Solved

Generate temporary AD users

Posted on 2014-03-06
8
28 Views
Last Modified: 2015-06-24
Hello!

I was challenged by a customer to come up with a solution for them to generate temporary AD users that lasts for X amount of hours/days. With interactive input for this of course.

The scenario is that they have a software that they want to allow temporary access to for customers and consultants.

Is this possible via something like Powershell? Or do anyone know of a software that can do this? Without being a fully "bloated" system. This is the only function they need.

Appreciate any suggestions :-) Maybe I've missed something vital in my explanation, I'll check in later.

Cheers

Regards
Daniel
0
Comment
Question by:itssab
8 Comments
 
LVL 22

Accepted Solution

by:
Joseph Moody earned 500 total points
ID: 39909614
When you create a user in Active Directory Users and Computers, you can specify an expiration time for the account. Would this work?
0
 
LVL 57

Expert Comment

by:Mike Kline
ID: 39909716
You can also set it using Set-ADAccountExpiration but Joe's answer is probably easier for help desk folks via the GUI.

What do you mean by interactive input, are  you looking for a custom front end for this?

Thanks
Mike
0
 
LVL 6

Expert Comment

by:Alan Gunn
ID: 39909949
I had a request at 14:00 to have an account "Expire" at 18:00.
I set it to expire at the end of the day and adjusted it's logon hours to nothing after 18:00.

It only stops you authenticating after that time but it gives a little extra control.

Cheers!

TRM
0
Use Case: Protecting a Hybrid Cloud Infrastructure

Microsoft Azure is rapidly becoming the norm in dynamic IT environments. This document describes the challenges that organizations face when protecting data in a hybrid cloud IT environment and presents a use case to demonstrate how Acronis Backup protects all data.

 
LVL 18

Expert Comment

by:Sarang Tinguria
ID: 39911200
You may below script it may reduce your most of the time
http://gallery.technet.microsoft.com/scriptcenter/PowerShell-Create-Active-7e6a3978

You will just have to fill the details in excel file so its interactive ..:-)
0
 

Author Comment

by:itssab
ID: 39911738
Lots of replies I see, thank you :)

I'm know of how to do it through the GUI, but they want something more intuitive and automated than that.

Yes, some kind of customer front end is what I'm after. You know, the old "I want to be able to press a button!" customer argument ;) Type in expire time, maybe what group it should be belong to etc, then click a button and username and password is generated.

They need these users to be removed by automation after they've expired as well.

They want an interface they can reach from anywhere in the world. But that would have to be remote desktop if nothing else is available.
0
 

Author Comment

by:itssab
ID: 39923493
No more suggestions?
0
 
LVL 34

Expert Comment

by:Seth Simmons
ID: 40848145
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
0

Featured Post

Three Reasons Why Backup is Strategic

Backup is strategic to your business because your data is strategic to your business. Without backup, your business will fail. This white paper explains why it is vital for you to design and immediately execute a backup strategy to protect 100 percent of your data.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Upgrading from SBS2003 to Windows Server 2012r2 Essentials 13 46
AD 20012 r2 / vmware horizon 6 37
GPO not showing IE10 in GP Preferences 14 47
Lync 2010 4 28
Is your Office 365 signature not working the way you want it to? Are signature updates taking up too much of your time? Let's run through the most common problems that an IT administrator can encounter when dealing with Office 365 email signatures.
This script can help you clean up your user profile database by comparing profiles to Active Directory users in a particular OU, and removing the profiles that don't match.
This tutorial will walk an individual through locating and launching the BEUtility application and how to execute it on the appropriate database. Log onto the server running the Backup Exec database. In a larger environment, this would generally be …
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

778 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question