2017-08-30 87 views
0

下面的脚本作品原样,我需要添加enabled -eq $true,所以我能审计用户列表,看看他们是否也将启用(不只是禁用)。我已经尝试过各种方法和脚本错误了。谁能帮忙?GET-ADUser便有CSV文件禁用真假过滤

$userID = Import-Csv "c:\users.csv" 

foreach ($user in $userID) { 
    $employeeID = $user.employeeID 
    Get-ADUser -Filter {employeeID -eq $employeeID -and Enabled -eq $false} -Properties displayName,employeeID,mail,intelOwnerID,title,"msDS-UserPasswordExpiryTimeComputed","lastLogon" | 
     select "Displayname", "Enabled", 
      @{n="PasswordExpiryDate";e={[DateTime]::FromFileTime($_."msDS-UserPasswordExpiryTimeComputed")}}, 
      @{n='LastLogon';e={[DateTime]::FromFileTime($_.lastLogon)}}, 
      SamAccountName, employeeID, mail, intelOwnerID, title | 
     Export-Csv -Append "c:\temp\usersacct.csv" 
+3

你在说什么? AD用户不能同时启用*和*禁用。或者你的意思是你想枚举启用和禁用的帐户?在这种情况下,只需从过滤器中删除条件。 –

回答

0

要获取在您的.csv列出启用和禁用的用户,你只需要停止Enabled -eq $false过滤。只是改变这一行:

Get-ADUser -Filter {employeeID -eq $employeeID -and Enabled -eq $false} -Properties displayName,employeeID,mail,intelOwnerID,title,"msDS-UserPasswordExpiryTimeComputed","lastLogon" | 

Get-ADUser -Filter {employeeID -eq $employeeID} -Properties displayName,employeeID,mail,intelOwnerID,title,"msDS-UserPasswordExpiryTimeComputed","lastLogon" |