Sync Users Groups with base on conditions.

stefchul · 2018-04-13T19:44:15.000Z

Hi!

I trie to get users from source group and sync with two other groups base on the first letter of the SamAccountname.

Ex: GroupeSource sync with GroupDestiA and GroupDestiB where GroupDestiA will contain the users from the GroupSource with the SamAccountName start by the letter “a”. And the GroupDestB will contain the users from the GroupSource with the SamAccountName start whit the letter “b”.

I founded on the web this beautifull script two sync two groups:

Param(
[PSObject]$Identity,
[PSObject]$DestinationInt,
[PSObject]$DestinationExt,
[Switch]$Mirror
)
$SourceMembers = Get-ADGroupMember -Identity $Identity | Select-Object -ExpandProperty sAMAccountName
#Get-ADGroupMember -Identity G-SourceTest | Select-Object -ExpandProperty sAMAccountName

$TargetMembers = Get-ADGroupMember -Identity $Destination | Select-Object -ExpandProperty sAMAccountName

$DifferenceMembers = Compare-Object -ReferenceObject $SourceMembers -DifferenceObject $TargetMembers

$ProcessMembers = $DifferenceMembers | Where-Object {$_.SideIndicator -eq ‘<=’} | Select-Object -ExpandProperty InputObject

If ($ProcessMembers -and $PSCmdlet.ShouldProcess($Destination, “Add objects:rnt$($ProcessMembers -join "rnt”)rn")) {
Add-ADGroupMember -Identity $Destination -Members $ProcessMembers
}
If ($Mirror) {
$ProcessMembers = $DifferenceMembers | Where-Object {$_.SideIndicator -eq ‘=>’} | Select-Object -ExpandProperty InputObject
If ($ProcessMembers -and $PSCmdlet.ShouldProcess($Destination, “Remove objects:rnt$($ProcessMembers -join "rnt”)rn")) {
Remove-ADGroupMember -Identity $Destination -Members $ProcessMembers
}
}

But my need is to slip the two Destination Group.

Somebody can help me?

Tx.

Neally · 2018-04-13T19:47:30.000Z

Welcome!

If you post code, please use the ‘Insert Code’ button. Please and thank you!

PLEASE READ BEFORE POSTING! Read if you're new to the PowerShell forum! Programming & Development

Hi, and welcome to the PowerShell forum! Don’t apologize for being a “noob” or “newbie” or “n00b.” There’s just no need – nobody will think you’re stupid, and the forums are all about asking questions. Just ask! Use a descriptive subject. Don’t say “Need help” or “PowerShell Help”, actually summarize what the problem is. It helps the rest of us keep track of which problem is which. Don’t post massive scripts. We’re all volunteers and we don’t have time to read all that, nor will we copy…

Neally · 2018-04-13T20:16:12.000Z

stefchul:

Maybe because it’s Friday, or I had not enough coffee or what, but I’m not following.What I read it, you are trying to put AD users based on SamAccountName into groups that correspond with the first letter of the SamAccountName.

e.g. ‘Jane Doe’ has SAM ‘jdoe’ and will end up in group ’ GroupDestiJ’
Now how " GroupeSource sync with GroupDestiA and GroupDestiB " and stuff is involved, I draw a blank? Can you explain a little more?

stefchul:

But my need is to slip the two Destination Group.

huh??

stefchul · 2018-04-16T12:27:50.000Z

Tx to trying understant me need…

Because all the account of our emploes have a SamAccountName start by the letter “a” and all the account of our external staff have a SamAccountName start with the letter “b”.

All the account (employes and external staff) is member of the GroupSource.

I want to slipt in to two groups GroupDestA (for the employes) and GroupDestB (for the external staff).

I will use these two Destination group two applie different rights.

Get-AdGroupMember -Identity G-GroupSource | Select-Object -ExpandProperty SamAccountname

With this command, I list all the members of the G-GroupSource. But now I want to extract only the account where the SamAccountName start by “a”. Someting like:{SamAcountName -like “a*”}

Neally · 2018-04-16T13:39:26.000Z

Ok so that does not work?

get-adgroupmember 'G-GroupSource' | 
where samaccountname -like 'a*' | 
select name, samaccountname