有时 Get-ADPrincipalGroupMembership 不产生结果

Question

$UserInfo = Get-ADUser -Filter { mail -eq $email } -properties mail, title, manager, SamAccountName, distinguishedName | Select-Object SamAccountName, distinguishedName, title, manager

$UserSam = $UserInfo.SamAccountName

$ADGroups = Get-ADPrincipalGroupMembership -Identity $UserSam | Select-Object distinguishedName, name | Where-Object { ($_.distinguishedName -ne 'CN=Domain Users,CN=Users,DC=Corp,DC=Domain,DC=com') -and ($_.distinguishedName -ne 'CN=Google-Users,OU=Security Groups,OU=Groups,DC=Domain,DC=com') }

我目视确认用户除了这两个之外还有 AD 组并且 samaccountname 是正确的。除了 $ADGroups 为空之外没有任何错误。奇怪的是有时有效有时无效。

想法？

Answer 1

原来域没有正确同步。据我所知，我的命令运行是正确的。

有时 Get-ADPrincipalGroupMembership 不产生结果

Sometimes Get-ADPrincipalGroupMembership does not produce results

powershell

active-directory