Hallo,
das Ordner und Gruppen anlegen funktioniert aber er legt die Gruppen nicht auf den jeweiligen Ordner.
Was ist falsch und übersehe ich?
Schon mal Danke für jeden Tip :)
<#
.Synopsis
Script zum Anlegen von mehreren Ordnern und Gruppen aus der Liste .\Text.txt .
.Description
Was ist zu machen?
1. Die Text.txt in dem Ordner mit dem Modul ablegen.
2. "Import-Module New-GroupsFolder" im PowerShell ausführen
3. Example 1 ausführen und die Eingaben zu den Abfragen machen oder Example 2 verwenden:
Path: "\\vFilerha11\share$\Ordner"
Owner: "User"
GroupBegin: "Gruppenname"
ADPath = "OU"
Domain = "domain"
.Parameter Path
Gib den Pfad an.
.Parameter Owner
Gib den Herr der Daten an.
.Parameter GroupBegin
Gib den an wie der Anfang der Gruppe heisen soll.
.Parameter ADPath
Gib den an wo die Gruppen abgelegt werden sollen.
.Parameter Domain
Gib die Domain an.
.Example
Get-NewGroupFolder
.Example
New-GroupsFolder -Path "\\vFilerha11\share$\Ordner" -Owner "user" -GroupBegin "Gruppenname" -ADPath "OU" -Domain "domain"
#>
function New-GroupsFolder {
[CmdletBinding()]
Param( <##
[Parameter(Mandatory=$true,HelpMessage='Den Anfang des Pfades angeben. Bsp: \\vFilerha11\share$\Ordner')]
[string]$Path,
[Parameter(Mandatory=$true,HelpMessage='Benutzername des Herrn der Daten. Bsp: User')]
[string]$Owner,
[Parameter(Mandatory=$true,HelpMessage='Den Anfang der Gruppe vorgeben. Bsp: Gruppenname')]
[string]$GroupBegin,
[Parameter(Mandatory=$true,HelpMessage='Wo sollen die Gruppen abgelegt werden. Bsp: OU')]
[string]$ADPath,
[Parameter(Mandatory=$true,HelpMessage='Die Domain angeben. Bsp: domain')]
[string]$Domain ##>
)
if (!(Get-Module ActiveDirectory)) {Import-Module ActiveDirectory}
<## Manuell zu bearbeitende Variablen ##>
$Path = "\\vfilerha11\share$\ordner"
$Owner = "user"
$GroupBegin = "gruppenname"
$ADPath = "OU"
$Domain = "domain"
$AclFolder = ""
$AclGroupR = ""
$AclGroupW = ""
$ManagedBy = Get-ADUser -Identity $Owner -server $Domain
<## Ordner einlesen ##>
$cache = Get-Content -Path "C:\Users\user\Documents\WindowsPowerShell\Modules\New-GroupsFolder\Text.txt"
foreach ($c in $cache)
{
<## Ordner anlegen ##>
$r = $c
$r = $r -Replace "\\",""
$r = $r -Replace "\:",""
$r = $r -Replace "\*",""
$r = $r -Replace "\?",""
$r = $r -Replace "\<",""
$r = $r -Replace "\>",""
$r = $r -Replace "\|",""
$Folder = $r
$NewFolder = $Path + "\" + $Folder
md $NewFolder
<## Gruppe anlegen ##>
$n = $c
$n = $n -Replace " ","_"
$n = $n -Replace "\(",""
$n = $n -Replace "\)",""
$n = $n -Replace "\.",""
$n = $n -Replace "\/",""
$n = $n -Replace "\&",""
$n = $n -Replace "_",""
$n = $n -Replace "\\",""
$n = $n -Replace "\:",""
$n = $n -Replace "\*",""
$n = $n -Replace "\?",""
$n = $n -Replace "\<",""
$n = $n -Replace "\>",""
$n = $n -Replace "\|",""
$n = $n -Replace "ä","ae"
$n = $n -Replace "ö","oe"
$n = $n -Replace "ü","ue"
$NameR = $GroupBegin + $n + "_R"
$NameW = $GroupBegin + $n + "_W"
$NameT = $GroupBegin + $n + "_T"
if ($NameR.length -lt 65)
{
New-ADGroup -Name $NameR -SamAccountName $NameR -GroupCategory Security -GroupScope Global -DisplayName $NameR -Path $ADPath -Description $NewFolder -ManagedBy $ManagedBy -Server $Domain
New-ADGroup -Name $NameW -SamAccountName $NameW -GroupCategory Security -GroupScope Global -DisplayName $NameW -Path $ADPath -Description $NewFolder -ManagedBy $ManagedBy -Server $Domain
$AclGroupR += $NameR
$AclGroupW += $NameW
$AclGroupT += $NameT
$AclFolder += $NewFolder
} else {
$log += $NameR + ";" + $NameW + ";" + $NameT
}
}
for ($i=0; $i -lt $AclFolder.Count; $i++)
{
$FileSystemRights_R = [System.Security.AccessControl.FileSystemRights]"Read"
$FileSystemRights_W = [System.Security.AccessControl.FileSystemRights]"Modify"
$FileSystemRights_D = [System.Security.AccessControl.FileSystemRights]"Delete"
$InheritanceFlags = [System.Security.AccessControl.InheritanceFlags]::ContainerInherit -bor [System.Security.AccessControl.InheritanceFlags]::ObjectInherit
$InheritanceFlags_D = [System.Security.AccessControl.InheritanceFlags]::None
$PropagationFlags = [System.Security.AccessControl.PropagationFlags]::InheritOnly
$PropagationFlags_D = [System.Security.AccessControl.PropagationFlags]::NoPropagateInherit
$AccessControlType = [System.Security.AccessControl.AccessControlType]::Allow
$AccessControlType_D = [System.Security.AccessControl.AccessControlType]::Deny
$Folder = $AclFolder[$i]
<## Write ##>
$SIDW = Get-ADGroup -Filter $AclGroupW[$i] | select SID
$acl = Get-Acl $Folder
$AccessRuleW = New-Object System.Security.AccessControl.FilesystemAccessRule ($SIDW.SID, $FileSystemRights_W, $InheritanceFlags, $PropagationFlags, $AccessControlType)
$acl.AddAccessRule($AccessRuleW)
Set-Acl $Folder -AclObject $acl
<## Delete ##>
$acl = Get-Acl $Folder
$AccessRuleW = New-Object System.Security.AccessControl.FilesystemAccessRule ($SIDW.SID, $FileSystemRights_D, $InheritanceFlags_D, $PropagationFlags_D, $AccessControlType_D)
$acl.AddAccessRule($AccessRuleW)
Set-Acl $Folder -AclObject $acl -ea Stop
<## READ ##>
$SIDR = Get-ADGroup -Filter $AclGroupR[$i] | select SID
$acl = Get-Acl $Folder
$AccessRuleR = New-Object System.Security.AccessControl.FilesystemAccessRule ($SIDR.SID, $FileSystemRights_R, $InheritanceFlags_D, $PropagationFlags_D, $AccessControlType)
$acl.AddAccessRule($AccessRuleR)
Set-Acl $Folder -AclObject $acl -ea Stop
<## T ##>
$acl = Get-Acl $Folder
$AccessRuleT = New-Object System.Security.AccessControl.FilesystemAccessRule ($SIDR.SID, $FileSystemRights_R, $InheritanceFlags, $PropagationFlags, $AccessControlType)
$acl.AddAccessRule($AccessRuleT)
Set-Acl $Folder -AclObject $acl -ea Stop
}
if ($log)
{
$LogDate = Get-Date -Format "yyyy.MM.dd_HH.mm"
$LogFile = "E:\user\WindowsPowerShell\logs\" + $LogDate + ".csv"
$log|Export-Csv -encoding UNICODE -Path $LogFile -force
}
}
