User and Group Commands

---

This is a collection of commands that can be used to create users and groups and modify permissions. These commands should NEVER BE USED to perform any kind of illegal activities. This reference was meant more for Administrators and can be helpful when using Invoke-Command.

Windows User and Group Commands

# NEW LOCAL USER net user rosborne Password123! /ADD New-LocalUser -FullName "Rob Osborne" -Name rosborne -NoPassword New-LocalUser -FullName "Rob Osborne" -Name rosborne -Password (ConvertTo-SecureString -AsPlainText -String "Password123!" -Force) # OR net user /ADD rosborne * Type a password for the user: Retype the password to confirm: The command completed successfully. # ALLOW USER TO CHANGE PASSWORD net user rosborne Password123! /ADD /PASSWORDCHG:Yes New-LocalUser -Name rosborne -Password (ConvertTo-SecureString -AsPlainText -String "Password123!" -Force) # PREVET CHANGING PASSWORD net user rosborne Password123! /ADD /PASSWORDCHG:No New-LocalUser -Name rosborne -Password (ConvertTo-SecureString -AsPlainText -String "Password123!" -Force) # CREATE ACCOUNT THAT EXPIRES New-LocalUser -FullName "Rob Osborne" -Name rosborne -Description "Example account" -PasswordNeverExpires $True -AccountExpires (Get-Date).AddDays(365) -Disabled -UserMayNotChangePassword -Password (ConvertTo-SecureString -AsPlainText -String "Password123!" -Force) # ADD LOCAL USER TO LOCAL GROUP net localgroup administrators rosborne /add Add-LocalGroupMember -Group "Administrators" -Member "Admin", "MicrosoftAccount\username@Outlook.com", "AzureAD\rosborne@osbornepro.com", "OsbornePro\Domain Admins" # NEW DOMAIN USER net user rosborne "Password123!" /ADD /DOMAIN New-ADUser -Name "Rob Osborne" -GivenName "Rob" -Surname "Osborne" -SamAccountName "rosborne" -UserPrincipalName "rosborne@osbornepro.com" -Path "OU=Employees,OU=Managed,DC=osbornepro,DC=com" -AccountPassword $SecureString -Enabled $true # ADD DOMAIN USER TO DOMAIN GROUP net group "Domain Admins" rosborne /ADD /DOMAIN Add-ADGroupMember -Identity "OsbornePro\Domain Users" -Members rosborne # ADD DOMAIN USER TO LOCAL GROUP net localgroup Users osbornepro\rosborne /add Add-LocalGroupMember -Group Administrators -Member "osbornepro\rosborne" # LIST GROUP MEMBERS net localgroup administrators Get-LocalGroupMember -Group Administrators

Linux User and Group Commands

sudo useradd -D -s /bin/bash # OR MODIFY VALUES IN /etc/default/useradd # CREATE USER AND HOME DIR USING DEFAULT VALUES sudo useradd -m rosborne # CREATE USER AND CUSTOM HOME DIR LOCATION sudo useradd -m -d /opt/rosborne rosborne # CREATE USER AND DEFINE ID NUMBER sudo useradd -u 1500 rosborne # CREATE USER AND SET LOGIN GROUP sudo useradd -g users rosborne # CREATE USER ASSIGN MULTIPLE GROUPS sudo useradd -g users -G wheel,adm rosborne # CREATE USER AND DEFINE LOGIN SHELL sudo useradd -s /usr/bin/zsh rosborne # CREATE USER AND ADD COMMENT sudo useradd -c "Guest User Account" rosborne # CREATE USER WITH EXPIRATION DATE sudo useradd -e 2029-01-22 rosborne # VERIFY EXPIRATION DATE sudo chage -l rosborne # CREATE A SYSTEM USER sudo useradd -r SYSrosborne