How can i increase lenght of -Name option of New-ADUser command

Question

How can i increase lenght of -Name option of New-ADUser command

Ismail OZDEMIR 21

Hello,

First of all, sorry for my bad english, i do not use translate services.

I wan't to use a script to import users in Active Directory from CSV file.

But i cannot import some users with this script, because the lenght of their name is higher than 20 characters and the command New-ADUser and his option -Name (for some reason) do not allow that.

My question is how can i increase the lenght for this option.

Thanks for your help.

Accepted answer

1 additional answer

Your answer

Answer 1

Limitless Technology 39,931

Hello

Thank you for your question and reaching out. I can understand you are having issues related to character limit in AD

If you are using server 2012 R2 you can only set the display name to 20 char however the login name can be up to 64 char (I think) using "-UserPrincipalName"

You can have a Name that exceeds 20 characters, but not a sAMAccountName.

Reference :
https://learn.microsoft.com/en-us/windows/win32/adschema/a-samaccountname?redirectedfrom=MSDN

https://social.technet.microsoft.com/Forums/windows/en-US/ca4b06d5-f629-4906-bc91-4f02d2c43f15/powershell-script-newaduser-name-properties-too-long?forum=ITCG#:~:text=This%20property%20can%20only%20be,up%20to%20256%20characters%20long

-------------------------------------------------------------------------------------------------------------------------------

--If the reply is helpful, please Upvote and Accept as answer--

Gary Reynolds 9,621 Reputation points

2022-07-21T07:09:13.023+00:00

Just following up on this response as the information provided is incorrect:

The rangeupper in the schema defines the maximum size of the attribute. This is the list of max length for each of the attributes, these have been same from AD 2003 - 2019, I don't have AD 2000 to confirm, but was probably the same:

The limitation is caused by the Powershell New-ADUser command and will only accept a Name parameter of 20 characters, this is not a limitation of the AD.

Gary.
Ismail OZDEMIR 21 Reputation points

2022-07-21T08:23:42.853+00:00

Thanks, this is very helpful

Answer 2

Olaf Helper 47,516

this command (for some reason) do not allow that.

And now we have to guess which command or script you use?
20 characters have been a limitation in Win NT 4.0 and previous version.

Ismail OZDEMIR 21

Sorry, you can find the problematic part here

    `try{  
        New-ADUser  -Name "$DisplayName" `  
            -DisplayName "$DisplayName" `  
            -GivenName $GivenName `  
            -Surname $Surname `  
            -SamAccountName $DisplayName `  
            -UserPrincipalName "$UserPrincipalName" `  
            -AccountPassword (ConvertTo-SecureString $pass -AsPlainText -Force) `  
            -ChangePasswordAtLogon $true `  
            -Enabled $Enabled `  
            -Country $Country `  
            -EmailAddress $EmailAddress `  
            -Division $Division `  
            -Department $Department `  
            -StreetAddress $StreetAddress `  
            -State $State `  
            -Office $Office `  
            -City $City `  
            -PostalCode $PostalCode `  
            -OfficePhone $OfficePhone `  
            -MobilePhone $MobilePhone `  
            -Company $Company `  
            -Path "$UserOU"   
    }  
        catch [Microsoft.ActiveDirectory.Management.ADIdentityAlreadyExistsException]   
    {   
        Write-Host "`n`L'utilisateur $DisplayName existe déjà"  

    }

}`

The powershell version is 5.1.20348.558 and the OS is Windows Server 2022.

Ismail OZDEMIR 21 Reputation points

2022-07-19T11:29:08.037+00:00

For example :
Ismail OZDEMIR 21 Reputation points

2022-07-19T11:42:09.51+00:00

The command is New-ADUser the there are only one option which is problematic (-Name).

Share via

How can i increase lenght of -Name option of New-ADUser command

1 additional answer

Your answer