PowerShell v7中Import-Csv加对话框后AD用户导入报错求助

问题描述 #

我在PowerShell v7中为Import-Csv脚本添加了文件选择对话框，避免手动输入CSV文件名，但运行时出现两个异常：

1. Get-ADUser命令抛出错误：「搜索过滤器无法识别」
2. 输出信息中「does not exist in AD」前为空，怀疑CSV未被正确读取

当前脚本代码 #

Write-Host "This will bulk add users to an AD group." -ForegroundColor Yellow
" "

# Import the data from CSV file and assign it to variable
[System.Reflection.Assembly]::LoadWithPartialName("System.windows.forms") | Out-Null

$OpenFIleDialog = New-Object System.Windows.Forms.OpenFileDialog
$OpenFileDialog.InitialDirectory = $InitialDirectory
$OpenFileDialog.Filter = "CSV (*.csv) | *.csv"

$OpenFileDialog.ShowDialog() | Out-Null
$Path = $OpenFileDialog.Filename

$Users = Import-Csv -Path $Path

# Specify target group where the users will be added to
# You can add the distinguishedName of the group. For example: CN=Pilot,OU=Groups,OU=Company,DC=exoip,DC=local
$Group = Read-Host "Enter in the target group name" 

# Start transcript
Start-Transcript -Path "C:\Output Log\Users Logs\Add-ADUsers.log" -Append -UseMinimalHeader

foreach ($User in $Users) {
    # Retrieve UPN
    $UPN = $User.UserPrincipalName

    # Retrieve UPN related SamAccountName
    $ADUser = Get-ADUser -Filter "UserPrincipalName -eq '$UPN'" | Select-Object SamAccountName

    # User from CSV not in AD
    if ($null -eq $ADUser) {
        Write-Host "$UPN does not exist in AD" -ForegroundColor Red
    }
    else {
        # Retrieve AD user group membership
        $ExistingGroups = Get-ADPrincipalGroupMembership $ADUser.SamAccountName | Select-Object Name

        # User already member of group
        if ($ExistingGroups.Name -eq $Group) {
            Write-Host "$UPN already exists in $Group" -ForeGroundColor Yellow
        }
        else {
            # Add user to group
            Add-ADGroupMember -Identity $Group -Members $ADUser.SamAccountName
            Write-Host "Added $UPN to $Group" -ForeGroundColor Green
        }
    }
}
Stop-Transcript
" "
Remove-Variable -Name Users

Write-Host "Users have finished adding to $group" -ForegroundColor Yellow
" "
}

错误输出（翻译后） #

搜索过滤器无法识别
+ CategoryInfo          : NotSpecified: (:) [Get-ADUser], ADException
+ FullyQualifiedErrorId : ActiveDirectoryServer:8254,Microsoft.ActiveDirectory.Management.Commands.GetADUser
+ PSComputerName        : localhost
 does not exist in AD

根源分析与修复方案 #

1. 文件对话框变量拼写错误（核心问题） #

脚本中$OpenFIleDialog的拼写错误（字母I和L顺序颠倒），导致后续$OpenFileDialog.ShowDialog()实际操作的是未初始化的变量，$Path最终为空值。Import-Csv读取空路径会返回空集合，循环中$UPN就是空字符串，带入Get-ADUser的过滤器后就会触发「搜索过滤器无法识别」错误，同时输出时$UPN为空就出现空白前缀。

修复：修正变量名拼写：

$OpenFileDialog = New-Object System.Windows.Forms.OpenFileDialog

2. 过滤器字符串的注入风险 #

即使$UPN有值，直接用"UserPrincipalName -eq '$UPN'"拼接过滤器字符串，如果UPN包含单引号（如user'name@domain.com），会直接破坏过滤器语法，同样触发错误。

修复：使用PowerShell推荐的哈希表格式构造过滤器，避免字符串拼接问题：

$ADUser = Get-ADUser -Filter @{ UserPrincipalName = $UPN } | Select-Object SamAccountName

3. 添加空路径防御检查 #

用户取消文件选择时，$Path为空，提前终止脚本避免后续无效操作：

$OpenFileDialog.ShowDialog() | Out-Null
$Path = $OpenFileDialog.Filename

# 新增检查
if (-not $Path) {
    Write-Host "未选择CSV文件，脚本终止" -ForegroundColor Red
    exit
}

4. 验证CSV列名 #

确保CSV文件包含UserPrincipalName列，避免读取不到属性：

# 在Import-Csv前新增列名检查
$csvHeaders = (Get-Content $Path -TotalCount 1).Split(',') | ForEach-Object { $_.Trim('"') }
if (-not $csvHeaders -contains 'UserPrincipalName') {
    Write-Host "CSV文件缺少UserPrincipalName列，请检查文件格式" -ForegroundColor Red
    exit
}

5. 其他小问题修复 #

• 脚本末尾多余的}需要删除
• $InitialDirectory变量未定义，要么提前赋值（如$InitialDirectory = "$env:USERPROFILE\Downloads"），要么删除该行让对话框使用默认路径

修复后的完整脚本 #

Write-Host "此脚本将批量添加用户到AD组。" -ForegroundColor Yellow
" "

# 加载WinForms程序集
[System.Reflection.Assembly]::LoadWithPartialName("System.windows.forms") | Out-Null

# 创建文件选择对话框
$OpenFileDialog = New-Object System.Windows.Forms.OpenFileDialog
$OpenFileDialog.InitialDirectory = "$env:USERPROFILE\Downloads"
$OpenFileDialog.Filter = "CSV文件 (*.csv)|*.csv"

$OpenFileDialog.ShowDialog() | Out-Null
$Path = $OpenFileDialog.Filename

# 检查是否选择了文件
if (-not $Path) {
    Write-Host "未选择CSV文件，脚本终止" -ForegroundColor Red
    exit
}

# 验证CSV列名
$csvHeaders = (Get-Content $Path -TotalCount 1).Split(',') | ForEach-Object { $_.Trim('"') }
if (-not $csvHeaders -contains 'UserPrincipalName') {
    Write-Host "CSV文件缺少UserPrincipalName列，请检查文件格式" -ForegroundColor Red
    exit
}

$Users = Import-Csv -Path $Path

# 指定目标AD组
$Group = Read-Host "请输入目标组名称" 

# 启动日志记录
Start-Transcript -Path "C:\Output Log\Users Logs\Add-ADUsers.log" -Append -UseMinimalHeader

foreach ($User in $Users) {
    $UPN = $User.UserPrincipalName

    # 安全获取AD用户
    $ADUser = Get-ADUser -Filter @{ UserPrincipalName = $UPN } | Select-Object SamAccountName

    if ($null -eq $ADUser) {
        Write-Host "$UPN 不存在于AD中" -ForegroundColor Red
    }
    else {
        # 获取用户已有组 membership
        $ExistingGroups = Get-ADPrincipalGroupMembership $ADUser.SamAccountName | Select-Object -ExpandProperty Name

        if ($ExistingGroups -contains $Group) {
            Write-Host "$UPN 已在 $Group 组中" -ForeGroundColor Yellow
        }
        else {
            Add-ADGroupMember -Identity $Group -Members $ADUser.SamAccountName
            Write-Host "已将 $UPN 添加到 $Group 组" -ForeGroundColor Green
        }
    }
}
Stop-Transcript
" "
Remove-Variable -Name Users

Write-Host "用户批量添加到 $Group 组已完成" -ForegroundColor Yellow
" "

内容的提问来源于stack exchange，提问作者Ni83