Active Directory 对象的 Import-CSV 已存在错误

Question

我创建了一个 PowerShell 脚本来从 CSV 文件导入新的 AD 用户。代码是：

Import-Module ActiveDirectory
$Users = Import-Csv -Delimiter "," -Path "C:\temp\kindergarten.csv"
$Password = 000
foreach ($User in $Users) {
    $Password = $Password + 1
    $OU = "OU=KCenter,OU=Students,OU=District Users New,DC=,DC=k12,DC=ny,DC=us"
    $UserFirstname = $User.FirstName
    $UserLastname = $User.LastName
    $DetailedName = $UserFirstname + " " + $UserLastname
    $FirstLetterFirstname = $UserFirstname.substring(0,1)
    $SAMName = $FirstLetterFirstname + $UserLastname
    $UserPrincipalName = $SAMName + "@student.pobschools.org"
    $Description = "Kindergarteners K-Center"


    New-ADUser -Name $DetailedName -SamAccountName $SAMName -UserPrincipalName $UserPrincipalName -DisplayName     
    $SAMName -GivenName $UserFirstname -Surname $UserLastname -AccountPassword (ConvertTo-SecureString $Password -AsPlainText -Force) 
    -Enabled $false -Description $Description -EmailAddress $UserPrincipalName -CannotChangePassword $true -ChangePasswordAtLogon $false -Path $OU
    }

该脚本适用于 CSV 中大约一半的条目。对于其他人，我得到了错误：

New-ADUser : The object already exists
At C:\users\jbaruch\desktop\getADUsers.ps1:16 char:12
+     New-ADUser <<<<  -Name $DetailedName -SamAccountName $SAMName -UserPrincipalName $UserPrincipalName -DisplayName
$SAMName -GivenName $UserFirstname -Surname $UserLastname -AccountPassword (ConvertTo-SecureString $Password -AsPlainTe
xt -Force) -Enabled $false -Description $Description -EmailAddress $UserPrincipalName -CannotChangePassword $true -Chan
gePasswordAtLogon $false -Path $OU
    + CategoryInfo          : NotSpecified: (CN=Shradha Sang...k12,DC=ny,DC=us:String) [New-ADUser], ADException
    + FullyQualifiedErrorId : The object already exists,Microsoft.ActiveDirectory.Management.Commands.NewADUser

如果我搜索用户，我会收到一个错误，因为没有结果。我不确定为什么它会像已经存在的那样回来。任何帮助将不胜感激，谢谢。

Answer 1

阅读您的评论，我认为这可能会对您有所帮助：

$VerbosePreference = 'Continue'

$Users = Import-Csv -Delimiter "," -Path "C:\temp\kindergarten.csv"
$Password = 000
foreach ($User in $Users) {

    $Password = $Password + 1
    $SamAccountName = $User.FirstName[0] + $User.LastName

    if ($U = Get-ADUser -Filter {SamAccountName -eq $SamAccountName}) {
        Write-Verbose "SamAccountName $($SamAccountName) already present"

        if ($U.GivenName -eq $User.FirstName) {
            Write-Verbose "User firstname $($User.FirstName) already present in AD"
            Continue # to the next user
        }
        $SamAccountName = $User.FirstName[1] + $User.LastName
        Write-Verbose "New SamAccountName generated $($SamAccountName)"
    }

    $ADParams = @{
        Name                  = $UserFirstname + ' ' + $UserLastname
        SamAccountName        = $SamAccountName
        UserPrincipalName     = $SamAccountName + '@student.pobschools.org'
        DisplayName           = $SamAccountName
        GivenName             = $User.FirstName
        Surname               = $User.LastName
        AccountPassword       = (ConvertTo-SecureString $Password -AsPlainText -Force)
        Enabled               = $false
        Description           = 'Kindergarteners K-Center'
        EmailAddress          = $SamAccountName + '@student.pobschools.org'
        CannotChangePassword  = $true
        ChangePasswordAtLogon = $false
        Path                  = 'OU=KCenter,OU=Students,OU=District Users New,DC=,DC=k12,DC=ny,DC=us'
    }
    Write-Verbose "Create user $($SamAccountName)"
    New-ADUser @ADParams
}

Splatting 是一种很好的技术，可以使内容更具可读性。