O365，AD和Powershell - 尝试在OU中查找许可用户

Question

I am currently on the lookout for unused O365 licenses, previously I have used this code to find somewhat of a goldmine:

$cred=Get-Credential $o365account
Connect-MsolService -Credential $cred
Get-MsolUser -All | where {$_.isLicensed -eq $true -and $_.BlockCredential -eq $true} | Select UserPrincipalName, MSExchRecipientTypeDetails | Export-Csv -Path “C:\Users\xalaals\Desktop\O365Licensed_ADDisabledUsers_2.txt” -NoTypeInformation

Now we have an OU in AD with a bunch of users that are inactive (disabled & enabled accounts), so my question would be if it is possible to repurpose the above code to find O365 licenses on BOTH enabled and disabled accounts within said OU?

Answer 1

You can first get list of all users from the OU you mentioned:

get-aduser -SearchBase "OU=St. Petersburg,ou=Users,OU=Orc,DC=ad,DC=*****,DC=com" -filter * | Select -ExpandProperty Userprincipalname

then pass those users to Get-MsolUser cmdlet and use foreach

(Get-ADUser -SearchBase "OU=St. Petersburg,ou=Users,OU=Orc,DC=ad,DC=*****,DC=com" -filter * | Select -ExpandProperty Userprincipalname) | %{Get-MsolUser -UserPrincipalName $_ -erroraction silentlycontinue| where {$_.isLicensed -eq $true -and $_.BlockCredential -eq $true} | Select UserPrincipalName, MSExchRecipientTypeDetails} | Export-Csv -Path “C:\Users\xalaals\Desktop\O365Licensed_ADDisabledUsers_2.txt” -NoTypeInformation