Powershell - 结合 AD 输出的变量属性

Question

我尝试编写的第一个脚本。我试图通过比较用户名属性和描述属性来获取具有广告用户名和广告计算机的新变量。我不知道如何根据比较对象或匹配将我想要的属性拉入新变量中。描述属性有一个用户名设置 - ######## 数字非常。 使用的变量（日期告诉过期） $SevenDayWarnDate、$ThreeDayWarnDate、$OneDayWarnDate 广告用户 $7, $3, $1 -properties "Name", "PasswordExpiry 广告电脑 $comp “名称”、“描述” 然后，我将根据到期密码在用户计算机上弹出一个窗口。 以下是我正在尝试做的事情，但我不确定是否通过了所需的信息，因为计算机归档返回为空。

$SevenDayWarnDate = (get-date).adddays(7).ToLongDateString()

$7= Get-ADUser -filter {Enabled -eq $True -and PasswordNeverExpires -eq $False -and PasswordLastSet -gt 0 } `
 -Properties "Name", "msDS-UserPasswordExpiryTimeComputed" | Select-Object -Property "Name", `
 @{Name = "PasswordExpiry"; Expression = {[datetime]::FromFileTime($_."msDS-UserPasswordExpiryTimeComputed").tolongdatestring() }} `
 |Where-object -Property PasswordExpiry -EQ $SevenDayWarnDate

$comp = Get-Adcomputer -Filter {Enabled -eq $True}  -SearchBase "OU=,DC=" -properties "Name", "Description" `
| Select-Object -Property "Name", "Description" 

Compare-Object -ReferenceObject $7 -DifferenceObject $comp -IncludeEqual -ExcludeDifferent -PassThru |
 ForEach-Object {
  [PSCustomObject]@{
  Name = $_.name
  Computer = ($comp.name | Where-Object Description -match $_.name).Directory
  }
}

基于 Santiago Squarzon 下面的工作代码。

$dayArray= @()
$dayArray=@(7,3,1)

foreach ($day in $dayArray)
{
$SevenDayWarnDate = (get-date).adddays($day).ToLongDateString()
$filter = "Enabled -eq '$True' -and PasswordNeverExpires -eq '$False' -and PasswordLastSet -gt '0'"

$computerArray= @()
$users = Get-ADUser -Filter $filter -Properties "Name", "msDS-UserPasswordExpiryTimeComputed" |
Select-Object Name, @{
            Name = "PasswordExpiry"
            Expression = 
            {
                    [datetime]::FromFileTime($_."msDS-UserPasswordExpiryTimeComputed").tolongdatestring()
                }
    } | Where-object -Property PasswordExpiry -EQ $SevenDayWarnDate

# => It might be better to use:
#    PasswordExpiry -ge [datetime]::Now -and PasswordExpiry -le $sevenDayWarnDate

# Find the computers each user is using
$result = foreach($user in $users)
    {
            $temp=$user.Name
            if ($comp = Get-ADComputer -Filter "Description -like '*$temp*'" -Properties Description)
                { 
                

                    [PSCustomObject]@{
                        Name = $user.Name
                        PasswordExpiry = $user.PasswordExpiry
                        ComputerName = $comp.Name
                        ComputerDescription = $comp.Description
                }

                $tmpArray= @()
                $tmpArray= $comp.Name.Split(" ")
                foreach($item in $tmparray)
                    {
                        $computerArray += $item
                    }
                $tmpArray = $Null
                #   }

                }
        continue
        }

foreach($computer in $computerArray) 

$tmpMessage = 
$tmpMessageTitle =

    {Send-RDUserMessage -HostServer $env:COMPUTERNAME -UnifiedSessionID 1 -MessageTitle $tmpMessageTitle -MessageBody $tmpMessage

    }


$result | Format-Table
}

Answer 1

根据 cmets 和相关代码，我猜这就是您要查找的内容。无需使用Compare-Object，只需根据Description属性查询Active Directory即可获取用户的计算机。

$SevenDayWarnDate = [datetime]::Now.AddDays(7)
$filter = "Enabled -eq '$True' -and PasswordNeverExpires -eq '$False' -and PasswordLastSet -gt '0'"


$users = Get-ADUser -Filter $filter -Properties "Name", "msDS-UserPasswordExpiryTimeComputed" |
Select-Object Name, @{
    Name = "PasswordExpiry"
    Expression = {
        [datetime]::FromFileTime($_."msDS-UserPasswordExpiryTimeComputed")
    }
} | Where-object -Property PasswordExpiry -EQ $SevenDayWarnDate
# => It might be better to use:
#    {$_.PasswordExpiry -ge [datetime]::Now -and $_.PasswordExpiry -le $sevenDayWarnDate}

# Find the computers each user is using
$result = foreach($user in $users)
{
    if($comp = Get-ADComputer -LDAPFilter "(description=$($user.Name))" -Properties Description)
    {
        [PSCustomObject]@{
            Name = $user.Name
            PasswordExpiry = $user.PasswordExpiry
            ComputerName = $comp.Name
            ComputerDescription = $comp.Description
        }
        
        continue
    }

    Write-Host "No computer was found for User: $($user.Name)"
}

$result | Format-Table