active directory - PowerShell New-ADUser fails in cycle -
here powershell code adding test user accounts active directory... problem: when $i
between 1 , 99, works fine... immediatelly after $i
reaches 100, created accounts disabled , error message in console telling "the password not meet length, complexity, or history requirement of domain.
"
any idea what's problem?
//edit: no password policy set domain
thanks
import-module activedirectory for($i=1; $i -le 500; $i++){ $name="name1_$i" #name $surname="surname1_$i" #surname $logon="logon1$i" #logon $plainpass='pas5w0rd'+$i+'&g' $password=convertto-securestring -asplaintext -force -string $plainpass new-aduser -enabled 1 -name $name -accountpassword $password -displayname "$name $surname" -givenname $name -userprincipalname $logon@testdomain.local -samaccountname $logon -surname $surname -path "ou=sometest,dc=testdomain,dc=local" }
so reproduce problem, under default domain policy. , when :
name = name1_100 surname = surname1_100 samaccountname = logon1100
a big part of name in password (see default passord policy on domain called password complexity)
the samaccountname checked in entirety determine whether part of password
so try
$plainpass='pas5w0rd'+($i+1)+'&g'
it work.
Comments
Post a Comment