This is what I have so far… I am basically trying to add any user that I create here automatically to the 3 groups I listed below
Please scroll down to the area where I have Add-AD GroupMember
$title = "Create a User Account in Active Directory"
Import-Module ActiveDirectory -EA Stop
sleep 5
cls
Write Host
$firstname = Read-Host "Enter First Name"
Write Host
$lastname = Read-Host " Enter Last Name"
Write Host
$fullname = Read-Host "$firstname $lastname"
Write Host
$i = 1
$logonname = $firstname.substring(0,$i) + $lastname
$OU = "OU=Testing, DC=silvertech, DC=local"
$domain = $env:userdnsdomain
$Description = Read-Host "Enter in the User Description"
DO
{
If ($(Get-ADUser -Filter {SamAccountName -eq $logonname})) {
Write-Host "WARNING: Logon name" $logonname.toUpper() "already exists!!" -ForegroundColor:Green
$i++
$logonname = $firstname.substring(0,$i) + $lastname
Write-Host
Write-Host
Write-Host "Changing Logon name to" $logonname.toUpper() -ForegroundColor:Green
Write-Host
$taken = $true
sleep 10
} else {
$taken = $false
}
} Until ($taken -eq $false)
$logonname = $logonname.toLower()
cls
#Displaying Account information.
Write-Host "======================================="
Write-Host
Write-Host "Firstname: $firstname"
Write-Host "Lastname: $lastname"
Write-Host "Display name: $fullname"
Write-Host "Logon name: $logonname"
Write-Host "OU: $OU"
Write-Host "Domain: $domain"
#Setting minimum password length to 10 characters and adding password complexity.
$PasswordLength = 10
Do
{
Write-Host
$isGood = 0
$Password = Read-Host "Enter in the Password" -AsSecureString
$BSTR = [System.Runtime.InteropServices.Marshal]::SecureStringToBSTR($Password)
$Complexity = [System.Runtime.InteropServices.Marshal]::PtrToStringAuto($BSTR)
if ($Complexity.Length -ge $PasswordLength) {
Write-Host
} else {
Write-Host "Password needs $PasswordLength or more Characters" -ForegroundColor:Green
}
if ($Complexity -match "[^a-zA-Z0-9]") {
$isGood++
} else {
Write-Host "Password does not contain Special Characters." -ForegroundColor:Green
}
if ($Complexity -match "[0-9]") {
$isGood++
} else {
Write-Host "Password does not contain Numbers." -ForegroundColor:Green
}
if ($Complexity -cmatch "[a-z]") {
$isGood++
} else {
Write-Host "Password does not contain Lowercase letters." -ForegroundColor:Green
}
if ($Complexity -cmatch "[A-Z]") {
$isGood++
} else {
Write-Host "Password does not contain Uppercase letters." -ForegroundColor:Green
}
} Until ($password.Length -ge $PasswordLength -and $isGood -ge 3)
Write-Host
Read-Host "Press Enter to Continue Creating the Account"
Write-Host "Creating Active Directory user account now" -ForegroundColor:Green
#Creating user account with the information you inputted.
New-ADUser -Name $fullname -GivenName $firstname -Surname $lastname -DisplayName $fullname -SamAccountName $logonname -UserPrincipalName $logonname@$Domain -AccountPassword $password -Enabled $true -Path $OU -Description $Description -Confirm:$false
**sleep 2**
**Add-ADGroupMember -Identity "groupname" -Members "epaida"**
**Add-ADGroupMember -Identity "groupname" -Members "epaida"**
**Add-ADGroupMember -Identity "groupname" -Members "epaida"**
What would I replace the username "epaida" with? above? Would it be $firstname?
Write-Host
$ADProperties = Get-ADUser $logonname -Properties *
Sleep 3
cls
Write-Host "========================================================"
Write-Host "The account was created with the following properties:"
Write-Host
Write-Host "Firstname: $firstname"
Write-Host "Lastname: $lastname"
Write-Host "Display name: $fullname"
Write-Host "Logon name: $logonname"
Write-Host "OU: $OU"
Write-Host "Domain: $domain"
Write-Host
Write-Host
