AD用户移除所属组:$Membership = Get-ADPrincipalGroupMembership $Users $Membership.distinguishedName Remove-ADPrincipalGroupMembership -identity $Users -MemberOf $Membership.distinguishedName -confirm:$False