New-LocalUser

Module:

Microsoft.PowerShell.LocalAccounts Module

Creates a local user account.

New-LocalUser
 [-Name] <String>
 -Password <SecureString>
 [-AccountExpires <DateTime>]
 [-AccountNeverExpires]
 [-Description <String>]
 [-Disabled]
 [-FullName <String>]
 [-PasswordNeverExpires]
 [-UserMayNotChangePassword]
 [-WhatIf]
 [-Confirm]
 [<CommonParameters>]

New-LocalUser
 [-Name] <String>
 [-AccountExpires <DateTime>]
 [-AccountNeverExpires]
 [-Description <String>]
 [-Disabled]
 [-FullName <String>]
 [-NoPassword]
 [-UserMayNotChangePassword]
 [-WhatIf]
 [-Confirm]
 [<CommonParameters>]

The New-LocalUser cmdlet creates a local user account. This cmdlet creates a local user account.

New-LocalUser -Name 'User02' -Description 'Description of this account.' -NoPassword

Name Enabled Description
---- ------- -----------
User02 True Description of this account.

This command creates a local user account and doesn't specify the AccountExpires or Password parameters. The account doesn't expire or have a password.

$Password = Read-Host -AsSecureString
$params = @{
 Name = 'User03'
 Password = $Password
 FullName = 'Third User'
 Description = 'Description of this account.'
}
New-LocalUser @params

Name Enabled Description
---- ------- -----------
User03 True Description of this account.

The first command uses the Read-Host cmdlet to prompts you for a password. The command stores the password as a secure string in the $Password variable.

The second command creates a local user account and sets the new account's password to the secure string stored in $Password. The command specifies a user name, full name, and description for the user account.

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutBuffer, -OutVariable, -PipelineVariable, -ProgressAction, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

You can pipe a string to this cmdlet.

You can pipe a DateTime object to this cmdlet.

You can pipe a boolean value to this cmdlet.

You can pipe a secure string to this cmdlet.

This cmdlet returns a LocalUser object representing the created user account.

Windows PowerShell includes the following aliases for New-LocalUser:

• nlu

A user name can't be identical to any other user name or group name on the computer. A user name can't consist only of periods . or spaces. A user name can contain up to 20 uppercase characters or lowercase characters. A user name can't contain the following characters:

", /, \, [, ], :, ;, |, =, ,, +, *, ?, <, >, @

A password can contain up to 127 characters.

The PrincipalSource property is a property on LocalUser, LocalGroup, and LocalPrincipal objects that describes the source of the object. The possible sources are as follows:

• Local
• Active Directory
• AzureAD
• MicrosoftAccount