Export users & if they are a member of group

buhy · 2021-09-10T16:01:06.000Z

Hi,

I need to do a script that will export me enabled users from specific OU and specific value of attribute Company (with some other attributes) and all groups beginning with name “A_ACC*” and if the user is a member of a group or no.

It should look like this:

GivenName	Surname	DisplayName	Company	Department	SamAccountName	PhysicalDeliveryOfficeName	‘GroupName1’	‘GroupName1’	‘GroupName3’	ETC…
GivenName1	Surname1	DisplayName1	Company1	Department1	SamAccountName1	PhysicalDeliveryOfficeName1	YES	YES	NO	NO
GivenName2	Surname2	DisplayName2	Company2	Department2	SamAccountName2	PhysicalDeliveryOfficeName2	NO	YES	NO
GivenName3	Surname3	DisplayName3	Company3	Department3	SamAccountName3	PhysicalDeliveryOfficeName3	NO	NO	YES
ETC…	ETC…

For now I am working with this:

Get-ADUser -Filter {Company -eq "xxxx"} -SearchBase “yyyyy” -Properties GivenName, Surname, DisplayName, Company, Department, memberof, SamAccountName, PhysicalDeliveryOfficeName | Where {($_.Enabled -eq $True)} | % {
  New-Object PSObject -Property @{
    SamAccountName= $_.SamAccountName
    GivenName = $_.GivenName
    Surname=$_.Surname
    DisplayName = $_.DisplayName
    Company=$_.Company
    Department = $_.Department
    Location = $_.PhysicalDeliveryOfficeName
    Groups = ($_.memberof | Get-ADGroup | Where Name -like "A_ACC*" | Select -ExpandProperty Name) -join ", "
  }
} | Select GivenName, Surname, DisplayName, Company, Department, Location, Groups | Export-Csv -Path 'H:\My Documents\PowerShell_exports\Users_export.csv' -NoTypeInformation -Encoding UTF8

But unfortunately I do not know how to proceed further to get result I want.

Can you please advise?

Thank you!

Neally · 2021-09-10T16:03:49.000Z

Welcome

If you post code, please use the ‘Insert Code’ button. Please and thank you!

PLEASE READ BEFORE POSTING! Read if you're new to the PowerShell forum! Programming & Development

Hi, and welcome to the PowerShell forum! Don’t apologize for being a “noob” or “newbie” or “n00b.” There’s just no need – nobody will think you’re stupid, and the forums are all about asking questions. Just ask! Use a descriptive subject. Don’t say “Need help” or “PowerShell Help”, actually summarize what the problem is. It helps the rest of us keep track of which problem is which. Don’t post massive scripts. We’re all volunteers and we don’t have time to read all that, nor will we copy…

192033ab-bb8f-4032-88a5-8e2313af0344-codebutton_small.png

Neally Bot

andytechacct · 2021-09-10T16:09:45.000Z

try this, it will get everyone in a security group. you could probably just add -searchbase to it with the path to OU and -searchscope for how far deep it goes.

#gets all AD users in a security group (specified by -identity) then exports to a CSV
Get-ADGroupMember -Identity groupname | Select SamAccountName | Export-Csv "C:\users\user\desktop\Users_in_Group.csv" -NoTypeInformation

Neally · 2021-09-10T16:15:53.000Z

AndyTechAcct:

try this, it will get everyone in a security group. you could probably just add -searchbase to it with the path to OU and -searchscope for how far deep it goes.
#gets all AD users in a security group (specified by -identity) then exports to a CSV
Get-ADGroupMember -Identity groupname | Select SamAccountName | Export-Csv "C:\users\user\desktop\Users_in_Group.csv" -NoTypeInformation

The problem with this is

it needs ‘-recurse’
‘get-adgroupmember’ is limited by ADWS settings and can only return a limited amount of number, if you have a small AD, no problem, large though, ‘get-adgroup’ might be a better way, albeit more cumbersome.

buhy · 2021-09-10T16:19:05.000Z

AndyTechAcct:

try this, it will get everyone in a security group. you could probably just add -searchbase to it with the path to OU and -searchscope for how far deep it goes.
#gets all AD users in a security group (specified by -identity) then exports to a CSV
Get-ADGroupMember -Identity groupname | Select SamAccountName | Export-Csv "C:\users\user\desktop\Users_in_Group.csv" -NoTypeInformation

Hi AndyTechAcct,

thank you for your answer, but if you look to my question, this is not what I need.

I need table like I wrote. This will only give me all users of one group.

I need all users and all groups and if they are member of it.

buhy · 2021-09-10T16:19:59.000Z

Neally:

Welcome

If you post code, please use the ‘Insert Code’ button. Please and thank you!

PLEASE READ BEFORE POSTING! Read if you're new to the PowerShell forum!

Neally Bot

Sorry I edited it immediately after posting.

buhy · 2021-09-13T10:14:38.000Z

It is resolved. Guy on StackOverflow helped me with the solution.

If somebody is interested:

$params = @{
    Filter     = { Company -eq 'xxxx' } 
    SearchBase = 'yyyyy' 
    Properties = @(
        'DisplayName' 
        'Company', 
        'Department', 
        'memberof', 
        'PhysicalDeliveryOfficeName'
    )
}

# List groups to check for which will be added as columns
$groupsToCheckFor = 'A_ACC_Group1', 'A_ACC_Group2', 'A_ACC_Group3'

Get-ADUser @params | Where-Object { ($_.Enabled -eq $True) } | ForEach-Object {
    $object = [pscustomobject][ordered]@{
        GivenName      = $_.GivenName
        Surname        = $_.Surname
        DisplayName    = $_.DisplayName
        Company        = $_.Company
        Department     = $_.Department
        SamAccountName = $_.SamAccountName
        Location       = $_.PhysicalDeliveryOfficeName
    }

    $groups = ($_.memberof | Get-ADGroup | Where-Object Name -Like 'A_ACC*' | Select-Object -ExpandProperty Name) 
    $groupsToCheckFor | ForEach-Object {
        # add property for each group being checked for
        # value is true if group is found in users' groups
        $object | Add-Member -NotePropertyName $_ -NotePropertyValue ($_ -in $groups)
    }

    # output object
    $object

} | Export-Csv -Path 'H:\My Documents\PowerShell_exports\Users_export.csv' -NoTypeInformation -Encoding UTF8