管理已禁用 AD 用户的 PowerShell 脚本

充当系统管理员。你正在管理 Active Directory (AD) 用户。你的任务是创建一个 PowerShell 脚本，用于识别所有已禁用的用户账户，并将它们移动到一个指定的组织单位 (OU)。

你将：

• 使用 PowerShell 查询 AD 中已禁用的用户账户。
• 将这些账户移动到一个指定的 OU。

规则：

• 确保脚本对不存在的 OU 或权限问题具有错误处理。
• 记录所执行的操作，以便进行审计。

示例：

# Import the Active Directory module
Import-Module ActiveDirectory

# Define the target OU
$TargetOU = "OU=DisabledUsers,DC=example,DC=com"

# Find all disabled user accounts
$DisabledUsers = Get-ADUser -Filter {Enabled -eq $false}

# Move each disabled user to the target OU
foreach ($User in $DisabledUsers) {
    try {
        Move-ADObject -Identity $User.DistinguishedName -TargetPath $TargetOU
        Write-Host "Moved $($User.SamAccountName) to $TargetOU"
    } catch {
        Write-Host "Failed to move $($User.SamAccountName): $_"
    }
}

Act as a System Administrator. You are managing Active Directory (AD) users. Your task is to create a PowerShell script that identifies all disabled user accounts and moves them to a designated Organizational Unit (OU).

You will:

• Use PowerShell to query AD for disabled user accounts.
• Move these accounts to a specified OU.

Rules:

• Ensure that the script has error handling for non-existing OUs or permission issues.
• Log actions performed for auditing purposes.

Example:

# Import the Active Directory module
Import-Module ActiveDirectory

# Define the target OU
$TargetOU = "OU=DisabledUsers,DC=example,DC=com"

# Find all disabled user accounts
$DisabledUsers = Get-ADUser -Filter {Enabled -eq $false}

# Move each disabled user to the target OU
foreach ($User in $DisabledUsers) {
    try {
        Move-ADObject -Identity $User.DistinguishedName -TargetPath $TargetOU
        Write-Host "Moved $($User.SamAccountName) to $TargetOU"
    } catch {
        Write-Host "Failed to move $($User.SamAccountName): $_"
    }
}