PowerShell Script

---

Hi All,

I have a PowerShell script that creates a new local power user.

I just need help on updating it so it removes any spaces at the end of the usernames and passwords, as had a few users having issues logging in due to credentials being incorrect and noticed there were spaces at the end of the p/words or Usernames. Also need the option for the user to change password at logon?

Current script setup;

**$Account = New-LocalUser
$Password

if ($existing -eq $null) {
Write-Host "Creating new local user $Account."

Write-Host "Adding local user $Username to $group."
& net localgroup "Power Users" "$Account" /add
& net localgroup "Remote Desktop Users" "$Account" /add
}
else {
Write-Host "Setting password for existing local user $Username."
$existing.SetPassword($Password)
}
Write-Host "Ensuring password for $Account never expires."
& WMIC USERACCOUNT WHERE "Name='$Account'" SET PasswordExpires=FALSE**

Thanks

Have you tried using the Trim() command?
$string = $string.Trim()
That's what I used to use to trim leading/trailing spaces.

@brian-carson Where would I input the cmdlet using my script?

I just need to trim any spaces at the end of Usernames and Passwords.

Also, need the users to change password at logon.

Thanks.

Hi All,

Just wanted to get an update if there was anything I can input on my script to get this working?

Hey @Waqkas-Ahmed ,

One solution would be to prompt them for the name first. Then you can trim the name before you pass it to the New-LocalUser cmdlet.

$NewLocalUserName = Read-Host -Prompt "Enter a name for the new user"
$TrimmedUserName = $NewLocalUsername.TrimEnd()


$Account = New-LocalUser -Name $TrimmedUserName

$Password

if ($existing -eq $null) {
Write-Host "Creating new local user $Account."

Write-Host "Adding local user $Username to $group."
& net localgroup "Power Users" "$Account" /add
& net localgroup "Remote Desktop Users" "$Account" /add
}
else {
Write-Host "Setting password for existing local user $Username."
$existing.SetPassword($Password)
}
Write-Host "Ensuring password for $Account never expires."
& WMIC USERACCOUNT WHERE "Name='$Account'" SET PasswordExpires=FALSE

I'm not sure what you are trying to do with the password. Since you are not providing a password when running New-LocalUser, it is prompting them to enter a password. It is stored as a secure string, which doesn't have a trim method. You want them to change it again?

Let me know and we can fix that too. Hope this helps.

@Waqkas-Ahmed ,

What are you trying to do with the If ($existing -eq $null) statement? In this script, I believe it will always be null, since the variable $existing is never set to anything.

Also, the account is created, or fails, when you run the New-LocalUser cmdlet
$Account = New-LocalUser -Name $TrimmedUserName
before the if statement is run. We would need to move this command inside the if statement.

We can use the Get-LocalUser cmdlet to test if a username exists. Then we can use that boolean to control our if statement. Something like this

$NewLocalUserName = Read-Host -Prompt "Enter a name for the new user"
$TrimmedUserName = $NewLocalUsername.TrimEnd()
$group1 = "Power Users"
$group2 = "Remote Desktop Users"
# $Password
$exists = Get-LocalUser -Name $TrimmedUserName -ErrorAction SilentlyContinue

if (!$exists) {
    $Account = New-LocalUser -Name $TrimmedUserName
    Write-Host "Creating new local user $Account. `n"
    Write-Host "Adding $Account to the $group1 group."
    net localgroup "Power Users" "$Account" /add
    Write-Host "Adding $Account to the $group2 group."
    net localgroup "Remote Desktop Users" "$Account" /add
    Write-Host "Ensuring password for $Account never expires."
    WMIC USERACCOUNT WHERE "Name='$Account'" SET PasswordExpires=FALSE
}
else {
    Write-Host "Username already exists"
   # Write-Host "Setting password for existing local user $Username."
   # $existing.SetPassword($Password)
}