提取用户所属AD组列表的脚本

# 引入Active Directory模块
Import-Module ActiveDirectory

# 设置AD域控制器的名称
$domainController = "your_domain_controller"

# 设置要查询的用户名
$username = "your_username"

# 获取用户对象
$user = Get-ADUser -Identity $username -Server $domainController

# 获取用户所属组列表
$groups = Get-ADUser -Identity $username -Server $domainController | Get-ADGroup -Recursive | Select-Object Name

# 输出用户所属组列表
Write-Host "User $($user.Name) belongs to the following groups:"
$groups | ForEach-Object {
    Write-Host "- $($_.Name)"
}