使用powershell基于IP/子网和AD组成员身份映射网络驱动器
我正在使用一个类似于下面的powershell脚本,它查看AD安全组成员身份,并基于此为用户映射驱动器。我试图做到的是,当它看到用户从一个认证的IP或子网登录时,除了它从广告组成员那里获取的驱动器外,它还映射了一组不同的驱动器,任何洞察都将受到赞赏使用powershell基于IP/子网和AD组成员身份映射网络驱动器,powershell,Powershell,我正在使用一个类似于下面的powershell脚本,它查看AD安全组成员身份,并基于此为用户映射驱动器。我试图做到的是,当它看到用户从一个认证的IP或子网登录时,除了它从广告组成员那里获取的驱动器外,它还映射了一组不同的驱动器,任何洞察都将受到赞赏 # The section below determines what AD groups is the user member of $strName = $env:username function get-GroupM
# The section below determines what AD groups is the user member of
$strName = $env:username
function get-GroupMembership($DNName,$cGroup){
$strFilter = "(&(objectCategory=User)(samAccountName=$strName))"
$objSearcher = New-Object System.DirectoryServices.DirectorySearcher
$objSearcher.Filter = $strFilter
$objPath = $objSearcher.FindOne()
$objUser = $objPath.GetDirectoryEntry()
$DN = $objUser.distinguishedName
$strGrpFilter = "(&(objectCategory=group)(name=$cGroup))"
$objGrpSearcher = New-Object System.DirectoryServices.DirectorySearcher
$objGrpSearcher.Filter = $strGrpFilter
$objGrpPath = $objGrpSearcher.FindOne()
If (!($objGrpPath -eq $Null)){
$objGrp = $objGrpPath.GetDirectoryEntry()
$grpDN = $objGrp.distinguishedName
$ADVal = [ADSI]"LDAP://$DN"
if ($ADVal.memberOf.Value -eq $grpDN){
$returnVal = 1
return $returnVal = 1
}else{
$returnVal = 0
return $returnVal = 0
}
}else{
$returnVal = 0
return $returnVal = 0
}
}
# The section below maps network drives based on users AD Security Group memberships
$result = get-groupMembership $strName "SecurityGrtoup1"
if ($result -eq '1') {
$(New-Object -ComObject WScript.Network).RemoveNetworkDrive("G:");
$(New-Object -ComObject WScript.Network).MapNetworkDrive("G:", "\\server1\Group");
$(New-Object -ComObject WScript.Network).RemoveNetworkDrive("P:");
$(New-Object -ComObject WScript.Network).MapNetworkDrive("P:", "\\server2\Common");
}
$result = get-groupMembership $strName "SecurityGroup3"
if ($result -eq '1') {
$(New-Object -ComObject WScript.Network).RemoveNetworkDrive("N:");
$(New-Object -ComObject WScript.Network).MapNetworkDrive("N:", "\\Server3\files");
}
这将以字符串对象的形式获取IPv4地址:
$ip = (Get-WmiObject -Class Win32_NetworkAdapterConfiguration | Where-Object {$_.IPAddress} | Select-Object -ExpandProperty IPAddress)[0]
然后,您可以根据需要对其进行解析,也可以使用.IPSubnet或.DefaultIPGateway属性,如果这可以满足您的需要
有关其他可用属性,请尝试:
Get-WmiObject -Class Win32_NetworkAdapterConfiguration | Where-Object {$_.IPAddress} | Get-Member