AD Groups Powershell

Question

AD Groups Powershell

Eric Orosz 61

I would like to pull a list of user groups using the following code(Get-ADPrincipalGroupMembership 'username' | select -expand name | sort) | format-table -Property name then out-file it to a .txt file but before doing that I would also like to pull out the groups from the same list that start with 'DMS' in the name in a different .txt or the same one in as a two column format if possible.

Accepted answer

1 additional answer

Your answer

Answer 1

Rich Matheisen 47,856

In simpler terms, you want a list of all the groups in which a user ("username") is a member. Is that right? Then put those names into two files, one for all groups whose name begins with "DMS" and another one for all groups show names don't begin with "DMS". Is that also right?

Something like this might be what you want (NOTE: I haven't run this!):

$dms = @()
$username = 'xyz'
$dmsfile = c:\junk\dmsgroups.txt
$nondmsfile = c:\junk\nondmsgroups.txt

Get-ADPrincipalGroupMembership -Identity $username |
    Select-Object -Property name |
        Sort-Object |
            ForEach-Object{
                if ($_.name -like 'DMS*'){
                    $dms += $_.name
                }
                else{
                    $_.name
                }
            } | Out-File $nondmsfile
$dms | Out-File $dmsfile

Eric Orosz 61 Reputation points

2021-08-04T00:23:16.503+00:00

The script works but just curious is there a to get the .txt to autoname as the username
Rich Matheisen 47,856 Reputation points

2021-08-04T18:42:40.32+00:00
Hmmm . . . I thought I answered this but I don't see my reply! Let's try again. :-)

You can change lines 3 and 4 in my example to something like this:

$dmsfile = c:\junk\$username-dmsgroups.txt $nondmsfile = c:\junk\$username-nondmsgroups.txt
Eric Orosz 61 Reputation points

2021-08-05T15:11:25.477+00:00

The $username-filename.txt works great but for some reason the groups are not sorted alphabetically in the out-files. What would I change in the code to achieve this and getting "Select -expand Name | sort) -join '; '" I tried adding the -descending after Sort-Object but that didn't work.
`$dms = @()
$username = ''
$dmsfile = "\servername\tech\IT Administration\User Administration\NewUserForms\NewUserADGroups\$username-dmsgroups.txt"
$nondmsfile = "\servername\tech\IT Administration\User Administration\NewUserForms\NewUserADGroups\$username-nondmsgroups.txt"

Get-ADPrincipalGroupMembership -Identity $username |
Select-Object -Property name |
Sort-Object -Descending |
ForEach-Object{
if ($.name -like 'DMS*'){
$dms += $.name
}
else{
$_.name
}
} | Out-File $nondmsfile
$dms | Out-File $dmsfile`
Eric Orosz 61 Reputation points

2021-08-05T15:30:38.273+00:00
I figured out the sorting by adding the "Sort-object -Property name, name" but how or where would I add the -join '; ' so the groups are separated by a semicolon

$dms = @()
$username = ''
$dmsfile = "\servername\tech\IT Administration\User Administration\NewUserForms\NewUserADGroups\$username-dmsgroups.txt"
$nondmsfile = "\servername\tech\IT Administration\User Administration\NewUserForms\NewUserADGroups\$username-nondmsgroups.txt"

Get-ADPrincipalGroupMembership -Identity $username | Select-Object -Property name | Sort-Object -Property name, name | ForEach-Object{ if ($_.name -like 'DMS*'){ $dms += $_.name } else{ $_.name } } | Out-File $nondmsfile $dms | Out-File $dmsfile

Rich Matheisen 47,856

If you want the elements of the two lists to be output (to separate files) on a single line, joined by semicolons:

$dms = @()
$nondms = @()
$username = 'xyz'
$dmsfile = c:\junk\$username-dmsgroups.txt
$nondmsfile = c:\junk\$username-nondmsgroups.txt

Get-ADPrincipalGroupMembership -Identity $username |
    Select-Object -Property name |
        Sort-Object name |
            ForEach-Object{
                if ($_.name -like 'DMS*'){
                    $dms += $_.name
                }
                else{
                    $nondms += $_.name
                }
            }
$nondms -join ';' | Out-File $nondmsfile
$dms    -join ';' | Out-File $dmsfile

Eric Orosz 61 Reputation points

2021-08-05T18:46:43.093+00:00

I tried this for the last two lines but kept getting errors but didn't realize that I needed to add the extra variables to get the array to work. ugh. I am slowly picking up on this stuff. Thanks for all your help.

Rich Matheisen 47,856

If you want the data in a single file, with two columns, you can try this:

$username = 'xyz'
$thefile = c:\junk\$username-groups.txt

$nondms = @()
$dms = @()    
Get-ADPrincipalGroupMembership -Identity $username |
    Select-Object -Property name |
        Sort-Object name |
            ForEach-Object{
                if ($_.name -like 'DMS*'){
                    $dms += $_.name
                }
                else{
                    $nondms += $_.name
                }
            }

$max = $dms.count
if ($nondms.count -gt $max){
    $max = $nondms.count
}
$max--
0..$max |
    ForEach-Object{
        $left = ""
        $right = ""
        if ($_ -lt $nondms.count){
            $left = $nondms[$_]
        }
        if ($_ -lt $dms.count){
            $right = $dms[$_]
        }
        [PSCustomObject]@{
            NonDMS = $left
            DMS    = $right
        }
    } | Export-Csv $thefile -NoTypeInformation

Rich Matheisen 47,856 Reputation points

2021-08-05T19:49:32.18+00:00

Go download this: Windows-PowerShell-4

Read at least the 1st half of the book. Work through the 2nd half to learn more. Ignore the references to how great Sapien products are. :-)

It's about PowerShell 4, but the information in the book is pertinent to everything in PowerShell version 5 (with the occasional minor difference). You'll learn a lot.

Answer 2

Eric Orosz 61

I had another question when creating a new user account in AD for the home folder creation is there a powershell script that I could run that after it creates the new user folder on the lets say H drive where it creates a subfolder in any new user folder called Recover?

Rich Matheisen 47,856 Reputation points

2021-08-04T01:48:38.473+00:00

If you've scripted the creation of the new user(s) you can create the folder and the subfolder yourself.

In any case, that's a completely different topic and you should ask about it in a new post with an appropriate subject.

If the script answered your question, mark it as "answered".

Share via

AD Groups Powershell

1 additional answer

Your answer