my $dbh1 = DBI->connect("DBI:CSV:")
or die "Cannot connect: " . $DBI::errstr;
$dbh1->{'csv_tables'}->{'stokes_studs'} = { 'file' => 'stokes_studs.csv'};

my $href = $dbh1->selectall_hashref("SELECT * FROM stokes_studs", "key");

$num_records = keys %{$href};
print "$num_records\n";

foreach (keys %{$href}) {
	$href->{$_}{id} = sprintf ("%00005d",$href->{$_}{id});
	#print "$href->{$_}{last_name} = $href->{$_}{id}\n";
	&addUser($href->{$_}{last_name}, #$href->{$_}{first_name}, $href->{$_}{id}, $href->{$_}{dob}, $href->{$_}{year});
}

sub makeHomefolder
{
	#create the user directory and set the security on it
	my($id,$homeServer,$domain,$pdc) = @_;
	
	if ($pdc eq ''){$domain = '';}
	#if ($id =~ /\w/) {
	$id =~ s/\(\w+\)//g;
	$id =~ s/  / /g;
	$id =~ s/ /_/g;
	$id = sprintf ("%.20s",$id);
	#}
	$userRoot = "$homeServer\\$id";
	print "Creating Users Home Folder $userRoot\n";
	system ("mkdir $userRoot");
}

sub addUser {
	
	my($lastname,$firstname,$id,$bday,$comment) = @_;

	my ($passwordAge, $privilege, $login_name, 
		$homeDir, $fullname, $flags, $scriptPath);

	$login_name = "$firstname $lastname $bday";
	$login_name = sprintf "%.1s%.1s%02d%02d", lcfirst $firstname, lcfirst $lastname, split /\//, $bday;
	#chop $login_name;
	#chop $login_name;
	print "login_name = $login_name";
	
	$fullName = "$firstname $lastname";
	
	$domain = "itelem1";
	$homeServer = "E:\\Stokes_students\\$comment";
	$pdc = Win32::AdminMisc::GetPDC($domain);
	
	
	$passwordAge = 1; #never expire
	$privilege = USER_PRIV_USER;
	$homeDir = "";
	$flags = UF_NORMAL_ACCOUNT | UF_SCRIPT;
	$scriptPath = 'login.bat';
	$location = '';

	%Account = (
		name => "$login_name",
		password => "$id",
		home_dir => "\\\\maxst2\\$login_name",
		comment => "$comment",
		usr_comment => "usr_comment",
		flags => UF_DONT_EXPIRE_PASSWD | UF_PASSWD_CANT_CHANGE,
		params => '',
		script_path => 'login.bat',
		full_name => "$fullName",
		workstations => "",
		profile => "\\\\maxst2\\$login_name",
		acct_expires => -1,
		#logon_hours => pack( "b168", "11111111" x 21 ),
		home_dir_drive => "H:",
		password_expired => 1,
	);

	if (Win32::NetAdmin::UsersExist("itstw2k1", $login_name)) { #### CRT

		print "duplicate username found = $login_name";
		
	} else {
		print "\nadding user $login_name\n";
		print "firstname = $firstname\n";
		print "lastname = $lastname\n";
		Win32::Lanman::NetUserAdd( "itstw2k1", \%Account );
		makeHomefolder($fullName,$homeServer,$domain,$pdc);
		makePermissions($login_name,$fullName,$comment);
		#system "cusrmgr -u $login_name -f $fullName";
		#die;
	}
}

sub makePermissions
{
	
	my($username,$full_name,$description) = @_;
	$stop=1;
	$full_name =~ s/\(\w+\)//g;
	$full_name =~ s/  / /g;
	$full_name =~ s/ /_/g;
	$full_name = sprintf ("%.20s",$full_name);
	#opendir DIR, "E:\\Stokes_students\\$description\\$full_name" or &ERROR();
	
	sub ERROR {
		$stop=0;
	}
	print "\nuserRoot = $userRoot\n";
	if($stop==1) {
		#closedir DIR;
		print "\nModifying Security on Users Home Folder\n";
		print "\nusername = $username\n";
		$Dir = new Win32::Perms( "$userRoot") || die;
		$Dir->Remove(-1);
		$Dir->Allow(Administrators,Win32::Perms::FULL_CONTROL_DIR,Win32::Perms::DIR);
		$Dir->Allow(Administrators,Win32::Perms::FULL_CONTROL_FILE,Win32::Perms::FILE);
		$Dir->Set();
		$Dir->Allow("$username",Win32::Perms::FULL_CONTROL_DIR,Win32::Perms::DIR);
		$Dir->Allow("$username",Win32::Perms::FULL_CONTROL_FILE,Win32::Perms::FILE);
		$Dir->Set();
		$Dir->Allow(System,Win32::Perms::FULL_CONTROL_DIR,Win32::Perms::DIR);
		$Dir->Allow(System,Win32::Perms::FULL_CONTROL_FILE,Win32::Perms::FILE);
		$Dir->Set();

		print "\n\nCreating Share on user's Home Directory\n";

		print "$username\n";
		print "$full_name\n";
		print "$description\n\n";

		if(!Win32::Lanman::NetShareAdd("\\\\MAXST2",
									   {'netname' =>  "$username",
		# share name
										type =>  Win32::Lanman::STYPE_DISKTREE,
		# share type
										remark =>  'user share',
		# remark
										permissions =>  Win32::Lanman::ACCESS_ALL,
		# only used for share level security
										max_uses =>  3,
		# number of users can connect
										current_uses =>  0,
		# unused
										path =>  "$userRoot",
		# physical share path
										passwd =>  'password',
		# password
										#security_descriptor =>  $secdesc
										}))
		# sec. descriptor if you need security
		 {
				print "Sorry, something went wrong; error: ";
				# get the error code
				print Win32::Lanman::GetLastError();
				exit 1;
		 }

		print "\nModifying Security on User Share\n";

		$path = "\\\\MAXST2\\$username";
		$Dir = new Win32::Perms("share:".$path ) || warn
		"Can not create perm for $path \n";
		$Dir->Remove(-1);
		$Dir->Allow(Administrators,Win32::Perms::FULL_CONTROL_DIR,Win32::Perms::DIR);
		$Dir->Allow(Administrators,Win32::Perms::FULL_CONTROL_FILE,Win32::Perms::FILE);
		$Dir->Set();
		$Dir->Allow("$username",Win32::Perms::FULL_CONTROL_DIR,Win32::Perms::DIR);
		$Dir->Allow("$username",Win32::Perms::FULL_CONTROL_FILE,Win32::Perms::FILE);
		$Dir->Set();
		$Dir->Allow(System,Win32::Perms::FULL_CONTROL_DIR,Win32::Perms::DIR);
		$Dir->Allow(System,Win32::Perms::FULL_CONTROL_FILE,Win32::Perms::FILE);
		$Dir->Set();
	}
}