Import-Module ActiveDirectory

# 初始化计数器

$TotalUsers = 0

$SuccessCount = 0

$FailedCount = 0

$SkippedCount = 0

try {

$Users = Import-Csv -Path "C:\user.csv" -ErrorAction Stop

$TotalUsers = $Users.Count

Write-Host "共计需要创建 $TotalUsers 个账号" -ForegroundColor Yellow

} catch {

Write-Error "无法读取CSV文件：$_"

exit 1

}

foreach ($User in $Users) {

# 检查必要字段

if ([string]::IsNullOrEmpty($User.SamAccountName)) {

Write-Warning "跳过记录：SamAccountName 为空"

$SkippedCount++

continue

}

# 检查OUPath是否为空

if ([string]::IsNullOrEmpty($User.OUPath)) {

Write-Warning "用户 $($User.SamAccountName) 未指定OU路径，跳过创建！"

$SkippedCount++

continue

}

$UserCreationSuccessful = $false

try {

# 拆分并反转OU路径层级

$OUComponents = $User.OUPath.Split(',') | Where-Object { $_ -like "OU=*" }

[array]::Reverse($OUComponents)

# 提取根域

$DomainComponents = $User.OUPath.Split(',') | Where-Object { $_ -like "DC=*" }

$BaseDN = ($DomainComponents -join ',').Trim()

# 验证基础DN是否存在

if (-not (Get-ADDomain -Identity $BaseDN -ErrorAction SilentlyContinue)) {

throw "基础域路径不存在: $BaseDN"

}

# 从根域开始逐级创建OU

$CurrentPath = $BaseDN

foreach ($OU in $OUComponents) {

$OUName = $OU.Split('=')[1].Trim()

$TargetOU = "OU=$OUName,$CurrentPath"

# 检查OU是否存在，不存在则创建

if (-not (Get-ADOrganizationalUnit -Filter "DistinguishedName -eq '$TargetOU'" -ErrorAction SilentlyContinue)) {

try {

New-ADOrganizationalUnit -Name $OUName -Path $CurrentPath -ProtectedFromAccidentalDeletion $false

Write-Host "已创建OU: $TargetOU" -ForegroundColor Cyan

} catch {

throw "创建OU [$TargetOU] 失败：$_"

}

}

$CurrentPath = $TargetOU

}

# 在最终路径下创建用户

$newUserParams = @{

SamAccountName          = $user.SAMAccountName

UserPrincipalName       = "$($user.SAMAccountName)@cnhope.local"

Name                    = $user.Name

GivenName               = $user.FirstName

Surname                 = $user.LastName

DisplayName             = $user.DisplayName

Description             = $user.Description

Office                  = $user.Office

OfficePhone             = $User.PhoneNumber

EmailAddress            = $user.Email

Path                    = $CurrentPath

AccountPassword         = ConvertTo-SecureString "P@ssw0rd" -AsPlainText -Force

Enabled                 = $true

ChangePasswordAtLogon   = $true

ErrorAction             = 'Stop'

}

# 检查用户是否已存在

if (Get-ADUser -Filter "SamAccountName -eq '$($user.SAMAccountName)'" -ErrorAction SilentlyContinue) {

Write-Warning "用户 $($user.SAMAccountName) 已存在，跳过创建"

$SkippedCount++

continue

}

New-ADUser @newUserParams

Write-Host "成功创建用户：$($user.SAMAccountName)（路径：$CurrentPath）" -ForegroundColor Green

$SuccessCount++

$UserCreationSuccessful = $true

} catch {

Write-Host "创建用户 $($user.SamAccountName) 失败 - $_" -ForegroundColor Red

$FailedCount++

$UserCreationSuccessful = $false

}

}

# 显示统计结果

Write-Host "`n" + "="*50 -ForegroundColor Cyan

Write-Host "批量创建用户完成！" -ForegroundColor Cyan

Write-Host "共计需要创建: $TotalUsers 个账号" -ForegroundColor White

Write-Host "成功创建: $SuccessCount 个账号" -ForegroundColor Green

Write-Host "创建失败: $FailedCount 个账号" -ForegroundColor Red

Write-Host "跳过创建: $SkippedCount 个账号" -ForegroundColor Yellow

Write-Host "="*50 -ForegroundColor Cyan

# 验证总数是否匹配

$VerifiedTotal = $SuccessCount + $FailedCount + $SkippedCount

if ($TotalUsers -eq $VerifiedTotal) {

Write-Host "统计验证通过: $TotalUsers = $SuccessCount(成功) + $FailedCount(失败) + $SkippedCount(跳过)" -ForegroundColor Green

} else {

Write-Warning "统计验证不匹配: CSV记录数($TotalUsers) ≠ 处理结果($VerifiedTotal)"

}