# ---------------------------------------------------------------
# Adapted from VBScript code contained in the book:
#      "Active Directory Cookbook" by Robbie Allen
# ISBN: 0-596-00466-4
# ---------------------------------------------------------------
use Win32::OLE;
$Win32::OLE::Warn = 3;

# Taken from $ADS_USER_FLAG_ENUM
my $ADS_UF_NORMAL_ACCOUNT = 512;

my $objParent = Win32::OLE->GetObject("LDAP://<ParentDN>");
my $objUser   = $objParent->Create("user", "cn=<UserName>"); # e.g. joes
$objUser->Put("sAMAccountName", "<UserName>");   # e.g. joes
$objUser->Put("userPrincipalName", "<UserUPN>"); # e.g. joes@rallencorp.com
$objUser->Put("givenName", "<UserFirstName>");   # e.g. Joe
$objUser->Put("sn", "<UserLastName>");           # e.g. Smith
$objUser->Put("displayName", "<UserFirstName> <UserLastName>"); # e.g. Joe Smith

# CORRECTION: If you don't set userAccountControl, then by default
#             the value of 514 (normal account + disabled) will be set for it.
#             In this instance by setting it to 512, the account will not
#             be disabled, and if you have password complexity enabled in
#             your forest, the script will fail because a password was not
#             set prior to the account being enabled.  The solution is to 
#             not set userAccountControl here.
# $objUser->Put("userAccountControl", $ADS_UF_NORMAL_ACCOUNT);

$objUser->SetInfo;
$objUser->SetPassword("<Password>");
$objUser->{AccountDisabled} = FALSE;
$objUser->SetInfo;