XCET Login Identity & System Access

Pick a profile from School & account type - each profile is one school and one account type (e.g. "Cardinal Newman Catholic Primary School - Staff"), with its own username/OU/password rules.
Set the intake year if it's shown - it only appears when this profile's patterns actually use it (e.g. for a "25..." username prefix), so it's hidden for profiles like Staff that don't need it.

One full name per line - "Arthur Edwards" or "Edwards, Arthur" both work.
Click Parse names to add them as rows using the profile's default patterns. A batch is all one account type; switching profiles clears the current batch (with a confirmation).

Every generated field - username, display name, description, office, password, home directory, email - is directly editable. Click in and type.
Anything you edit by hand is left alone by later auto-population. Click the ↺ button next to a field to hand it back to the pattern.
OU, home drive, first name and last name can also be changed per row.
The Groups column is a checkbox dropdown - click it to tick as many groups as apply to that account, then click elsewhere to close it.

Use the bar above the table to change the username / display name / description / OU / home drive / groups / password pattern for several rows at once.
Tick specific rows first to limit it to just those, or leave none ticked to apply to every row in the batch. Applying groups replaces a row's current selection with the bulk one.

⚠ means this username was adjusted automatically to avoid clashing with another account in the same batch (e.g. two "J Bloggs" become "JBloggs" and "JoBloggs").
A number badge (e.g. 12) means the username is longer than 10 characters - not an error, just worth a second look.

Create home directory & set NTFS permissions (on by default) makes the generated script also create the folder and grant the account access to it, since New-ADUser's own home directory option doesn't reliably do either.
Every account is created with -PasswordNeverExpires $True and no forced change at first logon - passwords are set once and stay as set.

The panel at the bottom always reflects the current table. Use Copy to clipboard or Download PowerShell script.
Passwords are stored in plain text in the script - review it, then delete it once the accounts have been created.

Nothing here is sent to a server. The current batch is kept in this browser tab's session storage, so it clears when you close the tab.
Custom profiles are kept in this browser's local storage, so they persist on this machine only.

Manage profiles lets you view any built-in profile's exact requirements, clone one to customize, create a new one from scratch, or delete/export a custom one.
Built-in profiles are read-only - clone one first, then edit and save the copy.

1. Paste names