CN107220809A - The method and system of change tissue based on Active Directory organizational structure - Google Patents
The method and system of change tissue based on Active Directory organizational structure Download PDFInfo
- Publication number
- CN107220809A CN107220809A CN201710386731.8A CN201710386731A CN107220809A CN 107220809 A CN107220809 A CN 107220809A CN 201710386731 A CN201710386731 A CN 201710386731A CN 107220809 A CN107220809 A CN 107220809A
- Authority
- CN
- China
- Prior art keywords
- tissue
- changed
- change
- modification information
- active directory
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q10/00—Administration; Management
- G06Q10/10—Office automation; Time management
- G06Q10/107—Computer-aided management of electronic mailing [e-mailing]
Landscapes
- Engineering & Computer Science (AREA)
- Business, Economics & Management (AREA)
- Human Resources & Organizations (AREA)
- Entrepreneurship & Innovation (AREA)
- Strategic Management (AREA)
- Marketing (AREA)
- Data Mining & Analysis (AREA)
- Economics (AREA)
- Computer Hardware Design (AREA)
- Operations Research (AREA)
- Quality & Reliability (AREA)
- Tourism & Hospitality (AREA)
- Physics & Mathematics (AREA)
- General Business, Economics & Management (AREA)
- General Physics & Mathematics (AREA)
- Theoretical Computer Science (AREA)
- Information Retrieval, Db Structures And Fs Structures Therefor (AREA)
Abstract
The invention discloses a kind of method and system of the change tissue based on Active Directory organizational structure, methods described includes：The modification information of tissue to be changed is obtained using PowerShell scripts, and the tissue to be changed is searched from IT databases, wherein, the modification information includes change type, and the change type includes：Rename, delete and adjust；Corresponding exception processes are carried out to the tissue to be changed in Active Directory organizational structures according to the modification information of acquisition.Compared with prior art, the present invention obtains the modification information of tissue to be changed using PowerShell scripts, and the tissue to be changed is searched from IT databases, corresponding exception processes are carried out to the tissue to be changed in Active Directory organizational structures finally according to the modification information of acquisition, realize and automatically change tissue, efficiency is improved, error rate is reduced.
Description
Technical field
It is more particularly to a kind of to be based on Active Directory (Active Directory) tissue the present invention relates to areas of information technology
The method and system of the change tissue of framework.
Background technology
Active Directory are towards Windows Standard Server, Windows Enterprise
Server and Windows Datacenter Server directory service, Active Directory Services are Windows Server
One of center element of 2000 operating system platforms.Active Directory can not operate in Windows Web Server
On, but can be by it to run Windows Web Server computer be managed.Active Directory are deposited
The information of related network object has been stored up, and keeper and user can easily search and using these information.Active
Directory has used a kind of data storage method of structuring, and logical to directory information progress in this, as basis
Laminated tissue.
Active Directory mainly provide following functions：Firstth, server and client computer management：Management clothes
Business device and client computer account, Servers-all and client calculate addition domain and manage and implement group policy；Secondth, user
Service：Managing user domain account, user profile, enterprise directory (integrated with e-mail system), user's group management, Yong Hushen
Part certification, user authorization management etc., by province's implementation group management strategy；3rd, resource management：Managing printing machine, file-sharing clothes
The Internet resources such as business；4th, desktop is configured：The various desktop configuration strategies of configuration that system manager can concentrate, such as：User makes
Feature limitation, network connection limitation, security configuration are performed with access authorization for resource limitation, the limitation of interface function, application program in domain
Limitation etc.；5th, application system is supported：Support finance, occurrences in human life, Email, EIP, office automation, patch
The various application systems such as management, Anti-Virus.
Because the department in enterprise often changes, for example, department renames, i.e. group in Active Directory
Knit unit renaming；Department cancels, i.e. organization unit in Active Directory deletes；Department's adjustment etc..Therefore,
Active Directory organizational structures are also required to change with these above-mentioned changes.But, all it is by artificial at present
Mode checks whether area under one's jurisdiction includes the organization unit of the department one by one, and if needing corresponding processing comprising if, audit process is very
It is cumbersome, time-consuming, and there is certain error rate in checked result.
The content of the invention
The technical problem to be solved in the present invention is to change tissue in the presence of consumption by manual type in the prior art to overcome
When etc. defect is there is provided a kind of method of the change tissue based on Active Directory organizational structures of automation and is
System.
The present invention is to solve above-mentioned technical problem by following technical proposals：
On the one hand, the present invention provides a kind of method of the change tissue based on Active Directory organizational structures, its
Feature is, including：
Obtain the modification information of tissue to be changed using a kind of PowerShell (command-line tool) script, and from IT data
The tissue to be changed is searched in storehouse, wherein, the modification information includes change type, and the change type includes：Rename, delete
Remove and adjust；
Phase is carried out to the tissue to be changed in Active Directory organizational structures according to the modification information of acquisition
The exception processes answered.
It is preferred that also including after change tissue carries out corresponding exception processes to described：Change group is treated according to described
The exception processes result knitted updates the IT databases.
It is preferred that when the change type is deletes, specifically including the step of the exception processes：Wait to become described in judging
Whether herein below is empty in more organizing：User account, computer account, communication group, secure group and public mailbox, if so,
Then delete the tissue to be changed；If it is not, the content in the tissue to be changed uniformly then is moved into Active Directory
Same position in organizational structure.
It is preferred that being specifically included described in the deletion the step of tissue to be changed：The title of the change tissue to be changed,
And the tissue to be changed is deleted after preset time period.
It is preferred that when the change type is adjustment, the modification information also includes the parameter of destination organization；
The step of exception processes, specifically includes：According to the newly-built destination organization of the parameter of acquisition, wait to become by described
All users more organized are transferred to the destination organization, delete the tissue to be changed.
On the other hand, the present invention a kind of change tissue based on Active Directory organizational structures is also provided be
Unite, its feature is, including：
Acquisition module, the modification information for obtaining tissue to be changed using PowerShell scripts, wherein, the change
Information includes change type, and the change type includes：Rename, delete and adjust；
Searching modul, for searching the tissue to be changed from IT databases；
Module is changed, waits to become to described in Active Directory organizational structures for the modification information according to acquisition
More tissue carries out corresponding exception processes.
It is preferred that the system also includes update module, the exception processes result for the tissue to be changed according to is more
The new IT databases.
It is preferred that when the change type is deletes, the change module is specifically for judging the tissue to be changed
Whether middle herein below is empty：User account, computer account, communication group, secure group and public mailbox, and in the situation for being
Tissue to be changed described in lower deletion, and the content in the tissue to be changed uniformly moved into Active in a case of no
Same position in Directory organizational structures.
It is preferred that the change module deletes name when tissue is changed specifically for the change tissue to be changed
Claim, and the deletion tissue to be changed after preset time period.
It is preferred that when the change type is adjustment, the modification information also includes the parameter of destination organization；
The change module is specifically for the newly-built destination organization of the parameter according to acquisition, by the tissue to be changed
All users are transferred to the destination organization, delete the tissue to be changed.
On the basis of common sense in the field is met, above-mentioned each optimum condition can be combined, and produce each preferable reality of the present invention
Example.
The positive effect of the present invention is：Compared with prior art, the present invention is obtained using PowerShell scripts
The modification information of tissue to be changed, and the tissue to be changed is searched from IT databases, finally according to the modification information of acquisition
Corresponding exception processes are carried out to the tissue to be changed in Active Directory organizational structures, realized automatically
Tissue is changed, efficiency is improved, while being greatly reduced error rate.
Brief description of the drawings
Fig. 1 is the method flow of the change tissue based on Active Directory organizational structures of the embodiment of the present invention
Figure.
Fig. 2 is the structure of the system of the change tissue based on Active Directory organizational structures of the embodiment of the present invention
Block diagram.
Fig. 3 is the system of the change tissue based on Active Directory organizational structures of another embodiment of the present invention
Structured flowchart.
Embodiment
The present invention is further illustrated below by the mode of embodiment, but does not therefore limit the present invention to described reality
Apply among a scope.
The present embodiment provides a kind of method of the change tissue based on Active Directory organizational structures, specific to utilize
PowerShell scripts are realized, as shown in figure 1, methods described includes：
Step 101, the modification information for obtaining tissue to be changed.Wherein, the modification information includes change type, the change
More type includes：Rename, delete and adjust.In specific implementation, different change types are identified by different field values, lift individual
Example, the change type of 01 mark is renames, and the change type of 10 marks is deletes, and the change type of 11 marks is adjustment.
Step 102, the lookup tissue to be changed from IT databases.For example treat that change is organized as IT- technology departments, example is pseudo-
Sql is：" from IT database where division departments of select organization units=' IT'and departments=' technology department ' "；In another example
Treat that change is organized as IT, example puppet sql is：" from IT database where division departments of select organization units=' IT' ".
Step 103, change group treated to described in Active Directory organizational structures according to the modification information of acquisition
Knit the corresponding exception processes of progress.
In a kind of optional embodiment, when the change type for when renaming, the modification information also includes target
The title of tissue.For example in entitled " the IT- technology departments " of tissue to be changed, the modification information of acquisition destination organization is entitled
" IT- financial technologies portion ", or tissue to be changed entitled " IT ", destination organization is entitled in the modification information of acquisition
" technique center ".
In a kind of optional embodiment, when the change type is deletes, treat that change is organized as base due to what is had
There is the department in plinth department, such as technology department, possible many area under one's jurisdictions, so the organization unit that step 102 is found out may have
It is very multiple, need one one to judge it these organization units, i.e., specifically wrapped the step of exception processes in step 103
Include：Judge whether herein below is empty in the tissue to be changed：User account, computer account, communication group, secure group and
Public mailbox, if so, then deleting the tissue to be changed；If it is not, then the content in the tissue to be changed uniformly is moved to
Same position in Active Directory organizational structures.
In a kind of optional embodiment, specifically included described in above-mentioned deletion the step of tissue to be changed：Change is described
The title of tissue to be changed, and the deletion tissue to be changed after preset time period.
Because deletion action is more sensitive, so can't be deleted immediately during the processing of PowerShell scripts, and simply will
The department being related to is renamed as XXX (to be deleted), and sends circular mail to IT staff, to observe and to handle.By department
Being renamed as considering for XXX (to be deleted) is：Some services are based on the organization unit of LDAP (Light Directory Access Protocol)
Path, if directly deleted, the service of may result in is unavailable, and recovery gets up to be not easy to, if be simply renamed as department
(to be deleted), organization unit path has change but other departments do not feed back problematic, then observes preset time period (for example
One week) afterwards can complete deletion.
In a kind of optional embodiment, when the change type is adjustment, the modification information also includes target
The parameter of tissue；Specifically included in step 103 the step of exception processes：, will according to the newly-built destination organization of the parameter of acquisition
All users of the tissue to be changed are transferred to the destination organization, delete the tissue to be changed.Wherein, destination organization
Parameter can include Chinese, English name and network legal power etc..
In a kind of optional embodiment, also include after step 103：According to the exception processes of the tissue to be changed
As a result the IT databases are updated.
In a kind of optional embodiment, due to framework of the division department in Active Directory department it
On, the mistake searched for less than the department can be reported by being renamed when renaming if first processing division department if reprocessing department renames, for example：
IT is first renamed as technique center, at this moment the technology department under IT division departments has been changed to technique center-technology department, and at this moment locates again
When reason technology department is renamed as financial technology portion, stored due to lane database or IT- technology departments can then report search less than IT-
The mistake of the organization unit of technology department.So PowerShell scripts should first handle the department of renaming in processing and update IT data
Storehouse data, then upper level of renaming division department and update IT databases.
Compared with the mode manually changed in the prior art, the present embodiment is obtained using PowerShell scripts and treats change group
The modification information knitted, and search from IT databases the tissue to be changed, finally according to acquisition modification information in Active
Corresponding exception processes are carried out to the tissue to be changed in Directory organizational structures, realizes and automatically changes tissue,
The situation that many unwanted tissues units are remained in Active Directory organizational structures is reduced, Active is kept
Directory environment it is clean, while also improving efficiency, reduce error rate.
The present embodiment also provides a kind of system 20 of the change tissue based on Active Directory organizational structures, such as schemes
Shown in 2, including：
Acquisition module 21, the modification information for obtaining tissue to be changed, wherein, the modification information includes change class
Type.The change type includes：Rename, delete and adjust；
Searching modul 22, for searching the tissue to be changed from IT databases；
Module 23 is changed, is treated for the modification information according to acquisition in Active Directory organizational structures to described
Change tissue and carry out corresponding exception processes.
It should be noted that the function of acquisition module, searching modul and change module is utilized in said system
PowerShell scripts are realized.
In a kind of optional embodiment, said system also includes update module 24, for treating change group according to
The exception processes result knitted updates the IT databases.
In a kind of optional embodiment, when the change type is deletes, change module 23 is specifically for judging
Whether herein below is empty in the tissue to be changed：User account, computer account, communication group, secure group and public postal
Case, and the tissue to be changed is deleted in a case of yes, and in a case of no by the content in the tissue to be changed
The same position uniformly moved in Active Directory organizational structures.
In a kind of optional embodiment, change module 23 is deleted described described specifically for change when tissue is changed
The title of tissue to be changed, and the deletion tissue to be changed after preset time period.
In a kind of optional embodiment, when the change type is adjustment, the modification information also includes target
The parameter of tissue, change module 23 is specifically for the newly-built destination organization of the parameter according to acquisition, by the tissue to be changed
All users transfer to the destination organization, delete the tissue to be changed.
Although the foregoing describing the embodiment of the present invention, it will be appreciated by those of skill in the art that these
It is merely illustrative of, protection scope of the present invention is defined by the appended claims.Those skilled in the art is not carrying on the back
On the premise of principle and essence from the present invention, various changes or modifications can be made to these embodiments, but these are changed
Protection scope of the present invention is each fallen within modification.
Claims (10)
1. a kind of method of the change tissue based on Active Directory organizational structures, it is characterised in that including：
The modification information of tissue to be changed is obtained using PowerShell scripts, and change group is treated described in lookup from IT databases
Knit, wherein, the modification information includes change type, and the change type includes：Rename, delete and adjust；
The tissue to be changed is carried out accordingly in Active Directory organizational structures according to the modification information of acquisition
Exception processes.
2. the method as described in claim 1, it is characterised in that to described after change tissue carries out corresponding exception processes
Also include：The IT databases are updated according to the exception processes result of the tissue to be changed.
3. the method as described in claim 1, it is characterised in that when the change type is deletes, the exception processes
Step is specifically included：Judge whether herein below is empty in the tissue to be changed：User account, computer account, communication group,
Secure group and public mailbox, if so, then deleting the tissue to be changed；If it is not, then by the content in the tissue to be changed
The same position uniformly moved in Active Directory organizational structures.
4. method as claimed in claim 3, it is characterised in that specifically included described in the deletion the step of tissue to be changed：
The title of the change tissue to be changed, and the deletion tissue to be changed after preset time period.
5. the method as described in claim 1, it is characterised in that when the change type is adjustment, the modification information is also
Parameter including destination organization；
The step of exception processes, specifically includes：According to the newly-built destination organization of the parameter of acquisition, change group is treated by described
All users knitted are transferred to the destination organization, delete the tissue to be changed.
6. a kind of system of the change tissue based on Active Directory organizational structures, it is characterised in that including：
Acquisition module, the modification information for obtaining tissue to be changed using PowerShell scripts, wherein, the modification information
Including change type, the change type includes：Rename, delete and adjust；
Searching modul, for searching the tissue to be changed from IT databases；
Module is changed, change group is treated to described in Active Directory organizational structures for the modification information according to acquisition
Knit the corresponding exception processes of progress.
7. system as claimed in claim 6, it is characterised in that the system also includes update module, for being treated according to
The exception processes result for changing tissue updates the IT databases.
8. system as claimed in claim 6, it is characterised in that when the change type is deletes, the change module tool
Body is used to judge in the tissue to be changed whether herein below to be empty：User account, computer account, communication group, secure group
And public mailbox, and delete the tissue to be changed in a case of yes, and by described treat change group in a case of no
The same position that the content knitted uniformly is moved in Active Directory organizational structures.
9. system as claimed in claim 8, it is characterised in that the change module deletion is described specifically to be used when tissue is changed
In the title of the change tissue to be changed, and the deletion tissue to be changed after preset time period.
10. system as claimed in claim 6, it is characterised in that when the change type is adjustment, the modification information is also
Parameter including destination organization；
The change module is specifically for the newly-built destination organization of the parameter according to acquisition, by all of the tissue to be changed
User is transferred to the destination organization, deletes the tissue to be changed.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201710386731.8A CN107220809A (en) | 2017-05-26 | 2017-05-26 | The method and system of change tissue based on Active Directory organizational structure |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201710386731.8A CN107220809A (en) | 2017-05-26 | 2017-05-26 | The method and system of change tissue based on Active Directory organizational structure |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN107220809A true CN107220809A (en) | 2017-09-29 |
Family
ID=59946748
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201710386731.8A Pending CN107220809A (en) | 2017-05-26 | 2017-05-26 | The method and system of change tissue based on Active Directory organizational structure |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN107220809A (en) |
Cited By (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN112508507A (en) * | 2020-11-17 | 2021-03-16 | 北京聚友大道科技发展有限公司 | Information management method and device and electronic equipment |
| CN112764719A (en) * | 2021-01-13 | 2021-05-07 | 平安普惠企业管理有限公司 | Configuration updating method, device, equipment and storage medium for organization architecture information |
| CN114416767A (en) * | 2022-03-30 | 2022-04-29 | 天津联想协同科技有限公司 | Multi-network-segment network disk account synchronization method and device, network disk and storage medium |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101432767A (en) * | 2004-06-28 | 2009-05-13 | 伊普拉斯资产公司 | Method for a server-less office architecture |
| CN103269311A (en) * | 2013-05-10 | 2013-08-28 | 网易（杭州）网络有限公司 | Method and device implemented on side of mail server |
| CN104679869A (en) * | 2015-03-05 | 2015-06-03 | 广州唯品会信息科技有限公司 | Method and device for synchronizing active directory data to RXT (Real Time eXchange) |
| CN106484716A (en) * | 2015-08-27 | 2017-03-08 | 腾讯科技（北京）有限公司 | Organizational structure method of adjustment and system |
-
2017
- 2017-05-26 CN CN201710386731.8A patent/CN107220809A/en active Pending
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101432767A (en) * | 2004-06-28 | 2009-05-13 | 伊普拉斯资产公司 | Method for a server-less office architecture |
| CN103269311A (en) * | 2013-05-10 | 2013-08-28 | 网易（杭州）网络有限公司 | Method and device implemented on side of mail server |
| CN104679869A (en) * | 2015-03-05 | 2015-06-03 | 广州唯品会信息科技有限公司 | Method and device for synchronizing active directory data to RXT (Real Time eXchange) |
| CN106484716A (en) * | 2015-08-27 | 2017-03-08 | 腾讯科技（北京）有限公司 | Organizational structure method of adjustment and system |
Non-Patent Citations (3)
| Title |
|---|
| 毛健: "活动目录在电子政务中的应用", 《中国优秀硕士学位论文全文数据库 信息科技辑》 * |
| 王化文 等: "《Windows Server 2008网络构建与***管理》", 30 September 2011, 武汉：武汉大学出版社 * |
| 邹少军: "Windows Server 2008批量添加Active Directory对象的实现方法", 《电子商务》 * |
Cited By (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN112508507A (en) * | 2020-11-17 | 2021-03-16 | 北京聚友大道科技发展有限公司 | Information management method and device and electronic equipment |
| CN112508507B (en) * | 2020-11-17 | 2024-05-24 | 北京聚友大道科技发展有限公司 | Information management method and device and electronic equipment |
| CN112764719A (en) * | 2021-01-13 | 2021-05-07 | 平安普惠企业管理有限公司 | Configuration updating method, device, equipment and storage medium for organization architecture information |
| CN114416767A (en) * | 2022-03-30 | 2022-04-29 | 天津联想协同科技有限公司 | Multi-network-segment network disk account synchronization method and device, network disk and storage medium |
| CN114416767B (en) * | 2022-03-30 | 2022-07-26 | 天津联想协同科技有限公司 | Multi-network-segment network disk account synchronization method and device, network disk and storage medium |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| JP5700730B2 (en) | Method, system, and computer program for centralized control of database applications | |
| US8812342B2 (en) | Managing and monitoring continuous improvement in detection of compliance violations | |
| US10250512B2 (en) | System and method for traffic director support in a multitenant application server environment | |
| US9384361B2 (en) | Distributed event system for relational models | |
| US8768715B2 (en) | System and method for resource management | |
| US6834301B1 (en) | System and method for configuration, management, and monitoring of a computer network using inheritance | |
| US8601539B1 (en) | Systems and methods for managing user permissions | |
| CN105074685B (en) | The multi-tenant that the social business of enterprise is calculated supports method, computer-readable medium and system | |
| CN107220809A (en) | The method and system of change tissue based on Active Directory organizational structure | |
| US20110060725A1 (en) | Systems and methods for grid-based data scanning | |
| US20050060572A1 (en) | System and method for managing access entitlements in a computing network | |
| US20210042165A1 (en) | System and method for supporting a quota policy language in a cloud infrastructure environment | |
| CN102325170B (en) | Data extraction and integration method and system thereof | |
| CN105844142A (en) | Safe centralized management and control method of database account | |
| US8321461B2 (en) | Upgrading roles in a role-based access-based control model | |
| WO2005013068A2 (en) | Rule-based content management system | |
| US8245291B2 (en) | Techniques for enforcing access rights during directory access | |
| CN103366117B (en) | A kind of viral restorative procedure of infection type and system | |
| US8365261B2 (en) | Implementing organization-specific policy during establishment of an autonomous connection between computer resources | |
| US11374970B2 (en) | Phishing attempt categorization/aggregation interface | |
| CN106254466A (en) | HDFS distributed file sharing method based on LAN | |
| CN107193949A (en) | The method and system of newly-built tissue based on Active Directory organizational structure | |
| CN106126977A (en) | A kind of efficient electronic document permission inheritance and transmission method | |
| WO2019165668A1 (en) | Cross-platform user rights management method, apparatus, computer device, and storage medium | |
| US8042158B2 (en) | Management of user authorizations |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20170929 |
|
| RJ01 | Rejection of invention patent application after publication |