Powershell Command to export information in Active Directory User Properties

Question

We have a system that imports the users manager into an attribute called ExtentionAttribute2 field in the users properties field. What we are looking to do is locate a command that can be ran in powershell that will take the data found in the above field and place it into the manager field under organization tab. I was wondering if you can provide a command that will allow us to run it on an entire object in active directory which contains several sites at our business.

Thank you,
Mike

Answer 1

It might be as simple as this:

Get-MailUser -ResultSize Unlimited |  
    if ($_.ExtensionAttribute2){  
        $mgr = $_.ExtensionAttribute2  
        $_ | Set-User -Manager $mgr  
    }  

You don't say how the manager is represented in ExtensionAttribute2, though. If the value isn't acceptable for use in the Set-User cmdlet you might have to locate the manger's user (or contact) object in the AD and use, say, its distinguishedName instead of the value found in ExtensionAttribute2.

Answer 2

Wouldnt it be Get-ADuser since the changes would be made from Active Director User accounts?

Answer 3

You can use something like this for get the propertie value and save in a enviroment variable:

$temp_ea2value=Get-ADUser -Identity [User Name Pattern] -Properties ExtensionAttribute2 | Select-Object -ExpandProperty ExtensionAttribute2  

And then set it using :

Set-ADUser -Identity [User Name Pattern] -Department $temp_ea2value