从AD返回所有用户，而不是从powershell中的组返回用户

import ldap

# AD服务器信息
ad_server = 'ldap://your_ad_server'
ad_user = 'your_ad_username'
ad_password = 'your_ad_password'

# LDAP查询语句
ldap_query = '(&(objectCategory=person)(objectClass=user))'

# 连接到AD服务器
conn = ldap.initialize(ad_server)
conn.simple_bind_s(ad_user, ad_password)

# 执行LDAP查询
result = conn.search_s('DC=your_domain,DC=com', ldap.SCOPE_SUBTREE, ldap_query)

# 解析查询结果
for dn, attrs in result:
    username = attrs['sAMAccountName'][0].decode('utf-8')
    email = attrs['mail'][0].decode('utf-8')
    department = attrs['department'][0].decode('utf-8')
    print(f'Username: {username}, Email: {email}, Department: {department}')

# 关闭连接
conn.unbind()