powershell - 使用 PowerShell 列出 Active Directory 中特定用户的所有组及其描述

Question

我正在尝试使用 PowerShell 获取特定用户组的列表和组的描述。

import-module activedirectory
$username = Read-Host 'Please enter Username!'
Get-ADPrincipalGroupMembership $username | select name, description

描述字段返回空白。

Answer 1

来自 Get-ADPrincipalGroupMembership manual :

The Get-ADPrincipalGroupMembership cmdlet returns a default set of ADGroup property values. To retrieve additional ADGroup properties pass the ADGroups objects produced by this cmdlet through the pipline to Get-ADGroup. Specify the additional properties required from the group objects by passing the -Properties parameter to Get-ADGroup.

那么，让我们开始吧!

import-module activedirectory
$username = Read-Host 'Please enter Username!'
Get-ADPrincipalGroupMembership $username | Get-ADGroup -Properties * | select name, description

另外，在这种情况下，指定 name,description 而不是星号 (*) 就足够了。如果这是性能问题，请更换它。我将其保留在星号处，因为您稍后可能会改变对所需属性的看法。