Get members of several AD groups

spiceuser-zf1zb · 2022-01-04T06:25:52.000Z

Hi!

I have a list of about 100 AD security groups that I need to export Members info from.

For each group I would like to export Persons in that group and their organization (Also if possible if they are active or not).

Is there a way to make a powershell script that takes a excel list of the security groups names all at once and export it to a csv file wich would look something like this:

Group 1:

Person 1 - Organization (Active)

Person 2 - Organization (Inactive)

Group 2:

Person 1 - Organization (Inactive)

Person 2 - Organization (Active)

I don’t wanna have to do a Get-ADGroupMember -identity “GROUP” | select name 100 times.

Does anyone have a clue how to do this? Whats the best way to resolve this?

Best regards

Neally · 2022-01-04T06:51:04.000Z

spiceuser-zf1zb:

yes, however, CSV is better.

For Excel, look into ImportExcel

spiceuser-zf1zb:

Group 1:

Person 1 - Organization (Active)

Person 2 - Organization (Inactive)

the group cmdlets do not know about if a user is ‘active’ or not, so you have to pipe that to ‘get-aduser’ to get that info.

Neally · 2022-01-04T06:53:10.000Z

spiceuser-zf1zb:

would look something like this:

Group 1:

Person 1 - Organization (Active)

Person 2 - Organization (Inactive)

this is not a common format, also what is organization? an AD value? domain name?

spiceuser-zf1zb · 2022-01-04T06:56:33.000Z

Hi!

Yeah it doesn’t have to be excel. Il use a csv file then. Thanks!

The inactive/active part is not really that important so il skip that

Any tips on how I could build the script (Still a noob at powershell)

best regards

Neally · 2022-01-04T07:03:41.000Z

spiceuser-zf1zb:

Any tips on how I could build the script

sure, what have you tried?

load CSV (import-csv)
foreach loop (foreach($item in $collection){})
3.get-adgroupmember (be aware of its limitations)

give it a try, we’re happy to help but not a script writing service, if you get stuck, post the code you have tried

If you post code, please use the ‘Insert Code’ button. Please and thank you!

PLEASE READ BEFORE POSTING! Read if you're new to the PowerShell forum! Programming & Development

Hi, and welcome to the PowerShell forum! Don’t apologize for being a “noob” or “newbie” or “n00b.” There’s just no need – nobody will think you’re stupid, and the forums are all about asking questions. Just ask! Use a descriptive subject. Don't say "Need help" or "PowerShell Help", actually summarize what the problem is. It helps the rest of us keep track of which problem is which. Don’t post massive scripts. We’re all volunteers and we don’t have time to read all that, nor will we copy, past…

192033ab-bb8f-4032-88a5-8e2313af0344-codebutton_small.png

Neally · 2022-01-04T07:06:37.000Z

e.g.

# Import from CSV
# Assuming your CSV has a  'GroupName' header
 $csv = import-csv "c:\temp\input.csv"

$report = 
foreach ($group in $csv.groupname){
    Get-ADGroupMember $group -Recursive |
    foreach{
        $ADU = Get-ADuser $_
        [pscustomobject]@{
            GroupName = $group
            Member    = $adu.name
            Status    = if($adu.enabled){"Active"}else{"Inactive"}
        }
    }
}

$report |
Export-Csv "c:\temp\GroupReport.csv" -NoTypeInformation

spiceuser-zf1zb · 2022-01-04T07:29:01.000Z

Hi!

So my current code is this:

$groups = Get-Content C:\file.txt

$results = foreach ($group in $groups) {
Get-ADGroupMeber $group | Get-ADuser -Properties Name,Company | Select Name,Company

$results | export-csv C:\result.csv -NotypeInformation

spiceuser-zf1zb · 2022-01-04T07:47:47.000Z

What I dont know how to do is to structure the info better. Now it just lists the users and companies in a row.

Need to figure out how split up the results per security group (and add in the group name in results)

spiceuser-zf1zb · 2022-01-04T08:03:08.000Z

I managed to get it to work with this:

$groups = Get-Content C:\file.txt

$results = foreach ($group in $groups) {
Get-ADGroupMeber $group | Get-ADuser -Properties Name,Company | Select @{n='GroupName';e={$group}},Name,Company

$results | export-csv C:\result.csv -NotypeInformation

Best regards

Neally · 2022-01-04T14:14:58.000Z

see, you got it figured out. what you posted however has typo and syntax errors.

$groups = Get-Content "C:\file.txt"

$results = foreach ($group in $groups) {
    Get-ADGroupMember $group | 
    Get-ADuser -Properties Name,Company | 
    select @{n='GroupName';e={$group}},Name,Company
}

$results |
export-csv "C:\result.csv" -NotypeInformation

spiceuser-zf1zb · 2022-01-05T06:25:04.000Z

Hi!

Oh, yeah I copied it by hand from one screen to another so must have missed some. Thanks for fixing it for others

Best regards