Use the new_zone_user command to create a new zone user in the current zone based on an existing Active Directory user. If the command is successful, the new zone user becomes the currently selected zone user stored in memory.

The new_zone_user command does not set any field values or save the new zone user to Active Directory. Before you can save the new zone user, you must first set at least one field value using the set_zone_user_field command. You can then save the zone user profile using the save_zone_user command.

Note:   If the currently selected zone is a classic zone, you must set all fields for the new zone user before saving the user profile.

If you don’t save a new zone user, it will disappear when you select another zone user or end the ADEdit session.

You can create more than one zone user within a zone based on a single Active Directory user. The first zone user you create uses the Active Directory user’s user principal name (UPN), for example, Any other zone users you create for the same Active Directory user must use aliases. An alias is the Active Directory user’s UPN with “+n” appended where n is a positive integer that is unique for this Active Directory user in this zone. For example, is an alias, as is Alias integers need not be consecutive or in order. (Note that SFU zones do not support user aliases.)

The new_zone_user command requires you to specify Active Directory user name. The command will search for the user first by the supplied UPN in the specified domain, then by the sAMAccountname in the specified domain, then by the supplied UPN in any bound domain. If the user name cannot be found, the new zone user is not created.

Zone type

Classic and hierarchical


new_zone_user AD_user_UPN




This command takes no options.


This command takes the following argument:

Argument Type Description



Required. Specifies the user principal name (UPN) of an Active Directory user. If you are specifying an alias, append the UPN with “+” followed by a positive integer that is unique for this user and the zone.

Return value

This command returns nothing if it runs successfully.



This example creates a new zone user based on the Active Directory user in the current zone.

Related commands

Before you use this command, you must have a currently selected zone stored in memory. The following commands enable you to view and select a zone user:

  • get_zone_users returns a Tcl list of the Active Directory names of all zone users in the current zone.
  • list_zone_users lists to stdout the zone users and their NSS data in the current zone.
  • select_zone_user retrieves a zone user from Active Directory and stores it in memory.

After you have a zone user stored in memory, you can use the following commands to work with that zone user: