使用Powershell将用户从多个AD组复制到新的AD组

Question

我试图将多个用户从一对2或3个组复制到一个新组中。有30个组需要转移到10个新的组。

Example:
Oldgroup1, Oldgroup2, Oldgroup3 > NewGroup1
Oldgroup4, Oldgroup5 > NewGroup2

我正在考虑foreach循环，但无法确定如何将多个老组绑定到新组，因为来自旧组的成员可能会有所不同。

Answer 1

在字典中组织新旧组之间的映射：

$groupMappings = @{
  'NewGroup1' = 'Oldgroup1', 'Oldgroup2', 'Oldgroup3'
  'NewGroup2' = 'Oldgroup4', 'Oldgroup5'
}

然后，对于每个映射条目：

• 获取旧组的成员
• 从结果
• 中删除重复项，将它们添加到新的组

中

foreach($entry in $groupMappings.GetEnumerator()){
  # Fetch members of all the old groups, keep only unique set of users
  $members = $entry.Value |Get-ADGroupMember |Where-Object objectClass -eq user |Sort-Object -Unique objectGUID

  # Add them all, one by one (this way the whole request wont fail if any one member is already a member of the target group)
  foreach($member in $members){
    Add-ADGroupMember -Identity $entry.Name -Member $member
  }
}