问Powershell -新的雇用帐户-添加到多个组

EN

$officeLocations = @{
    'Mississauga' = @{ City          = 'Waterloo'
                       Company       = 'JayBala'
                       Country       = 'CA'
                       Fax           = '905-111-39392'
                       PostalCode    = 'L6N 2W8'
                       Server        = $DC
                       State         = 'ON'
                       StreetAddress = '25 Billing Road'
                    }
    'Winnipeg'   = @{ City          = 'Watertown'
                      Company       = 'JayBala'
                      Country       = 'CA'
                      Fax           = '905-111-12345'
                      PostalCode    = 'L6N 2W8'
                      Server        = $DC
                      State         = 'MB'
                      StreetAddress = '54 Terry Road'
                    }
    'Richmond'   = @{ City          = 'Richmond'
                      Company       = 'JayBala'
                      Country       = 'CA'
                      Fax           = '905-111-67890'
                      PostalCode    = 'L8N 2W8'
                      Server        = $DC
                      State         = 'BC'
                      StreetAddress = '23 Winter Road'
                    }
    # and so on
}

$officeGroups = @{
    'Waterlooo EDR' = 'ED_Security','EDR','All - Waterloo'
    'Waterlooo GEO' = 'ED_Security','EDR','All - Waterloo'
    'Waterlooo HAZ' = 'HA_Security','Waterloo -Haz','All - Waterloo'
    'Waterlooo BSS' = 'BS_Security','BSG Group','All - Waterloo','Waterloo-BSS'
    'Waterlooo ERC' = 'VE_Security','Waterloo-ERC','All-Waterloo'
    # and so on
}

if ($officeLocations.ContainsKey($office)) {
    # use the underlying Hashtable for splatting the properties
    $properties = $officeLocations[$office]  # get the Hash with location properties
    $properties['Identity'] = $ADusername    # add an Identity item
    Set-ADUser @properties

    # now that we have set location properties, proceed adding the user to the correct group based on the $department
    if ($officeGroups.ContainsKey($department)) {
        Add-ADPrincipalGroupMembership -Identity $ADusername -MemberOf $officeGroups[$department] -Server $dc
    }
    else {
        Write-Warning "Could not find groups for department '$department'"
    }
}
else {
    Write-Warning "Could not find a location for office '$office'"
}