Export user from gmail into active directory

victorkeitany2 · 2017-07-04T10:48:04.000Z

i’m currently setting up and AD server and we have about 400+ users, is there a way i can export the users from google since we are currently using google apps

@Google

dbeato · 2017-07-04T11:11:08.000Z

You can use the following: How to Export Google Apps Users to CSV and LDAP Export to CSV or sync with your AD/LDAP

cweb · 2017-07-04T11:17:48.000Z

Yes you can export the users from the google admin console to a CSV Then you can use the CSV and manipulate the data to create your ADusers from it using a 3rd party tool or powershell. There currently is not a google apps->ad sync that I am aware of, you can sync your google apps FROM AD for future users. I use my AD as my authoritative directory for creating and managing users/groups

dbeato · 2017-07-04T11:22:52.000Z

Cweb:

Yes you can export the users from the google admin console to a CSV Then you can use the CSV and manipulate the data to create your ADusers from it using a 3rd party tool or powershell. There currently is not a google apps->ad sync that I am aware of, you can sync your google apps FROM AD for future users. I use my AD as my authoritative directory for creating and managing users/groups

@cweb This is the tool I use for Google and AD sync

support.google.com

About Google Cloud Directory Sync - Google Workspace Admin Help

With Google Cloud Directory Sync (GCDS), you can synchronize the data in your Google Account with your Microsoft Active Directory or LDAP server. GCDS doesn't migrate any content (such as em

cweb · 2017-07-04T11:44:39.000Z

GCDS is a one way sync from AD/LDAP to google it does not sync data back TO the AD or LDAP server.

“The data in your LDAP directory server is never modified or compromised. GCDS is a secure tool that helps you easily keep track of users and groups.”
Your users already exist on google. I would suggest the following.

export users from google
add your email domain as a valid UPN for your AD Add User Principal Name Suffixes | Microsoft Learn
create users and ensure their userprincipalname is the same as their email address. (Powershell)
make sure all users have their email address field populated with their current email address. (Powershell)
configure google password sync on all your DCs. 1. Get ready to use Password Sync - Google Workspace Admin Help
configure GCDS you can “run” it unlimited times in simulation mode. It should update all the existing users with a new “secret key” and nothing else at this point.
going forward you create users in AD and let them sync to google. You tell people they can use the same username and password to log onto their machines and email (may not be allowed due to security standards in your industry but if you can I recommend this for easier life for end users and less sticky notes). Also using the password sync forces the email passwords to update ever ____ days.
If you run into any additional hiccups or need some help feel free to PM me.

cweb · 2017-07-04T11:46:22.000Z

Welcome to the community keitanyv

jitensh · 2017-07-04T17:39:48.000Z

after you followed Cweb’s instructions and have a CSV list of users with firstname.,lastname,email
use my script to create all the users at once
https://community.spiceworks.com/scripts/show/3682-bulk-create-active-directory-users-powershell-with-logs-less-rows-in-csv

<#
#**************************************************BULK AD User Creation By Allenage.com*****************************************#
 version 0.1
 Just add fisrtname, lastname,email in the csv and place on C:\ as users.csv 

 Other changes

 $OU="CN=users, DC=Domain,DC=COM"   change OU path as desired.

Here are examples of samaccountname or username comment out rest which does'nt suit your organistation and keep the required one.

$SAM = $user.FirstName.Substring(0,1) + $user.LastName #example John snow will be Jsnow
    #$Sam=$User.FirstName+$User.LastName example john snow will be Johnsnow
    #$Sam=$User.FirstName example john snow will be John
    #$Sam=$User.firstName + "." + $User.lastName example john snow will be John.snow
    #$Sam=$user.Lastname+$user.Firstname.Substring(0,1)) example john snow will be sjohn

#>
Import-module activedirectory
$Users=Import-csv c:\users.csv
$a=1;
$b=1;
$failedUsers = @()
$usersAlreadyExist =@()
$successUsers = @()
$VerbosePreference = "Continue"
$LogFolder = "$env:userprofile\desktop\logs"
ForEach($User in $Users)
{
 $User.FirstName = $User.FirstName.substring(0,1).toupper()+$User.FirstName.substring(1).tolower()
   $User.LastName = $User.LastName.substring(0,1).toupper()+$User.LastName.substring(1).tolower()
   $FullName = $User.FirstName + " " + $User.LastName
   $SAM = $user.FirstName.Substring(0,1) + $user.LastName #example John snow will be Jsnow
    #$Sam=$User.FirstName+$User.LastName example john snow will be Johnsnow
    #$Sam=$User.FirstName example john snow will be John
    #$Sam= $User.firstName + "." + $User.lastName example john snow will be John.snow
    #$Sam=$user.Lastname+$user.Firstname.Substring(0,1)) example john snow will be sjohn
 
   $SAM=$sam.tolower()
   $UPN = $SAM + "@domain.com" # domain.com set your public domain
   $OU="CN=users, DC=Domain,DC=COM"
   $email=$User.email

try {
    if (!(get-aduser -Filter {samaccountname -eq "$SAM"})){
        New-ADUser -Name $FullName -AccountPassword (ConvertTo-SecureString “Password!1234” -AsPlainText -force) -GivenName $User.FirstName  -Path $OU -SamAccountName $SAM -Surname $User.LastName  -UserPrincipalName $UPN -EmailAddress $Email -Enabled $TRUE
        Write-Verbose "[PASS] Created $FullName"
        $successUsers += $FullName
    }
   
}
catch {
    Write-Warning "[ERROR]Can't create user [$($FullName)] : $_"
    $failedUsers += $FullName
}
}
if ( !(test-path $LogFolder)) {
    Write-Verbose "Folder [$($LogFolder)] does not exist, creating"
    new-item $LogFolder -type directory -Force 
}

Write-verbose "Writing logs"
$failedUsers |ForEach-Object {"$($b).) $($_)"; $b++} | out-file -FilePath  $LogFolder\FailedUsers.log -Force -Verbose
$successUsers | ForEach-Object {"$($a).) $($_)"; $a++} |out-file -FilePath  $LogFolder\successUsers.log -Force -Verbose

victorkeitany2 · 2017-07-12T05:28:30.000Z

AD_ERROR.png800×600 199 KB

This is what i’m getting. I have the excel file with the (firstname, lastname, email and password columns and i saved it as users.csv

cweb · 2017-07-13T11:19:07.000Z

keitanyv:

This is what i’m getting. I have the excel file with the (firstname, lastname, email and password columns and i saved it as users.csv

Generally you edit the powershell script in the powershell ISE or notepad to change your variables and then run the script.

itprotoday.com

ITPro Today: IT News, How-Tos, Trends, Case Studies, Career Tips, More

IT Pro Today Homepage

If you want help with the script and powershell I encourage you to make a new topic under the powershell forum:

https://community.spiceworks.com/programming/powershell

Be sure to read

PLEASE READ BEFORE POSTING! Read if you're new to the PowerShell forum! Programming & Development

Hi, and welcome to the PowerShell forum! Don’t apologize for being a “noob” or “newbie” or “n00b.” There’s just no need – nobody will think you’re stupid, and the forums are all about asking questions. Just ask! Use a descriptive subject. Don’t say “Need help” or “PowerShell Help”, actually summarize what the problem is. It helps the rest of us keep track of which problem is which. Don’t post massive scripts. We’re all volunteers and we don’t have time to read all that, nor will we copy…