Powershell to compare AD samAccountName and mailNickname

Question

Powershell to compare AD samAccountName and mailNickname

Eaven HUANG 2,191

Dear All,

I'm looking for a PS script where we can compare the AD users' samAccountName VS mailNickname in some specified OUs. Then if those samAccountname is not the same as mailNickname, replace the mailNickName with samAccountName.

I can get these attribute then export to excel to compare, but can it be done within PS which seems more efficient? I need to know which accounts have these non-matching attributes, before replacing them. So replacing all users' mailNickname with their samAccountName directly, that's not an ideal option.

Any idea would be really appreciated.

Accepted answer

0 additional answers

Your answer

Answer 1

Anonymous

Hi，

Please try the below script.

$OUs="OU=test1,DC=contoso,DC=com","OU=test2,DC=contoso,DC=com"  
foreach ($OU in $OUs) {  
    Get-ADUser -Filter * -SearchBase $OU -Properties mailNickname | Where-Object {$_.SamAccountName -ne $_.mailNickname}  
}

Best Regards,
Ian Xue

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Eaven HUANG 2,191 Reputation points

2021-07-16T13:06:58.34+00:00

Hi Ian,

So I've revised my test script and here it is:

$OUs="MYTESTOU"
foreach ($OU in $OUs) {
Get-ADUser -Filter * -SearchBase $OU -Properties samAccountName,mail,mailNickname,Enabled |
Where-Object {$.Enabled -eq $True -and $.mail -ne $_.mailNickname} | Export-Csv -NoType 'C:\tmp\mail_vs_mailNickname.csv'
}

So basically this serves my purpose. but I'm now wondering that I only specified attributes like samAccountName, mail, mailNickname, Enabled, however I saw many other attributes were also listed.

DistinguishedName
Enabled
GivenName
mail
mailNickname
Name
ObjectClass
ObjectGUID
SamAccountName
SID
Surname
UserPrincipalName

Can I remove those unneeded columns in my script?
Rich Matheisen 47,901 Reputation points

2021-07-16T14:55:51.483+00:00

Pipe the result of Where-Object into a "Select-Object samAccountName, mail, mailNickname, Enabled" and then pipe that into your Export-CSV.

Anonymous

Please use Select-Object to select the needed properties.

$OUs="MYTESTOU"
foreach ($OU in $OUs) {
Get-ADUser -Filter * -SearchBase $OU -Properties mail,mailNickname | 
    Where-Object {$_.Enabled -eq $True -and $_.mail -ne $_.mailNickname} |  
    Select-Object -Property samAccountName,mail,mailNickname,Enabled | 
    Export-Csv -NoType 'C:\tmp\mail_vs_mailNickname.csv'
}

Share via

Powershell to compare AD samAccountName and mailNickname

0 additional answers

Your answer