How can I optimize this script?

Question

What I don't like about this script:
1) It has to be run multiple times to process multiple staff. I'd prefer if I could input multiple employee numbers at once
2) It takes so long to search for the user. If I use the script, it can currently take 30s to find the employee. When I use ADUC to run the "(&(objectCategory=user)(objectClass=user)(employeeID=17688))" search, the results are immediate.
3) I'd like it to look through all the chosen employee numbers before replicating the domain.
4) The end of the powershell script calls a batch file because the syntax in the batch file didn't work in powershell. Can the batch file commands be included directly in the powershells script?
5) The batch file references all of our DC's to minimize replication latency. Can it be simplified while ensuring all DC's are hit ASAP?
Here is the powershell script:
#Disable User# Add the Quest ActiveRoles Management Shell snap-in to recognize extended commands
Add-PSSnapin Quest.ActiveRoles.ADManagement
# Take first commandline argument which is the employeeID and assign it to the $empID variable
$empID=$Args[0]
# Search for the EmployeeID and find the matching NTAccountName (NBDomain\*) [This takes about 30 seconds for 1400 users]
Write-Host "Searching for the User which matches Employee ID $EmpID, you have about 30 seconds to press Ctrl-C to cancel..."
$user = get-qaduser -includedproperties employeeID,samaccountname -sizelimit 0 | where {$_.employeeID -eq $empID}
# Find the matching SAMAccountname
$samaccountname = $user.samaccountname
# Find the matching DN
$SourceDN = $user.dn
# Set where the disabled account will be moved
$DestDN = "OU=Disabled Accounts,DC=domain,DC=Com"
# Set recipient limits to 0
set-mailbox -identity $samaccountname -recipientlimits 0
Write-host $User Recipient Limit set to 0.
# Disable all mailbox features except archive
set-casmailbox -identity $samaccountname -owaenabled $false -ewsenabled $false -ecpenabled $false -mapienabled $false -mapiblockoutlookrpchttp $true -ewsallowmacoutlook $false -ewsallowoutlook $false
set-casmailbox -identity $samaccountname -activesyncenabled $false -popenabled $false -imapenabled $false
Write-host $User Exchange features disabled.
# Block all devices associated with the mailbox:
$DeviceIDs = (Get-ActiveSyncDeviceStatistics -Mailbox $SourceDN | foreach { $_.DeviceID } )
Set-CASMailbox -Identity $SourceDN -ActiveSyncBlockedDeviceIDs $DeviceIDs
Write-Host $User All approved devices have been blocked.
# Remove all devices associated with the mailbox:
Set-casmailbox -identity $samaccountname -ActiveSyncAllowedDeviceIDs $null
Write-Host $User All ActiveSync devices removed from mailbox.
#Disable the user
Disable-QADUser $user
Write-Host $user account disabled.
# Move the user to the Disabled OU
Dsmove $SourceDN -newparent $DestDN
Write-Host $User account moved to Disabled OU.
Write-host Finished processing user $User
Write-host ""
Write-host "Replicating the enterprise domain across sites..."
cd "C:\Users\username\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Admin Tools"
.\"Force DC replication.cmd"
cd "c:\scripts"
pause

Answer 1

Here's the script I'm happy with. It's just .\scriptname.ps1 xxxx xxxy xxxz, where the args are employee numbers.
#Disable User
import-module activedirectory
cls
$yes = New-Object System.Management.Automation.Host.ChoiceDescription "&Yes",""
$no = New-Object System.Management.Automation.Host.ChoiceDescription "&No",""
$choices = [System.Management.Automation.Host.ChoiceDescription[]]($yes,$no)
foreach ($empID in $args)
# Search for the EmployeeID and find the matching NTAccountName (domain\*)
$user=get-aduser -properties employeeID,samaccountname -resultsetsize $null -LDAPFilter "(employeeID=$empID)"
$samaccountname = $user.samaccountname
$DN=$user.distinguishedname
$name=$user.name
$caption = "Warning!"
$message = "Do you want to disable " + $name + "?"
$result = $Host.UI.PromptForChoice($caption,$message,$choices,0)
if($result -eq 1) { Write-Host "Skipping to the next name (if available)" }
if($result -eq 1) { continue}
if($result -eq 0) { Write-Host "----------"}
if($result -eq 0) { Write-Host "Processing $name"}
# Set recipient limits to 0
set-mailbox -identity $samAccountName -recipientlimits 0
Write-host "$name Recipient Limit set to 0."
# Disable all mailbox features except archive
set-casmailbox -identity $samaccountname -owaenabled $false -ewsenabled $false -ecpenabled $false -mapienabled $false -mapiblockoutlookrpchttp $true -ewsallowmacoutlook $false -ewsallowoutlook $false
set-casmailbox -identity $samaccountname -activesyncenabled $false -popenabled $false -imapenabled $false
Write-host "$name Exchange features disabled."
# Block all devices associated with the mailbox:
$DeviceIDs = (Get-ActiveSyncDeviceStatistics -Mailbox $dn | foreach { $empID.DeviceID } )
Set-CASMailbox -Identity $DN -ActiveSyncBlockedDeviceIDs $DeviceIDs
Write-Host "$name All approved devices have been blocked."
# Remove all devices associated with the mailbox:
Set-casmailbox -identity $samAccountName -ActiveSyncAllowedDeviceIDs $null
Write-Host "$name All ActiveSync devices removed from mailbox."
#Disable the user
set-aduser $samAccountname -Enabled $false
Write-Host "$name account disabled."
# Move the user to the Disabled OU
Move-ADObject -TargetPath "OU=Disabled Accounts,DC=domain,DC=Com" -Identity $dn
Write-Host "$name account moved to Disabled OU."
Write-host "Finished processing user $name."
Write-host "----------"
# Recycle the IIS Application Pools to clear the token cache
Write-Host "Recycling IIS Application pools to clear the token cache..."
$pools=Get-WMIObject IISApplicationPool -Namespace root\MicrosoftIISv2 -authentication Packetprivacy -computername cas001
$pools | %{$_.Recycle()}
$pools=Get-WMIObject IISApplicationPool -Namespace root\MicrosoftIISv2 -authentication Packetprivacy -computername cas002
$pools | %{$_.Recycle()}
Write-Host "Client Access IIS Application pools have been recycled."
Write-host ""
Write-host "Replicating the enterprise domain across sites..."
repadmin /syncall dc003.domain.com /APed
repadmin /kcc dc004.domain
repadmin /kcc dc003.domain
repadmin /kcc dc002.domain
repadmin /kcc dc01.domain
Write-Host "Replication requested, script complete."