在AD组中查找用户并将其添加到另一个组

Question

I have Kerio Connect server and it doesn't allow group inheritance. So I need to create one group for mail and another group for AD with similar users.

I wrote:

Import-Module ActiveDirectory
Get-ADGroupMember -Identity Sales.Department |select SamAccountName |ForEach-Object {Add-ADGroupMember -Identity sales.mail -Members $_.SamAccountName}

And I need to make it for all groups with expression *.Department and mail groups with *.mail

Answer 1

Retrieve the group members of sales.department using Get-ADGroup and then add the group members to sales.mail using Add-ADGroupMember

$MemberList = (Get-ADGroup -Identity "sales.department" -Properties member).member
Add-ADGroupMember -Identity "sales.mail" -Members $MemberList

Answer 2

为此，您最好使用Add-ADPrincipalGroupMembership cmdlet而不是Add-ADGroupMember ：对我来说，它运行良好：

Get-ADGroupMember -Identity Source-Group-Name |select SamAccountName |ForEach-Object {Add-ADPrincipalGroupMembership -Identity $_.SamAccountName -MemberOf Target-Group-Name}