How to Create a User in Windows Server (Active Directory) — Step by Step
Create a new user in Windows Server 2016/2019/2022 with Active Directory Users and Computers — full guide with permissions, groups and PowerShell method.
How to Create a User in Windows Server (Active Directory) — Step by Step
Need to add a new employee to your Windows Server? Creating a user in Active Directory takes under 2 minutes — and once done, that person can log into any domain-joined PC, access shared folders, and get the right permissions automatically.
This guide covers the full process on Windows Server 2016, 2019 and 2022 — via ADUC (graphical) and PowerShell — plus how to add users to groups.
Table of Contents
- What Is Active Directory Users and Computers?
- Method 1: Create User via ADUC (Step by Step)
- Set Password & Account Options
- Add the User to Groups
- Method 2: Create User via PowerShell
- Common Mistakes Admins Make
- Frequently Asked Questions
- Conclusion
What Is Active Directory Users and Computers?
ADUC (Active Directory Users and Computers) is the main admin console on a domain controller — it manages users, groups, computers, and organizational units (OUs). Every domain user account is created here.
Hindi: ADUC ek admin tool hai jahan se server pe naye users banaye jaate hain — har employee ka account yahin se banta hai.
Method 1: Create User via ADUC (Step by Step)
- Log into the Windows Server (domain controller) as Administrator
- Open Server Manager → Tools → Active Directory Users and Computers
- Expand your domain (e.g., company.local) → right-click "Users" (or your OU)
- Select New → User
- Fill in:
* First name / Last name — e.g., Rahul Sharma
* User logon name — e.g., rsharma (this becomes rsharma@domain.local)
- Click Next
Set Password & Account Options
On the next screen:
- Enter a temporary password (must meet complexity — 8+ chars, upper+lower+number)
- Choose options:
* ✅ User must change password at next logon — recommended for new users
* ☐ User cannot change password — for service/shared accounts only
* ☐ Password never expires — avoid for regular users
* ☐ Account is disabled — use for pre-created accounts
- Next → Finish — the user is created!
Add the User to Groups
A user alone can't do much — groups give access:
- Right-click the new user → Properties
- Go to the "Member Of" tab → Add
- Type the group name (e.g.,
Sales,Domain Admins,HR) → Check Names → OK - Apply → the user now gets that group's folder/app permissions
Method 2: Create User via PowerShell
Faster for bulk creation:
```powershell
New-ADUser -Name "Rahul Sharma" -GivenName Rahul -Surname Sharma `
-SamAccountName rsharma -UserPrincipalName rsharma@domain.local `
-AccountPassword (ConvertTo-SecureString "Temp@12345" -AsPlainText -Force) `
-Enabled $true -ChangePasswordAtLogon $true
```
Add to group:
```powershell
Add-ADGroupMember -Identity "Sales" -Members rsharma
```
Common Mistakes Admins Make
- ❌ Creating users in the default "Users" container instead of proper OUs — organize by department
- ❌ Adding users directly to "Domain Admins" — never for regular employees
- ❌ Not ticking "must change password" — user keeps the temp password forever
- ❌ Weak passwords that fail complexity — use a passphrase format
- ❌ Forgetting the user profile/home folder mapping
Frequently Asked Questions
How do I create a user in Windows Server 2019/2022?
Open Server Manager → Tools → Active Directory Users and Computers → right-click Users (or your OU) → New → User → set name + password → Finish.
How do I create an admin user in Active Directory?
Create the user normally, then open user Properties → Member Of → Add → type Domain Admins → OK. Only do this for actual admins.
How do I create multiple users at once in Active Directory?
Use PowerShell with a CSV file — New-ADUser in a loop reading names/usernames from the CSV. Microsoft docs have ready scripts for bulk import.
What is the difference between a user and a group in AD?
A user is one person's account. A group is a collection — you give permissions to the *group*, and every member inherits them. Always manage access via groups.
Where do I find "Active Directory Users and Computers"?
Server Manager → Tools → Active Directory Users and Computers — only available on domain controllers or PCs with RSAT tools installed.
Conclusion
Creating a user in Windows Server takes 2 minutes: ADUC → New → User → password → groups. Use descriptive OUs, enforce password change at first login, and assign access via groups — never individual permissions.
Video Tutorial:
- How to Share a Folder on Windows Server Network
- Group Policy Basics Every Admin Should Know
- Windows Server Roles Explained
TAGS: create user windows server, create user in windows server 2022, add user windows server 2019, active directory create user, create user active directory powershell, create user windows server 2016, active directory users and computers, windows server admin, techn trainer
What's Your Reaction?
