Question

我在创建新的ADOrganizationalUnits和ADGroup时遇到麻烦。它需要在Powershell中完成，但是出于某种原因，我只是没有掌握这个概念。这是我的代码：

我已经浏览了文档，但仍然无法弄清。

# Script to create New AD Org. Units
#Author : Phil Bauer

Import-Module ActiveDirectory

$oupath = "OU=Business,DC=PhilB,DC=local"
$oupathIT = "OU=IT,OU=Business,DC=PhilB,DC=local"
$oupathSales = "OU=Sales,OU=Business,DC=PhilB,DC=local"
$oupathDesign = "OU=Design,OU=Business,DC=PhilB,DC=local"
$oupathMark = "OU=Marketing,OU=Business,DC=PhilB,DC=local"
$oupathProd = "OU=Production,OU=Business,DC=PhilB,DC=local"
New-ADGroup -Name: "HelpDesk" -DisplayName: "Help Desk" -path: "OU=Business , DC=PhilB , DC=local"
New-ADOrganizationalUnit -Name: "Sales" -path: $oupath
New-ADOrganizationalUnit -Name: "Design" -path: $oupath
New-ADOrganizationalUnit -Name: "Marketing" -path: $oupath
New-ADOrganizationalUnit -Name: "Production" -path: $oupath
New-ADOrganizationalUnit -Name: "IT" -path: $oupath
New-ADGroup -Name: "SalesIT" -DisplayName: "Sales IT" -GroupCategory: "Security" -GroupScope: "Global" -path: $oupathIT -
New-ADGroup -Name: "DisplayIT" -DisplayName: "Design IT" -GroupCategory: "Security" -GroupScope: "Global" -path: $oupathIT
New-ADGroup -Name: "MkgtIT" -DisplayName: "Marketing IT" -GroupCategory: "Security" -GroupScope: "Global" -path: $oupathIT
New-ADGroup -Name: "DsgnIT" -DisplayName: "Production IT" -GroupCategory: "Security" -GroupScope: "Global" -path: $oupathIT
New-ADGroup -Name: "SalesMgr" -DisplayName: "Sales Manager" -GroupCategory: "Security" -GroupScope: "Global" -path: $oupathSales
New-ADGroup -Name: "SalesField"-DisplayName: "Field Sales" -GroupCategory: "Security" -GroupScope: "Global" -path: $oupathSales
New-ADGroup -Name: "DsgnMgr" -DisplayName:  "Design Manager " -GroupCategory: "Security" -GroupScope: "Global" -path: $oupathDesign
New-ADGroup -Name: "Dsgn" -DisplayName: "Designers" -GroupCategory: "Security" -GroupScope: "Global" -path $oupathDesign
New-ADGroup -Name:"MktHead" -DisplayName: "Lead Marketer" -GroupCategory: "Security" -GroupScope: "Global" -path $oupathMark
New-ADGroup -Name: "MktJr" -DisplayName: "Marketing Juniors" -GroupCategory: "Security" -GroupScope: "Global" -path $oupathMark
New-ADGroup -Name: "ProdMgr" -DisplayName: "Production Manager" -GroupCategory: "Security" -GroupScope: "Global" -path $oupathProd
New-ADGroup -Name: "ProdTeam" -DisplayName: "Production Team" -GroupCategory: "Security" -GroupScope: "Global" -path $oupathProd

我收到的错误消息是这样的：

New-ADOrganizationalUnit : The server is unwilling to process the request
At line:13 char:1
+ New-ADOrganizationalUnit -Name: "Sales" -path: $oupath
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (OU=Sales,OU=Business,DC=PhilB,DC=local:String) [New-ADOrganizationalUnit]
   , ADException
    + FullyQualifiedErrorId : ActiveDirectoryServer:0,Microsoft.ActiveDirectory.Management.Commands.NewADOrganizationa
   lUnit

Answer 1

您不应向冒号（:)提供AD PowerShell cmdlet的属性，如这些cmdlet的官方文档中所示，其链接在下面提供。

在DC中逗号的两侧可能都出现空格（空白）字符，但我不建议这样做。（https://www.ibm.com/support/knowledgecenter/en/SSLTBW_2.3.0/com.ibm.zos.v2r3.glpa200/tivdnm.htm）

因此，您应该按照以下建议重写脚本：

New-ADGroup -Name "HelpDesk" -DisplayName "Help Desk" -path "OU=Business,DC=PhilB,DC=local"
New-ADOrganizationalUnit -Name "Sales" -path $oupath
...

需要帮助来创建ADOrganizationalUnits

1 个答案: