根据 CSV 中的属性提取 AD 用户列表？

Question

I'm trying to use values in a CSV file as the variable in a Get-ADUser command.

Import-Module ActiveDirectory

$users = Import-Csv "C:\path\users.csv"

ForEach ($user in $users)
Get-ADUser -Filter { $user.sAmAccountName -SearchBase "ou=OU1,OU=OU2,DC=DC1,DC=DC2" }

The CSV has a header for samAccountName.

The error I'm getting is

Get-ADUser : Error parsing query: '$user' Error Message: 'syntax error'

Answer 1

I'd point out a few additional issues:

With respect to the AD cmdlets -Filter parameter argument should be a string not a script block. You can observe this in the help documentation. You can specify a script block and the cmdlet will convert it to a string, but that sometimes presents complications.

You are better off specifying the argument like:

Get-ADUser -Filter "$($user.sAmAccountName) -SearchBase 'ou=OU1,OU=OU2,DC=DC1,DC=DC2'"

That said, in this particular case you do not need the ForEach(..){..} loop. You can use property unrolling to simply pipe the samAccountName to Get-ADUser :

$Users.samAccountName | Get-ADUser

This will not work in conjunction with the -SearchBase parameter, but I believe samAccountName is unique and should work in this manner. This is also true of using the -Identity parameter as discussed. In fact, the piped approach is equivalent to the suggested use of -Identity parameter, the piped objects are bound to -Identity . However, you cannot site the array, unrolled or otherwise, as a directly specified argument to the -Identity parameter.