$ouPath = "OU=computer,OU=Citrix,DC=citrixlab,DC=local"
1..100 | ForEach-Object {
    $computerNumber = $_.ToString("000") #此为占位符
    $computerName = "CVAD-$computerNumber"
    New-ADComputer -Name $computerName -Path $ouPath
}

$ouPath = "OU=Citrix,DC=citrixlab,DC=local"
$csvPath = "C:\Path\to\input.csv"
$users = Import-Csv -Path $csvPath
foreach ($user in $users) {
    $userName = $user.UserName
    $password = ConvertTo-SecureString -String $user.Password -AsPlainText -Force

    $userParams = @{
        SamAccountName = $userName
        UserPrincipalName = "$userName@citrixlab.local"
        Name = $userName
        GivenName = $user.FirstName
        Surname = $user.LastName
        DisplayName = $user.DisplayName
        Path = $ouPath
        AccountPassword = $password
        Enabled = $true
    }
    
    New-ADUser @userParams
}

$sourceOU = "OU=Computers,OU=DepartmentA,DC=example,DC=com"
$targetOU = "OU=VDI Computers,OU=DepartmentB,DC=example,DC=com"

$filter = {
    Name -like "VDI*"
}

$computers = Get-ADComputer -Filter $filter -SearchBase $sourceOU

foreach ($computer in $computers) {
    Move-ADObject -Identity $computer -TargetPath $targetOU
}

$ouPath = "OU=Computers,OU=DepartmentA,DC=example,DC=com"

$filter = {
    Enabled -eq $true -and #选择禁用的
    OperatingSystem -like "*Server*" -and #选择是server的系统
    (Search-ADAccount -ComputersOnly -AccountDisabled).Count -eq 0 -and #排除已禁用的计算机
    Description -eq "To be deleted" 
}

$computers = Get-ADComputer -Filter $filter -SearchBase $ouPath

foreach ($computer in $computers) {
    Remove-ADComputer -Identity $computer -Confirm:$false
}

$ouPath = "OU=Users,OU=DepartmentA,DC=example,DC=com"

$filter = {
    Enabled -eq $true -and
    (Search-ADAccount -UsersOnly -AccountDisabled).Count -eq 0 -and
    Description -eq "To be deleted"
}

$users = Get-ADUser -Filter $filter -SearchBase $ouPath

foreach ($user in $users) {
    Remove-ADUser -Identity $user -Confirm:$false -Recursive -Force
}