Modify AD groups in bulk using PowerShell script

Question

Modify AD groups in bulk using PowerShell script

irfan Sayed 1

$Groups = Import-CSV -path "C:\users\Name$\Temp\Grouptest.csv"
ForEach ($Object in $Groups)
{
$OldName = $Object.OldName
$NewName = $Object.NewName
Get-ADGroup $OldName | Rename-ADObject -NewName $NewName

Using above command I can can change group name, but not getting clue to change other attributes like SamaccontName, Proxyaddress, Emailaddress

4 answers

Your answer

Answer 1

Hi,

You can set the properties using the Set-ADGroup cmdlet.

Get-ADGroup $OldName | Set-ADGroup -Replace @{SamAccountName=$newAccountName; proxyAddresses=$newProxyAddresses; mail=$newmail }

https://learn.microsoft.com/en-us/powershell/module/activedirectory/set-adgroup

Best Regards,
Ian Xue

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

irfan Sayed 1

Thx, since i ave to do for bulk of groups so the csv file i ave to create in te form of oldname, NewSamAccountName, Newproxyaddresses? Or sometingelse

Answer 3

irfan Sayed 1

Let me know if the below scrip will help

$Groups = Import-CSV -path "C:\users\Name$\Temp\Grouptest.csv"
ForEach ($Object in $Groups)

$OldName = $Object.OldName
$SamAccountName = $Object.SamAccountName
$ProxyAddresses = $Object.ProxyAddresses
Get-ADGroup $OldName $SamAccountName $ProxyAddresses | Set-ADGroup -Replace @{SamAccountName=$newAccountName; proxyAddresses=$newProxyAddresses; mail=$newmail }

Answer 4

Anonymous

Hi,

If you add the new columns with the headers "SamAccountName", "proxyAddresses" and "mail" to the csv file you can do it like this

$Groups = Import-CSV -path "C:\users\Name$\Temp\Grouptest.csv"  
ForEach ($Object in $Groups)  
{  
    $OldName = $Object.OldName  
    $NewName = $Object.NewName  
    Get-ADGroup $OldName | Set-ADGroup -Replace @{SamAccountName=$Object.SamAccountName;proxyAddresses=$Object.proxyAddresses;mail=$Object.mail}  
    Get-ADGroup $OldName | Rename-ADObject -NewName $NewName  
 }

Best Regards,
Ian Xue

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Toldor 1 Reputation point

2022-04-05T19:59:32.503+00:00

In writing up a similar script I found this thread. I needed to make one adjustment to the good information IanXue-MSFT noted here. On line 7, I needed to search by the $NewName, as the object could no longer be found under the $OldName, as at that point the object could no longer be found since it was renamed. Prior to that step, I also added Start-Sleep -s 5 just to ensure there was enough of a processing delay to find it under the new name.
Rich Matheisen 47,901 Reputation points

2022-04-05T21:08:17.547+00:00

If you have multiple domain controllers that's not uncommon because each cmdlet may select a different DC to operate on. Because replication isn't instantaneous different DCs may know the object by it's "old" distinguished/common name. The way to deal with that is to select a single DC at the beginning of the script and add the "-Server" parameter to each cmdlet using that DC name as the value. As long as they all use the same DC you avoid the replication delays.
J-Smith 1 Reputation point

2022-06-15T21:34:27.17+00:00

I ran into the same error. I'm new to Powershell. How did you adjust line 7 to make this work? I was able to successfully rename the AD group name, the pre-windows 2000 name, the mail address, and the mail nickname with my command, but the displayName (SamAccountName) didn't change.

Here's my script:

$Groups = Import-CSV -path "C:\users\UserID\GroupNameChange.csv"
ForEach ($Object in $Groups)
{
$OldName = $Object.OldName
$NewName = $Object.NewName
Set-ADGroup -Replace @{SamAccountName=$Object.SamAccountName;mail=$Object.mail;mailnickname=$Object.mailnickname}
Get-ADGroup $OldName | Rename-ADObject -NewName $NewName
}

I've got CSV columns for: OldName, NewName, SamAccountName, Mail, and MailNickname. Everything changes properly except the SamAccountName (displayName).
Newbie Jones 1,386 Reputation points

2022-06-16T09:01:07.357+00:00

Aren't your groups and SamAccountNames the same? Do you need a separate SamAccountName field in your CSV file?

Set-ADGroup -Replace @{SamAccountName=$Object.NewName;mail=$Object.mail;mailnickname=$Object.mailnickname}

The code itself is fairly standard and looks correct. So I suspect the problem is with the data in your CSV. Perhaps the field name is spelt incorrectly.

You can try testing this by running the Set-ADGroup command with a single line to ensure you are comfortable and that its working properly.
Brian Bakker 1 Reputation point

2022-10-11T15:41:11.697+00:00

For line 7, I had to add this to get it to work.

Get-ADGroup -filter * | where -property name -eq $OldName | Rename-ADObject -newName $NewName

It seems to conflict when the rename of the SamAccountName is done and then tries to rename the display name. It is not able to find the new name. I had to specify the old display name and then rename it to the correct display name.

Share via

Modify AD groups in bulk using PowerShell script

4 answers

Your answer