Powershell command to list all users in an OU and user's group membership

Question

Powershell command to list all users in an OU and user's group membership

brichardi 361

Hello Scripting Guru,

I just can't seems to find a way to have powershell to list all users in an OU and the group membership of all each users.

This is my PS command:

Get-ADUser -Filter * -SearchBase 'OU=Admin,OU=Users,DC=contoso,DC=com' -Properties MemberOf |Select-Object SamAccountName, @{n='memberOf';e={$_.memberOf -replace '^CN=([^,]+).+$','$1' }}

And this is the output:

jsmith contoso-Employees O365 A5 Employees Remote FINANCE Accounting All Employees DL-Financial Secretaries DL-Administration - OSP HERT-GLOBAL DL-AdvantageGroup OSP-OFFICE Audit.

How do I change the PS command so it will list user account with membership like below:

SamAccountName Member of
Jsmith contoso-Employees
O365 A5 Employees
FINANCE Accounting
All Employees

Jdoe All Employees
Security Admin
Citrix Admin
Citrix VDI

Thanks for your help

1 answer

Your answer

Answer 1

Michael Taylor 60,161

So you just want to pretty print the output a little. Something like this would work I believe.

   Get-ADUser -Filter * -SearchBase 'OU=Admin,OU=Users,DC=contoso,DC=com' -Properties MemberOf |Select-Object SamAccountName, @{n='memberOf';e={$_.memberOf -replace '^CN=([^,]+).+$','$1' }}  | foreach-object { Write-Host $_.SamAccountName; Format-List -InputObject $_.memberOf; Write-Host ""; }

brichardi 361 Reputation points

2022-09-06T14:51:21.68+00:00

Thanks for provided me with the syntax that I need to list membership of a user on each line, but how do I also displayed other properties such as: "Department, PhysicalDeliveryOfficeName, Title, ScriptPath", etc.

Thanks,
Michael Taylor 60,161 Reputation points

2022-09-06T15:06:48.43+00:00
Honestly I think your formatting is going to run into issues as you try to stuff more and more data into there based upon your current format. PS already knows how to dump objects as a list or table. I would recommend you just display the data as objects. If you need to pick pieces out then using the objects is better. Furthermore you could use foreach to enumerate them and do any child object processing.

But here's an updated query. Add the properties you want to the Get-ADUser call (if available), add to the select-object call and then print them out whereever you want in the foreach.

Get-ADUser -Filter * -SearchBase 'OU=Admin,OU=Users,DC=contoso,DC=com' -Properties MemberOf,Title,Department | foreach-object { Write-Host $_.SamAccountName; Write-Host $_.Department; Write-Host $_.Title; Format-List -InputObject ($_.memberOf -replace '^CN=([^,]+).+$','$1'); }

Note I don't know where some of your AD properties reside so you need to use ADExplorer or something to get the paths and then select the appropriate property names.

Alternatively select the results of Get-AdUser into an object , morph the data you want and then format-list to print it out slightly differently than you had original asked.

Share via

Powershell command to list all users in an OU and user's group membership

1 answer

Your answer