powershell 自动从组中移除禁用的账号

1.特定组中移除禁用账号

$group= "testgroup"
$members = Get-ADGroupMember  -Identity $group
foreach ($memeber in $members){
        $user= Get-ADUser -Identity $memeber
         if($user.Enabled -eq $false){
         Remove-ADGroupMember $group $user -Confirm:$false
         }

}

2. 所有组中删除禁用用户

   $grouplist =  Get-ADGroup -SearchBase "OU=test,dc=test,dc=com" -Filter  'GroupCategory -eq "Distribution"'  -SearchScope OneLevel
   foreach ($group in $grouplist){
   $members = Get-ADGroupMember -Identity $group
   foreach ($member in $members){
           $user = Get-ADUser  -Identity $member  
           if($user.Enabled -eq $false){
               Remove-ADGroupMember -Identity $group  -Members $user -Confirm:$false
           }
   
   }
   }

   脚本2：

$users = Get-ADUser -Filter {enabled -eq "false"} -SearchBase  "ou=test,dc=test,dc=com"
foreach ($user in $users ) {

     Get-ADPrincipalGroupMembership -Identity $user | ?{$_.name -ne "domain users"} | %{Remove-ADPrincipalGroupMembership -Identity $user -MemberOf $_  -Confirm:$false}

}

经测试，顺利删除已禁用账号。

转载于:https://blog.51cto.com/magic3/2144076