Net user
Applies To: Windows Server 2000, Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2008, Windows Vista
Adds or modifies user accounts, or displays user account information.
Net user is a command-line tool that is built into Windows Vista. To run net user, open a command prompt, type net user with the appropriate parameters, and then press ENTER.
For examples of how this command can be used, see Examples.
Syntax
net user [<UserName> {<Password> | *} [<Options>]] [/domain]
net user [<UserName> {<Password> | *} /add [<Options>] [/domain]]
net user [<UserName> [/delete] [/domain]]
Parameters
| Parameter | Description |
|---|---|
<UserName> |
Specifies the name of the user account to add, delete, modify, or view. The name of the user account can have as many as 20 characters. |
<Password> |
Assigns or changes a password for the user's account. Type an asterisk (*) to produce a prompt for the password. The password is not displayed when the user types it at the password prompt. |
/domain |
Performs the operation on the domain controller in the computer's primary domain. |
<Options> |
Specifies a command-line option. Refer to the next table for descriptions of the command-line option syntax. |
net help <Command> |
Displays help for the specified net command. |
| Command-line option syntax | Description |
|---|---|
/active:{no | yes} |
Enables or disables the user account. If the user account is not active, the user cannot access resources on the computer. The default is yes (that is, active). |
/comment:"<Text>" |
Provides a descriptive comment about the user's account. This comment can have as many as 48 characters. Enclose the text in quotation marks. |
/countrycode:<NNN> |
Uses the operating system Country/Region codes to implement the specified language files for a user's Help and error messages. A value of 0 signifies the default Country/Region code. |
/expires:{{<MM/DD/YYYY> | <DD/MM/YYYY> | <mmm,dd,YYYY>} | never} |
Causes the user account to expire if you specify the date. Expiration dates can be in [MM/DD/YYYY], [DD/MM/YYYY], or [mmm,dd,YYYY] formats, depending on the Country/Region code. Note that the account expires at the beginning of the specified date. For the month value, you can use numbers, spell it out, or use a three-letter abbreviation (that is, Jan, Feb, Mar, Apr, May, Jun, Jul, Aug, Sep, Oct, Nov, Dec). You can use two or four numbers for the year value. Use commas or slashes to separate parts of the date. Do not use spaces. If you omit <YYYY>, the next occurrence of the date (that is, according to your computer's date and time) is assumed. For example, the following entries are equivalent if entered between Jan. 10, 1994, and Jan. 8, 1995: jan,9 1/9/95 january,9,1995 1/9 |
/fullname:"<Name>" |
Specifies a user's full name rather than a user name. Enclose the name in quotation marks. |
/homedir:<Path> |
Sets the path for the user's home directory. The path must exist. |
/passwordchg:{yes | no} |
Specifies whether users can change their own password. The default is yes. |
/passwordreq:{yes | no} |
Specifies whether a user account must have a password. The default is yes. |
/profilepath:[<Path>] |
Sets a path for the user's logon profile. This path points to a registry profile. |
/scriptpath:<Path> |
Sets a path for the user's logon script. <Path> cannot be an absolute path. <Path> is relative to %systemroot%\System32\Repl\Import\Scripts. |
/times:{<Day>[<-Day>][,<Day>[-<Day>]],<Time>[-<Time>][,<Time>[-<Time>]][;] | all} |
Specifies the times that users are allowed to use the computer. <Time> is limited to one-hour increments. For the <Day> values, you can spell out the names of the days or use abbreviations (that is, M,T,W,Th,F,Sa,Su). You can use 12-hour or 24-hour notation for hours. If you use 12-hour notation, use AM and PM, or A.M. and P.M. The value all means a user can always log on. A null value (blank) means a user can never log on. Separate day and time with commas, and separate units of day and time with semicolons (for example, M,4AM-5PM;T,1PM-3PM). Do not use spaces when you designate times. |
/usercomment:"<Text>" |
Specifies that an administrator can add or change the "User comment" for the account. Enclose the text in quotation marks. |
/workstations:{<ComputerName>[,...] | *} |
Lists as many as eight workstations from which a user can log on to the network. Separate multiple entries in the list with commas. If /workstations has no list or if the list is an asterisk (*), users can log on from any computer. |
Remarks
When you use net user without parameters, it displays a list of the user accounts on the computer. You can also type net users.
A password must satisfy the minimum password length value that is set with the net accounts /minpwlen command. A password can have as many as 127 characters.
Examples
The following example displays a list of all user accounts for the local computer:
net user
The following example displays information about the user account tommyh:
net user tommyh
The following example adds a user account for a user whose full name is Jay Jamison and whose user account name is jayj, with logon rights from 8 A.M. to 5 P.M., Monday through Friday (no spaces in time designations), a mandatory password (Cyk4^g3B), and the user's full name:
net user jayj Cyk4^g3B /add /passwordreq:yes /times:monday-friday,8am-5pm /fullname:"Jay Jamison"
The following example sets the logon time (8 A.M. to 5 P.M.) for miked by using 24-hour notation:
net user miked /time:M-F,08:00-17:00
The following example sets the logon time (8 A.M. to 5 P.M.) for miked by using 12-hour notation:
net user miked /time:M-F,8AM-5PM
The following example specifies logon hours of 4 A.M. until 5 P.M. on Monday, 1 P.M. until 3 P.M. on Tuesday, and 8 A.M. until 5 P.M. Wednesday through Friday for anibals:
net user anibals /time:M,4AM-5PM;T,1PM-3PM;W-F,8:00-17:00