1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38

$ErrorActionPreference = "Stop"
Set-StrictMode -Version Latest

. .\conf.ps1

$command_name = Split-Path -Leaf $PSCommandPath

try {
    Select-User -Condition $query_AD_User -CSV $query_AD_User_csv

    $user = Import-CSV $query_AD_User_csv

    $user | ForEach-Object {
        Start-Sleep -Seconds 1

        Add-ADUser `
            -Name $_.Name `
            -Password $_.Password `
            -DisplayName $_.DisplayName

        $result = [Result]::New()
        $result.RecordNumber = $_.RecordNumber
        $result.Status = "完了"
        $result.Check_AD_User = "Done"

        Register-Result `
            -Result $result `
            -CSV (${result_AD_User_csv} + "." + $_.RecordNumber + ".csv")
    }
} catch {
    $log = [Log]::New()
    $log.Status = "$command_name : Error"
    $log.Details = Out-String -InputObject $Error

    Register-Log -Log $log -CSV $log_AD_User_csv
} finally {
    Out-File -FilePath $log_AD_User -InputObject $Error -Encoding UTF8
}

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50

#
# common
#
$base_dir  = "C:\opt\add-ad-user\"
$timestamp = Get-Date -Format "yyyy-MM-dd_HH-mm-ss"
$date      = Get-Date -Format "yyyy-MM-dd"

#
# csv
#
$csv_dir = $base_dir + "csv\"

$query_AD_User_csv  = $csv_dir + "query_AD_User"  + ".${timestamp}.csv"
$result_AD_User_csv = $csv_dir + "result_AD_User" + ".${timestamp}.csv"

#
# log
#
$log_dir = $base_dir + "log\"

$log_AD_User     = $log_dir + "AD_User"     + ".${timestamp}.log"
$log_AD_User_csv = $csv_dir + "log_AD_User" + ".${timestamp}.csv"

#
# cli-kintone
#
$cli_kintone     = "C:\opt\cli-kintone\1.11.0\cli-kintone.exe"
$cli_kintone_log = $log_dir + "cli-kintone" + ".${date}.log"

$base_url  = "https://example.com"
$app       = "UserSampleId"
$api_token = "UserSampleToken"
$encoding  = "utf8"
$fields    = "RecordNumber,Name,Password,DisplayName,Status,Check_AD_User"

$query_AD_User = '"Status in (\"実施中\") and Check_AD_User in (\"\")"'
$order_by      = '"RecordNumber asc"'

$update_key = "RecordNumber"

$log_app       = "LogSampleId"
$log_api_token = "LogSampleToken"

#
# AD
#
$AD_domain    = "ad.example.org"
$AD_user_path = "OU=User,DC=ad,DC=example,DC=org"

. .\lib.ps1

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95

function Select-User {
    Param (
        [string] $condition,
        [string] $csv
    )

    $command = @(
        "$cli_kintone record export"
        "--base-url $base_url"
        "--app $app"
        "--api-token $api_token"
        "--encoding $encoding"
        "--fields $fields"
        "--condition $condition"
        "--order-by $order_by"
        "> $csv"
        "2>> $cli_kintone_log"
    ) -join " "

    & cmd.exe /s /c "$command"
}

class Result {
    [string] $RecordNumber
    [string] $Status
    [string] $Check_AD_User
}

function Register-Result {
    Param (
        [Result] $result,
        [string] $csv
    )

    $command = @(
        "$cli_kintone record import"
        "--base-url $base_url"
        "--app $app"
        "--api-token $api_token"
        "--encoding $encoding"
        "--file-path $csv"
        "--update-key $update_key"
        ">> $cli_kintone_log 2>&1"
    ) -join " "

    $result | Export-Csv -Path $csv -Encoding UTF8 -NoTypeInformation
    & cmd.exe /c $command
}

class Log {
    [string] $Status
    [string] $Details
}

function Register-Log {
    Param (
        [Log] $log,
        [string] $csv
    )

    $command = @(
        "$cli_kintone record import"
        "--base-url $base_url"
        "--app $log_app"
        "--api-token $log_api_token"
        "--encoding $encoding"
        "--file-path $csv"
        ">> $cli_kintone_log 2>&1"
    ) -join " "

    $log | Export-Csv -Path $csv -Encoding UTF8 -NoTypeInformation
    & cmd.exe /c $command
}

function Add-ADUser {
    Param (
        [string] $name,
        [string] $password,
        [string] $displayname
    )

    $upn = $name + "@" + $AD_domain
    $path = $AD_user_path

    New-ADUser `
        -Name $name `
        -DisplayName $displayname `
        -UserPrincipalName $upn `
        -Path $path `
        -ChangePasswordAtLogon $false `
        -PasswordNeverExpires $true `
        -AccountPassword (ConvertTo-SecureString -AsPlainText $password -Force) `
        -Enabled $true `
        -Verbose
}

1
2
3
4
5
6
7

PS> @("tsuna", "kintoki", "sadamitsu", "suetake") | ForEach-Object { Get-ADUser -Identity $_ -Properties * } | Format-Table Name, DisplayName
Name      DisplayName
----      -----------
tsuna     渡辺綱
kintoki   坂田金時
sadamitsu 碓井貞光
suetake   卜部季武