Get-ADGroup拉除域用户以外的所有组

Question

由于某种原因，此脚本可以完美运行，但它不会拉“域用户”组，有人知道为什么或如何获得它吗？ 它拉所有其他组。

Import-Module Activedirectory
Get-ADUser -Filter * -Properties * | sort SamAccountName | % {
  New-Object PSObject -Property @{
    "First" = $_.givenName
    "Init" = If($_.Initials -eq $null){Write-Host ""} else {$_.Initials}
    "Last" = $_.SN
    "Enabled" = $_.Enabled
    "Logon Name" = $_.samaccountname
    "UserName" = $_.DisplayName
    "Pass Last Set" = If($_.PasswordLastSet -eq $null){Write-Host ""} else {$_.PasswordLastSet}
    "Pass Expiration" = If($_.PasswordLastSet -eq $null){Write-Host ""} else {$_.PasswordLastSet.AddDays(270)}
    "Pass Expired" = $_.PasswordExpired
    "Days Til Exp" = If($_.PasswordLastSet -eq $null){Write-Host ""} else {($_.PasswordLastSet.AddDays(270) - [DateTime]::Now)}
    "Pass Never Expires" = $_.PasswordNeverExpires
    "Account Created" = $_.whenCreated
    "Last Logon" = $_.LastLogonDate
    "Email Address" = $_.EmailAddress

    Groups = ($_.memberof | Get-ADGroup | Select -ExpandProperty SamAccountName) -join ", "
    }
} | Select "Logon Name",First,Init,Last,Enabled,"Pass Last Set","Pass Expiration","Pass Expired","Days Til Exp","Pass Never Expires","Last Logon","Email Address",Groups

我注意到即使使用Quest Snapin，它也不会拉动域用户

Add-PSSnapin Quest.ActiveRoles.ADManagement

$strUserName = "username"
$strUser = get-qaduser -SamAccountName $strUserName
$strUser.memberof

Answer 1

您看不到它，因为对于大多数用户，“域用户”是主要组 。 在“ AD用户和计算机”中，它们出现在同一列表中，但它们是属性的组合。

例如，使用AD cmdlet可以使用Get-AdUser的PrimaryGroup属性找到它。

PS C:\Users\matt> Get-ADUser matt -Properties PrimaryGroup | Select-Object -ExpandProperty PrimaryGroup
CN=Domain Users,CN=Users,DC=BA,DC=NET

与您正在执行的操作更一致的是使用Get-ADPrincipalGroupMembership cmdlet。

Get-ADPrincipalGroupMembership matt

distinguishedName : CN=Domain Users,CN=Users,DC=DOMAIN,DC=NET
GroupCategory     : Security
GroupScope        : Global
name              : Domain Users
objectClass       : group
objectGUID        : d2745cb0-7f6d-4ada-a44c-0926a0950a74
SamAccountName    : Domain Users
SID               : S-1-5-21-961215277-3068250917-3774519051-513