lusrmgr.exe is a bridge between the administrator and the raw SAM database. Its "deep features" lie not in flashy UI, but in its ability to expose and manipulate:
// Create user DirectoryEntry newUser = localMachine.Children.Add("JohnDoe", "User"); newUser.Properties["FullName"].Value = "John Doe"; newUser.Invoke("SetPassword", new object[] "P@ssw0rd" ); newUser.CommitChanges(); lusrmgr.exe
foreach (DirectoryEntry user in users.Children) lusrmgr
When a user is locked out due to too many bad password attempts (policed by the "Account Lockout Policy"), lusrmgr.exe is the primary interface to view the attribute. newUser.Properties["FullName"].Value = "John Doe"
# Add to group Add-LocalGroupMember -Group $GroupName -Member $UserName