如果他們是B組的成員，則從A組中刪除用戶

Question

我有兩個組;組A和組B.如果用戶是組B的一部分，那麼我想從組A中刪除它們。這是因爲組是互斥的。

我發現了一些將從組中刪除用戶的腳本，但不是用戶成爲另一個組的一部分的條件。

有人可以幫忙嗎？

Answer 1

試試這個：

$user = "TestUser" 

$groupA = Get-ADGroupMember -Identity "Group A" -Recursive | Select -ExpandProperty Name 
$groupB = Get-ADGroupMember -Identity "Group B" -Recursive | Select -ExpandProperty Name 

If (($groupA -contains $user) -and ($groupB -contains $user)) { 
     Write-Host "$user is a member of groupA and groupB" 
     Remove-ADGroupMember -Identity "Group B" -Member $user 
} 

Answer 2

通過B組的所有成員（如果它們是成員）從A組中刪除這將循環

# Get all members of the GroupB. 
Foreach ($User In Get-ADGroupMember -Identity "Group B") 
{ 
    # If they are a 'MemberOf' GroupA 
    If ((Get-ADUser $User.SamAccountName -Properties MemberOf).MemberOf -Contains "Group A") 
    { 
     # Remove that user from GroupA 
     Remove-ADGroupMember -Identity "Group A" -Members $User.SamAccountName 
    } 
}