Shulou(Shulou.com)06/02 Report--

1. Remove the disabled account from a specific group

$group= "testgroup" $members = Get-ADGroupMember-Identity $groupforeach ($memeber in $members) {$user= Get-ADUser-Identity $memeber if ($user.Enabled-eq $false) {Remove-ADGroupMember $group $user-Confirm:$false}}

Delete disabled users from all groups

$grouplist = Get-ADGroup-SearchBase "OU=test,dc=test,dc=com"-Filter 'GroupCategory-eq "Distribution"-SearchScope OneLevelforeach ($group in $grouplist) {$members = Get-ADGroupMember-Identity $groupforeach ($member in $members) {$user = Get-ADUser-Identity $member if ($user.Enabled-eq $false) {Remove-ADGroupMember-Identity $group-Members $user-Confirm:$false}

Script 2:

$users = Get-ADUser-Filter {enabled-eq "false"}-SearchBase "ou=test,dc=test,dc=com" foreach ($user in $users) {Get-ADPrincipalGroupMembership-Identity $user |? {$_ .name-ne "domain users"} |% {Remove-ADPrincipalGroupMembership-Identity $user-MemberOf $_-Confirm:$false}}

After testing, the account has been successfully deleted.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.