NewUser | Add-ADPrincipalGroupMembership -MemberOf (Get-ADPrincipalGroupMembership $Template | Where { $_.Name -ne 'Domain Users' })
# Do Whatever else you feel like doing
Now after adding a few lines, the logic will tell us what it's doing (and do so before it
is taking action)!
Hm ... didn't we create a change in the Parameter Segment to add an -Organization parameter? Let's use it!
# If the -Organization parameter was set, the $Organization variable will be longer than 0. Thus do ...
if ($Organization.Length -gt 0)
# Tell the user you are starting
Write-Host "Starting to create the user account for $GivenName $Surname in the Organization $Organization"
# Create new User
$NewUser = New-ADUser -Surname $Surname -GivenName $GivenName -DisplayName "$Surname, $GivenName" -SamAccountName "$GivenName.$Surename" -Name "$Surename, $GivenName" -Organization $Organization -PassThru
# If the -Organization parameter was NOT set, the $Organization variable will have a length of 0. Thus the if-condition does not apply, thus we do the else block
else
# Tell the user you are starting
Write-Host "Starting to create the user account for $GivenName $Surname"
# Create new User
$NewUser = New-ADUser -Surname $Surname -GivenName $GivenName -DisplayName "$Surname, $GivenName" -SamAccountName "$GivenName.$Surename" -Name "$Surename, $GivenName" -PassThru
# Tell the user you are copying Group Memberships
Write-Host "Copying the group-memberhips of $Template to $GivenName $Surname"
# Copy from old User
$NewUser | Add-ADPrincipalGroupMembership -MemberOf (Get-ADPrincipalGroupMembership $Template | Where { $_.Name -ne 'Domain Users' })
# Do Whatever else you feel like doing
There! Now we first check whether the -Organization parameter was set (it's not mandatory after all, so you can skip it). If it
was set, do whatever is in the curly braces after if (...). However, if it wasn't set, do whatever is in the curly braces after
else.
And that concludes my "minor" (and hopefully helpful) tutorial on how to use the function husk I posted :)
With this, whenever you find another cool command that helps you in the user creation process, you can simply add it, similar to what I did in these examples.
And if it all didn't make much sense, go through the tutorials in proper order and come back - it'll make much more sense then.
Cheers and good luck with PowerShell,
Fred
There's no place like 127.0.0.1

HOW TO CREATE LOCAL USER PROFILE

Similar Messages

Maybe you are looking for