대상 호스트에서 Windows 계정을 사용할 수 없게하는 스크립트를 만듭니다. 관리자 만이 작업을 실행할 수 있습니다.

-3

Windows 계정을 비활성화하는 PowerShell 스크립트를 만들고 싶습니다. 대상 호스트 이름이 인수로 제공됩니다. 관리자 만이이 작업을 실행할 수 있어야합니다.대상 호스트에서 Windows 계정을 사용할 수 없게하는 스크립트를 만듭니다. 관리자 만이 작업을 실행할 수 있습니다.

이것은 내가 시도한 것입니다. 이 접근 방식이 옳은지 누군가에게 알려주거나이 작업을 수행하는 더 좋은 방법이 있습니까? 사물의

param([Parameter(Mandatory=$true)] [String] $TargetHost , 
     [Parameter(Mandatory=$true)] [String] $TargetUserName , 
     [String] $User , 
     [String] $Password) 

# Set up a trap to properly exit on terminating exceptions 
trap [Exception] { 
    write-error $("TRAPPED: " + $_) 
    exit 1 
    } 

function DeactivateAccount($TargetHost , $TargetUserName ,$User , $Password){ 

    $TargetHost = $TargetHost #Target Host on which windows account deactivation will be done. 
    $TargetUserName = $TargetUserName #User Name of Target. 
    $Domain = [System.DirectoryServices.ActiveDirectory.Domain]::GetCurrentDomain() #Domain name of the localhost. 
    $localHost = [System.Net.Dns]::GetHostName() 
    $localIP = [System.Net.Dns]::GetHostAddresses("$localHost") 

    #if TargetHost and LocalHost are same. 
    if($localHost -like $TargetHost -OR $localIP -like $TargetHost) { 

     if($Domain -eq [System.DirectoryServices.ActiveDirectory.Domain]::GetCurrentDomain()){ 
      $process = net user $TargetUsername /domain /active:no #Performs the operation on the domain controller in the computer's primary domain. 
     } else { 
      $process = net user $TargetUsername /active:no 
     } 
     Write-host " $TargetUsername account deactivated " 
    } 

    #If TargetHost is remote Host. 
    else { 
     $User = $User #Creds to perform admin function. 
     $Password = $Password 
     $SecurePassword = new-Object System.Security.SecureString #Convert password into secure string. 
     $Password.ToCharArray() | % { $SecurePassword.AppendChar($_) } 
     $Cred = New-Object -typename System.Management.Automation.PSCredential -argumentlist "$User",$securePassword 

     $newSession = New-PSSession -ComputerName "$TargetHost" -credential $Cred #Used PSSession for persistent connection and credentials to Specify a user account that has permission to perform this action. 

     $export_username = Invoke-Command -Session $newSession -ScriptBlock {$username=args[1]} # Invoke-Command command uses the Session parameter(here newSession) to run the commands in same session. 
     if($Domain -eq [System.DirectoryServices.ActiveDirectory.Domain]::GetCurrentDomain()){ 
       $process = Invoke-Command -Session $newSession -ScriptBlock {net user $username /domain /active:no} 
      } else { 
       $process = Invoke-Command -Session $newSession -ScriptBlock {net user $username /active:no} 
      } 
     Write-host " $TargetUsername account deactivated " 
     Remove-PSSession $newSession # Closes Windows PowerShell sessions. 
     } 

    if(-not $?) { # Returns true if last command was successful. 
     Write-Error "Windows Deactivation Failed!!" 
     exit 1 
    } 
} 

DeactivateAccount($TargetHost , $TargetUserName ,$User , $Password)

출처

2017-12-21 Sakshi Rawal