automated adding users

Forums

My Profile

Inbox

Address Book

My Subscription

My Forums

automated adding users

Logged in as: Guest

arrSession:exec spGetSession 2,2,26397

	Active Users: There are 0 members and 0 guests.
	Users viewing this topic: none

Printable Version

All Forums >> [Scripting] >> WSH & Client Side VBScript >> automated adding users
Do you like VisualBasicScript.com? Link to us and help spread the word about our forum. Thanks!

Page: [1]

Message

<< Older Topic Newer Topic >>

automated adding users - 9/27/2005 4:24:57 AM

Bezerk

Posts: 22
Score: 0
Joined: 6/20/2005
From: Netherlands
Status: offline

Hi,

Ik am currently busy with a script that reads a excel sheet that comes from a database which contains userinfo to be imported in active directory.

But not all users must get an account only people that have a Y in the access row
Now i can create cases etc in my script, but the people administering the database also want users who do not longer needs access to be disabled in active directory and any updates to names etc. should be done all from that export they give to me.

This is my current script just to create users, but how do all that with one script or is this impossible?

Thanks in advance

' NAME addusers.vbs
' PURPOSE create users from excel sheet
' This script is created in sections for ease of use
' All that needs to be done is edit the path to the excel sheet
'
' Here is the list of sections:
' SECTION A DECLARE VARIABLES
' SECTION B CONNECT TO ACTIVE DIRECTORY
' SECTION C OPEN AND READ THE SPREADSHEET
' SECTION D DO LOOP UNTIL EMPTY CELL IN SPREADSHEET
' SECTION E CHECK TO SEE IF USER OU EXISTS
' SECTION F CREATE THE USER
' SECTION G - ECHO CONFIRMATION MESSAGE
' SECTION H - TIDY UP RESET OBJECTS TO NOTHING

' SECTION A DECLARE VARIABLES 
Option Explicit
' Objects declared :
Dim objRootDSE, objFSO, objShell
Dim objUser, objGroup, objContainer
Dim objExcel, objSheet 
Dim objExcelFile
Dim objWSHShell
Dim objIADSUser
' Strings declared :
Dim strCN, strNTSam, strPWD, strOUContainer, strUPN
Dim strGroupDN, strLast, strFirst, strDescription, strGroup 
Dim strHomeFolder, strHomeDrive
Dim strNetBIOSDomain, strDomain 
Dim strProfileDir
Dim strMailBox
' Integers declared :
Dim intNumusers, intRunError, intRow, intCol

'Declare Constants:
'path to excelsheet
objExcelFile = "C:\scripts\adduserswithexchange.xls"
'First password for the users
strPWD = "Welkom01"
'start at row 2 first row is for headlines
intRow = 3
'SECTION B CONNECT TO ACTIVE DIRECTORY
' Get Domain name from RootDSE object.
Set objRootDSE = GetObject("[link=http://www.visualbasicscript.com/ldap://RootDSE]LDAP://RootDSE[/link]")
strDomain = objRootDSE.Get("DefaultNamingContext")

'Section C OPEN AND READ THE SPREADSHEET
' Connect to spreadsheet where users are stored
Set objExcel = CreateObject("Excel.Application")

' Open the Speadsheet (Error Handling Section).
On Error Resume Next
Err.Clear
objExcel.Workbooks.Open objExcelFile
If Err.Number <> 0 Then
Err.Clear
On Error GoTo 0
Wscript.Echo "Kan de file niet vinden!" & Space(2) & objExcelFile
Wscript.Quit
End If
On Error GoTo 0
Set objSheet = objExcel.ActiveWorkbook.Worksheets(1)

' SECTION D DO LOOP UNTIL EMPTY CELL IN SPREADSHEET

Do 
' Read values from spreadsheet for this user.
strCN = Trim(objSheet.Cells(intRow, 1).Value)
strNTSam = Trim(objSheet.Cells(intRow, 2).Value)
strOUContainer = Trim(objSheet.Cells(intRow, 3).Value)
strFirst = Trim(objSheet.Cells(intRow, 4).Value)
strLast = Trim(objSheet.Cells(intRow, 5).Value)
strUPN = Trim(objSheet.Cells(intRow, 6).Value)
strHomeFolder = Trim(objSheet.Cells(intRow, 7).Value)
strHomeDrive = Trim(objSheet.Cells(intRow, 8).Value)
strProfileDir = Trim(objSheet.Cells(intRow, 9).Value)
strDescription = Trim(objSheet.Cells(intRow, 10).Value)

' SECTION E CHECK TO SEE IF USER OU EXISTS
'extra section for error handling
' Connect to OU where users to be created.
On Error Resume Next
Err.Clear
Set objContainer = GetObject("LDAP://" & strOUContainer) 
If Err.Number <> 0 Then
Err.Clear
On Error GoTo 0
Wscript.Echo "Edit the LDAP path to your OU " & strOUContainer
Wscript.Quit
End If
On Error GoTo 0

'SECTION F CREATE THE USER 
On Error Resume Next
Err.Clear
Set objUser = objContainer.Create("user", "cn=" & strCN)
If Err.Number <> 0 Then
Err.Clear
On Error GoTo 0
Wscript.Echo "Cannot create user with cn: " & strCN
Else
On Error GoTo 0
' Assign mandatory attributes cn and sAMAccountName.
If strNTSam = "" Then
strNTSam = strCN
End If
objUser.sAMAccountName = strNTSam
On Error Resume Next
Err.Clear
objUser.SetInfo
If Err.Number <> 0 Then
Err.Clear
On Error GoTo 0
Wscript.Echo "Unable to create user with NT SAM name: " & strNTSam
Else
' Set password for user.
objUser.SetPassword strPWD
If Err.Number <> 0 Then
Err.Clear
On Error GoTo 0
Wscript.Echo "Unable to set password for user " & strNTSam
End If
On Error GoTo 0
' Enable the user account.
objUser.AccountDisabled = False
If strFirst <> "" Then
objUser.givenName = strFirst
End If
' Assign values to remaining attributes. 
If strLast <> "" Then
objUser.sn = strLast
End If
If strUPN <> "" Then
objUser.userPrincipalName = strUPN
End If
If strHomeDrive <> "" Then
objUser.homeDrive = strHomeDrive
End If
If strHomeFolder <> "" Then
objUser.homeDirectory = (strHomeFolder & strNTSam)
End If 
If strProfileDir <> "" Then
objUser.profilepath = (strProfileDir & strNTSam)
End If
'Set user DisplayName
If strDescription <> "" Then
objUser.displayName = strDescription
End If

'Section Create the home and profile directory and set permissions
Set objFSO = CreateObject("Scripting.FileSystemObject")
'check to see if the homedrive is available otherwise create one
If objfso.FolderExists(objUser.homeDirectory) = False Then
objfso.CreateFolder(objUser.homeDirectory)
End If
If objfso.FolderExists(objUser.profilepath) = False Then
objfso.CreateFolder(objUser.profilepath)
End If
'set the permissions
Set objWSHShell = CreateObject("Wscript.Shell")
objWSHShell.Run ("C:\scripts\SetACL.exe -on """ & objUser.homeDirectory & """ -ot file -actn ace " & "-ace ""n:msscript.org\" & strNTSam & ";p:full""")
objWSHShell.Run ("C:\scripts\SetACL.exe -on """ & objUser.profilepath & """ -ot file -actn ace " & "-ace ""n:msscript.org\" & strNTSam & ";p:full""")
'Create the usermailbox
'IMPORTANT YOU MUST HAVE EXCHANGE ADMIN TOOLS INSTALLED OTHERWISE  CreateMailbox WILL FAIL!!!
Set objIADSUser = GetObject("[link=http://www.visualbasicscript.com/ldap://CN]LDAP://CN[/link]=" & strCN & "," & strOUContainer)
strMailBox = Trim(objSheet.Cells(intRow, 11).Value)
objIADSUser.CreateMailbox strMailBox
objIADSUser.SetInfo

'Group Membership 
' Groups start in column 12, je can add as much group as you like
intCol = 12
' Loop Until empty cell.
Do 
strGroupDN = Trim(objSheet.Cells(intRow, intCol).Value)
On Error Resume Next
Err.Clear
Set objGroup = GetObject("LDAP://" & strGroupDN)
If Err.Number <> 0 Then
Err.Clear
On Error GoTo 0
Wscript.Echo "Unable to bind to group " & strGroupDN
Else
objGroup.Add objUser.AdsPath
If Err.Number <> 0 Then
Err.Clear
On Error GoTo 0
Wscript.Echo "Unable to add user " & strNTSam _
& " to group " & strGroupDN
End If
End If
On Error GoTo 0
' Increment to next group DN.
intCol = intCol + 1
Loop Until objSheet.Cells(intRow, intCol).Value = ""
End If
End If
' Increment to next user.
intRow = intRow + 1
intNumusers = intNumusers + 1
Loop Until objSheet.Cells(intRow, 1).Value = "" 
' Section G - Echo confirmation Message
Wscript.Echo "Done creating users!" 
' Section H - Tidy up Reset objects to nothing 
objExcel.ActiveWorkbook.Close
objExcel.Application.Quit
Set objUser = Nothing
Set objGroup = Nothing
Set objContainer = Nothing
Set objSheet = Nothing
Set objExcel = Nothing
Set objFSO = Nothing
Set objShell = Nothing
Set objRootDSE = Nothing
Set strProfileDir = Nothing
Set objWSHShell = Nothing
Set objIADSUser = Nothing
Set strMailBox = Nothing

Post #: 1

RE: automated adding users - 9/27/2005 5:12:26 AM

Snipah

Posts: 1343
Score: 6
Joined: 11/1/2004
From: Netherlands
Status: offline

Bezerk,

If i am reading your case:

"[..] users who do not longer needs access to be disabled in active directory and any updates to names etc. should be done all from that export they give to me [..]"

Do you who should be disabled? Do you know who should be disallowed access upfront? If both are to answered yes, then IMO i don't see an issue, as the users are altered and the Access level is known, then you can just go ahead with the import...

Snipah

_____________________________

For more information, please see the "Read me First" topic.

http://www.visualbasicscript.com

(in reply to Bezerk)

Post #: 2

RE: automated adding users - 9/27/2005 7:36:13 AM

Bezerk

Posts: 22
Score: 0
Joined: 6/20/2005
From: Netherlands
Status: offline

yes

but how do i write this down in my script.

Also a lot of name changes are taking place so all records who are active need to be updated every night.

So basicly it comes done to this

If in the excel sheet in the column access is set to Y there needs to be a check if the user is created in AD, or else the name etc needs to be updated.

If in the excel sheet in the column access is set to N there needs to be a check if the user i created in AD, if so then be disabled of if the user is not created in active directory it can skip it.

Also no groups are specified only roles, with some cases i made i determines the OU and group membership

This all needs to go in to my script, only i am getting some errors with the loops.

I will post my updated script tomorrow when i am back at work.

The excel sheet contains almost 45.000 entries.

I have experience with automatically creating users but not in an automated process like this.

Regards,

Rob

(in reply to Snipah)

Post #: 3

RE: automated adding users - 9/27/2005 7:56:50 AM

Snipah

Posts: 1343
Score: 6
Joined: 11/1/2004
From: Netherlands
Status: offline

I reckon this will not be too hard for you, as you already know the majority of what you are trying to achieve...

We will work on If statements and checks throughout the script...

_____________________________

For more information, please see the "Read me First" topic.

http://www.visualbasicscript.com

(in reply to Bezerk)

Post #: 4

RE: automated adding users - 9/27/2005 5:48:48 PM

Bezerk

Posts: 22
Score: 0
Joined: 6/20/2005
From: Netherlands
Status: offline

This is what i have so far, it checks if the user exists if not then creates it.

It still needs al lot of polishing, and i have to get exchange back in.

' NAME addusers.vbs
' CREATED BY: Rob Mokkink Be Value
' This script is created in sections for ease of use
' All that needs to be done is edit the path to the excel sheet
'
' Here is the list of sections:
' SECTION A DECLARE VARIABLES
' SECTION B CONNECT TO ACTIVE DIRECTORY
' SECTION C OPEN AND READ THE SPREADSHEET
' SECTION D DO LOOP UNTIL EMPTY CELL IN SPREADSHEET
' SECTION E CASE STATEMENTS (DENK AAN HET AANPASSEN VAN HET DOMEIN EN OU CONTAINERS)
' SECTION F WALKTHROUGH IF STATMENTS AND CREATE UPDATE OR DISABLE THE USER
' SECTION G TIDY UP RESET OBJECTS TO NOTHING

' SECTION A DECLARE VARIABLES 
'all objects must be declared
Option Explicit
'on error continue

' Objects declared :
Dim objRootDSE, objFSO, objShell
Dim objUser, objGroup, objContainer
Dim objExcel, objSheet 
Dim objExcelFile
Dim objWSHShell
Dim objIADSUser
' Strings declared :
Dim strCN, strNTSam, strPWD, strUPN
Dim strLast, strFirst, strDescription, strGroup 
Dim strHomeFolder, strHomeDrive
Dim strNetBIOSDomain, strDomain 
Dim strProfileDir
Dim strMailBox
Dim strRole
Dim strAccess
' Integers declared :
Dim intRunError, intRow
'User defined object declared, created for case statements
Dim role
Dim access
Dim group
'Declare Constants:
'path to excelsheet
objExcelFile = "c:\olc\addusers with exchange\accounts.xls"
'start at row first row is for headlines
intRow = 2
strHomeDrive = "H:\"
strHomeFolder = "\\srv-olc-dc225\users$\"
strProfileDir = "\\srv-olc-dc225\profiles$\"
'SECTION B CONNECT TO ACTIVE DIRECTORY
' Get Domain name from RootDSE object.
'Set objRootDSE = GetObject("[link=http://www.visualbasicscript.com/ldap://RootDSE]LDAP://RootDSE[/link]")
'strDomain = objRootDSE.Get("DefaultNamingContext")

'Section C OPEN AND READ THE SPREADSHEET
' Connect to spreadsheet where users are stored
Set objExcel = CreateObject("Excel.Application")

' SECTION D DO LOOP UNTIL EMPTY CELL IN SPREADSHEET 
Do
' Read values from spreadsheet for this user.
strNTSam = Trim(objSheet.Cells(intRow, 1).Value)
strCN = Trim(objSheet.Cells(intRow, 9).Value)
strFirst = Trim(objSheet.Cells(intRow, 6).Value)
strLast = Trim(objSheet.Cells(intRow, 5).Value)
strPWD = Trim(objSheet.Cells(intRow, 7).Value)
strRole = Trim(objSheet.Cells(intRow, 10).Value)
strAccess = Trim(objSheet.Cells(intRow, 8).Value)
'SECTION E CASE STATEMENTS
'SELECT CASE ROLE
role = strRole
Select Case role
Case "STUDENT" objContainer = "ou=cursist,ou=politieacademie,dc=test,dc=local"
Case "DOCENT" objContainer = "ou=docent,ou=politieacademie,dc=test,dc=local"
End Select
'SELECT CASE ACCESS
access = strAccess
Select Case access
Case "J" 
Case "N"
End Select
'SELECT CASE SECURITY GROUP
group = strRole
Select CASE group
CASE "STUDENT" strGroup = "cn=g-profile-student,ou=resources,ou=aggregated groups,ou=politieacademie,dc=test,dc=local"
CASE "DOCENT" strGroup = "cn=g-profile-student,ou=resources,ou=aggregated groups,ou=politieacademie,dc=test,dc=local"
End Select
' SECTION F WALKTHROUGH IF STATMENTS AND CREATE, UPDATE OR DISABLE THE USER
If strAccess = "J" Then
Set objUser = GetObject("[link=http://www.visualbasicscript.com/ldap://cn]LDAP://cn[/link]=" & strCN & "," & objContainer)
If Err.Number <> 0 Then
 Err.Clear
 'THE USER DOES NOT EXISTS SO WE CREATE IT
 Set objUser = objContainer.Create("user", "cn=" & strCN)
 If Err.Number <> 0 Then
  Err.Clear
  On Error GoTo 0
  Wscript.Echo "Cannot create user with cn: " & strCN
  Else
  On Error GoTo 0
  ' Assign mandatory attributes cn and sAMAccountName.
  If strNTSam = "" Then
   strNTSam = strCN
  End If
  objUser.sAMAccountName = strNTSam
  On Error Resume Next
  Err.Clear
  objUser.SetInfo
  If Err.Number <> 0 Then
   Err.Clear
   On Error GoTo 0
   Wscript.Echo "Unable to create user with NT SAM name: " & strNTSam
   Else
   ' Set password for user.
   objUser.SetPassword strPWD
   If Err.Number <> 0 Then
    Err.Clear
    On Error GoTo 0
    Wscript.Echo "Unable to set password for user " & strNTSam
   End If
   On Error GoTo 0
   ' Enable the user account.
   objUser.AccountDisabled = False
   If strFirst <> "" Then
    objUser.givenName = strFirst
   End If
   ' Assign values to remaining attributes. 
   If strLast <> "" Then
    objUser.sn = strLast
   End If
   
   'If strUPN <> "" Then
    'objUser.userPrincipalName = strUPN
   'End If
   
   If strHomeDrive <> "" Then
    objUser.homeDrive = strHomeDrive
   End If
   
   If strHomeFolder <> "" Then
    objUser.homeDirectory = (strHomeFolder & strNTSam)
   End If 
   
   If strProfileDir <> "" Then
    objUser.profilepath = (strProfileDir & strNTSam)
   End If

'Set user DisplayName
   If strDescription <> "" Then
    objUser.displayName = strDescription
   End If

'Section Create the home and profile directory and set permissions
   Set objFSO = CreateObject("Scripting.FileSystemObject")
   
   'check to see if the homedrive is available otherwise create one
   If objfso.FolderExists(objUser.homeDirectory) = False Then
    objfso.CreateFolder(objUser.homeDirectory)
   End If
   
   If objfso.FolderExists(objUser.profilepath) = False Then
    objfso.CreateFolder(objUser.profilepath)
   End If
   
   'set the permissions
   Set objWSHShell = CreateObject("Wscript.Shell")
   objWSHShell.Run ("C:\scripts\SetACL.exe -on """ & objUser.homeDirectory & """ -ot file -actn ace " & "-ace ""n:test.local\" & strNTSam & ";p:full""")
   objWSHShell.Run ("C:\scripts\SetACL.exe -on """ & objUser.profilepath & """ -ot file -actn ace " & "-ace ""n:test.local\" & strNTSam & ";p:full""")
  End If
 End If
End If
End If

'Increment to next user.
intRow = intRow + 1
Loop Until objSheet.Cells(intRow, 1).Value = ""

' Section G - Tidy up Reset objects to nothing 
objExcel.ActiveWorkbook.Close
objExcel.Application.Quit
Set objUser = Nothing
Set objGroup = Nothing
Set objContainer = Nothing
Set objSheet = Nothing
Set objExcel = Nothing
Set objFSO = Nothing
Set objShell = Nothing
Set objRootDSE = Nothing
Set strProfileDir = Nothing
Set objWSHShell = Nothing
Set objIADSUser = Nothing
Set strMailBox = Nothing
Set strRole = Nothing
Set strAccess = Nothing
Set role = Nothing
Set access = Nothing
Set group = Nothing
Set strGroup = Nothing

(in reply to Snipah)

Post #: 5

RE: automated adding users - 9/27/2005 9:24:05 PM

Bezerk

Posts: 22
Score: 0
Joined: 6/20/2005
From: Netherlands
Status: offline

I am almost there.

Users are being created, exchange mailboxes are created etc.

But the first if doesn't work as i wanted it to work.

After i created the users and ran the script again, i goes through the first if and wants to create the users again.
Must be logical error, but i can't find it yet.

This is the code so far.

Any help is appreciated.

Regards,

Rob

' SECTION A DECLARE VARIABLES 
'all objects must be declared
Option Explicit
'on error continue
On error resume next
' Objects declared :
Dim objRootDSE, objFSO, objShell
Dim objUser, objGroup, objContainer
Dim objExcel, objSheet 
Dim objUsers
Dim objExcelFile
Dim objWSHShell
Dim objIADSUser
' Strings declared :
Dim strCN, strNTSam, strPWD, strUPN
Dim strLast, strFirst, strDescription, strGroup 
Dim strHomeFolder, strHomeDrive
Dim strNetBIOSDomain, strDomain 
Dim strProfileDir
Dim strMailBox
Dim strRole
Dim strAccess
Dim strContainer
' Integers declared :
Dim intRunError, intRow
'User defined object declared, created for case statements
Dim role
Dim access
Dim group
'Declare Constants:
'path to excelsheet
objExcelFile = "D:\olc\accounts.xls"
'start at row first row is for headlines
intRow = 2
strHomeDrive = "H:"
strHomeFolder = "\\dc\users$\"
strProfileDir = "\\dc\profiles$\"
strUPN = "@test.local"
'SECTION B CONNECT TO ACTIVE DIRECTORY
' Get Domain name from RootDSE object.
Set objRootDSE = GetObject("[link=http://www.visualbasicscript.com/ldap://RootDSE]LDAP://RootDSE[/link]")
strDomain = objRootDSE.Get("DefaultNamingContext")

'Section C OPEN AND READ THE SPREADSHEET
' Connect to spreadsheet where users are stored
Set objExcel = CreateObject("Excel.Application")

' SECTION F WALKTHROUGH IF STATMENTS AND CREATE, UPDATE OR DISABLE THE USER
On error resume next
If strAccess = "J" Then
Set objUser = GetObject("[link=http://www.visualbasicscript.com/ldap://cn]LDAP://cn[/link]=" & strCN & "," & objContainer)
If Err.Number <> 0 Then
 Err.Clear
 'THE USER DOES NOT EXISTS SO WE CREATE IT
 Set objUser = objContainer.Create("user", "cn=" & strCN)
 If Err.Number <> 0 Then
  Err.Clear
  On Error GoTo 0
  Wscript.Echo "Cannot create user with cn: " & strCN
  Else
  On Error GoTo 0
  ' Assign mandatory attributes cn and sAMAccountName.
  If strNTSam = "" Then
   strNTSam = strCN
  End If
  objUser.sAMAccountName = strNTSam
  On Error Resume Next
  Err.Clear
  objUser.SetInfo
  If Err.Number <> 0 Then
   Err.Clear
   On Error GoTo 0
   Wscript.Echo "Unable to create user with NT SAM name: " & strNTSam
   Else
   ' Set password for user.
   objUser.SetPassword strPWD
   If Err.Number <> 0 Then
    Err.Clear
    On Error GoTo 0
    Wscript.Echo "Unable to set password for user " & strNTSam
   End If
   On Error GoTo 0
   ' Enable the user account.
   objUser.AccountDisabled = False
   If strFirst <> "" Then
    objUser.givenName = strFirst
   End If
   ' Assign values to remaining attributes. 
   If strLast <> "" Then
    objUser.sn = strLast
   End If
   
   If strUPN <> "" Then
    objUser.userPrincipalName = strNTSam & strUPN
   End If
   
   If strHomeDrive <> "" Then
    objUser.homeDrive = strHomeDrive
   End If
   
   If strHomeFolder <> "" Then
    objUser.homeDirectory = (strHomeFolder & strNTSam)
   End If 
   
   If strProfileDir <> "" Then
    objUser.profilepath = (strProfileDir & strNTSam)
   End If

'Set user DisplayName
   If strDescription <> "" Then
    objUser.displayName = strDescription
   End If

' Set password expired. Must be changed on next logon.
   objUser.pwdLastSet = 0
   ' Save changes.
   On Error Resume Next
   Err.Clear
   objUser.SetInfo
   If Err.Number <> 0 Then
    Err.Clear
    On Error GoTo 0
    Wscript.Echo "Unable to set attributes for user with NT name: " _ 
    & strNTSam
   End If
   On Error GoTo 0 
   
   'MAKE USER MEMBER OF GROUP
   'objGroup is defined above
   objGroup.Add objUser.AdsPath
   
   
   'Create the usermailbox
   'IMPORTANT YOU MUST HAVE EXCHANGE ADMIN TOOLS INSTALLED OTHERWISE  CreateMailbox WILL FAIL!!!
   Set objIADSUser = GetObject("[link=http://www.visualbasicscript.com/ldap://cn]LDAP://cn[/link]=" & strCN & "," & strContainer)
   strMailBox = "[link=http://www.visualbasicscript.com/ldap://CN=Mailbox]LDAP://CN=Mailbox[/link] Store (DC),CN=First Storage Group,CN=InformationStore,CN=dc,CN=Servers,CN=First Administrative Group,CN=Administrative Groups,CN=Test,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=local"
   objIADSUser.CreateMailbox strMailBox
   objIADSUser.SetInfo

'Section Create the home and profile directory and set permissions
   Set objFSO = CreateObject("Scripting.FileSystemObject")
   
   'check to see if the homedrive is available otherwise create one
   If objfso.FolderExists(objUser.homeDirectory) = False Then
    objfso.CreateFolder(objUser.homeDirectory)
   End If
   
   If objfso.FolderExists(objUser.profilepath) = False Then
    objfso.CreateFolder(objUser.profilepath)
   End If
   
   'set the permissions
   Set objWSHShell = CreateObject("Wscript.Shell")
   objWSHShell.Run ("D:\olc\SetACL.exe -on """ & objUser.homeDirectory & """ -ot file -actn ace " & "-ace ""n:test.local\" & strNTSam & ";p:full""")
   objWSHShell.Run ("D:\olc\SetACL.exe -on """ & objUser.profilepath & """ -ot file -actn ace " & "-ace ""n:test.local\" & strNTSam & ";p:full""")
          
   
   
  End if 
 End If

'UPDATE THE NAME RECORDS
Else
 If strFirst <> "" Then
  objUser.givenName = strFirst
 End If
 ' Assign values to remaining attributes. 
 If strLast <> "" Then
  objUser.sn = strLast
 End If
  
 'Set user DisplayName
 If strDescription <> "" Then
  objUser.displayName = strDescription
 End If
   
 objUser.SetInfo
End If

'DISABLE THE USER

Else
Set objUser = GetObject("[link=http://www.visualbasicscript.com/ldap://cn]LDAP://cn[/link]=" & strCN & "," & objContainer)
If Err.Number = 0 Then
 
' disable the user account.
 objUser.AccountDisabled = True
  objUser.SetInfo
End If

End If

'Increment to next user.
intRow = intRow + 1
Loop Until objSheet.Cells(intRow, 1).Value = ""

(in reply to Bezerk)