powershell 自动从组中移除禁用的账号

1.特定组中移除禁用账号

$group= "testgroup"$members = Get-ADGroupMember  -Identity $groupforeach ($memeber in $members){        $user= Get-ADUser -Identity $memeber         if($user.Enabled -eq $false){         Remove-ADGroupMember $group $user -Confirm:$false         }}

2. 所有组中删除禁用用户

   $grouplist =  Get-ADGroup -SearchBase "OU=test,dc=test,dc=com" -Filter  'GroupCategory -eq "Distribution"'  -SearchScope OneLevelforeach ($group in $grouplist){$members = Get-ADGroupMember -Identity $groupforeach ($member in $members){        $user = Get-ADUser  -Identity $member          if($user.Enabled -eq $false){            Remove-ADGroupMember -Identity $group  -Members $user -Confirm:$false        }}}

   脚本2：

$users = Get-ADUser -Filter {enabled -eq "false"} -SearchBase  "ou=test,dc=test,dc=com"foreach ($user in $users ) {     Get-ADPrincipalGroupMembership -Identity $user | ?{$_.name -ne "domain users"} | %{Remove-ADPrincipalGroupMembership -Identity $user -MemberOf $_  -Confirm:$false}}

经测试，顺利删除已禁用账号。