你好，
谢谢你的提问。
1. 关于在2012AD中如何批量创建用户，我推荐你使用powershell来完成批量创建的工作。
请先创建一下格式的csv文件：
"Firstname","Lastname","Samaccount","Ou","Password","Description"
"user","test","utest","Ou=test1,dc=lee,dc=com","P@ssw0rd","for test"
"user1","test1","utest1","Ou=test1,dc=lee,dc=com","P@ssw0rd","for test"
然后使用一下powershell命令进行创建：
$users=Import-Csv -Path C:\temp\users.csv
foreach($user in $users)
{
$Displayname = $User.Firstname + " " + $User.Lastname
$UserFirstname = $User.Firstname
$UserLastname = $User.Lastname
$OU = $User.OU
$SAM = $User.Samaccount
$Description = $User.Description
$Password = $User.Password
New-ADUser -Name $Displayname -DisplayName $Displayname -SamAccountName $SAM -GivenName "$UserFirstname" -Surname "$UserLastname" -Description "$Description" -AccountPassword (ConvertTo-SecureString $Password -AsPlainText -Force) -Enabled $true -Path "$OU" -ChangePasswordAtLogon $false –PasswordNeverExpires $true -server lee.com
}
一些具体的参数需要根据你的具体情况进行更改。
你也可以参考以下链接：
https://social.technet.microsoft.com/wiki/contents/articles/24541.powershell-bulk-create-ad-users-from-csv-file.aspx
2. 关于你所说的限制用户安装软件，你可以使用软件限制策略和applocaker来实现。
https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/hh831534(v=ws.11)
https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/ee424367(v=ws.10)
最好的祝福，
Lee
Just do it.
