Passing a variable to invoke-expression

Question

hello
can anyone help me to pass a variable to invoke-expression. basically i need to assign deny permission for a group in all domains. look below:
Foreach ($DN in $Domains)
$Group=((Get-ADDomain $DN).Name)+"\Group1"
Get-ADOrganizationalUnit -Filter {name -eq "MY OU"} -Server $DN | % {Invoke-Expression -Command:('dsacls "{0}" /D "$Group":GA' -f $_.Distinguishedname)}
it is part of the code, the rest of it, is ok. i want to send $group1 in invoke-expression command.
thank you.

Answer 1

When you call Invoke-Expression, you're actually launching a completely separate PowerShell.exe process. As such, it will have no visibility of variables that were declared on your 'parent' session, after all, those variables are held in the process memory
of the parent.
The same happens when you're dealing with jobs for example. In fact a Invoke-Expression is very similar to a job in this sense, however Invoke-Expression does not continue until the execution of the expression has completed, whereas the whole point of the
job is to allow you to continue and pick the job up later.
Anyway, enough rambling...
To pass a variable to Invoke-Command, you need to use the -ArgumentList parameter, and then access the variables pass through $args. Here's an example:
Invoke-Command -ScriptBlock {ping $args[0]} -ArgumentList 'localhost'
In your case, your code should look like this:
Foreach ($DN in $Domains)
$Group=((Get-ADDomain $DN).Name)+"\Group1"
Get-ADOrganizationalUnit -Filter {name -eq "MY OU"} -Server $DN | % {Invoke-Expression -Command:('dsacls "{0}" /D "$args[0]":GA' -f $args[1].Distinguishedname)} -ArgumentList $Group, $_