| 用途 | 管理组成员与查询归属 |
|---|---|
| 语法 | Add-ADGroupMember -Identity 组 -Members 用户[,用户]；Remove-ADGroupMember；Get-ADPrincipalGroupMembership |
| 注意 | 大组成员列表可能很长，注意分页与导出 |
常用示例
常用示例
Add-ADGroupMember -Identity 'DL-Sales-RW' -Members wxm01
Remove-ADGroupMember -Identity 'DL-Sales-RW' -Members wxm01 -Confirm:$false
Get-ADPrincipalGroupMembership -Identity wxm01 | Select-Object Name, GroupCategory
Get-ADGroupMember -Identity 'DL-Sales-RW' | Measure-Object权限复核标准问题：此人为什么能访问 X？Get-ADPrincipalGroupMembership 从头捋一遍。