Powershell LDAP查询，按OU获取所有组、所有者和成员

# 引入System.DirectoryServices命名空间
Add-Type -AssemblyName System.DirectoryServices

# 定义LDAP路径和OU名称
$ldapPath = "LDAP://example.com"
$ouName = "OU=Groups,DC=example,DC=com"

# 创建DirectorySearcher对象
$searcher = New-Object System.DirectoryServices.DirectorySearcher
$searcher.SearchRoot = New-Object System.DirectoryServices.DirectoryEntry($ldapPath)
$searcher.Filter = "(&(objectCategory=group)(memberOf=$ouName))"

# 执行查询
$results = $searcher.FindAll()

# 遍历查询结果
foreach ($result in $results) {
    $group = $result.GetDirectoryEntry()
    $groupName = $group.Name
    $groupOwner = $group.Owner
    $groupMembers = $group.Member

    Write-Host "组名: $groupName"
    Write-Host "所有者: $groupOwner"
    Write-Host "成员:"

    foreach ($member in $groupMembers) {
        $memberName = (New-Object System.DirectoryServices.DirectoryEntry($member)).Name
        Write-Host "- $memberName"
    }

    Write-Host ""
}

# 清理资源
$searcher.Dispose()