usrs_activate.ps1

# Log function
# in file ".\date time.log"
# parameter - String e.g. "somestring".
# NB! string concatenation expression like this "black" + "cat"
# not applicable as parameter
function Logging([string]$log_str)
{
    $today = Get-Date -Format "dd.MM.yyyy"
    $dt = Get-Date -Format "dd.MM.yyyy HH:mm:ss"
    $dt + ' - ' + $log_str | Out-File -FilePath ".\log\report-$today.log" -Append -Encoding unicode
}


# Transliteration function.
# string username "Surname NP"
# turn to email login
function Translit([string]$fio)
{
    $alfavit = @{" "=""; "à"="a"; "á"="b"; "â"="v"; "ã"="g"; "ä"="d"; 
    "å"="e"; "¸"="yo"; "æ"="zh"; "ç"="z"; 
    "è"="i"; "é"="j"; "ê"="k"; "ë"="l"; 
    "ì"="m"; "í"="n"; "î"="o"; "ï"="p"; 
    "ð"="r"; "ñ"="s"; "ò"="t"; "ó"="u"; 
    "ô"="f"; "õ"="kh"; "ö"="c"; "÷"="ch"; 
    "ø"="sh"; "ù"="sch"; "ú"=""; "ü"=""; 
    "û"="y"; "ý"="je"; "þ"="yu"; "ÿ"="ya"}
    
    $alias = ""
    foreach($c in $fio.ToCharArray())
    {
       if ($alfavit.ContainsKey($c.ToString())){
        $alias = $alias + $alfavit[$c.ToString()]
       }
       else{
        $alias = $alias + $c
       }
    }
    
    return $alias
}


# Ôóíêöèÿ àêòèâàöèè ó÷åòíîé çàïèñè ïîëüçîâàòåëÿ.
# Ó÷åòíàÿ çàïèñü ÄÎËÆÍÀ ÑÓÙÅÑÒÂÎÂÀÒÜ.
# Àðãóìåíò '$san' - sAMAccountName èç ActiveDirectory
function Usr_activate($dist_name)
{
    $u_object = Get-ADUser -Identity "$dist_name"
    $log_str = "Âûçîâ ôóíêöèè îáðàáîòêè ïîëüçîâàòåëÿ " + $u_object.Name
    Logging $log_str
    
    if ($u_object.enabled -ne $true)
    {
        $chars = "abcdefghigkABCDEFGHIJK23456789!@$%*"
        $chars = $chars.ToCharArray()
        $pwd_string = ($chars | Get-Random -Count 7) -join ""
        Logging "    Ïàðîëü äëÿ ïîëüçîâàòåëÿ $u_object - $pwd_string"
        
        try
        {
            $uObj = Get-ADUser -Identity "$dist_name"
            Set-ADAccountPassword $uObj.distinguishedName -Reset -NewPassword (ConvertTo-SecureString `
                -AsPlainText $pwd_string -Force)
        
            $uObj = Get-ADUser -Identity "$dist_name"        
            Enable-ADAccount -Identity $uObj.distinguishedName
        }
        catch
        {
            $activate_err = "    ERR: îøèáêà àêòèâàöèè 
                èëè íàçíà÷åíèÿ ïàðîëÿ - " + $Error[0].Exception.Message
            Logging $activate_err
        }
    }
    else
    {
        $msg = "    Àêêàóíò " + $u_object.name + " àêòèâåí. Îáðàáîòêà ñëåäóþùåãî."
        Logging $msg
    }
}


# Ôóíêöèÿ îòêðûòèÿ ñåññèè Powershell
# íà ïî÷òîâîì ñåðâåðå (äëÿ èñïîëüçîâàíèÿ
# êîìàíäëåòîâ Exchange Management console)
function OpenSession
{
    Logging "Âûçîâ ôóíêöèè îòêðûòèÿ ñåññèè"
    $service = "[Exchange server account]"
    
    try
    {
        $pwd = ConvertTo-SecureString -String (Get-Content ".\post")
        $cred = New-Object -TypeName System.Management.Automation.PSCredential -ArgumentList $service, $pwd
        Logging "    Ðàçðåøåíèå íà îòêðûòèå ñåññèè ñîçäàíî óñïåøíî."
    }
    catch
    {
        $cred_err = "    ERR: îøèáêà ñîçäàíèÿ ðàçðåøåíèÿ, 
            ëèáî îòñóòñòâóåò ôàéë êëþ÷à - " + $Error[0].Exception.Message
        Logging $cred_err
        exit
    }
    
    try
    {
        Get-Credential -Credential $cred

        $session = New-PSSession –ConfigurationName Microsoft.Exchange `
            –ConnectionUri http://exchangehostname.domain.net/PowerShell/ `
            –Credential $cred
    
        Import-PSSession -Session $session `
            -DisableNameChecking `
            -CommandName Enable-Mailbox, Get-Mailbox
        Logging "    Ñåññèÿ îòêðûòà."
    }
    catch
    {
        $session_err = "    ERR: îøèáêà îòêðûòèÿ ñåññèè - " + $Error[0].Exception.Message
        Logging $session_err
        exit
    }
}

# Ôóíêöèÿ çàêðûòèÿ àêòèâíîé ñåññèè 
# íà ñåðâåðå Exchange
function CloseSession
{
    $active_sessions = Get-PSSession
    if ($active_sessions)
    {
        try
        {
            Remove-PSSession
            Logging "Ñåññèÿ íà ñåðâåðå Exchange çàêðûòà."
        }
        catch
        {
            $close_session_err = "    ERR: îøèáêà ïðè ïîïûòêå çàêðûòü ñåññèþ - " + 
                $Error[0].Exception.Message
            Logging $close_session_err
        }
    }
}


# Ôóíêöèÿ àêòèâàöèè (ñîçäàíèÿ) ïî÷òîâîãî ÿùèêà
# ñóùåñòâóþùåãî ïîëüçîâàòåëÿ.
# Àðãóìåíò '$san' - sAMAccountName èç ActiveDirectory
# Àðãóìåíò '$alias' - ðåçóëüòàò, âîçâðàùàåìûé
# ôóíêöèåé 'Translit'
function Mailbox_activate($dist_name, $alias)
{
    $u = Get-ADUser -Identity "$dist_name"
    $log_str = "Âûçîâ ôóíêöèè àêòèâàöèè ïî÷òîâîãî ÿùèêà ïîëüçîâàòåëÿ " + $u.Name
    Logging $log_str
    
    $mb = Get-Mailbox "$dist_name"
    
    if ($mb.name -ne $null) 
    {
        $msg = "    Ïî÷òîâûé ÿùèê " + $mb.name + " óæå àêòèâèðîâàí.
            Ïåðåõîä ê ñëåäóþùåìó."
        Logging $msg
    } 
    else 
    {
        try
        {
            Enable-Mailbox -Identity "$dist_name" -Confirm:$false -Alias $alias
        }
        catch
        {
            $mb_activate_err = "    Ïðè àêòèâàöèè ïî÷òîâîãî ÿùèêà " `
                + $mb.name + " ïðîèçîøëà îøèáêà - " `
                + $Error[0].Exception.Message
            Logging $mb_activate_err
        }
    }
}


# Ôóíêöèÿ äëÿ çàïðîñîâ íà âûáîðêó äàííûõ PG
function Get-ODBC-Data{
    param([string]$query)
    $conn = New-Object System.Data.Odbc.OdbcConnection
    $conn.ConnectionString = 'Driver={PostgreSQL 64-Bit ODBC Drivers};
        Server=10.0.0.157;
        Port=5432;
        Database=postgres;
        Uid=dev;
        Pwd=1q2w3e$RT;'
    $conn.open()
    $cmd = New-object System.Data.Odbc.OdbcCommand($query,$conn)
    $ds = New-Object system.Data.DataSet
    (New-Object system.Data.odbc.odbcDataAdapter($cmd)).fill($ds) | out-null
    $conn.close()
    $ds.Tables[0]
}




######################-Begin-######################

New-Item -ItemType directory log -Force | out-null

Logging "---Íà÷àëî âûïîëíåíèÿ çàäàíèÿ---"
Logging "=============================="

try
{
    [diagnostics.process]::start(".\start.bat").WaitForExit()
}
catch
{
    $start_putty_err = "ERR: Îøèáêà ïðè çàïóñêå Putty: " + $Error[0].Exception.Message
    Logging "$start_putty_err"
    exit
}

try
{
    Import-Module ActiveDirectory
}
catch
{
    $ad_module_err = "ERR: Îøèáêà ïðè èìïîðòå ìîäóëÿ AD: " + $Error[0].Exception.Message
    Logging "$ad_module_err"
    exit
}

OpenSession

$query = "SELECT au.distinguished_name
            FROM personal.person_san ps
                , personal.ad_users au
            WHERE ps.person_id IN (
                SELECT em.person_id FROM personal.employees em
                WHERE (em.leave_date IS NULL OR current_date BETWEEN em.recept_date AND em.leave_date)
                GROUP BY em.person_id )
            AND ps.san = au.san"
try
{
    Logging "Çàïðîñ íà âûáîðêó ïîëüçîâàòåëåé èç ÁÄ"
    $result = Get-ODBC-Data -query $query
    Logging "Çàïðîñ óñïåøíî çàâåðøåí"
}
catch
{
    $db_err = "ERR: Îøèáêà ïðè âûïîëíåíèè çàïðîñà: " + $Error[0].Exception.Message
    Logging "$db_err"
    exit
}


if ($result.count -ne 0)
{
    foreach ($dn in $result)
    {
        $curr_dn = $dn.distinguished_name
        $current_user = Get-ADUser -Identity "$curr_dn"
        $curr_san = $current_user.SamAccountName
        $mail_alias = Translit $curr_san

        Usr_activate $curr_dn
        Mailbox_activate $curr_dn $mail_alias
    }
}
else
{
    Logging "Çàïðîñ ê ÁÄ âåðíóë ïóñòîé íàáîð!"
    exit
}

CloseSession

Logging "=============================="
Logging "---The END---"





######################-Examples-######################


# Ôóíêöèÿ DML-çàïðîñîâ PG
<#function Set-ODBC-Data{
    param([string]$query=$(throw 'query is required.'))
    $conn = New-Object System.Data.Odbc.OdbcConnection
    $conn.ConnectionString= 'Driver={PostgreSQL 64-Bit ODBC Drivers};
        Server=10.0.0.157;
        Port=5432;
        Database=postgres;
        Uid=dev;
        Pwd=1q2w3e$RT;'
    $conn.open()
    $cmd = New-Object System.Data.Odbc.OdbcCommand($query,$conn)    
    $cmd.ExecuteNonQuery()
    $conn.close()
}#>

#DML query example
<#$dml_query = "INSERT INTO personal.ad_groups 
            (gname
            ,san
            ,dn
            cn) 
            VALUES 
            ('Ïðîâåðî÷íàÿ ãðóïïà'
            ,'1'
            ,'2'
            ,'3')"
set-odbc-data -query $query#>

<#$u_object = Get-ADUser -Identity "CN=Usert1,OU=Test Users,DC=kursksmu,DC=net"

    if ($u_object.enabled -ne $true)
    {
        Write-Host "disabled"
    }
    else
    {
        Write-Host "enabled!"
    }#>