{"id":14197,"date":"2016-10-11T02:23:00","date_gmt":"2016-10-10T18:23:00","guid":{"rendered":"http:\/\/blog.pmail.idv.tw\/?p=14197"},"modified":"2016-10-11T02:23:00","modified_gmt":"2016-10-10T18:23:00","slug":"%e8%bf%91%e6%9c%9f%e5%b7%a5%e4%bd%9c%e7%ad%86%e8%a8%983-ad-%e7%9b%b8%e9%97%9c%e7%89%a9%e4%bb%b6%e5%a4%a7%e9%87%8f%e5%bb%ba%e7%ab%8bpowershell","status":"publish","type":"post","link":"https:\/\/blog.pmail.idv.tw\/?p=14197","title":{"rendered":"\u8fd1\u671f\u5de5\u4f5c\u7b46\u8a18(3) AD \u76f8\u95dc\u7269\u4ef6\u5927\u91cf\u5efa\u7acb(PowerShell)"},"content":{"rendered":"

\u65b0\u5408\u4f75\u7684\u516c\u53f8\u9700\u8981\u5728\u76ee\u524d\u96c6\u5718\u7db2\u57df\u4e0b\u7684\u5e33\u865f\uff0c\u6240\u4ee5\u8acb\u5b83\u5011\u6574\u7406\u597d\u532f\u7e3d\u8868\u5f8c\u5c31\u53ef\u4ee5\u5148\u9032\u884c\u5efa\u7acb\u7684\u4f5c\u696d\u3002<\/p>\n

<\/p>\n

\u5927\u91cfAD User \u5efa\u7acb<\/p>\n

\u9996\u5148\u5c07\u500b\u6b04\u4f4d\u683c\u5f0f\u6574\u7406\u5f8c\u5b58\u6210csv<\/p>\n

\u5927\u81f4\u4e0a\u6211\u9700\u8981\u5efa\u7acb\u7684\u6b04\u4f4d\u662f\u985e\u4f3c\u4e0b\u5716\u7684\u6b04\u4f4d<\/p>\n

\"ad-account\"<\/a><\/p>\n

\u5982\u679c\u60f3\u4e86\u77e5\u9053AD\u5c6c\u6027\u6b04\u4f4d\u53ef\u4ee5\u627e\u4e00\u500b\u7528\u6236\u5e33\u865f\uff0c\u9ede\u9078\u5c6c\u6027\u7de8\u8f2f\uff0c\u5c31\u53ef\u4ee5\u770b\u5230\u5c6c\u6027\u540d\u7a31<\/p>\n

\"AD-2\"<\/a><\/p>\n

\u641c\u5c0b\u4e86\u4e00\u4e0b\u770b\u770b\u7528\u751a\u9ebc\u6307\u4ee4\u5c31\u7528 foreach  \u8ff4\u5708<\/font><\/strong> + new-aduser<\/font><\/strong> \u4f86\u9032\u884c\u5efa\u7acb<\/p>\n

\u6211\u9032\u884c\u5efa\u7acb\u5e33\u865f\u6642\u4e26\u6c92\u6709\u9060\u7aef\u9023\u7dda\u5230\u516c\u53f8\u7684DC\uff0c\u6211\u662f\u5728PC\u4e0a\u6709\u5b89\u88ddAD\u7ba1\u7406\u5de5\u5177\u5c31\u6703\u6709\u76f8\u95dc\u7684powershell \u6307\u4ee4\u53ef\u4ee5\u7528(Windows 10)<\/p>\n

\u7576csv\u6574\u7406OK\u5f8c \u4f8b\u5982\u5c07\u5b83\u653e\u5728c:\\tmp\\account.csv
\u6b64\u6642\u5148\u958b\u555fpowershell \u4ecb\u9762\uff0c\u500b\u4eba\u7fd2\u6163\u5c31\u5207\u63db\u76ee\u9304\u5230c:\\tmp \uff0c\u63a5\u8457\u57f7\u884cimport \u6307\u4ee4\uff0c\u5c07csv\u6a94\u5148\u5b58\u5728Users\u7684\u8b8a\u6578\u88e1\u9762
$Users = Import-Csv account.csv<\/font><\/strong><\/p>\n

\u63a5\u4f86\u53ef\u4ee5\u53ef\u4ee5\u5728\u57f7\u884c\u4e00\u4e0b\u6307\u4ee4\u53ef\u4ee5\u770b\u5230\u78ba\u5be6\u6709csv\u88e1\u9762\u7684\u7528\u6236\u76f8\u95dc\u8cc7\u8a0a
$Users | Format-Table<\/font><\/strong><\/p>\n

\"2016-10-09_115256\"<\/a><\/p>\n

\u6307\u4ee4\u53c3\u8003\u5982\u4e0b(\u4e00\u884c\u5594)<\/p>\n

\u8a72\u6307\u4ee4\u5efa\u7acb\u5e33\u865f\u5f8c\u6703\u8a2d\u5b9a\u9810\u8a2d\u5bc6\u78bc@b123456<\/p>\n

foreach ($User in $Users) {new-aduser -Name $User.name -samaccountname $User.SamaccountName -userprincipalname $User.UserprincipalName -displayname $User.DisplayName -GivenName $User.givenname -Surname $User.sn -office $User.office -StreetAddress $User.StreetAddress -company  $User.company -city $User.city -PostalCode $User.PostalCode -department $User.department -title $User.title -officePhone $User.telephoneNumber $User.info -Path “ou=admin,ou=taipei,dc=pmail,dc=idv,dc=.tw” -AccountPassword (ConvertTo-SecureString -AsPlainText “@b123456” -Force) -Enabled $true}<\/p>\n

\u7576\u7528\u6236\u90fd\u5efa\u7acb\u5b8c\u7562\u5f8c\uff0c\u5176\u4e2d\u6240\u6709\u7684\u7528\u6236\u6703\u52a0\u5165\u81f3#admin All Users Group<\/p>\n

\u53ef\u4ee5\u4f7f\u7528Add-ADGroupMember<\/font><\/strong> powershell \u4f86\u9054\u6210<\/p>\n

\u56e0\u70ba\u5982\u679c\u7528\u5716\u5f62\u4ecb\u9762\u8981\u4e00\u500b\u4e00\u500b\u5bb6\u6709\u9ede\u5c0f\u9ebb\u7169\uff0c\u6240\u4ee5\u53ef\u4ee5\u5148\u5982\u4e0b\u505a\uff0c\u56e0\u525b\u5efa\u7acb\u7684\u7528\u6236\u90fd\u5728admin OU\u4e0b\uff0c\u6240\u4ee5\u53ef\u4ee5\u5148\u5c07\u5b83\u505a\u8655\u7406<\/p>\n

\u6307\u4ee4\u5982\u4e0b\uff0c\u641c\u5c0b\u8a72OU\u4e0b\u4f7f\u7528\u8005\u5e33\u865f\u5c07\u5b83\u5b58\u5230Users\u8b8a\u6578(\u6307\u4ee4\u4e00\u884c)<\/p>\n

\u8aaa\u660e:\u6307\u4ee4\u6703\u7be9\u9078objectclass \u5c6c\u6027\u70bauser\u624d\u5b58\u5230\u8b8a\u6578<\/p>\n

\"40717\"<\/a><\/p>\n

$Users = Get-ADUser -SearchBase “ou=admin,ou=taipei,dc=pmail,dc=idv,dc=.tw” -Filter {objectclass -eq “User”}<\/font><\/p>\n

\u5b58\u597d\u5f8c\u518d\u7528add-adgroupmember \u5c07\u7528\u6236\u52a0\u5165\uff0c\u6307\u4ee4\u5982\u4e0b<\/p>\n

Add-ADGroupMember -Identity “#admin All Users” -Members  $Users<\/font><\/strong><\/p>\n

\u5efa\u7acb\u5927\u91cf\u96fb\u8166\u7269\u4ef6\uff0c\u56e0\u70ba\u65b0\u516c\u53f8\u539f\u4f86\u7684PC\u8981join \u76ee\u524d\u96c6\u5718\u7684\u7db2\u57df\uff0c\u4f46\u9810\u8a2djoin \u7684\u96fb\u8166\u6703\u5728Computer\u5bb9\u5668\u4e2d\uff0c\u4f46\u6211\u4e26\u6c92\u6709\u6b0a\u9650\u5c07\u4ed6\u62c9\u56de\u6240\u4ee5\u8981\u5148\u5728\u6211\u6709\u6b0a\u9650\u7684OU\u5148\u5c07\u96fb\u8166\u7269\u4ef6\u5efa\u7acb\u5b8c\u7562\u4e26\u5c07\u5176\u505c\u7528\u3002<\/p>\n

\u9996\u5148\u5148\u628a\u6240\u6709\u7684\u96fb\u8166\u5e33\u865f\u5efa\u7acb\u5728\u4e00\u500b\u6587\u4ef6\u6a94\u4e2d\u4e00\u884c\u4e00\u500b<\/p>\n

\"999\"<\/a><\/p>\n

\u63a5\u8457\u53ef\u4ee5\u5229\u7528\u6307\u4ee4get-content xxx.txt +new-adcomputer \u4f86\u5b8c\u6210\u5927\u91cf\u5efa\u7acb\u96fb\u8166\u5e33\u865f<\/p>\n

get-content c:\\tmp\\pc.txt | % {New-ADComputer -Name $_ -Path “OU=Computers,ou=taipei,dc=pmail,dc=idv,dc=.tw” -PassThru}<\/p>\n

\u6307\u4ee4\u8aaa\u660eget-conternt \u6bcf\u8b80\u53d6\u4e00\u7b46\u6587\u5b57\u6a94\u8cc7\u6599\u5f8c\u5c31\u9001\u7d66new-adcomputer \u6307\u4ee4\u4f86\u5efa\u7acb\u4e26\u653e\u5728\u6307\u5b9a\u7684OU\u3002<\/p>\n

\u5176\u4e2d\u6703\u770b\u5230\u6307\u4ee4\u4e2d\u7684 $_  \u8868\u793a\u8b80\u53d6\u7684\u8cc7\u6599\uff0c\u4e5f\u662f\u5c31\u662f\u7bc4\u4f8b\u4e2dpc001 \u3001pc002<\/p>\n

\"oc1245\"<\/a><\/p>\n

\u53c3\u8003\u6587\u4ef6:<\/p>\n

https:\/\/technet.microsoft.com\/en-us\/library\/ee617253.aspx<\/a><\/p>\n

\n