PowerShell递归直接报告ADSI

Question

I am trying to get a list of everyone under a manager (span of control if you will). I have the code that works with the Active Directory module, but i am not able to figure out how to do it with ADSI.

I have tried using this code to start:

Function GetManager($Manager, $Report)
{
    # Output this manager and direct report.
    """$Manager"",""$Report""" | Out-File -FilePath $File -Append

    # Find the manager of this manager.
    $User = [ADSI]"LDAP://$Manager"
    $NextManager = $User.manager
    If ($NextManager -ne $Null)
    {
        # Check for circular hierarchy.
        If ($NextManager -eq $Report) {"Circular hierarchy found with $Report"}
        Else
        {
            GetManager $NextManager $Report
        }
    }
}

$D = [System.DirectoryServices.ActiveDirectory.Domain]::GetCurrentDomain()
$Domain = [ADSI]"LDAP://$D"
$Searcher = New-Object System.DirectoryServices.DirectorySearcher
$Searcher.PageSize = 200
$Searcher.SearchScope = "subtree"
$Searcher.PropertiesToLoad.Add("distinguishedName") > $Null
$Searcher.PropertiesToLoad.Add("manager") > $Null
$Searcher.SearchRoot = "LDAP://" + $Domain.distinguishedName

$File = ".\ADOrganization.csv"
"Organization: $D"  | Out-File -FilePath $File
"Manager,Direct Report" | Out-File -FilePath $File -Append

# Find all direct reports, objects with a manager.
$Filter = "(manager=*)"

# Run the query.
$Searcher.Filter = $Filter

$Results = $Searcher.FindAll()

ForEach ($Result In $Results)
{
    $ReportDN = $Result.Properties.Item("distinguishedName")
    $ManagerDN = $Result.Properties.Item("manager")
    GetManager $ManagerDN $ReportDN
}

This is from the article here https://social.technet.microsoft.com/Forums/windows/en-US/7bc3d133-e2b3-4904-98dd-b33993db628a/recursively-select-all-subordinates-for-all-users-from-ad?forum=winserverpowershell . I am sure this works, but i can't figure out how to have it search for a specified manager. Can anyone push me in the right direction? Thanks!

Answer 1

$Filter = "(manager=<ManagerDN>)"

或更具体：

$Filter = "(manager=CN=<ManagerCN>,OU=<ManagerOU>,$($Domain.distinguishedName))"

Answer 2

$USER.Properties.managedobjects List all groups you are a direct manager of.

But how to do this Recursive if Manager is a group, that the user is part of... I tried this.. but doesn't seem to give me what I need..

if([string]$_.objectcategory -eq "CN=Group,CN=Schema,CN=Configuration,<domain>"){ [adsi]"LDAP://$($_.managedby)"|%{$_ if([string]$_.objectcategory -eq "CN=Group,CN=Schema,CN=Configuration,<domain>"){$_.member|%{$user=([adsi]"LDAP://$_").displayName}