Powershell将用户添加到组

我正在尝试读取包含用户信息的XML文件，并基于该信息将用户添加到Active Directory组。到目前为止，我一直在查找错误消息，没有任何帮助。以下是将用户添加到组代码：

 $MyUsers = [xml] (Get-Content e:\sample.xml)
 $a = 0
 $b = 0
 $c = 0
 $OUServer = "servername.domain.domain.edu"
 $AD3Server = "servername.domain.domain.edu"
 $DSSPath = "cn=Atl-Users,OU=HR,DC=domain,DC=domain,DC=edu"
 $AD3Path = "ou=Admin,DC=domain,DC=domain,DC=domain,DC=EDU"
 $connection = "LDAP://$OUServer/$DSSPath"
     LOOP LOGIC
     {
     $CurUser = $MyUsers.clusters.cluster[$a].departments.department[$b].people.person[$c].loginid
     $Group = [adsi]"$connection"
     $User = "LDAP://$AD3Server/$CurUser,$AD3Path"
     $Group.Add($User) 
     }

这是我得到的错误

使用1参数调用Add异常：“服务器不愿意处理该请求。（来自HRESULT的异常：0x80072035）”

这可以满足您的需要：

$Connection = "LDAP://Server/CN=MyGoup,OU=MyOU,DC=MY,DC=CORP"

$Group = [adsi] $Connection

$User = "LDAP://Server/CN=MyUser,OU=MyOU,DC=MY,DC=CORP"

$Group.Add($User)

您必须检查$CurUser和$User变量的内容。

这可以满足您的需要：

$Connection = "LDAP://Server/CN=MyGoup,OU=MyOU,DC=MY,DC=CORP"

$Group = [adsi] $Connection

$User = "LDAP://Server/CN=MyUser,OU=MyOU,DC=MY,DC=CORP"

$Group.Add($User)

---

您必须检查$CurUser和$User变量的内容。

这里是一个工作示例，您也许可以调整它

首先忘记调用setinfo（），这是一种提交

Second注意，

$CurUser

的值的形式为

'CN=XXXXX'

Clear-Host

# Connecting without User/Password to Active Directory
#$dn = [adsi] "LDAP://192.168.30.200:389/dc=dom,dc=fr"
# Connecting with User/Password to Active Directory
$dn = New-Object System.DirectoryServices.DirectoryEntry ("LDAP://192.168.234.200:389/dc=dom,dc=fr","administrateur@dom.fr","admin")

# Creation of an OU
$Monou = $dn.create("OrganizationalUnit", "ou=Monou")
$Monou.put("Description", "Une description")
$Res = $Monou.Setinfo()

# Basic creation of a user
$objUtilisateur = $Monou.create("inetOrgPerson", "cn=Marc Assin")
$objUtilisateur.setinfo()

$objUtilisateur.samaccountname = "Massin"
$objUtilisateur.givenName = "Marc"
$objUtilisateur.sn = "Assin"
$objUtilisateur.userPrincipalName = "Massin@dom.fr"
# Set the state of the account
$objUtilisateur.pwdLastSet = 0
$objUtilisateur.userAccountControl = 544 #512
$objUtilisateur.SetInfo()

# Creation of a group
$MonGroupe = $Monou.Create("Group", "cn=MonGroupe")
$ADS_GROUP_TYPE_GLOBAL_GROUP = 0x00000002
$ADS_GROUP_TYPE_SECURITY_ENABLED = 0x80000000
$groupeType = $ADS_GROUP_TYPE_SECURITY_ENABLED -bor $ADS_GROUP_TYPE_GLOBAL_GROUP

$MonGroupe.put("groupType",$groupeType) 
$MonGroupe.setinfo()

# Adding user to a group
$MonGroupe.add('LDAP://cn=Marc Assin,ou=Monou,dc=dom,dc=fr')
$MonGroupe.setinfo()

---

下面是一个工作示例，您可能可以对其进行调整

首先忘记调用setinfo（），这是一种提交

Second注意，

$CurUser

的值的形式为

'CN=XXXXX'

Clear-Host

# Connecting without User/Password to Active Directory
#$dn = [adsi] "LDAP://192.168.30.200:389/dc=dom,dc=fr"
# Connecting with User/Password to Active Directory
$dn = New-Object System.DirectoryServices.DirectoryEntry ("LDAP://192.168.234.200:389/dc=dom,dc=fr","administrateur@dom.fr","admin")

# Creation of an OU
$Monou = $dn.create("OrganizationalUnit", "ou=Monou")
$Monou.put("Description", "Une description")
$Res = $Monou.Setinfo()

# Basic creation of a user
$objUtilisateur = $Monou.create("inetOrgPerson", "cn=Marc Assin")
$objUtilisateur.setinfo()

$objUtilisateur.samaccountname = "Massin"
$objUtilisateur.givenName = "Marc"
$objUtilisateur.sn = "Assin"
$objUtilisateur.userPrincipalName = "Massin@dom.fr"
# Set the state of the account
$objUtilisateur.pwdLastSet = 0
$objUtilisateur.userAccountControl = 544 #512
$objUtilisateur.SetInfo()

# Creation of a group
$MonGroupe = $Monou.Create("Group", "cn=MonGroupe")
$ADS_GROUP_TYPE_GLOBAL_GROUP = 0x00000002
$ADS_GROUP_TYPE_SECURITY_ENABLED = 0x80000000
$groupeType = $ADS_GROUP_TYPE_SECURITY_ENABLED -bor $ADS_GROUP_TYPE_GLOBAL_GROUP

$MonGroupe.put("groupType",$groupeType) 
$MonGroupe.setinfo()

# Adding user to a group
$MonGroupe.add('LDAP://cn=Marc Assin,ou=Monou,dc=dom,dc=fr')
$MonGroupe.setinfo()

---

-你能发布$CurUser和$User的内容吗？-你能发布$CurUser和$User的内容吗？