Outprocessing Customers

hyd3official · 2019-07-15T13:30:31.000Z

Currently this is a script I’ve been working on but trying to finish it hopefully someone can give me an answer on Moving a customers home folder within the Profile tab to a archive destination, as well remove all security groups except for Domain Users & WERW Users. Please anyone help!!

#Imports Module
Import-Module Activedirectory

#Targets Specific OU
$targetou=‘OU=xxxxx,OU=fsfgsgsgs,OU=cccccc,OU=ewewrw,OU=ewrwrwtt,DC=ddd,DC=www,DC=eeqq,DC=twtwt’

#Imports the CSV
$UserList = Import-Csv “C:\Users\xcxcxcxc\Desktop\op.txt”
foreach ($User in $UserList) {
$u = $User.sAMAccountName
$u
$ADUser = Get-ADUser -Filter { sAMAccountName -eq $u } | Select -ExpandProperty DistinguishedName

#Disables the Account
Set-ADUser -Identity $User.sAMAccountName -Enabled $false

#Remove Security Groups
Get-AdPrincipalGroupMembership -Identity $User.sAMAccountName| Where-Object -Property Name -Ne -Value ‘Domain Users’| Remove-AdGroupMember -Members $User.sAMAccountName

#Sets Description
Set-ADUser -Identity $User.sAMAccountName -Description "Outprocessed

#Move Homeshare to archived destination

#Moves the Account to InTransit
Move-ADObject -Identity $ADUser -TargetPath $TargetOU

Pause: Pause 20 seconds for Active Directory to replicate changes

Start-Sleep -s 20
}

Neally · 2019-07-15T13:33:29.000Z

So, what is not working in your script? Do you get an error? Where are you stuck?

If you post code, please use the ‘Insert Code’ button. Please and thank you!

PLEASE READ BEFORE POSTING! Read if you're new to the PowerShell forum! Programming & Development

Hi, and welcome to the PowerShell forum! Don’t apologize for being a “noob” or “newbie” or “n00b.” There’s just no need – nobody will think you’re stupid, and the forums are all about asking questions. Just ask! Use a descriptive subject. Don’t say “Need help” or “PowerShell Help”, actually summarize what the problem is. It helps the rest of us keep track of which problem is which. Don’t post massive scripts. We’re all volunteers and we don’t have time to read all that, nor will we copy…

hyd3official · 2019-07-15T13:47:46.000Z

In a nutshell all I’m doing is Disabling the account, Setting the Description of the account, (Stuck) Trying to remove the Security Groups except Domain Admins, (Stuck) Move Home Folder to Destination, Move Account to another OU.

patrickdeno2 · 2019-07-15T13:57:32.000Z

These are some snippets from my own outprocessing script. Hopefully it’ll give you some ideas.

“Setting the Description of the account, (Stuck)”

$user = Get-ADuser $sam -properties canonicalName, distinguishedName, displayName, mailNickname
$dn = $user.distinguishedName
$cn = $user.canonicalName
$din = $user.displayName
$UserAlias = $user.mailNickname

# Add the OU path where the account originally came from to the description of the account's properties
Set-ADUser $dn -Description ("Moved from: " + $cn + " - on $date")
Write-Host ("* " + $din + "'s Active Directory account path saved.")

“Trying to remove the Security Groups except Domain Admins, (Stuck)” & " Move Account to another OU. "

# Get the list of permissions (group names) and export them to a CSV file for safekeeping
# Neally is a PS badass!
$groupinfo = get-aduser $sam -Properties memberof | select name, 
@{ n="GroupMembership"; e={($_.memberof | foreach{get-adgroup $_}).name}}

$count = 0
$arrlist =  New-Object System.Collections.ArrayList
do{
    $null = $arrlist.add([PSCustomObject]@{
        # Name = $groupinfo.name
        GroupMembership = $groupinfo.GroupMembership[$count]
    })
    $count++
}until($count -eq $groupinfo.GroupMembership.count)

$arrlist | select groupmembership |
convertto-csv -NoTypeInformation |
select -Skip 1 |
out-file $pathFinal
Write-Host ("* " + $din + "'s Active Directory group memberships (permissions) exported and saved to " + $pathFinal)

# Strip the permissions from the account
Get-ADUser $User -Properties MemberOf | Select -Expand MemberOf | %{Remove-ADGroupMember $_ -member $User}
Write-Host ("* " + $din + "'s Active Directory group memberships (permissions) stripped from account")

# Move the account to the Disabled Users OU
Move-ADObject -Identity $dn -TargetPath "Ou=Disabled Users,DC=DOMAIN,DC=COMPANY,DC=com"
Write-Host ("* " + $din + "'s Active Directory account moved to 'Disabled Users' OU")

Yes, there is a shoutout in the comments of one of the lines to Neally because he really is a PS badass. He helped me with that section last year.

hyd3official · 2019-07-15T14:10:08.000Z

@ GhillieHammer,

Really appreciate this script. I am only looking to move the objects Home Folder to another destination.

patrickdeno2 · 2019-07-15T14:21:23.000Z

Hyd3official:

@ GhillieHammer,

Really appreciate this script. I am only looking to move the objects Home Folder to another destination.

Where are your $User folders stored, on a server and you’re trying to move it to another server, or are you trying to move them from a workstation to a server?

patrickdeno2 · 2019-07-15T14:34:55.000Z

Quick and dirty solution that moves the entire folder structure and, at the end, removes any empty folder for cleanliness sake. Assumes server to server.

$SourcePath  = "\\SourceServer\C$\UserFolders\"
$Destination = "\\DestinationServer\D$\DisabledUsersFolder\"

# Look for the destination folder and if it exists
# move the structure. If not, create the destination
# and then do the move.
If (Test-Path $Destination) {

	Get-ChildItem ($SourcePath) | Copy-Item -Destination ($Destination) -Recurse -container -force
	Get-ChildItem ($SourcePath) -Recurse | remove-item

} Else {

	New-item -Path ($Destination) -ItemType directory -force
	Get-ChildItem ($SourcePath) | Copy-Item -Destination ($Destination) -Recurse -container -force
	Get-ChildItem ($SourcePath) -Recurse | remove-item

}

#remove empty folders
dir $Destination -Directory -Recurse | %{ $_.FullName} | sort -Descending | where { !@(ls -force $_) } | rm

The reason for copying first and then removing the old folder is that I have found PowerShell to be be slightly problematic when trying to move an entire folder structure recursively without resorting to RoboCopy or other machinations. This moves everything using strictly easy to understand and implement PS code.

hyd3official · 2019-07-15T14:49:22.000Z

@ GhillieHammer,

I’m trying to accomplish a bulk user script to move a multitude of objects and also home folders. I’m using a .csv/.txt for bulk automation.

patrickdeno2 · 2019-07-15T15:06:22.000Z

Hyd3official:

@ GhillieHammer,

I’m trying to accomplish a bulk user script to move a multitude of objects and also home folders. I’m using a .csv/.txt for bulk automation.

I get that. But, since I don’t know what all info is in “C:\Users\xcxcxcxc\Desktop\op.txt” or what your Home folder structure looks like in each profile (folder redirection being what it is) it’s a bit hard for me to give you exact coding. So, I’m giving you generic command snippets so you can piece it together yourself.

These user home folders, are they stored in a central location on a server? If so, couldn’t you change the above variables to something like:

#Move Homeshare to archived destination
$SourcePath  = "\\SourceServer\C$\UserFolders\$u"
$Destination = "\\DestinationServer\D$\DisabledUsersFolder\$u"

patrickdeno2 · 2019-07-15T15:11:27.000Z

You could then put that move script into your ForEach loop like so:

#Imports the CSV
$UserList = Import-Csv "C:\Users\xcxcxcxc\Desktop\op.txt"
foreach ($User in $UserList) {
$u = $User.sAMAccountName

...

... 

#Move Homeshare to archived destination
$SourcePath  = "\\SourceServer\C$\UserFolders\$u"
$Destination = "\\DestinationServer\D$\DisabledUsersFolder\$u"

# Look for the destination folder and if it exists
# move the structure. If not, create the destination
# and then do the move.
If (Test-Path $Destination) {

	Get-ChildItem ($SourcePath) | Copy-Item -Destination ($Destination) -Recurse -container -force
	Get-ChildItem ($SourcePath) -Recurse | remove-item

} Else {

	New-item -Path ($Destination) -ItemType directory -force
	Get-ChildItem ($SourcePath) | Copy-Item -Destination ($Destination) -Recurse -container -force
	Get-ChildItem ($SourcePath) -Recurse | remove-item

}

#remove empty folders
dir $Destination -Directory -Recurse | %{ $_.FullName} | sort -Descending | where { !@(ls -force $_) } | rm 

...

... 

}

… or perhaps I’m missing something critical? What is it I’m misunderstanding?

hyd3official · 2019-07-15T15:29:19.000Z

OMG Perfect!!! I believe you have the concept spot on!! @Ghillie, Would if we have 2 shares like below how would it be written? Reason being is because we have some objects that are pointing to our old share and all the rest to our new share…

If

$SourcePath = "\Sourceserver\home$u

$SourcePath = "\Sourceserver\home3$u

patrickdeno2 · 2019-07-15T15:36:41.000Z

Hyd3official:

OMG Perfect!!! I believe you have the concept spot on!!

Give it a test and let us know how things go. if it throws an error or something give us the exact error so we can tweak things further, if needed.

Then make sure to mark the question solved once you get the result you need.

patrickdeno2 · 2019-07-15T15:45:29.000Z

Hyd3official:

OMG Perfect!!! I believe you have the concept spot on!! @Ghillie, Would if we have 2 shares like below how would it be written? Reason being is because we have some objects that are pointing to our old share and all the rest to our new share…

If

$SourcePath = "\Sourceserver\home$u

$SourcePath = "\Sourceserver\home3$u

Is that info in your CSV?

patrickdeno2 · 2019-07-15T15:52:55.000Z

If not, then one can use some quick logic to solve the problem. If the user folders can only be in one folder or the other, then we should be able to test for the user folder, itself, in one of the old sources. If the test comes back true, then we pull from that source folder. If not, then it can only be in the other. So, we change the source variable names, do the test, and assign it to the variable we were already using before, like so:

$Path1 =  "\\Sourceserver\home\$u"
$Path2 = "\\Sourceserver\home3\$u"

If (Test-Path $Path1) {

	$SourcePath = $Path1

} Else (

	$SourcePath = $Path2

)

$Destination = "\\DestinationServer\D$\DisabledUsersFolder\"

# Look for the destination folder and if it exists
# move the structure. If not, create the destination
# and then do the move.
If (Test-Path $Destination) {

	Get-ChildItem ($SourcePath) | Copy-Item -Destination ($Destination) -Recurse -container -force
	Get-ChildItem ($SourcePath) -Recurse | remove-item

} Else {

	New-item -Path ($Destination) -ItemType directory -force
	Get-ChildItem ($SourcePath) | Copy-Item -Destination ($Destination) -Recurse -container -force
	Get-ChildItem ($SourcePath) -Recurse | remove-item

}
	
#remove empty folders
dir $Destination -Directory -Recurse | %{ $_.FullName} | sort -Descending | where { !@(ls -force $_) } | rm

hyd3official · 2019-07-15T16:15:44.000Z

Ghillie,

I appreciate you!! I’ll let you know if this works or not.

patrickdeno2 · 2019-07-15T16:23:21.000Z

Hyd3official:

Ghillie,

I appreciate you!! I’ll let you know if this works or not.

Glad to help. Keeping my fingers and toes crossed.

hyd3official · 2019-07-15T17:03:12.000Z

I just want to ensure that this looks right and will point towards the .CSV or .txt file that I have located on my desktop. Below is the final script for:

P.S could I use -WhatIf to test??

#Imports Module

Import-Module Activedirectory

#Targets Specific OU

$targetou=‘OU=xxxx,OU=xxxx,OU=xxxxx,OU=xxxxx,OU=xxx,DC=xxxx,DC=xxxx,DC=xxxx’

#Imports the CSV

$UserList = Import-Csv “C:\Users\xxxxxxx\Desktop\op.txt”

foreach ($User in $UserList) {

$u = $User.sAMAccountName

$u

$ADUser = Get-ADUser -Filter { sAMAccountName -eq $u } | Select -ExpandProperty DistinguishedName

#Disables the Account

Set-ADUser -Identity $User.sAMAccountName -Enabled $false -WhatIf

#Remove Security Groups

Get-AdPrincipalGroupMembership -Identity $User.sAMAccountName| Where-Object -Property Name -Ne -Value ‘Domain Users’| Remove-AdGroupMember -Members $User.sAMAccountName -WhatIf

#Sets Description

Set-ADUser -Identity $User.sAMAccountName -Description “Outprocessed” -WhatIf

#Move Homeshare to archived destination

$Path1 = “\xxxxx2300\home$u”

$Path2 = “\xxxxx2300\home2$u”

If (Test-Path $Path1) {

$SourcePath = $Path1

} Else (

$SourcePath = $Path2

)

$Destination = \xxxxx2300\disabled\9\2019

Look for the destination folder and if it exists

move the structure. If not, create the destination

and then do the move.

If (Test-Path $Destination) {

Get-ChildItem ($SourcePath) | Copy-Item -Destination ($Destination) -Recurse -container -force

Get-ChildItem ($SourcePath) -Recurse | remove-item

} Else {

New-item -Path ($Destination) -ItemType directory -force

Get-ChildItem ($SourcePath) | Copy-Item -Destination ($Destination) -Recurse -container -force

Get-ChildItem ($SourcePath) -Recurse | remove-item

}

#remove empty folders

dir $Destination -Directory -Recurse | %{ $.FullName} | sort -Descending | where { !@(ls -force $) } | rm

-WhatIf } -WhatIf

#Moves the Account to InTransit

Move-ADObject -Identity $ADUser -TargetPath $TargetOU -WhatIf

Pause: Pause 20 seconds for Active Directory to replicate changes

Start-Sleep -s 20

}

patrickdeno2 · 2019-07-15T17:45:34.000Z

If I might make one suggestion, you never want to test something like this in production, e.g. on live and working information. Set up some test folders and just test individual part like the move folder part of the script. Set up a test user in AD and test those parts that deal with the user profile and so on. Only when you’re sure every part works as it should, then put them together and test in production.

Also, I’m not sure how you’re writing your code, but I noticed you had a quotation mark missing in your original code. if I might make another suggestion, use something like PowerShell ISE or Notepad++ to look at and edit your code. They have code engines that can show you at least some of the more obvious code errors, like that missing quote mark, and will highlight your code in colors so you can easily see what’s right and what’s wrong at a glance. i use Notepad++, myself, but you may find ISE easier to deal with at first.

hyd3official · 2019-07-15T18:00:26.000Z

Ghillie,

Understood. I would never place this into production, as I wouldn’t want to effect productivity within our infrastructure.

hyd3official · 2019-07-15T18:52:21.000Z

Error I’ve received.

At C:\Users\xxxxx\Desktop\xxxxx.ps1:31 char:7

} Else (
~

Missing statement block after ‘else’ keyword.

At C:\Users\xxxxx\Desktop\xxxxx.ps1:67 char:1

}
~

Unexpected token ‘}’ in expression or statement.

CategoryInfo : ParserError: ( , ParentContainsErrorRecordException
FullyQualifiedErrorId : MissingStatementBlockAfterElse