Use Powershell Fillable form to make adjustments to AD

alex0395 · 2019-06-27T15:24:33.000Z

So I am not always able to make changes to users or add users in Active directory. I am trying to create a fallible form that can be used to input the pertinent information for new users in active directory. I am not sure what I am doing wrong or if this is even possible. My script is below .

<#  Author: Alex Graves
 This script creates a GUI interface to add new users information into specific OUs in AD.

Prerequisites:
ActiveDirectory powershell module

*****CHANGE LOG*****
6/27/19 - Initial script creation 

#>

<#Begin Script #>

###################Load Assembly for creating form & button######

[void][System.Reflection.Assembly]::LoadWithPartialName( “System.Windows.Forms”)
[void][System.Reflection.Assembly]::LoadWithPartialName( “Microsoft.VisualBasic”)

Try
{
##Variables
$first = ""
$full = ""
$user = ""
$email = ""
$Camp = ""
$phone = ""

#####Define the form size & placement

$form = New-Object “System.Windows.Forms.Form”;
$form.Width = 500;
$form.Height = 325;
$form.Text = "Add New Users";
$form.StartPosition = [System.Windows.Forms.FormStartPosition]::CenterScreen;

##############Define text label1
$textLabel1 = New-Object “System.Windows.Forms.Label”;
$textLabel1.Left = 25;
$textLabel1.Top = 10;
$textLabel1.Text = "Enter First Name";

##############Define text label2

$textLabel2 = New-Object “System.Windows.Forms.Label”;
$textLabel2.Left = 25;
$textLabel2.Top = 50;
$textLabel2.Text = "Enter Full Name";

##############Define text label3

$textLabel3 = New-Object “System.Windows.Forms.Label”;
$textLabel3.Left = 25;
$textLabel3.Top = 90;
$textLabel3.Text = "Enter Username";

##############Define text label4

$textLabel4 = New-Object “System.Windows.Forms.Label”;
$textLabel4.Left = 25;
$textLabel4.Top = 130;
$textLabel4.Text = "Enter the User's Email Address";

##############Define text label5

$textLabel5 = New-Object “System.Windows.Forms.Label”;
$textLabel5.Left = 25;
$textLabel5.Top = 170;
$textLabel5.Text = "Enter Campus";

##############Define text label6
$textLabel6 = New-Object “System.Windows.Forms.Label”;
$textLabel6.Left = 25;
$textLabel6.Top = 210;
$textLabel6.Text = "Enter Phone Number";

############Define text box1 for input
$textBox1 = New-Object “System.Windows.Forms.TextBox”;
$textBox1.Left = 150;
$textBox1.Top = 10;
$textBox1.width = 200;

############Define text box2 for input

$textBox2 = New-Object “System.Windows.Forms.TextBox”;
$textBox2.Left = 150;
$textBox2.Top = 50;
$textBox2.width = 200;

############Define text box3 for input

$textBox3 = New-Object “System.Windows.Forms.TextBox”;
$textBox3.Left = 150;
$textBox3.Top = 90;
$textBox3.width = 200;

############Define text box4 for input

$textBox4 = New-Object “System.Windows.Forms.TextBox”;
$textBox4.Left = 150;
$textBox4.Top = 130;
$textBox4.width = 200;

############Define text box5 for input

$textBox5 = New-Object “System.Windows.Forms.TextBox”;
$textBox5.Left = 150;
$textBox5.Top = 170;
$textBox5.width = 200;

############Define text box6 for input

$textBox6 = New-Object “System.Windows.Forms.TextBox”;
$textBox6.Left = 150;
$textBox6.Top = 210;
$textBox6.width = 200;

#############Define default values for the input boxes
$defaultValue = “”
$textBox1.Text = $defaultValue;
$textBox2.Text = $defaultValue;
$textBox3.Text = $defaultValue;
$textBox4.Text = $defaultValue;
$textBox5.Text = $defaultValue;
$textBox6.Text = $defaultValue;

#############define OK button
$button = New-Object “System.Windows.Forms.Button”;
$button.Left = 360;
$button.Top = 250;
$button.Width = 100;
$button.Text = “Ok”;

############# This is when you have to close the form after getting values
$eventHandler = [System.EventHandler]{
$textBox1.Text;
$textBox2.Text;
$textBox3.Text;
$textBox4.Text;
$textBox5.Text;
$textBox6.Text;
$form.Close();};

$button.Add_Click($eventHandler) ;

#############Add controls to all the above objects defined
$form.Controls.Add($button);
$form.Controls.Add($textLabel1);
$form.Controls.Add($textLabel2);
$form.Controls.Add($textLabel3);
$form.Controls.Add($textLabel4);
$form.Controls.Add($textLabel5);
$form.Controls.Add($textLabel6);

$form.Controls.Add($textBox1);
$form.Controls.Add($textBox2);
$form.Controls.Add($textBox3);
$form.Controls.Add($textBox4);
$form.Controls.Add($textBox5);
$form.Controls.Add($textBox6);

$ret = $form.ShowDialog();

#################return values

return $first, $full, $user, $email, $Camp, $phone,

$return= Button “Enter First Name” "Enter Full Name" "Enter UserName" "Enter the Users Email Address" “Enter Campus” "Enter Phone Number" 

#Below variables will get the values that had been entered by the user

$first = $return[0]
$full = $return[1]
$user = $return[2]
$email = $return[3]
$camp = $return[4]
$phone = $return[5]      
    }

#####Script to add the users to heir specific OUs within the AD environment#####
    
Finally

{
Import-Module ActiveDirectory
    ForEach-Object{
    $full = $_.full    
    $user = $_.user
    $email = $_.email
    $first = $_.first    
    $camp = $_.camp   
    $phone = $_.phone  

New-ADUser -Name "$full" -AccountPassword (ConvertTo-SecureString “P@55W0rd!” -AsPlainText -force)  -ChangePasswordAtLogon "$true" -City "Hollywood" -Company "Example Inc." -Country "United States" -DisplayName "$user" -EmailAddress "$email" -Enabled "$true" -GivenName "$first" -Manager "Joe Somebody" -Office "$camp" -OfficePhone "$phone" -Path "OU=example1A,OU=example,DC=camp3,DC=camp2,DC=local" -SamAccountName "$user" -Surname "$first" -UserPrincipalName "$email"
}
}

When I run the script, the form comes up and I can put in the information. After I hit “OK” it looks like it is going to run and it spits out the following error

New-ADUser : A positional parameter cannot be found that accepts argument ‘Hollywood Institute of Beauty Careers’.
At line:199 char:1

New-ADUser -Name $full> -AccountPassword (ConvertTo-SecureString “HIB …
CategoryInfo : InvalidArgument: ( [New-ADUser], ParameterBindingException
FullyQualifiedErrorId : PositionalParameterNotFound,Microsoft.ActiveDirectory.Management.Commands.NewADUser

Button : The term ‘Button’ is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of the name, or if a path
was included, verify that the path is correct and try again.
At line:172 char:10

$return= Button “Enter First Name” “Enter Full Name” “Enter UserName” …
CategoryInfo : ObjectNotFound: (Button:String) , CommandNotFoundException
FullyQualifiedErrorId : CommandNotFoundException

Can anyone tell me what I am missing?

test_Script.txt (5.38 KB)

Neally · 2019-06-27T15:25:51.000Z

Just a general question, why GUI? This would be much easier to get to work with commandline only and once that works you can mess with GUI.

If you post code, please use the ‘Insert Code’ button. Please and thank you!

PLEASE READ BEFORE POSTING! Read if you're new to the PowerShell forum! Programming & Development

Hi, and welcome to the PowerShell forum! Don’t apologize for being a “noob” or “newbie” or “n00b.” There’s just no need – nobody will think you’re stupid, and the forums are all about asking questions. Just ask! Use a descriptive subject. Don't say "Need help" or "PowerShell Help", actually summarize what the problem is. It helps the rest of us keep track of which problem is which. Don’t post massive scripts. We’re all volunteers and we don’t have time to read all that, nor will we copy, past…

robertmartinez3 · 2019-06-27T15:53:10.000Z

In line 199 -Office doesn’t exist in Active Directory, you should look at the attributes and get the usage name. For you I believe you’re looking for physicalDeliveryOfficeName

New-ADUser -Name "$full" -AccountPassword (ConvertTo-SecureString “P@55W0rd!” -AsPlainText -force)  -ChangePasswordAtLogon "$true" -City "Hollywood" -Company "Example Inc." -Country "United States" -DisplayName "$user" -EmailAddress "$email" -Enabled "$true" -GivenName "$first" -Manager "Joe Somebody" -Office "$camp" -OfficePhone "$phone" -Path "OU=example1A,OU=example,DC=camp3,DC=camp2,DC=local" -SamAccountName "$user" -Surname "$first" -UserPrincipalName "$email"

And in line 172 you have Button not $Button

$return= Button “Enter First Name” "Enter Full Name" "Enter UserName" "Enter the Users Email Address" “Enter Campus” "Enter Phone Number"

Neally · 2019-06-27T15:58:35.000Z

Robert8846:

-Office doesn’t exist in Active Directory

Yeah there is an office field, you can use it both with ‘new-aduser’ and ‘set-aduser’

get-aduser -filter "office -like '*'" -Properties office) | select office

office

------

test_office_1

alex0395 · 2019-06-27T16:25:06.000Z

I modified the button to read as $button. That issue is taken care of now. I ran the script again and got the following error

New-ADUser : A positional parameter cannot be found that accepts argument 'Hollywood Institute of Beauty Careers'.
At line:199 char:1
+ New-ADUser -Name $full> -AccountPassword (ConvertTo-SecureString “HIB ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : InvalidArgument: (:) [New-ADUser], ParameterBindingException
    + FullyQualifiedErrorId : PositionalParameterNotFound,Microsoft.ActiveDirectory.Management.Commands.NewADUser

Neally · 2019-06-27T16:26:51.000Z

maybe try something like this?

$full  = read-host 'Enter Full Name'
$first = ($full -split " ")[0]
$last  =  ($full -split " ")[1]
$user  = read-host 'Enter User Name'
$email = "$user@domain.com"
$camp  = read-host 'Enter Camp info'
$phone = read-host 'Enter Phone number'

$newUserInfo = @{
    Name                  = $full
    AccountPassword       = ConvertTo-SecureString 'P@55W0rd!' -AsPlainText -force
    ChangePasswordAtLogon = $true
    City                  = "Hollywood" 
    Company               = "Example Inc." 
    Country               = "United States" 
    DisplayName           = $user 
    EmailAddress          = $email
    Enabled               = $true
    GivenName             = $first
    Manager               = "Joe Somebody" 
    Office                = $camp
    OfficePhone           = $phone
    Path                  = "OU=example1A,OU=example,DC=camp3,DC=camp2,DC=local" 
    SamAccountName        = $user
    Surname               = $last
    UserPrincipalName     = $email
}

New-ADUser @newUserInfo

Neally · 2019-06-27T16:28:20.000Z

Alex0395:

New-ADUser : A positional parameter cannot be found that accepts argument ‘Hollywood Institute of Beauty Careers’

Do you know which parameter gets that info? Is that for the campus info ( aka office parameter?)

robertmartinez3 · 2019-06-27T16:35:06.000Z

Sorry, thats incorrect per MS, All Attributes

Neally · 2019-06-27T16:38:17.000Z

Robert8846:

Sorry, thats incorrect per MS, All Attributes

I just tried it in my test AD and it works fine.

https://docs.microsoft.com/en-us/powershell/module/addsadministration/set-aduser?view=win10-ps

But you are right, the ‘office’ parameter, is settings the ‘PhysicalDeliveryOfficeName’ Attribute.

EDIT: Can’t spell

@robertmartinez3

alex0395 · 2019-06-27T17:18:43.000Z

Neally, I made the modifications that you recommended and I got the following output.

New-ADUser : A value for the attribute was not in the acceptable range of values
At line:218 char:1
+ New-ADUser @newUserInfo
+ ~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (CN=test morse,O...,DC=hi,DC=local:String) [New-ADUser], ADException
    + FullyQualifiedErrorId : ActiveDirectoryServer:8322,Microsoft.ActiveDirectory.Management.Commands.NewADUser

@alexw

Neally · 2019-06-27T17:24:21.000Z

Do you know for which attribute it said that? If not, that’s what you have to find out.

alex0395 · 2019-06-27T18:04:29.000Z

From what I can see, the attribute that it is talking about is the actual new-aduser @newuserinfo command itself at line:218 char:1

I attempted putting the @NewUserInfo parameter in quotes and it looks to have created a user however It did not create the user with the user information provided. I am still looking to try and find what it actually created

alex0395 · 2019-06-27T18:08:54.000Z

Neally Wrote:

Do you know which parameter gets that info? Is that for the campus info ( aka office parameter?)

That is the name of the company that the users are being added too.

@alexw

Neally · 2019-06-27T18:13:30.000Z

Alex0395:

From what I can see, the attribute that it is talking about is the actual new-aduser @newuserinfo command itself at line:218 char:1

I attempted putting the @NewUserInfo parameter in quotes and it looks to have created a user however It did not create the user with the user information provided. I am still looking to try and find what it actually created

No, that’s just a hash table. One of the attributes set must be off. EAsiest way to find out which one it is, is to run it line by line and see which ones it errors out. It’s annoying but easy enough to test.

Alex0395:

Neally Wrote:

Do you know which parameter gets that info? Is that for the campus info ( aka office parameter?)
That is the name of the company that the users are being added too.

Name of the company? The question is which attribute though?

Neally · 2019-06-27T18:15:13.000Z

Alex0395:

New-ADUser : A value for the attribute was not in the acceptable range of values

This error clearly states that one of the attributes you are trying to populate has the wrong or an unexpected value, so you have to go one by one and find out which one it is and correct it.

As we don’t know your input, we can’t really troubleshoot that for you.

alex0395 · 2019-06-27T18:26:31.000Z

I will check it out and get back when I find the attribute

patrickdeno2 · 2019-06-27T18:38:11.000Z

I’m having trouble trying to understand what exactly this code block is supposed to do. Perhaps it’s my inexperience with the language, but what is “Finally” supposed to be? A Variable? A Function? What is this supposed to do? I believe this might be malformed.

#####Script to add the users to their specific OUs within the AD environment#####
    
Finally

{
	Import-Module ActiveDirectory

    ForEach-Object{
    $full = $_.full    
    $user = $_.user
    $email = $_.email
    $first = $_.first    
    $camp = $_.camp   
    $phone = $_.phone  

	New-ADUser -Name "$full" -AccountPassword (ConvertTo-SecureString "P@55W0rd!" -AsPlainText -force)  -ChangePasswordAtLogon "$true" -City "Hollywood" -Company "Example Inc." -Country "United States" -DisplayName "$user" -EmailAddress "$email" -Enabled "$true" -GivenName "$first" -Manager "Joe Somebody" -Office "$camp" -OfficePhone "$phone" -Path "OU=example1A,OU=example,DC=camp3,DC=camp2,DC=local" -SamAccountName "$user" -Surname "$first" -UserPrincipalName "$email"
	}
	
}

Neally · 2019-06-27T18:39:24.000Z

That’s part of try/catch. It’s not really needed

Scripting Blog [archived] – 5 Jul 14

Weekend Scripter: Using Try, Catch, Finally Blocks for PowerShell Error...

Summary: Microsoft PFE, Ashley McGlone, talks about using Try, Catch, Finally blocks for error handling in Windows PowerShell. Microsoft Scripting Guy, Ed Wilson, is here. Today’s guest blogger is Ashley McGlone, a Microsoft premier field engineer....

alex0395 · 2019-06-27T18:39:40.000Z

<b>Neally Wrote:  

No, that's just a hash table. One of the attributes set must be off. EAsiest way to find out which one it is, is to run it line by line and see which ones it errors out. It's annoying but easy enough to test.

</b>

PS C:\Windows\system32> Import-Module ActiveDirectory

PS C:\Windows\system32> $full  = read-host 'Enter Full Name'
Enter Full Name: john doe

PS C:\Windows\system32> $first = ($full -split " ")[0]

PS C:\Windows\system32> $last  =  ($full -split " ")[1]

PS C:\Windows\system32> $user  = read-host 'Enter User Name'
Enter User Name: jdoe

PS C:\Windows\system32> $email = "$user@hi.edu"

PS C:\Windows\system32> $camp  = read-host 'Enter Campus Location'
Enter Campus Location: Hollywood

PS C:\Windows\system32> $phone = read-host 'Enter Phone number'
Enter Phone number: 5558675309

PS C:\Windows\system32> $newUserInfo = @{
    Name                  = $full
    AccountPassword       = ConvertTo-SecureString 'HIBCT3mp123!' -AsPlainText -force
    ChangePasswordAtLogon = $true
    City                  = "Hollywood" 
    Company               = "Hollywood Institute of Beauty Careers" 
    Country               = "United States" 
    DisplayName           = $user 
    EmailAddress          = $email
    Enabled               = $true
    GivenName             = $first
    Manager               = "joe somebody" 
    Office                = $camp
    OfficePhone           = $phone
    Path                  = "OU=Example1A,OU=example1,DC=camp3,DC=camp2,DC=local"
    SamAccountName        = $user
    Surname               = $last
    UserPrincipalName     = $email
}

PS C:\Windows\system32> New-ADUser @newUserInfo
New-ADUser : A value for the attribute was not in the acceptable range of values
At line:1 char:1
+ New-ADUser @newUserInfo
+ ~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (CN=john doe,...,DC=hi,DC=local:String) [New-ADUser], ADException
    + FullyQualifiedErrorId : ActiveDirectoryServer:8322,Microsoft.ActiveDirectory.Management.Commands.NewADUser

Neally, I ran each line line by line, Shown above, It is still erroring out at the new-ADUser cmdlet. Is it possible that it needs to be something like $_.{} instead of @{}?

patrickdeno2 · 2019-06-27T18:41:20.000Z

Neally:

That’s part of try/catch. It’s not really needed

Weekend Scripter: Using Try, Catch, Finally Blocks for PowerShell Error Handling - Scripting Blog [archived]

Nods That explains it. Thanks.