当域计算机帐户不存在时将客户端移动到工作组

Question

我正在我们的测试环境中进行一些自动化，我们有 powershell 脚本来将 Windows 客户端加入域或工作组。

如果域中不存在客户端的计算机帐户，我在尝试将 Windows 7 客户端从域移动到工作组时遇到问题。

代码如下：

$User = administrator
$Password = ConvertTo-SecureString "<password>" -AsPlainText -Force
$DomainCred = New-Object System.Management.Automation.PSCredential $User, $Password
remove-computer -credential $DomainCred -force -passthru -verbose

这是返回的错误：

VERBOSE: Performing operation "Remove-Computer" on Target "localhost".

Remove-Computer: This command cannot be executed on target computer ('xxx')
due to following error: No mapping between account names and security IDs was done.
At line :1 char:16
+ remove-computer <<<<  -credential $DomainCred -force -passthru -verbose
    + CategoryInfo          : InvalidOperation: (xxx:String) [Remove-Computer],
    InvalidOperationException
    + FullyQualifiedErrorId : InvalidOperationException,Microsoft.Powershell.
    Commands.RemoveComputerCommand

但是，如果我使用 GUI（计算机属性、高级系统设置、计算机名称、更改...）尝试此操作，它会提示输入凭据并成功。

如何将此操作复制到 powershell 命令中，以便实用地完成？

Answer 1

试试Add-Computer，像这样（未经测试）：

Add-Computer -WorkgroupName "WORKGROUP" -Force

AFAIK Add-Computer 和 Remove-Computer 之间的唯一区别是 Remove-Computer 还会禁用计算机帐户，这可能会给您此错误，因为计算机帐户不存在。

Answer 2

我有两个选择。

选项 01

$Workgroup = "CL-01" #IF you want to add computer to domain edit here(Domain name)
$Password = "Password" | ConvertTo-SecureString -asPlainText -Force
$Username = "$Workgroup\Username"
$Credential = New-Object System.Management.Automation.PSCredential($Username,$Password)
Add-Computer -WorkGroup $Workgroup -Credential $credential
Restart-Computer -Force

选项 2 以及为什么选项 2 在脚本中存储密码不是一个有利的选项，所以我建议采用选项 2

$Workgroup = "CL-01"#IF you want to add computer to domain edit here(Domain name)
$Password = Read-Host -Prompt "Enter password for $user" -AsSecureString
$Username = "$Workgroup\Username" 
$credential = New-Object System.Management.Automation.PSCredential($Username,$Password)
Add-Computer -WorkGroup $Workgroup -Credential $credential
Restart-Computer -Force

注意：以管理员身份运行所有脚本！！

希望这会有所帮助！干杯！！