power shell 命令:
#其实就是一个双循环
$user=Get-aduser -searchbase "OU=离职人员,OU=LeaveUser,DC=test,DC=local" -searchscope "onelevel" -filter * | foreach{$_.DistinguishedName}
foreach($users in $user){
Get-adgroup -searchbase "OU=TimaGroup,OU=Timauser,DC=test,DC=local" -searchscope "subtree" -filter * | foreach{
remove-adgroupmember -identity "$_" -members "$users" -confirm:$false}
}