今天豆子需要远程注销一个终端服务器的用户，操作很简单,首先quser获取远程用户的sessionID，然后logoff命令注销即可
|
1
2
|
quser
/server
:XXXX
logoff sessionID
/server
:XXX
|
和早期的cmd和Linux的bash命令一样，quser的结果都是字符串。字符串的处理对于脚本来说比较麻烦，如果能够转换成标准的object对象就好了。
仔细观察一下quser的结果，可以看见他的输出结果很整齐，我如果能够把他中间的空格用逗号替换掉，那就是标准的csv格式，那就很容易转换为对象了。唯一的问题是有的列，比如sessionname为空，那我就需要数数到底多少个空格需要替换了
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
|
PS C:\users\yli\Documents>
$a
=quser /server:sydbcc02
PS C:\users\yli\Documents>
$a
USERNAME SESSIONNAME ID STATE IDLE TIME LOGON TIME
smiths rdp-tcp
#5 16 Active 24692+13:29 3/14/2017 9:06 AM
llederbauer rdp-tcp
#4 22 Active 1:18 3/14/2017 9:18 AM
jedwards 23 Disc 1:39 3/14/2017 7:54 AM
tpicken rdp-tcp
#2 24 Active . 3/14/2017 8:22 AM
okaragiaouris rdp-tcp
#9 27 Active 18 3/14/2017 8:55 AM
bhue rdp-tcp
#7 28 Active 12 3/14/2017 9:20 AM
mcherginets 29 Disc 1:37 3/14/2017 8:58 AM
abishop 30 Disc 2:48 3/14/2017 9:22 AM
fburns 31 Disc 2:28 3/14/2017 9:37 AM
ygordony 32 Disc 2:07 3/14/2017 10:04 AM
tmoloney rdp-tcp
#0 33 Active 1:07 3/14/2017 9:30 AM
smaroo rdp-tcp
#1 34 Active 1:45 3/14/2017 10:19 AM
jwoodford 35 Disc 22 3/14/2017 10:42 AM
mozard rdp-tcp
#8 36 Active 56 3/14/2017 11:08 AM
gmarsh rdp-tcp
#6 37 Active 41 3/14/2017 10:56 AM
mking 38 Disc 20 3/14/2017 11:11 AM
mcolgan rdp-tcp
#11 39 Active 59 3/14/2017 11:16 AM
jbelgiovane rdp-tcp
#12 41 Active 39 3/14/2017 11:33 AM
ndrabsch 42 Disc 3 3/14/2017 11:57 AM
|
直接看不太容易区分，转换成ASCII看看，可以看见32（代表空格）一共有16个
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
|
$a
=quser /server:sydbcc02
[int[]][char[]]
$a
[2]
32
108
108
101
100
101
114
98
97
117
101
114
32
32
32
32
32
32
32
32
32
32
32
114
100
112
|
okay，那我指定数量从2到17之间的空格都替换为逗号，从2开始是因为‘idle time’这些名字中间有空格就别替换了，最后代码如下
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
|
$quser
= (quser /server:sydbcc02)
-replace
'\s{2,17}'
,
','
|
ConvertFrom-Csv
$quser
| ft
USERNAME SESSIONNAME ID STATE IDLE TIME LOGON TIME
-------- ----------- -- ----- --------- ----------
smiths 16 Disc 3 3/14/2017 9:06 AM
llederbauer rdp-tcp
#4 22 Active 1:26 3/14/2017 9:18 AM
jedwards 23 Disc 1:47 3/14/2017 7:54 AM
tpicken rdp-tcp
#2 24 Active 7 3/14/2017 8:22 AM
okaragiaouris rdp-tcp
#9 27 Active . 3/14/2017 8:55 AM
bhue rdp-tcp
#7 28 Active 20 3/14/2017 9:20 AM
mcherginets 29 Disc 1:44 3/14/2017 8:58 AM
abishop 30 Disc 2:56 3/14/2017 9:22 AM
fburns 31 Disc 2:36 3/14/2017 9:37 AM
ygordony 32 Disc 2:15 3/14/2017 10:04 AM
tmoloney rdp-tcp
#0 33 Active 1:15 3/14/2017 9:30 AM
smaroo rdp-tcp
#1 34 Active 1:52 3/14/2017 10:19 AM
jwoodford 35 Disc 30 3/14/2017 10:42 AM
mozard rdp-tcp
#8 36 Active . 3/14/2017 11:08 AM
gmarsh rdp-tcp
#6 37 Active 48 3/14/2017 10:56 AM
mking 38 Disc 27
mcolgan 39 Disc . 3/14/2017 11:16 AM
jbelgiovane rdp-tcp
#12 41 Active 47 3/14/2017 11:33 AM
ndrabsch rdp-tcp
#3 42 Active . 3/14/2017 11:57 AM
alawton 43 Disc 11 3/14/2017 12:02 PM
|
这样子就可以很容易的进一步处理了，同样的思路也可以用在其他的cmd命令上。
本文转自 beanxyz 51CTO博客，原文链接：http://blog.51cto.com/beanxyz/1906162，如需转载请自行联系原作者
