<#.Synopsis将用户（.csv）自动导入至AD中.Description利用PowerShell自动将用户导入至AD中，需要在参数配置中指定AdDomain,AdContainer如果要用默认的凭据，设置UseLoggedInUsersCredentials=True，否则在参数配置中配置Administrator账号和密码。.Parameter FullPathOfCsvFile用户文件所在位置.Parameter UseLoggedInUsersCredentials设置是否使用当前已经登录的凭据.Outputs用户 Chris 创建成功用户 Mark  创建成功用户 Chen  创建成功用户 Jack  创建成功用户 Queen 创建成功用户 King  创建成功.Example.\CreateUsersFromCsv1.ps1 -FullPathOfCsvFile "C:\Fuck\temp\Users.csv" -UseLoggedInUsersCredentials $false#>
param([string] $FullPathOfCsvFile,[bool] $UseLoggedInUsersCredentials)########################################################参数配置########################################################################################################################################
$AdDomain="Kingdom"                               #提供 Domain Name.Example=> $AdDomain="Kingdom"
$AdUser="Administrator"                           #当$UseLoggedInUsersCredentials=False时，提供 AD Administrator Name.Example=>$AdUser="Administrator"
$AdUserPwd="p@ssw0rd!!!"                             #当$UseLoggedInUsersCredentials=False时，提供 Administrator的密码.Example=>$AduserPwd="p@ssw0rd!!!"
$AdContainer="OU=Staff,DC=Kingdom,DC=com"         #存储区上，用作上下文的根容器。所有查询都在此根下执行，并且所有插入都在此容器中执行.Example=>"OU=Staff,DC=Kingdom,DC=com"，请确保它是正确并真实存在
########################################################参数配置#########################################################################################################################################if(!(Get-PSSnapin|Where-Object{$_.Name -eq "Microsoft.SharePoint.PowerShell"}))
{Add-PSSnapin "Microsoft.SharePoint.PowerShell"
}function Get-ContextPrincipal([string]$ctxDomain,[string]$ctxContainer)
{Add-Type -AssemblyName System.DirectoryServices.AccountManagement$ct=[System.DirectoryServices.AccountManagement.ContextType]::Domain$pc=New-Object System.DirectoryServices.AccountManagement.PrincipalContext($ct,$ctxDomain,$ctxContainer)return $pc}function Get-Principal([string]$userName,[string]$userPassword,[string]$ctxDomain,[string] $ctxContainer)
{Add-Type -AssemblyName System.DirectoryServices.AccountManagement$ct=[System.DirectoryServices.AccountManagement.ContextType]::Domain$pc=New-Object System.DirectoryServices.AccountManagement.PrincipalContext($ct,$ctxDomain,$ctxContainer,$userName,$userPassword)return $pc}function IsUserExist([System.DirectoryServices.AccountManagement.PrincipalContext] $ctx,[string] $userName)
{$curUser=[System.DirectoryServices.AccountManagement.UserPrincipal]::FindByIdentity($ctx,$userName)return $curUser -ne $null}function IsNullOrEmpty($str)
{if ($str) { return $false}else{return $true}
}if([System.IO.File]::Exists($FullPathOfCsvFile) -eq $true)
{if(IsNullOrEmpty($AdDomain)){Write-Host Domain Name不能为空return}if(IsNullOrEmpty($AdContainer)){Write-Host AD Container不能为空return}if($UseLoggedInUsersCredentials){$CurrentContext=Get-ContextPrincipal -ctxDomain $AdDomain -ctxContainer $AdContainer}else{[bool] $DataValid=$trueif(IsNullOrEmpty($AdUser)){Write-Host AD Admin Name不能为空$DataValid=$false}if(IsNullOrEmpty($AdUserPwd)){Write-Host AD Admin 密码不能为空$DataValid=$false}if($DataValid){$CurrentContext=Get-Principal -userName $AdUser -userPassword $AdUserPwd -ctxDomain $AdDomain -ctxContainer $AdContainer}else{Write-Host 传入参数不能为空，请修改。或者使用已登录的用户的凭据，请设置UserLoggedInUsersCredentials为True。详情请 Get-Help .\CreateUsersFromCsv1.ps1查看return;}}Import-Csv $FullPathOfCsvFile|ForEach-Object{if(IsUserExist -ctx $CurrentContext -userName $_.LogIn){Write-Host 用户 $_.LogIn 已经存在}else{$newUser=New-Object -TypeName System.DirectoryServices.AccountManagement.UserPrincipal($CurrentContext,$_.LogIn,$_.Password,$_.PasswordNeverExpires)$newUser.UserPrincipalName=$_.LogIn$newUser.GivenName=$_.FirstName$newUser.DisplayName=$_.FirstName+" "+$_.LastName$newUser.Name=$_.FirstName+" "+$_.LastName$newUser.EmailAddress=$_.Email$newUser.Surname=$_.LastName$newUser.PasswordNeverExpires=$_.PasswordNeverExpires$newUser.Save()Write-Host 用户 $_.LogIn 创建成功}}Write-Host 命令执行结束
}
else
{Write-Host 无效的文件路径Write-Host 请入有效的文件路径
}