[英]User's Manager Validation
我試圖驗證用戶是否在AD中有一個管理器,如果它是null / empty,我提供的是需要更改的值。 我目前有工作代碼,如果值不為null並且不同,但是如果它為null則收到錯誤。
我在查找上嘗試了多種變體,但是當值為null時總是會返回錯誤。
Import-Module ActiveDirectory
if ((Get-PSSnapin -Name Quest.ActiveRoles.ADManagement -ErrorAction SilentlyContinue) -eq $null) {
Add-PSSnapin Quest.ActiveRoles.ADManagement
}
Connect-QADService foo.domain.com
#Specify User, then manager value to check against
Write-Host "What is the user's name?"
$User = Read-Host
Write-Host "Who is the manager we are checking against?"
$manager = Read-Host
#Check if Manager Value is null
if (-not ($ADemanager = (Get-ADUser (Get-ADUser $OBUID -Properties manager).manager).SamAccountName)) {
Write-Host "User's Manager value is EMPTY or NULL in AD."
$ADemanager = "Null Value"
Write-Host " NOTE: Changing the value from $ADemanager to $OBemanager per HR Records."
Get-ADUser $OBUID |
Set-ADUser -Manager $OBemanager -PassThru |
Get-ADUser -Properties Manager |
Select Name, Manager
} else {
Write-Host "User's Manager Name not EMPTY in AD."
Write-Host "Checking to see if manager's match in AD."
if ($ADemanager -eq $OBemanager) {
#Manager from AD matches manager listed on offboarding form
Write-Host "The manager matches AD Value."
} else {
Write-Host " NOTE: Manager from Offboarding form does not match manager listed in AD." -ForegroundColor Yellow
Write-Host " NOTE: Changing the value from $ADemanager to $OBemanager per HR Records."
#Change Manager in AD (Make sure right variables used below)
Get-ADUser $OBUID |
Set-ADUser -Manager $OBemanager -PassThru |
Get-ADUser -Properties Manager |
Select Name, Manager
}
}
我相信下面的代碼片段應該按照您的要求執行:確定用戶的當前管理器,以及它是否與所需的管理器不同(因為分配了不同的管理器或根本沒有管理器)更新用戶對象新經理。
$ADuser = Get-ADUser $OBUID -Properties Manager
$ADemanager = $ADuser |
Where-Object { $_.Manager } |
Select-Object -Expand Manager |
Get-ADUser |
Select-Object -Expand SamAccountName
if ($ADemanager -ne $OBemanager) {
$ADuser |
Set-ADUser -Manager $OBemanager -PassThru |
Get-ADUser -Properties Manager |
Select Name, Manager
}
我認為獲取正確的經理帳戶並將其與用戶經理進行比較會更容易 - 以下內容可行。
寫出來,從用戶的屬性不正確的經理的名字,我只是有一個小-replace
縮短distiguished名帳戶CN。 如果匹配您的samAccountName
,它會samAccountName
幫助。 如果他們沒有,你真的想要samAccountName
,你需要另一個Get-ADUser
用於那個目的,但它似乎有點低效。
$ADuser = Get-ADUser $OBUID -Properties Manager
# look up the manager account from user input
$OBemanager = Get-ADuser $mgrID
if ($ADuser.manager -eq $OBemanager) { #this will match the manager DN
Write-Host "The manager matches AD Value."
}
else {
#shorten the manager account DN from the user manager attribute
if ($aduser.manager) {
$mgrname = $ADuser.manager -replace '^CN=|,OU.*$'
}
else {
$mgrname -eq 'null value'
}
Write-Host "NOTE: Changing the value from $mgrname to $($OBemanager.samAccountName) per HR Records."
Set-ADUser -Manager $OBemanager -PassThru |
Get-ADUser -Properties Manager | Select Name,Manager
}
所以我以另一種方式改變了這個問題。
大多數變量都是從表單加載的
$OBmanager = $cmbOBManager.Text.Split(",")
$OBmanagername = $OBmanager[0]
$OBemanager = $OBmanager[1].Trim()
$OBestring = "@iconectiv.com"
$OBEmpManager = $OBemanager + $OBestring
#-check if manager from offboarding form is same listed in AD
#Check User's manager name
$userEntry = get-qaduser $OBUID
[string]$man = $userEntry.manager
#Check if manager name is null
if (-not ($man -eq $null))
{
[array]$manName = $man.split('=,')
$manager = $manName[1]
#If null, change to HR specified value
If($manager -eq $null)
{
Write-Host "The user's manager is Null in AD."
Write-Host "Changing the user's manager to the HR supplied value."
Get-aduser $OBUID | Set-ADUser -Manager $OBemanager -PassThru | get-aduser -Properties Manager | Select Name,Manager
#Send Email
ManagerChange
}
else
{
Write-Host "$manager is the manager of $OBUID";
$ADemanager = (get-aduser (get-aduser $OBUID -Properties manager).manager).samaccountName
#Check if AD value is the same as HR value
If($ADemanager -eq $OBemanager)
{
Write-Host "The HR manager name supplied value matches the AD Value."
}
else
{
Write-Host "The HR manager name supplied value doesn't match the AD Value."
Write-Host "Changing the manager value in AD to the HR supplied value."
Get-aduser $OBUID | Set-ADUser -Manager $OBemanager -PassThru | get-aduser -Properties Manager | Select Name,Manager
#Sending email
ManagerChange
}
}
聲明:本站的技術帖子網頁,遵循CC BY-SA 4.0協議,如果您需要轉載,請注明本站網址或者原文地址。任何問題請咨詢:yoyou2525@163.com.