New-LocalUser

New-LocalUser
    [-Name] <String>
    -Password <SecureString>
    [-AccountExpires <DateTime>]
    [-AccountNeverExpires]
    [-Description <String>]
    [-Disabled]
    [-FullName <String>]
    [-PasswordNeverExpires]
    [-UserMayNotChangePassword]
    [-WhatIf]
    [-Confirm]
    [<CommonParameters>]

New-LocalUser
    [-Name] <String>
    [-AccountExpires <DateTime>]
    [-AccountNeverExpires]
    [-Description <String>]
    [-Disabled]
    [-FullName <String>]
    [-NoPassword]
    [-UserMayNotChangePassword]
    [-WhatIf]
    [-Confirm]
    [<CommonParameters>]

The New-LocalUser cmdlet creates a local user account. This cmdlet creates a local user account.

New-LocalUser -Name 'User02' -Description 'Description of this account.' -NoPassword

Name    Enabled  Description
----    -------  -----------
User02  True     Description of this account.

This command creates a local user account and doesn't specify the AccountExpires or Password parameters. The account doesn't expire or have a password.

$Password = Read-Host -AsSecureString
$params = @{
    Name        = 'User03'
    Password    = $Password
    FullName    = 'Third User'
    Description = 'Description of this account.'
}
New-LocalUser @params

Name    Enabled  Description
----    -------  -----------
User03  True     Description of this account.

The first command uses the Read-Host cmdlet to prompts you for a password. The command stores the password as a secure string in the $Password variable.

The second command creates a local user account and sets the new account's password to the secure string stored in $Password. The command specifies a user name, full name, and description for the user account.

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutBuffer, -OutVariable, -PipelineVariable, -ProgressAction, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

You can pipe a string to this cmdlet.

You can pipe a DateTime object to this cmdlet.

You can pipe a boolean value to this cmdlet.

You can pipe a secure string to this cmdlet.

This cmdlet returns a LocalUser object representing the created user account.

Windows PowerShell includes the following aliases for New-LocalUser:

• nlu

A user name can't be identical to any other user name or group name on the computer. A user name can't consist only of periods . or spaces. A user name can contain up to 20 uppercase characters or lowercase characters. A user name can't contain the following characters:

", /, \, [, ], :, ;, |, =, ,, +, *, ?, <, >, @

A password can contain up to 127 characters.

The PrincipalSource property is a property on LocalUser, LocalGroup, and LocalPrincipal objects that describes the source of the object. The possible sources are as follows:

• Local
• Active Directory
• AzureAD
• MicrosoftAccount