Powershell脚本将多个相同的行与不同的列分组

Question

我有以下从 powershell 导出的 CSV "objectGUID","sAMAccountName","givenName","SN","Description","mail","memberOf","preferredLanguage","manager","title","company","distinguishedName"

唯一的区别是 MemberOf。 在 AD 中，用户是多个 AD 组的成员，我们要导出用户及其组，组必须在同一列中导出，而不是在不同的行中。

我为得到输出而编写的代码是

Import-Module ActiveDirectory
$Groups = import-csv CGroups.csv
Foreach ($Group in $Groups)
{

$Arrayofmembers = Get-ADGroupMember -identity $Group.identity | select name,samaccountname

foreach ($Member in $Arrayofmembers)
{
$user = Get-ADUser $member.samaccountname -properties mail,physicalDeliveryOfficeName,objectGuid,DisplayName,manager
$guid = $user.objectGuid
$immutableId = [System.Convert]::ToBase64String($guid.ToByteArray())
$OBJNEW=IID2GUID $immutableId
$objatt15 = $OBJNEW.att15
$ADObj = Get-ADUser -Filter "extensionattribute15 -eq '$objatt15'" -Server dc.contoso.com:3268 -SearchBase 'dc=contoso,dc=net' -Properties msRTCSIP-PrimaryUserAddress,extensionattribute8,mail,DisplayName,manager,title,company

$obj = New-Object -TypeName psobject
$obj | Add-Member -MemberType NoteProperty -Name objectGUID -Value $ADObj.objectGUID
$obj | Add-Member -MemberType NoteProperty -Name sAMAccountName -Value $ADObj.sAMAccountName
$obj | Add-Member -MemberType NoteProperty -Name givenName -Value $ADObj.givenName
$obj | Add-Member -MemberType NoteProperty -Name SN -Value $ADObj.Surname
$obj | Add-Member -MemberType NoteProperty -Name Description -Value $ADObj.Description
$obj | Add-Member -MemberType NoteProperty -Name mail -Value $ADObj.mail
$obj | Add-Member -MemberType NoteProperty -Name memberOf -Value $Group.identity
$obj | Add-Member -MemberType NoteProperty -Name preferredLanguage -Value $ADObj.preferredLanguage
$obj | Add-Member -MemberType NoteProperty -Name manager -Value $ADObj.manager
$obj | Add-Member -MemberType NoteProperty -Name title -Value $ADObj.title
$obj | Add-Member -MemberType NoteProperty -Name company -Value $ADObj.company
$obj | Add-Member -MemberType NoteProperty -Name distinguishedName -Value $ADObj.distinguishedName
$obj | export-csv -Append -NoTypeInformation CGroupExport.csv
}
}

Answer 1

感谢您提供有关 IID2GUID 的信息，所以我不会打扰。

您的代码可以通过以下方式优化

1. 捕获在变量中返回的对象并将其保存到 csv，而不是在每次迭代中附加到 csv
2. 您似乎要求提供各种用户属性，这些用户属性从未使用过和/或默认情况下已由各种 Get-AD* cmdlet 返回
3. 您正在构建每个“老派”对象，并使用 [PsCustomObject]@{..} 我认为代码的可读性会提高

Import-Module ActiveDirectory

$Groups = Import-Csv -Path 'X:\CGroups.csv'
# capture all output objects in a variable $result
$result = foreach ($Group in $Groups) {
    # Get-ADGroupMember can return objects of type group, user and computer
    # so we filter for users only. The objects returned already have an objectGUID property
    $Arrayofmembers = Get-ADGroupMember -Identity $Group.identity | Where-Object { $_.objectClass -eq 'user' }

    foreach ($Member in $Arrayofmembers) {
        $guid        = $Member.objectGUID
        $immutableId = [System.Convert]::ToBase64String($guid.ToByteArray())
        $OBJNEW      = IID2GUID $immutableId
        $objatt15    = $OBJNEW.att15

        # Get-ADUser by default returns these properties:
        # DistinguishedName, Enabled, GivenName, Name, ObjectClass, ObjectGUID, SamAccountName, SID, Surname, UserPrincipalName
        $adProps = 'Extensionattribute15','EmailAddress','DisplayName','Description','Manager','Title','Company','preferredLanguage'
        $ADObj   = Get-ADUser -Filter "extensionattribute15 -eq '$objatt15'" -Server 'dc.contoso.com:3268' -SearchBase 'dc=contoso,dc=net' -Properties $adProps
        if ($ADObj) {
            # output an object
            [PsCustomObject]@{
                objectGUID        = $ADObj.ObjectGUID
                sAMAccountName    = $ADObj.SamAccountName
                givenName         = $ADObj.GivenName
                SN                = $ADObj.Surname
                Description       = $ADObj.Description
                mail              = $ADObj.EmailAddress
                memberOf          = $Group.identity  # this will be grouped later
                preferredLanguage = $ADObj.preferredLanguage
                manager           = $ADObj.Manager
                title             = $ADObj.Title
                company           = $ADObj.Company
                distinguishedName = $ADObj.DistinguishedName
            }
        }
    }
}

# Now group the objects collected in $result on the `distinguishedName`
# property so we can combine the groups this user belongs to
$combined = $result | Group-Object distinguishedName | ForEach-Object {
    # output a new object for the user with the memberOf property combined
    $userGroups = $_.Group.memberOf -join '; '
    $_.Group[0] | Select-Object *, @{Name = 'memberOf'; Expression = {$userGroups}} -ExcludeProperty memberOf
}

# output the combined results in a CSV file
$combined | Export-Csv -Path 'X:\CGroupExport.csv' -NoTypeInformation

^{Manager 属性是该经理用户的 DistinguishedName。如果您想要名称，则可以将该属性更改为manager = (Get-ADUser -Identity $ADObj.Manager).Name}