/build/static/layout/Breadcrumb_cap_w.png

Scripting Question


Automation of Active Directory Account Creation

07/24/2015 3473 views

We have an extremely complex and lengthy process for onboarding new employees.  I am trying to come up with ways to automate as many of these steps as possible.  I was curious if anybody knew of any tricks using our K1000 that may help.

To explain further, we have an HR ticket queue where all new employee requests are created.  Within this ticket contains all the information I need to build an Active Directory account.  My thoughts are using Powershell, I could query the backend MySQL database and create a script that would create the accounts.


I wanted to reach out to see if anybody knew of any cool tricks (I'm even open to 3rd party software) that may work?

1 Comment   [ + ] Show comment

Comments

  • There are many VBScripts and no doubt Powershell scripts as well, on the internet, that can manage AD. Just ask Mr Google to point you at a few.

All Answers

0
Having worked at many larger client sites, I'd say your biggest hurdle is going to be talking HR into allowing access to the database and then talking round the DBAs to sort out appropriate access levels.
Answered 07/26/2015 by: VBScab
Red Belt

  • To clarify, the Database in question is the Dell KACE. After working on it over the weekend I have a powershell script that will do exactly what I need. I'm having difficulty getting Powershell to connect to the KACE database to run a query.
    • Were you ever able to get this to work?
This content is currently hidden from public view.
Reason: Member has been banned from the site For more information, visit our FAQ's.
This content is currently hidden from public view.
Reason: Member has been banned from the site For more information, visit our FAQ's.
0
There are many ways to do that. A good starting point really is PowerShell scripts that can take all the data from the HR (e.g. in a form of a csv file) and use this data to create a user account in AD. You can have a look at already existing scripts out there in places like technet gallery (https://gallery.technet.microsoft.com/scriptcenter), however it might not be the best idea as those scripts can be very much company specific. It will also be quite hard to maintain after a while.

You can also have a look at various 3rd party tools that provide automation for AD provisioning. There are lots of them varying on what exactly you need to do, going from really cheap (or even free) and crap ones to really advanced and expensive. Not to spam with my own recommendations, here is a good article by techrepublic that despite beaing a bit old is still very relevant. http://www.techrepublic.com/blog/five-apps/five-apps-for-active-directory-management/ 
Answered 10/13/2015 by: Sam Bloom
White Belt

Don't be a Stranger!

Sign up today to participate, stay informed, earn points and establish a reputation for yourself!

Sign up! or login

View more:

Share

 
This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ