cls
$error.Clear()
Get-PSDrive | Remove-PSDrive
 
$Adm1 = Get-Credential "domain1\user1"
$Adm2 = Get-Credential "domain2\user2"
 
$ShareStringList = "server-05@domain2@E:\@E:\DiskO
server-05@domain2@E:\@E:\Shares
server-05@domain2@G:\@G:\share
server-06@domain2@E:\@E:\share2
server-06@domain2@E:\@E:\share1
server-06@domain2@E:\@E:\share
server1@domain2@E:\@E:\share
server2@domain1@E:\@E:\share
server3@domain1@E:\@E:\Share
server4@domain1@D:\@D:\Share
server5@domain1@E:\@E:\share
server6@domain1@E:\@E:\soft
server7@domain1@E:\@E:\Share
server8@domain1@E:\@E:\share
server8@domain1@G:\@G:\soft
server8@domain1@G:\@G:\doc
server9@domain1@F:\@F:\share" -split "\n" | % {$_.trim()} | ? {$_}
$ShareObjectList = @()
 
$LogPath = "D:\Аудит ACL"
if ((Test-Path $LogPath) -eq $false){
    New-Item -Path $LogPath -ItemType directory
}
#Наркомания
[int]$counter = "0"
$ABC = "H:
I:
J:
K:
L:
M:
N:
O:
P:
Q:
R:
S:
T:
U:
V:
W:
Y:
Z:"-split "\n" | % {$_.trim()} | ? {$_}
if ($ShareStringList.count -gt $abc.count){
    Write-Host "Список шар равен $($ShareStringList.count) он больше списка доступных букв $($abc.count), конец работы скрипта"
    exit
}
 
 
 
foreach ($ShareString in $ShareStringList){
    $ShareObjectList += New-Object psobject -Property @{
        ServerName = $ShareString.Split("@")[0]
        ServerDomain = $ShareString.Split("@")[1]
        ShareRoot = ("\\"+$($ShareString.Split("@")[0])+"\"+$($ShareString.Split("@")[3])).replace("$($ShareString.Split("@")[2])","")
        ShareName = ($($ShareString.Split("@")[0])+"_"+$($ShareString.Split("@")[3])).replace("$($ShareString.Split("@")[2])","")
        ShareLetter = $abc[$counter]
        LogPath = $($logpath+("\"+$($ShareString.Split("@")[0])+"_"+$($ShareString.Split("@")[3])+".txt").replace("$($ShareString.Split("@")[2])",""))
    }
    $counter = $counter + 1
}
 
foreach ($ShareObject in $ShareObjectList){
    Get-PSDrive  -PSProvider FileSystem | ? {$_.Root -like "$($ShareObject.ShareRoot)"} | Remove-PSDrive -ErrorAction SilentlyContinue -Force -Verbose
    if ($ShareObject.ServerDomain -eq "domain2"){New-PSDrive -Name $ShareObject.sharename -PSProvider FileSystem -Root $ShareObject.shareroot -Credential $Adm1}
    else {New-PSDrive -Name $($ShareObject.sharename) -PSProvider FileSystem -Root $($ShareObject.shareroot) -Scope global -Credential $Adm2}
    New-SmbMapping -localpath $ShareObject.ShareLetter -RemotePath $($ShareObject.ShareRoot)
}
 
workflow ScanShare {
param(
    [Parameter (Mandatory = $true)]
    [object[]]$ShareList
)
    foreach -parallel ($ShareObject in $ShareList){
        "$($ShareObject.ShareName) start job in $(Get-Date -Format hh:mm-dd.MM.yy)" | Out-File $ShareObject.LogPath -Encoding utf8 -Append
        "$($ShareObject.ShareName) start job in $(Get-Date -Format hh:mm-dd.MM.yy)"
        Get-ChildItem $ShareObject.ShareLetter -Recurse -Force  | ? {$_.PSIsContainer -eq $true} | ? {$(Get-Acl $_.fullname -Audit).AreAuditRulesProtected -eq $true} | % {$_.fullname} | Out-File $ShareObject.LogPath -Encoding utf8 -Append
        "$($ShareObject.ShareName) end job in $(Get-Date -Format hh:mm-dd.MM.yy)" | Out-File $ShareObject.LogPath -Encoding utf8 -Append
        "$($ShareObject.ShareName) end job in $(Get-Date -Format hh:mm-dd.MM.yy)"
    }
    
}
 
ScanShare -ShareList $ShareObjectList

$date = get-date -Format dd.MM.yyyy
$filelist = gci D:\* -Include "*.txt"| ? {$_.LastWriteTime -ge (get-date).AddDays(-1)}
foreach ($file in $filelist){
    if((test-path "d:\!fortest\$date") -eq $false){
        New-Item "d:\!fortest\$date" -ItemType directory
    }
    if((test-path "d:\!fortest\$date\$($file.BaseName)") -eq $false){
        New-Item "d:\!fortest\$date\$($file.BaseName)" -ItemType directory
    }
    Copy-Item $file.fullname -Destination "d:\!fortest\$date\$($file.BaseName)"
}

$user=Get-ADUser user -server domain2
$group=Get-ADGroup "user"
Get-ADGroupMember $group
Remove-ADGroupMember -Identity $group -Members $user