ADSI查询在某些框上运行良好,在其他框上运行失败

时间:2018-04-19 14:18:45

标签: powershell powershell-v6.0

我正在开发一个PowerShell脚本,供客户在服务器退役之前从中提取信息。我不得不跳过几个箍,因为他们有2008甚至一些2003服务器,它们并不总是支持相同的Get-CimInstance查询,但是大多数情况下它按预期工作。我还有一部分无法解决的问题是拉出所有当地团体及其成员的名单,如下:

            $localGroups = Invoke-Command -ScriptBlock {
                [ADSI]$S = "WinNT://$($env:computername)"
                $S.children.Where({$_.class -eq 'group'}) |
                    Select @{Name="Name";Expression={$_.name.value}},
                           @{Name="Members";Expression={
                                [ADSI]$group = "$($_.Parent)/$($_.Name),group"
                                $members = $Group.psbase.Invoke("Members")
                                ($members | ForEach-Object {$_.GetType().InvokeMember("Name", 'GetProperty', $null, $_, $null)}) -join ";"
                           }
                           }
                } -ComputerName $sPC | Select PSComputername,Name,Members

这在Server 2012及更高版本上运行良好,但在2008及以下版本失败。具体错误说明:

  

方法调用失败,因为[System.DirectoryServices.DirectoryEntries]不包含名为“Where”的方法

因此操作系统不喜欢$ S.Children.Where()调用。只是好奇,如果有人知道另一种方式来格式化它用于2008年及之前。我可能会使用旧的WMI呼叫路由,但这需要永远完成。

1 个答案:

答案 0 :(得分:0)

我最终找到了一种(相当)快速的方法,适用于所有操作系统风格:

function get-groups {
   param ($strcomputer)
   $groups = gwmi win32_group -ComputerName $strcomputer
   return $groups
}

function Get-LocalGroupMembers { 
   param( 
   [parameter(Mandatory=$true,ValueFromPipeline=$true,ValueFromPipelineByPropertyName=$true)] 
    [Alias("Name")] 
    [string]$ComputerName, 
    [string]$GroupName = "Administrators" 
   ) 

begin {} 

process { 
    $ComputerName = $ComputerName.Replace("`$", '') 
    $arr = @() 
    $wmi = Get-WmiObject -ComputerName $ComputerName -Query "SELECT * FROM Win32_GroupUser WHERE GroupComponent=`"Win32_Group.Domain='$ComputerName',Name='$GroupName'`"" 
        if ($wmi -ne $null)  { 
            foreach ($item in $wmi) { 
                $arr += ($item.PartComponent.Substring($item.PartComponent.IndexOf(',') + 1).Replace('Name=', '').Replace("`"", '')) 
            } 
        } 

    $hash = @{ComputerName=$ComputerName;Members=$arr} 
    return $hash 
} 

end{} 
}

$sPC = "Server2008R2"
$a = 1
$adapterInfo = Get-CimInstance -query "Select * From 
Win32_NetworkAdapterConfiguration Where IPenabled = 'TRUE'" -ComputerName $sPC
$serialNumber = Get-CimInstance -query "Select * From Win32_Bios" -ComputerName $sPC
$shares = Get-CimInstance -query "Select * From Win32_Share" -ComputerName $sPC

$localGroups = get-groups $sPC
$myObject = New-Object -TypeName PSObject

$myObject | Add-Member -MemberType NoteProperty -Name ComputerName -Value $adapterInfo.PSComputerName
$myObject | Add-Member -MemberType NoteProperty -Name Description -Value $adapterInfo.Description

$adapterInfo | ForEach-Object {
   $_.IPAddress |
      ForEach-Object {
         $myObject | Add-Member -MemberType NoteProperty -Name "IPAddress$($a)" -Value $_
         $a++
      }
}

$myObject | Add-Member -MemberType NoteProperty -Name SerialNumber -Value $serialNumber.SerialNumber

foreach ($share in $shares) {
   if ($share.Name -ne "C$" -and
       $share.Name -ne "D$" -and 
       $share.Name -ne "ADMIN$" -and 
       $share.Name -ne "IPC$") {
          $myObject | Add-Member -MemberType NoteProperty -Name "Share $($share.Name)" -Value $share.Path
    }   
}

foreach ($group in $localGroups) {
   $members = ((Get-LocalGroupMembers -ComputerName $sPC -GroupName $group.Name).Members) -join "; "
      if ($members.Length -ne 0) {
         $myObject | Add-Member -MemberType NoteProperty -Name "$($group.Name) Members" -Value $members
      }
}

$myObject | Export-Csv -Path "<Path  to Folder>\$($sPC).csv" -NoTypeInformation