[PowerShell每日技巧]为AD账号设置默认邮件地址(20131213)

DAIC

Scripting Active Directory does not necessarily require additional modules. With simple .NET Framework methods, you can achieve amazing things. In fact, this technique is so powerful that you should not run the following example in your productive environment until you understand what it does.

The next piece of code finds all users in your Active Directory that are located in CN=Users and have no mail address. It then assigns a default mail address, consisting of first and last name plus "mycompany.com".

1. # adjust LDAP path (i.e. remove CN=Users to search the entire domain):
   
2. $SearchRoot = 'LDAP://CN=Users,{0}' -f ([ADSI]'').distinguishedName.ToString()
   
3. # adjust LDAPFilter. Example: (!mail=*) = all users with no defined mail attribute
   
4. $LdapFilter = "(&(objectClass=user)(objectCategory=person)(!mail=*))"
   
5. 
   
6. $Searcher = New-Object DirectoryServices.DirectorySearcher($SearchRoot, $LdapFilter)
   
7. $Searcher.PageSize = 1000
   
8. $Searcher.FindAll() | ForEach-Object {
   
9.   $User = $_.GetDirectoryEntry()
   
10.   try
    
11.   {
    
12.         # Set mail attribute
    
13.         $User.Put("mail", ('{0}.{1}@mycompany.com' -f $user.givenName.ToString(), $user.sn.ToString()))
    
14. 
    
15.         # Commit the change
    
16.         $User.SetInfo()
    
17.   }
    
18.   catch { Write-Warning "Problems with $user. Reason: $_" }
    
19. }

复制代码

This example code can read and change/set any attribute. This is especially useful for custom attributes that often cannot be directly set by cmdlets.

http://powershell.com/cs/blogs/tips/archive/2013/12/13/setting-default-email-address-for-ad-users.aspx