Powershell Adding a Single User To Multiple Groups

stephenmifsud · 2019-02-26T19:33:28.000Z

Hello,

I see a few scripts to add a user to multiple groups but i don’t see how it can mesh with my current code i made.

If someone could help steer me in the right direction i would be grateful.

My Code example:

$officegroup = “Accounting Department” + “Home Office” + “Corporate”

New-ADUser -SamAccountName $adusername -GivenName $firstname -Surname $lastname -office “$office” -Manager $usermgr -DisplayName “$firstname $lastname” -Name “$firstname $lastname” -UserPrincipalName $UserPrincipalName -Enabled $true -ChangePasswordAtLogon $true

Add-ADGroupMember -Identity $officegroup -Members $adusername

Add-ADGroupMember is not taking the grouping i have above this example for some reason.

It does work if $officegroup is only one item fine just not more then one

Neally · 2019-02-26T19:36:53.000Z

If you post code, please use the ‘Insert Code’ button. Please and thank you!

PLEASE READ BEFORE POSTING! Read if you're new to the PowerShell forum! Programming & Development

Hi, and welcome to the PowerShell forum! Don’t apologize for being a “noob” or “newbie” or “n00b.” There’s just no need – nobody will think you’re stupid, and the forums are all about asking questions. Just ask! Use a descriptive subject. Don't say "Need help" or "PowerShell Help", actually summarize what the problem is. It helps the rest of us keep track of which problem is which. Don’t post massive scripts. We’re all volunteers and we don’t have time to read all that, nor will we copy, past…

rebootssolveproblems · 2019-02-26T19:43:35.000Z

Obivously, what Neely said.

But your $office group is a single object variable, not an array. Use an array:

$officegroup = @("Accounting Department", "Home Office", "Corporate")

New-ADUser -SamAccountName $adusername -GivenName $firstname -Surname $lastname -office "$office" -Manager $usermgr -DisplayName "$firstname $lastname" -Name "$firstname $lastname" -UserPrincipalName $UserPrincipalName -Enabled $true -ChangePasswordAtLogon $true

Add-ADGroupMember -Identity $officegroup -Members $adusername

rebootssolveproblems · 2019-02-26T19:45:09.000Z

To add onto variable or array discussion: your $officegroup variable will be literally written out as “Accounting DepartmentHome OfficeCorporate” and not as three different objects. Use a comma in between each of your objects if you want them to be separate.

Neally · 2019-02-26T20:05:02.000Z

I’d just write a foreach and be done with it.

foreach($group in $officegroup){
    add-adgroupmember $group -members $aduser
}

Also look into splatting.

Neally · 2019-02-26T20:08:51.000Z

summat like so

$officegroup = "Accounting Department","Home Office","Corporate"

$ADUserInfo = @{
    SamAccountName        = $adusername 
    GivenName             = $firstname 
    Surname               = $lastname 
    Office                = "$office" 
    Manager               = $usermgr 
    DisplayName           = "$firstname $lastname" 
    Name                  = "$firstname $lastname" 
    UserPrincipalName     = $UserPrincipalName 
    Enabled               = $true 
    ChangePasswordAtLogon = $true
}
New-ADUser @ADUserInfo

foreach($group in $officegroup){
    Add-ADGroupMember -Identity $group -Members $adusername
}

troberts2 · 2019-02-27T03:06:07.000Z

Ok this is like the opposite of what you want but same theory. You just need to apply the add vs remove. We use this to find all groups in AD a user is a member of and remove them from their account so we can term them.

automate termination using powershell for AD

Check it out and see if it helps point you the right way.

@stephenmifsud