一、Get-User单用户查询
$User=Get-ADUser -identity wendy -Properties *
二、Get-User多用户循环查询
$export[email protected]()
$Users=Get-ADUser -Filter * -SearchScope Subtree -SearchBase "OU=xx,OU=xx,dc=xx,dc=xx,dc=xx" -Properties *
foreach($user in $users)
{
#$User=Get-ADUser -identity wendy -Properties *
$name=$user.name
#这里可以添加多类属性
$info=New-Object Psobject
$info |Add-Member -MemberType NoteProperty -Name 姓名 -Value $name
$export+=$info
}
$CurrentDate = Get-Date
$CurrentDate = $CurrentDate.ToString(‘yyyy-MM-dd‘)
$export |Export-Csv D:\ps\userPermissioninfo_$CurrentDate.csv -Encoding UTF8 -NoTypeInformation
三、ou查询
functions代码如下，参考http://www.JSchofield22.wordpress.com的代码
function Get-OUWithObjects
{
<#
.SYNOPSIS
Function to get all OUs that contain Users, Groups, or Contacts.
.DESCRIPTION
This function requires Quest ActiveRoles AD Management to be installed. The purpose of this
script is to go out and find any and all OrganizationalUnits which contain Users, Groups, or
Contacts. It performs a count on each type of object and prints them to a CSV File. This is
a useful tool for any Admin getting ready to perform an Active Directory migration in order
to better understand the existing environment. This script does not require and special
privelages in order to run as you‘re only reading from Active Directory.
.PARAMETER Domains
This allows you to input as many domains as you‘d like to scan against. (ex.
-Domains "domain1","domain2","domain3" )
.PARAMETER OutFile
This specifies the directory path and file name for the CSV output. (ex. -Outfile c:\temp.csv)
.NOTES
Name: Get-OUWithObjects.ps1
Author: Josh Schofield
DateCreated: 12/28/2012
.LINK
http://www.JSchofield22.wordpress.com
.EXAMPLE
Get-OUWithObjects -Domains "Domain1","Domain2" -OutFile "C:\temp\test.csv"
#>
param(
[Parameter(Mandatory=$true)]
$Domains,
[Parameter(Mandatory=$true)]
[string]$OutFile
)
if ((Get-PSSnapin -Registered| where {$_.name -eq "quest.activeroles.admanagement"}) -eq $null){Write-Error "Quest.ActiveRoles.ADManagement NOT Installed"}
else {
Get-PSSnapin -Registered| where {$_.name -eq "quest.activeroles.admanagement"} | Add-PSSnapin | Out-Null
if ((test-path $OutFile) -eq "True"){del $OutFile}
$output = @()
foreach ($domain in $domains) {
Connect-QADService $domain
Get-QADObject -Type "organizationalunit" -IncludedProperties name,type,parentcontainer,dn -SizeLimit 0| %{
$ouname = $_.name
$parentcontainer = $_.parentcontainer
$adobjects = get-qadobject -SearchRoot $_.dn -SearchScope OneLevel -IncludedProperties type,name -SizeLimit 0 | where {(($_.type -eq "contact") -or ($_.type -eq "user") -or ($_.type -eq "group"))}
$users = $adobjects | where {$_.type -eq "user"}
$groups = $adobjects | where {$_.type -eq "group"}
$contacts = $adobjects | where {$_.type -eq "contact"}
$results = "" | Select Domain, Name, UserCount, GroupCount, ContactCount, ParentContainer
$results.Domain = $domain
$results.Name = $ouname
$results.ParentContainer = $parentcontainer
if ($users -ne $null) {
$results.UserCount = $users.count
} #End of User Check
if ($groups -ne $null) {
$results.GroupCount = $groups.count
} #End of User Check
if ($contacts -ne $null) {
$results.ContactCount = $contacts.count
} #End of User Check
$output += $results
Clear-Variable $results -ErrorAction SilentlyContinue
Clear-Variable $ouname -ErrorAction SilentlyContinue
Clear-Variable $parentcontainer -ErrorAction SilentlyContinue
$adobjects = $null
$users = $null
$groups = $null
$contacts = $null
} #End of Get QADObject OU
}
$output | Export-Csv $OutFile -NoTypeInformation
}}
时间： 2024-10-13 19:10:25