powershell 获得特定AD用户的组成员资格

Posted 2021-05-23

$ID = read-host "Enter the user's ID you wish to scan"
$FQDN = "cn=block_cloning,dc=yourdomain,dc=com" #full FQDN of the block_cloning group
Get-ADUser -Identity $ID -Properties memberOf | % {$_.memberOf} | % {Get-ADGroup $_ -Properties *} `
| select name, mail, GroupCategory, GroupScope,@{Label="Block_Cloning";Expression={
If ($_.MemberOf -contains $FQDN)
{ "Yes"
}
Else
{ "No"
}}} | Sort mail, name | Export-CSV c:\pathofexport.csv