将特殊帐户名称（dev-、ad-、sa- 等）与 Powershell 中的用户 samAccountName 匹配

Question

我是 powershell 新手，需要搜索特殊帐户，例如开发人员 (dev-) 或管理员 (ad-)，去掉前缀并查看该用户是否有帐户 (sAMAccountName)

下面，我可以搜索并从我的域中获取所有特殊帐户，但我需要编写整个过程的脚本，因此我只能取回没有常规用户帐户的特殊帐户。

ForEach ($acct in "Dev-*","dev-*","rl-*","cafe-*","dev-dev-*","ad-*", `
    "sa-*","AD-*","ir-*","tst-*","o365-*","te-*","la-*","vmtest-*", `
    "mtep-*","EIM-*","GRT*","cbl-","DS-*","fim-*") { 
        Get-ADUser -Filter {sAMAccountName -like $acct} -SearchBase "DC=xxx,DC=xxx,DC=com" `
        -Properties sAMAccountName | Select sAMAccountName 
}

Answer 1

它并不漂亮，但您可以删除您找到的用户名的前缀并搜索该用户。如果没有返回（不匹配），请继续使用开发帐户，否则将其删除。例如：

ForEach ($acct in "Dev-*","dev-*","rl-*","cafe-*","dev-dev-*","ad-*", "sa-*","AD-*","ir-*","tst-*","o365-*","te-*","la-*","vmtest-*", "mtep-*","EIM-*","GRT*","cbl-*","DS-*","fim-*") { 
    Get-ADUser -Filter {sAMAccountName -like $acct} -SearchBase "DC=xxx,DC=xxx,DC=com" |
    Where-Object {
        $prefix = $acct.Replace("*","")
        $user = $_.sAMAccountName.Replace($prefix,"")
        if(-not(Get-ADUser -Filter {sAMAccountName -eq $user} -SearchBase "DC=xxx,DC=xxx,DC=com")) { 
            #Throw user further down the pipeline
            $_
        }
    } |
    Select sAMAccountName 
}