Uyenza njani kwaye ulawule abasebenzisi kwiWindows ngePowerShell

  • I-PowerShell ikuvumela ukuba wenze ngokufanelekileyo, uguqule, kwaye ucime abasebenzisi basekhaya okanye besizinda kunye namaqela.
  • I-automation enkulu enemibhalo kunye neefayile ze-CSV zinciphisa iimpazamo kwaye zigcina ixesha lokulawula abasebenzisi.
  • Ukusebenzisa ii-cmdlets ezicwangciswe kwiimodyuli kunceda ulawulo oluphambili nolukhuselekileyo lweakhawunti.
Pablo

Imizuzu ye6

Uyenza njani kwaye ulawule abasebenzisi kwiWindows ngePowerShell

Ukulawula ulawulo lwabasebenzisi kwiWindows ngePowerShell luncedo lokwenyani kubo bobabini abalawuli benkqubo kunye nabanomdla abajonge ukulungelelanisa iinkqubo kunye nokuphindaphinda imisebenzi. I-PowerShell sisixhobo esinamandla esikuvumela ukuba ulungelelanise kakuhle ulawulo lwakho kubasebenzisi, amaqela, kunye neemvume koomatshini basekhaya kunye nesizinda., ilungele imeko-bume yeshishini, kodwa iluncedo nakwinqanaba lomntu xa sifuna ukulawula ukuba ngubani ofikelela kwizixhobo zethu nendlela abazenza ngayo.

Ngelixa abaninzi benxulumanisa ulawulo lwabasebenzisi kunye nojongano lwegraphical, abo benza umtsi kulawulo lomgca womyalelo bafumanisa ukuguquguquka okungenakuthelekiswa nanto kunye nokubamba. Ngokusebenzisa ii-cmdlets zayo, i-PowerShell isinika amandla okwenza abasebenzisi, babafake kumaqela, balungise iipropathi zabo, benze imisebenzi emininzi, kwaye, ewe, izenze ngokuzenzekelayo imisebenzi ye-IT yemihla ngemihla kunye nezikripthi ezinokuphinda zisetyenziswe. Kweli nqaku, ndiza kukufundisa indlela yokusebenza kunye nabasebenzisi basekhaya kunye nesizinda kunye namaqela kwiWindows, kunye nemizekelo ebonakalayo, izikripthi, kunye nezenzo ezilungileyo ezivela kwi-PowerShell..

Kutheni usebenzisa iPowerShell ukulawula abasebenzisi kwiWindows?

Ukusebenzisa iPowerShell ukulawula abasebenzisi kwiWindows kuya kuxhaphaka kumashishini nakwiindawo zobuchwephesha. Umgca womyalelo uphelisa imfuno yojongano lomzobo, okunciphisa ukusetyenziswa kwezixhobo, ukukhawuleza imisebenzi, kunye nokuvula umnyango wokuzenzekelayo. Ikwabalulekile kwiiseva, oomatshini ababonakalayo, kunye neendawo zokusebenza ngaphandle kwemeko-bume yegraphical.

I-PowerShell lulwimi lokubhala olujolise kwinto esebenzisana ngokuthe ngqo kunye nenkqubo yokusebenza, ekuvumela ukuba usebenze kunye ne-cmdlets (imiyalelo) ukwenza izenzo ezithile kwizinto, ezifana neeakhawunti zabasebenzisi kunye namaqela, kunye nemigca embalwa yekhowudi.

Izinto ezisisiseko: iiCmdlets kunye neeModyuli kwiPowerShell

Umba osisiseko we-PowerShell kukusetyenziswa kwento ebizwa ngokuba yi-cmdlets, imiyalelo emincinci kwifomathi. isenzi-isibizo, njengoko New-LocalUser o Add-LocalGroupMember. I-cmdlet nganye yenza intshukumo ethile kwinto yenkqubo. Ezi cmdlets ziqhele ukucwangciswa ngokwemodyuli ezinemixholo., njengemodyuli Microsoft.PowerShell.LocalAccounts yokulawula abasebenzisi basekuhlaleni kunye namaqela.

Ukufumana iicmdlets ezikhoyo, ungasebenzisa imiyalelo efana nale:

  • Get-Module -ListAvailable: Udwelisa zonke iimodyuli ezifakiweyo.
  • Get-Command -Module Microsoft.PowerShell.LocalAccounts: Ibonisa i-cmdlets yemodyuli yeeakhawunti zasekuhlaleni.
  • Get-Help New-LocalUser: : Jonga uncedo oluneenkcukacha kuyo nayiphi na i-cmdlet.

Ukudala kunye nokulawula abasebenzisi beNgingqi ngePowerShell

Kwi-non-domain edityanisiweyo koomatshini beWindows, ulawulo lwabasebenzisi basekhaya luhlala lubalulekile. I-PowerShell ibonelela ngee-cmdlets ezithile ukwenza, ukuguqula, ukubuza, okanye ukucima iiakhawunti zomsebenzisi wasekhaya.Ngezantsi, siza kuphonononga awona manyathelo abalulekileyo kwaye sikunike imizekelo yokwenyani ukuze ukwazi ukuwasebenzisa ngokulula.

1. Yenza umsebenzisi omtsha wasekhaya

Eyona cmdlet yale nto New-LocalUserUnokwenza umsebenzisi osisiseko ngalo myalelo ulandelayo:

New-LocalUser -Name "UsuarioEjemplo" -NoPassword -Description "Cuenta de pruebas"

Nangona kunjalo, eyona ndlela ixhaphakileyo nekhuselekileyo kukuseta igama eliyimfihlo elifihliweyo:

$Password = Read-Host -AsSecureString
New-LocalUser -Name "UsuarioEjemplo" -Password $Password -FullName "Nombre Completo"
-Description "Cuenta de usuario para laboratorio"

Ipharamitha -Password ifuna into yeSecureString, yiyo loo nto sisebenzisa Read-Host -AsSecureString ukufaka igama eliyimfihlo ngokukhuselekileyo ngaphandle kokulibonisa esikrinini.

2. Yongeza umsebenzisi kwiqela

Ukunika iimvume ezongezelelweyo (umzekelo, ukwenza umsebenzisi abe ngumlawuli), sebenzisa le cmdlet ilandelayo:

Add-LocalGroupMember -Group "Administradores" -Member "UsuarioEjemplo"

Oku kongeza umsebenzisi owenziweyo kwiqela labalawuli basekuhlaleni., emnika onke amalungelo ayimfuneko okulawula iqela.

3. Buza abasebenzisi basekuhlaleni kunye neempawu zabo

  • Get-LocalUser: Dwelisa bonke abasebenzisi basekuhlaleni.
  • Get-LocalUser -Name "Administrador": Ibonisa ulwazi lomsebenzisi othile.
  • Get-LocalUser | Format-Table Name,Enabled: Ibonisa imo (eyenziwe/ikhubaziwe) yazo zonke ii-akhawunti.

4. Guqula abasebenzisi basekuhlaleni

Ukutshintsha iimpawu zomsebenzisi:

Set-LocalUser -Name "UsuarioEjemplo" -Description "Nueva descripción"
Set-LocalUser -Name "UsuarioEjemplo" -PasswordNeverExpires $true

Ukutshintsha igama eliyimfihlo ngelixa ukhusela ubumfihlo bakho:

$Password = Read-Host -AsSecureString
Set-LocalUser -Name "UsuarioEjemplo" -Password $Password

5. Cima okanye uvale ii-akhawunti zabasebenzisi basekuhlaleni

Khubaza (ukuthintela ukufikelela ngaphandle kokucima i-akhawunti):

Disable-LocalUser -Name "UsuarioEjemplo"

Cima iakhawunti:

Remove-LocalUser -Name "UsuarioEjemplo"

6. Qamba ngokutsha abasebenzisi kwaye ulungise iimpawu ezongezelelweyo

Rename-LocalUser -Name "AntiguoNombre" -NewName "NuevoNombre"
Set-LocalUser -Name "NuevoNombre" -FullName "Nuevo Nombre Completo"

Ukulawula amaqela asekuhlaleni ukusuka kwi-PowerShell

Ulawulo lweqela lubaluleke njengolawulo lomsebenzisi, ekubeni Amaqela akuvumela ukuba unikeze iimvume ngokudibeneyoEzona cmdlets zifanelekileyo zezi:

  • Get-LocalGroup: Dwelisa onke amaqela kwisistim.
  • New-LocalGroup -Name "Empleados" -Description "Grupo de empleados": Yenza iqela elitsha.
  • Add-LocalGroupMember -Group "Empleados" -Member "UsuarioEjemplo": Yongeza umsebenzisi kwiqela.
  • Get-LocalGroupMember -Name "Empleados": : Jonga amalungu eqela.
  • Remove-LocalGroupMember -Group "Empleados" -Member "UsuarioEjemplo": Isusa umsebenzisi kwiqela.
  • Remove-LocalGroup -Name "Empleados": Cima iqela.

Ukulawula Abasebenzisi kunye namaQela kwi-Active Directory (AD DS) ngePowerShell

Kwiindawo zenkampani, kuqhelekile ukusebenza kunye Abasebenzisi be-Domain kunye namaqela alawulwa nge-Active Directory (AD DS). I-PowerShell ikuvumela ukuba unxibelelane nesizinda ngalo lonke ixesha imodyuli ActiveDirectory ilayishiwe. Le modyuli ithathwa ngaphandle ngolu hlobo:

Import-Module ActiveDirectory

Jonga inguqulelo yePowerShell kunye nemodyuli yeAD

  • $PSVersionTable.PSVersion o Get-Host: : Jonga inguqulelo efakiweyo.
  • Import-Module ActiveDirectory: Ngenisa imodyuli efunekayo ukuba ayikafumaneki.

Domain kunye nemibuzo yomsebenzisi

  • Get-ADDomain: Ulwazi lwesizinda sangoku.
  • Get-ADUser -Identity usuario: Idatha yomsebenzisi othile.
  • Get-ADUser -Filter *: Gqibezela uluhlu lwabasebenzisi.
  • Get-ADUser -Filter '*' | Select Name: Bonisa amagama kuphela.
  • (Get-ADUser -Filter *).count: Inani labasebenzisi lilonke.

Yenza abasebenzisi bommandla (AD DS)

Umyalelo ophambili wale nto New-ADUserUkwenza umsebenzisi, kufuneka uqale uchaze igama lokugqitha njenge SecureString object:

$userpassword = ConvertTo-SecureString -AsPlainText -Force -String "ContraseñaSegura"
New-ADUser -Name "NuevoUsuario" -AccountPassword $userpassword -Enabled $true

Unokongeza inkcazo, uvule iakhawunti, okanye usete ezinye iimpawu:

New-ADUser -Name "Usuario2" -Description "Cuenta adicional" -Enabled $true -AccountPassword $userpassword

Guqula abasebenzisi besizinda

  • Set-ADUser -Identity nombre -Description "Nueva descripción": Guqula inkcazo.
  • Set-ADUser -Identity nombre -City "Madrid": Yongeza okanye ulungise isixeko.

Cima abasebenzisi besizinda

Ukucima ii-akhawunti kwi-AD, umzekelo:

Remove-ADUser -Identity "UsuarioAEliminar"

Amaqela okulawula kwi-Active Directory

  • Get-ADGroup "GrupoPrueba": Ulwazi malunga neqela.
  • Get-ADGroupMember "GrupoPrueba": Uluhlu lwamalungu.
  • Add-ADGroupMember "GrupoPrueba" NuevoUsuario: Yongeza umsebenzisi kwiqela.

Guqula igama eligqithisiweyo kwaye uvule iiakhawunti kwi-AD

  • Set-ADAccountPassword usuario: Guqula okanye usete kwakhona igama-mfihlo lakho.
  • Unlock-ADAccount usuario: Vula umsebenzisi ovaliweyo.

Usetyenziso oluzenzekelayo lomsebenzisi kunye nolawulo ngePowerShell

Awona mandla anamandla e-PowerShell kukukwazi ukusebenza ngobuninzi okanye amawaka eeakhawunti, alungele ukuthunyelwa okutsha, ukufuduka, okanye amasebe anengeniso ephezulu yabasebenzi.

Ukudalwa kwabasebenzisi abaninzi kunye ne-CSV kunye nezikripthi

Lungisa ifayile ye-CSV (umzekelo, usuarios.csv) ngeheda kunye nedatha:

nombre,contra
usuario01,clave01
usuario02,clave02
usuario03,clave03

Emva koko, sebenzisa esi script ukungenisa kunye nokwenza abasebenzisi basekhaya:

$usuarios = Import-Csv -Path "c:\ruta\usuarios.csv"
foreach ($i in $usuarios) {
  $clave = ConvertTo-SecureString $i.contra -AsPlainText -Force
  New-LocalUser $i.nombre -Password $clave -AccountNeverExpires -PasswordNeverExpires
  Add-LocalGroupMember -Group "usuarios" -Member $i.nombre
}

Le script yenza umsebenzisi ngamnye ngegama eligqithisiweyo kwaye uyongeze kwiqela elibonisiweyo. Ikuvumela ukuba uphinde iinkqubo kwaye ugcine iiyure zomsebenzi wezandla, ukuphepha impazamo yomntu.

Ukucinywa kwabasebenzisi abaninzi

Ukucima abasebenzisi abafanayo ngobuninzi, guqula ngokulula iskripthi:

$usuarios = Import-Csv -Path "c:\ruta\usuarios.csv"
foreach ($i in $usuarios) {
  Remove-LocalUser $i.nombre
}

Iindlela ezilungileyo kunye neengcebiso zokulawula abasebenzisi ngePowerShell

  • Hlala uvavanya kwiindawo zaselabhoratri phambi kokufaka utshintsho kwimveliso.
  • Ikhusela ukhuseleko lokugqitha usebenzisa SecureString kwaye ungafaki izitshixo kumbhalo ongenanto.
  • Bhala kwaye uphawule ngezikripthi zakho ukuququzelela ugcino nophicotho.
  • Zizenzele iinkqubo zokuphinda-phinda ukugcina ixesha kwaye unciphise umda wempazamo.
  • Jonga uncedo olwakhelwe ngaphakathi kwiPowerShell nge Get-Help ukubona imizekelo kunye neeparamitha kwi-cmdlet nganye.
  • Sebenzisa izihluzi kunye nemibhobho ukucokisa iziphumo kunye nokusebenza ngokufanelekileyo.

I-PowerShell ingaphezulu nje kokutshintshwa komyalelo womyalelo: Yindawo yolawulo enamandla kunye neyangoku yokulawula abasebenzisi, amaqela, kunye nemigaqo-nkqubo kwiWindowsNokuba injongo yakho kukwenza umsebenzisi omnye, ulawule inethiwekhi yendawo, okanye ulawule amakhulu eeakhawunti kwi-Active Directory, ukubamba ii-cmdlets ze-PowerShell kunye nengqiqo iya kukuvumela ukuba ulungelelanise kwaye uzenzele imisebenzi yesiqhelo, uphucule ukhuseleko, kwaye ugcine isiseko se-IT esikhulayo siphantsi kolawulo.

Inqaku elidibeneyo:
Indlela yokulawula abasebenzisi Windows 10