Добавление пользователя в группу
param($name,$group,$ou,$dc,[switch]$help) function funHelp() { $helpText=@" DESCRIPTION: NAME: AddUserToGroup.ps1 Adds a user account to a group PARAMETERS: -name name of the user -ou ou of the group -dc domain of the user -group group to modify -help prints help file SYNTAX: AddUserToGroup.ps1 -name "cn=MyNewUser" -ou "ou=myOU" ` -dc "dc=nwtraders,dc=com" ` -group "cn=MyGroup" Adds a user named MyNewUser in the myOU organizational unit in the nwtraders.com domain to the MyGroup group in the same OU. AddUserToGroup.ps1 -help Displays the help topic for the script "@ $helpText exit } if($help){ "Obtaining help ..." ; funhelp } if(!$name -or !$dc -or !$group -or !$ou) { "Missing parameter ..." ; funhelp } $CLass = "User" "Modifying $name,$ou,$dc" $ADSI = [ADSI]"LDAP://$group,$ou,$dc" $ADSI.add("LDAP://$name,$ou,$dc")
Изменение вкладки Address
$objUser = [ADSI]"LDAP://cn=MyNewUser,ou=myTestOU,dc=nwtraders,dc=msft" $objUser.put("streetAddress", "123 main st") $objUser.put("postOfficeBox", "po box 12") $objUser.put("l", "Bedrock") $objUser.put("st", "Arkansas") $objUser.put("postalCode" , "12345") $objUser.put("c", "US") $objUser.put("co", "United States") $objUser.put("countryCode", "840") $objUser.setInfo()
Изменение вкладки Organization
$strDomain = "dc=nwtraders,dc=msft" $strOU = "ou=myTestOU" $strUser = "cn=MyNewUser" $strManager = "cn=myBoss" $objUser = [ADSI]"LDAP://$strUser,$strOU,$strDomain" $objUser.put("title", "Mid-Level Manager") $objUser.put("department", "sales") $objUser.put("company", "North Wind Traders") $objUser.put("manager", "$strManager,$strou,$strDomain") $objUser.setInfo()
Изменение вкладки Profile
$objUser = [ADSI]"LDAP://cn=MyNewUser,ou=myTestOU,dc=nwtraders,dc=msft" $objUser.put("profilePath", "\\London\profiles\myNewUser") $objUser.put("scriptPath", "logon.vbs") $objUser.put("homeDirectory", "\\london\users\myNewUser") $objUser.put("homeDrive", "H:") $objUser.setInfo()
Изменение вкладки Telephone
$objUser = [ADSI]"LDAP://cn=MyNewUser,ou=myTestOU,dc=nwtraders,dc=msft" $objUser.Put("homePhone", "(215)788-4312") $objUser.Put("pager", "(215)788-0112") $objUser.Put("mobile", "(715)654-2341") $objUser.Put("facsimileTelephoneNumber", "(215)788-3456") $objUser.Put("ipPhone", "192.168.6.112") $objUser.Put("info", "All contact information is confidential," ` + "and is for official use only.") $objUser.setInfo()
Изменение общей информации о пользователе
$objUser = [ADSI]"LDAP://cn=MyNewUser,ou=myTestOU,dc=nwtraders,dc=msft" $objUser.put("SamaccountName", "myNewUser") $objUser.put("givenName", "My") $objUser.Put("initials", "N.") $objUser.Put("sn", "User") $objUser.Put("DisplayName", "My New User") $objUser.Put("description" , "simple new user") $objUser.Put("physicalDeliveryOfficeName", "RQ2") $objUser.Put("telephoneNumber", "999-222-1111") $objUser.Put("mail", "<a href="mailto:[email protected]">[email protected]</a>") $objUser.Put("wwwHomePage", "<a href="http://www.mnu.msn.com"">http://www.mnu.msn.com"</a>) $objUser.setInfo()
Изменение одного атрибута пользователя
param($name,$property,$value,$ou,$dc,[switch]$help) function funHelp() { $helpText=@" DESCRIPTION: NAME: ModifyUser.ps1 Modifies a user account PARAMETERS: -name name of the user to modify -ou ou of the user -dc domain of the user -property attribute to modify -value value of the attribute -help prints help file SYNTAX: ModifyUser.ps1 -name "CN=MyNewUser" -ou "ou=myOU" ` -dc "dc=nwtraders,dc=com" ` -property "SamaccountName" ` -value "MyNewUser" Modifies a user named MyNewUser in the myOU organizational unit in the nwtraders.com domain adds the SamaccountName attriute with a value of MyNewUser ModifyUser.ps1 -help Displays the help topic for the script "@ $helpText exit } if($help){ "Obtaining help ..." ; funhelp } if(!$name -or !$dc -or !$property -or !$value) { "Missing parameter ..." ; funhelp } $CLass = "User" "Modifying $name,$ou,$dc" $ADSI = [ADSI]"LDAP://$name,$ou,$dc" $ADSI.put($property, $value) $ADSI.setInfo()
Создание доменных групп
param($name,$ou,$dc,[switch]$help) function funHelp() { $helpText=@" DESCRIPTION: NAME: CreateGroup.ps1 Creates a group PARAMETERS: -name name of the group to create -ou ou to create group in -dc domain to create group in -help prints help file SYNTAX: CreateGroup.ps1 -name "CN=MyNewGroup" -ou "myOU" ` -dc "dc=nwtraders,dc=com" Creates a group named MyNewGroup in the myOU organizational unit in the nwtraders.com domain CreateGroup.ps1 -name "CN=MyNewGroup" ` -dc "dc=nwtraders,dc=com" Creates a group named MyNewGroup in the users container in the nwtraders.com domain CreateGroup.ps1 -help Displays the help topic for the script "@ $helpText exit } if($help){ "Obtaining help ..." ; funhelp } if(!$name -or !$dc) { "Missing name parameter ..." ; funhelp } if($ou) { "Creating group $name in LDAP://$ou,$dc" $ADSI = [ADSI]"LDAP://$ou,$dc" } ELSE { "Creating group $name in LDAP://cn=users,$dc" $ADSI = [ADSI]"LDAP://cn=users,$dc" } $CLass = "Group" $Group = $ADSI.create($CLass, $Name) $Group.setInfo()
Создание доменных пользователей
param($name,$ou,$dc,[switch]$help) function funHelp() { $helpText=@" DESCRIPTION: NAME: CreateUser.Ps1 Creates a user account PARAMETERS: -name name of the user to create -ou ou to create user in -dc domain to create user in -help prints help file SYNTAX: CreateUser.Ps1 -name "CN=MyNewUser" -ou "ou=myOU" ` -dc "dc=nwtraders,dc=com" Creates a user named MyNewUser in the myOU organizational unit in the nwtraders.com domain CreateUser.ps1 -name "cn=myuser" -ou "ou=ou2,ou=mytestou" ` -dc "dc=nwtraders,dc=com" Creates a user named MyNewUser in the ou2 organizational unit. A child OU of the mytestou Organizational unit in the nwtraders.com domain CreateUser.Ps1 -name "CN=MyNewUser" ` -dc "dc=nwtraders,dc=com" Creates a user named MyNewUser in the users container in the nwtraders.com domain CreateUser.Ps1 -help Displays the help topic for the script "@ $helpText exit } if($help){ "Obtaining help ..." ; funhelp } if(!$name -or !$dc) { "Missing name parameter ..." ; funhelp } if($ou) { "Creating user $name in LDAP://$ou,$dc" $ADSI = [ADSI]"LDAP://$ou,$dc" } ELSE { "Creating user $name in LDAP://cn=users,$dc" $ADSI = [ADSI]"LDAP://cn=users,$dc" } $CLass = "User" $User = $ADSI.create($CLass, $Name) $User.setInfo()
Создание и включение учетной записи
param([switch]$help) function funHelp() { $helpText=@" DESCRIPTION: NAME: CreateAndEnableUser.Ps1 Creates an enabled user account by reading csv file PARAMETERS: -help prints help file SYNTAX: CreateAndEnableUser.Ps1 Creates an enabled user by reading a csv file CreateAndEnableUser.Ps1 -help Displays the help topic for the script "@ $helpText exit } if($help){ "Obtaining help ..." ; funhelp } $aryUser= import-csv -Path c:\psbook\enabledusers.csv $Class = "User" $dc = "dc=nwtraders,dc=com" foreach($strUser in $aryUser) { $ou = "ou="+$strUser.OU $ADSI = [ADSI]"LDAP://$ou,$dc" $cnuser="cn="+$($strUser.userName) $User = $ADSI.create($CLass,$cnuser) $User.put("SamaccountName", $($strUser.username)) $User.setInfo() $User.put("userPassword", $($strUser.Password)) $user.psbase.invokeset("AccountDisabled", "False") $User.setInfo() }