在Active Directory中如何获取用户的计算机名称

Question

Using Powershell, I can get a separate list of all users or all computer on the domain but how can combine both? With powershell you can search for users or computers with the following

$search= New-Object DirectoryServices.DirectorySearcher([ADSI]"")
search.Filter  = "(&(objectCategory=person)(objectClass=user))"#result=users

OR

$search= New-Object DirectoryServices.DirectorySearcher([ADSI]"")
search.Filter  = "("(objectCategory='computers')")"#result=computers

How can I combine the two, so i may know what computer a user is assign to?

Answer 1

You can't get that from Active Directory.

Active directory doesn't record which workstation a user logged on from, and unless the user's logonworkstation attribute has been set to limit where they can log on, there's nothing to prevent them from logging on to any and all workstations in the domain.