# This Perl code creates an inetOrgPerson $object

# ---------------------------------------------------------------
# Adapted from VBScript code contained in the book:
#      "Active Directory Cookbook" by Robbie Allen
# ISBN: 0-596-00466-4
# ---------------------------------------------------------------

use Win32::OLE;
$Win32::OLE::Warn = 3;
my $objParent = Win32::OLE->GetObject("LDAP://<ParentDN>");
my $objUser   = $objParent->Create("inetorgperson", "cn=<UserName>");

# Taken from $ADS_USER_FLAG_ENUM
my $ADS_UF_NORMAL_ACCOUNT = 512;

$objUser->Put("sAMAccountName", "<UserName>");
$objUser->Put("userPrincipalName", "<UserUPN>");
$objUser->Put("givenName", "<UserFirstName>");
$objUser->Put("sn", "<UserLastName>");
$objUser->Put("displayName", "<UserFirstName <UserLastName>");

# CORRECTION: If you don't set userAccountControl, then by default
#             the value of 514 (normal account + disabled) will be set for it.
#             In this instance by setting it to 512, the account will not
#             be disabled, and if you have password complexity enabled in
#             your forest, the script will fail because a password was not
#             set prior to the account being enabled.  The solution is to 
#             not set userAccountControl here.
# $objUser->Put("userAccountControl", $ADS_UF_NORMAL_ACCOUNT);

$objUser->SetInfo;
$objUser->SetPassword("<Password>");
$objUser->{AccountDisabled} = FALSE;
$objUser->SetInfo;