Question

我在测试环境中运行脚本，它运行良好我在生产环境中运行脚本，但它不起作用

在域控制器上启动时，在Windows Server 2008 R2 Standard或Enterprise的控制下。

您必须在' - '运算符的右侧提供值表达式。在C：\ Scripts \ GalSync.ps1：89 char：14 + $ targetCred - ＆lt;＆lt;＆lt;＆lt;属性targetAddress + CategoryInfo：ParserError：（:) []，ParseException + FullyQualifiedErrorId：ExpectedValueExpression

89 Str $ targetCred -Properties targetAddress

### --- GALSYNC.PS1 ---
#
#  Written by Carol Wapshere
#
#  Manages contacts in two domains based on mail-enabled users in the other domain.
#   - Contacts are created for new users.
#   - Contacts are deleted if the source user no longer meets the filter requirements.
#   - Contacts are updated with changed information.
#
#  NOTES:
#   - Requires RSAT roles and features installed. Ref http://blogs.technet.com/heyscriptingguy/archive/2010/01/25/hey-scripting-

guy-january-25-2010.aspx
#   - Attribute deletions are not replicated - only attribute adds and changes.
#   - A user account is needed in each domain with permission to create contacts.
#   - The passwords for these user accounts must be stored in secure files using the command:
#       read-host -assecurestring | convertfrom-securestring | out-file C:\scripts\filename.txt
#

### --- GLOBAL DEFINITIONS ---

$DOMAIN_1 = "192.168.50.11"
$DOMAIN_2 = "192.168.11.10"

$OU_CONTACTS_1 = "OU=Contact,OU=Selta,DC=rvsco,DC=ru"
$OU_CONTACTS_2 = "OU=Contact,OU=RVSco,DC=selta,DC=ru"

$USER_1 = "rvsadmin@rvsco.ru"
$USER_2 = "seltaroot@selta.ru"

$PWFILE_1 = "C:\scripts\rvsco.txt"
$PWFILE_2 = "C:\scripts\selta.txt"

## The following list of attributes will be copied from User to Contact
$arrAttribs = 

'displayName','company','givenName','mobile','postalAddress','postalCode','sn','st','streetAddress','telephoneNumber','title' 

,'mail','c','co','l','facsimileTelephoneNumber','physicalDeliveryOfficeName'

## The following filter is used by Get-ADObject to decide which users will have contacts.
$strSelectUsers = 'ObjectClass -eq "user" -and homeMDB -like "*" -and -not userAccountControl -bor 2 -and -not 

msExchHideFromAddressLists -eq $true -and -not displayName -eq "Administrator"'

### --- FUNCTION TO ADD, DELETE AND MODIFY CONTACTS IN TARGET DOMAIN BASED ON SOURCE USERS ---

function SyncContacts
{
  PARAM($sourceDC, $sourceUser, $sourcePWFile, $targetDC, $targetUser, $targetPWFile, $targetOU)
  END
    {
    $colUsers = @()
    $colContacts = @()
    $colAddContact = @()
    $colDelContact = @()
    $colUpdContact = @()

    $arrUserMail = @()
    $arrContactMail = @()

    write-host "Enumerating..."

    ### ENUMERATE USERS

    $password = get-content $sourcePWFile | convertto-securestring
    $sourceCred =  New-Object -Typename System.Management.Automation.PSCredential -Argumentlist $sourceUser,$password

    $colUsers = Get-ADObject -Filter $strSelectUsers -Properties * -Server $sourceDC -Credential $sourceCred

    if ($colUsers.Count -eq 0)
    {
        write-host "No users found in source domain!"
        break
    }

    foreach ($user in $colUsers)
    {
        $arrUserMail += $user.mail
    }

    ### ENUMERATE CONTACTS

    $password = get-content $targetPWFile | convertto-securestring
    $targetCred =  New-Object -Typename System.Management.Automation.PSCredential -Argumentlist $targetUser,$password

    $colContacts = Get-ADObject -Filter 'objectClass -eq "contact"' -searchbase $targetOU -Server $targetDC -Credential 

$targetCred -Properties targetAddress

    foreach ($contact in $colContacts)
    {
        $strAddress = $contact.targetAddress -replace "SMTP:",""
        $arrContactMail += $strAddress
    }

    ### FIND CONTACTS TO ADD AND UPDATE

    foreach ($user in $colUsers)
    {
        if ($arrContactMail -contains $user.mail)
        {
            write-host "Contact found for " $user.mail
            $colUpdContact += $user
        }
        else
        {
            write-host "No contact found for " $user.mail
            $colAddContact += $user
        }
    }

    ### FIND CONTACTS TO DELETE

    foreach ($address in $arrContactMail)
    {
        if ($arrUserMail -notcontains $address)
        {
            $colDelContact += $address
            write-host "Contact will be deleted for " $address
        }
    }

    write-host ""
    write-host "Updating ...."

    ### ADDS

    foreach ($user in $colAddContact)
    {
        write-host "ADDING contact for " $user.mail

        $targetAddress = "SMTP:" + $user.mail
        $alias = "c-" + $user.mail.split("@")[0]

        $hashAttribs = @{'targetAddress' = $targetAddress}
            $hashAttribs.add("mailNickname", $alias)

        foreach ($attrib in $arrAttribs)
        {
            if ($user.$attrib -ne $null) { $hashAttribs.add($attrib, $user.$attrib) }
        }
        New-ADObject -name $user.displayName -type contact -Path $targetOU -Description $user.description -server $targetDC 

-credential $targetCred -OtherAttributes $hashAttribs
    }

    ### UPDATES

    foreach ($user in $colUpdContact)
    {
        write-host "VERIFYING contact for " $user.mail

        $strFilter = "targetAddress -eq ""SMTP:" + $user.mail + """"
        $colContacts = Get-ADObject -Filter $strFilter -searchbase $targetOU -server $targetDC -credential $targetCred -

Properties *
        foreach ($contact in $colContacts)
        {
            $hashAttribs = @{}
            foreach ($attrib in $arrAttribs)
            {
                if ($user.$attrib -ne $null -and $user.$attrib -ne $contact.$attrib)
                {
                    write-host "    Changing " $attrib
                    write-host "        Before: " $contact.$attrib
                    write-host "        After: " $user.$attrib
                    $hashAttribs.add($attrib, $user.$attrib)
                }
            }
            if ($hashAttribs.Count -gt 0)
            {
                Set-ADObject -identity $contact -server $targetDC -credential $targetCred -Replace $hashAttribs
            }
        }

    }

    ### DELETES

    foreach ($contact in $colDelContact)
    {
        write-host "DELETING contact for " $contact
        $strFilter = "targetAddress -eq ""SMTP:" + $contact + """"
        Get-ADObject -Filter $strFilter -searchbase $targetOU -server $targetDC -credential $targetCred | Remove-ADObject -

server $targetDC -credential $targetCred -Confirm:$false
    }

  }
}

### --- MAIN ---

Start-Transcript galsync.log

if(@(get-module | where-object {$_.Name -eq "ActiveDirectory"} ).count -eq 0) {import-module ActiveDirectory}

write-host "DOMAIN1 Users --> DOMAIN2 Contacts"
SyncContacts -sourceDC $DOMAIN_1 -sourceUser $USER_1 -sourcePWFile $PWFILE_1 -targetDC $DOMAIN_2 -targetUser $USER_2 -targetPWFile 

$PWFILE_2 -targetOU $OU_CONTACTS_2

write-host ""
write-host "DOMAIN2 Users --> DOMAIN1 Contacts"
SyncContacts -sourceDC $DOMAIN_2 -sourceUser $USER_2 -sourcePWFile $PWFILE_2 -targetDC $DOMAIN_1 -targetUser $USER_1 -targetPWFile 

$PWFILE_1 -targetOU $OU_CONTACTS_1

Stop-Transcript

Answer 1

在语句中间有换行符导致问题。你需要连接这些行。

第87和89行应仅在一行上。像这样：

$colContacts = Get-ADObject -Filter 'objectClass -eq "contact"' -searchbase $targetOU -Server $targetDC -Credential $targetCred -Properties targetAddress

与第143和145行相同。它们应该属于一起。

    New-ADObject -name $user.displayName -type contact -Path $targetOU -Description $user.description -server $targetDC -credential $targetCred -OtherAttributes $hashAttribs

同样，第155和157行应该是

    $colContacts = Get-ADObject -Filter $strFilter -searchbase $targetOU -server $targetDC -credential $targetCred -Properties *

和第185和187行

    Get-ADObject -Filter $strFilter -searchbase $targetOU -server $targetDC -credential $targetCred | Remove-ADObject -server $targetDC -credential $targetCred -Confirm:$false

第200和202行

SyncContacts -sourceDC $ DOMAIN_1 -sourceUser $ USER_1 -sourcePWFile $ PWFILE_1 -targetDC $ DOMAIN_2 -targetUser $ USER_2 -targetPWFile $ PWFILE_2 -targetOU $ OU_CONTACTS_2

第206和208行

SyncContacts -sourceDC $ DOMAIN_2 -sourceUser $ USER_2 -sourcePWFile $ PWFILE_2 -targetDC $ DOMAIN_1 -targetUser $ USER_1 -targetPWFile $ PWFILE_1 -targetOU $ OU_CONTACTS_1

可能还有更多内容，因此您需要仔细查看脚本以查找其他无效的换行符

祝你好运 Fridden

在Active Directory中创建联系人脚本不起作用

1 个答案: