使用powershell指令碼快速新增AD使用者屬性

使用方式

1、將該指令碼複製到DC服務上
2、以部門為單位，修改對應欄位內容AD_ou,define_name,define_mail
3、儲存，以管理員許可權執行該指令碼

#set OU and buiso info
$AD_ou="ou=test,dc=syntek,dc=local"
$define_name="test"
$define_mail="[email protected]"

$user_list= (Get-ADUser -Filter * -SearchBase $AD_ou -Properties SamAccountName | Sort-Object CanonicalName |select -ExpandProperty "
 
SamAccountName")
write-host $user_list
$is_run = read-host "Please press 'Y' to continue"
if ("Y" -eq $is_run -or "y" -eq $is_run){
    foreach ($Sam in $user_list){
      #write-host $AD_user
 
      #Set-AdUser -Identity $Sam -add @{adminDisplayName=$define_name}
      #Set-AdUser -Identity $Sam -add @{adminDescription=$define_mail}
 

      #Set-AdUser -Identity $Sam -remove @{adminDisplayName=$define_name}
      #Set-AdUser -Identity $Sam -remove @{adminDescription=$define_mail}
      Set-AdUser -Identity $Sam -replace @{adminDisplayName=$define_name}
      Set-AdUser -Identity $Sam -replace @{adminDescription=$define_mail}
    }
    write
 
-host "Run success"
}else{
    write-host "Unexpected exit"
}