Proposal for Users: Extend parameter Enabled

[dbeugger]

By default, the value 'Undefined' is used for the Enabled parameter for Users. According to the documentation, a non-existing one is created as enabled.
For security reasons, we would like to create non-existing ones as disabled. But then treat them as undefined. Therefore, we suggest 'CreateDisabled' as an additional value for Enabled.

Example:

@(
    @{
        SamAccountName       = 'musterh'
        GivenName            = 'Muster'
        Surname              = 'Hans'
        Description          = 'Hans Muster'
        UserPrincipalName    = 'musterh@%DomainFqdn%'
        Path                 = '%MyUsersOu%,%DomainDN%'


        Enabled              = 'CreateDisabled'
    }
)

[dbeugger]

Another option would be not to adjust the values for Enabeld. Instead, assign a logic to the value Undefined. If the account does not exist, Undefnied is used to create a disabled account. If the account exists, Undefnied is used to ignore the status of the account.

[dbeugger]

Implementation with inline PS code is possible:
$(if (Get-ADUser -Filter { Name -eq '<AccountName> }) { 'Undefined' } else { $false })
However, this is not as “elegant.”

Does this issue have a chance of being implemented?