Question

我编写了以下脚本，列出了所有＆＃34;承包商＆＃34; (employeetype=contractors)的用户，而不是像＃34;域承包商那样的特定群体的一部分＆＃34;但它不起作用，可以帮助一些人：）

$adusers = get-aduser -filter * -searchbase "OU=test,dc=domain,dc=com" -properties employeetype | where {($_.employeetype -like "contractor") -AND ($_.enabled -eq $true)} 
foreach ($aduser in $adusers){ 
    $contractorsDn = (Get-ADGroup 'domaincontractors').DistinguishedName 
    Get-ADUser $aduser -LDAPFilter "(!(memberof=$contractorsDn))"
}

Answer 1

$ users = get-aduser -filter {（employeetype -like“contractor”）-AND（enabled -eq $ true）} - searchbase“dc = domain，dc = COM”-properties employeetype $ group =“Domaincontractors”

$ members = Get-ADGroupMember -Identity $ group -Recursive |选择-ExpandProperty DistinguishedName

ForEach（$ users in $ users）{

If ($members -contains $user) {
  write-host "$user exists" -ForegroundColor Red

}其他{ write-host“$ user doesnt exists”-ForegroundColor Green }}

用于列出组成员身份的Powershell脚本

1 个答案: