在foreach循环中不能使用Get-ADGroup

Question

我想在嵌套的foreach循环中使用Get-ADGroup命令。 但不知怎的，命令结果没有回来。 命令和过滤器是核心，因为你可以在循环之后的最底层看到它，同样的指令在那里完美地工作，无论出于何种原因。

$file = "\\path"
$data = Import-Csv $file -Delimiter ";" -Encoding UTF7 |
        select -First 5

Measure-Command {
    foreach ($item in $data ) {
        $tiefe = $($item.'Tiefe')
        $pfad = $($item.'Pfad')
        $recht = $($item.'Recht')
        $trustee = $($item.'trustee')

        $LDAPDirectoryService = 'IP-Adresss'
        $DomainDN = 'o=enterprise'

        $LDAPFilter = "cn=$trustee"

        $null = [System.Reflection.Assembly]::LoadWithPartialName('System.DirectoryServices.Protocols')
        $null = [System.Reflection.Assembly]::LoadWithPartialName('System.Net')

        $LDAPServer = New-Object System.DirectoryServices.Protocols.LdapConnection $LDAPDirectoryService
        $LDAPServer.AuthType = [System.DirectoryServices.Protocols.AuthType]::Anonymous
        $LDAPServer.SessionOptions.ProtocolVersion = 3
        $LDAPServer.SessionOptions.SecureSocketLayer = $false

        $Scope = [System.DirectoryServices.Protocols.SearchScope]::Subtree
        $AttributeList = @('*')

        $SearchRequest = New-Object System.DirectoryServices.Protocols.SearchRequest -ArgumentList $DomainDN,$LDAPFilter,$Scope,$AttributeList

        $groups = $LDAPServer.SendRequest($SearchRequest)
        $groups

        #Prüft ob Gruppe existiert
        if ($groups.Entries.Count -eq 0) {
            Write-Host " Group not found!" `n -Foregroundcolor Red $LDAPFilter
            #Speichert alle nicht gefundenen Gruppen zur manuellen Nachbearbeitung
            Add-Content -Path \\Path -Value "$LDAPFilter"
        }

        foreach ($group in $groups.Entries) {
            #Listet alle Member der oben übergebenen Gruppe auf
            $users = $group.Attributes['member'].GetValues('string')

            foreach ($user in $users) {
                Write-Host $user
                #Hier den User zur AD Gruppe hinzufügen
                Write-Host "user zur Gruppe hinzufügen $pfad-$recht" -ForegroundColor Red

                # This little Boy doesnt work
                Get-ADGroup -Properties Name, Description -Filter 'Name -like "F-KT-*"' |
                    where {$_.Description -like "*$pfad" -and $_.Name.EndsWith($recht)}

                #Add-ADGroupMember -Identity S-1-5-21-219376080-2991882224-574971396-34759 -Members $user -Whatif
            }
        }
    }
}

# Here the command works without a fault
Get-ADGroup -Properties Name, Description -Filter 'Name -like "F-KT-*"' |
    where {$_.Description -like "*$pfad" -and $_.Name.EndsWith($recht)}

Answer 1

我仍然不知道为什么，但我找到了一个适合我的解决方案。

$AD = Get-ADGroup -Properties Name, Description -Filter 'Name -like "F-KT-*"' | where {$_.Description -like "*$pfad" -and $_.Name.endswith($recht) }
write-Host $AD.Name -ForegroundColor Yellow

也许有人可以告诉我为什么我必须在循环中将get-ADGroup声明为变量，但在没有它的情况下工作。