[英]Extract users from AD group and add them to Mailbox
I want to make a powershell script to extract an AD group and add the members to a specific mailbox. 我想制作一个Powershell脚本来提取AD组并将成员添加到特定邮箱。 In that group is a group that i dont want to extract (doNotExtract). 在该组中是我不想提取的组(doNotExtract)。 That is what i have so far: 到目前为止,这就是我所拥有的:
Import-Module ActiveDirectory
$csv = @"
Mailbox,GroupName
Mailbox1,Group1
"@ | ConvertFrom-Csv
$ExcludedUsers = Get-ADGroupMember -Identity "doNotExtract" -Recursive | Select-Object -ExpandProperty SamAccountName
$csv | ForEach-Object {
$mailbox = $_.Mailbox
Get-ADGroupMember -Identity $_.GroupName -Recursive |
Where-Object { ($ExcludedUsers -notcontains $_.SamAccountName) -and ($_.objectclass -eq 'user') } |
ForEach-Object {
Add-MailboxPermission -Identity $mailbox -User $_.SamAccountName -AccessRights FullAccess -InheritanceType All
}
}
In the AD group are the following objects: 在“ AD”组中是以下对象:
doNotExtract
User1
User2
I then start the script in the exchange management shell. 然后,我在交换管理外壳中启动脚本。 But then it adds only User1 and User2 doesnt gets fullaccess on Mailbox1. 但是随后它仅添加了User1,而User2在Mailbox1上没有完全访问权限。
And i cant find the problem in the script... 而且我在脚本中找不到问题...
在这种情况下,错误是User2也在donotextract
组中。
I have experienced with Exchange Online that using SamAccountName
doesn't always work smoothly. 我在Exchange Online上经历过,使用SamAccountName
并不总是可以顺利进行。 Have you tried using UserPrincipalName
as input for Add-MailboxPermission
instead of SamAccountName
? 您是否尝试过将UserPrincipalName
用作Add-MailboxPermission
输入,而不是SamAccountName
?
I was also wondering why you extract members of an AD group and give them full access to a mailbox? 我还想知道为什么您要提取一个AD组的成员并授予他们对邮箱的完全访问权限? Why don't you instead give the AD group itself full access to the mailbox? 您为什么不授予AD组本身对邮箱的完全访问权限?
As @4c74356b41 mentioned User2 was in the group "doNotExtract". 如@ 4c74356b41所述,User2在“ doNotExtract”组中。 It then doesnt adds him to the Mailbox because this group is excluded. 然后,它不会将他添加到邮箱中,因为该组已被排除。
声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.