PowerShell - Export Users in an AD Group like "Something*"

spiceuser-mfmvr · 2019-04-26T18:24:11.000Z

I am wanting to export to a CSV, with users listed as well as the AD Group. We have users in email signatures groups to assign the correct signature. I am trying to export the users with what E-mail Sign(Security Group) they are in.

So it would look like this:

User Group

User1 E-mail Sign

User2 E-mail Sign w Pic

Neally · 2019-04-26T18:26:05.000Z

Welcome.

What have you tried? Where are you stuck?

If you post code, please use the ‘Insert Code’ button. Please and thank you!

PLEASE READ BEFORE POSTING! Read if you're new to the PowerShell forum! Programming & Development

Hi, and welcome to the PowerShell forum! Don’t apologize for being a “noob” or “newbie” or “n00b.” There’s just no need – nobody will think you’re stupid, and the forums are all about asking questions. Just ask! Use a descriptive subject. Don't say "Need help" or "PowerShell Help", actually summarize what the problem is. It helps the rest of us keep track of which problem is which. Don’t post massive scripts. We’re all volunteers and we don’t have time to read all that, nor will we copy, past…

gavinsilveira · 2019-04-26T19:34:04.000Z

Get-ADUser -Filter 'SamAccountName -eq "*"' -Properties "<PropertiesYouWant>" | Select-Object -Property "PropertyYouWant", "PropertyYouWant2" | Export-CSV

Try something like this, you will need RSAT tools to be able to use this command however

tulioarends · 2019-04-26T22:28:04.000Z

Get-ADUser -Filter “*” -Property MemberOf will return all your users with the groups they belong to. MemberOf is not in the default properties set so you have to explicitly include it.

Note that MemberOf is an array of Strings containing the distinguished names of the groups (in the format “CN=Group name,OU=OU name,DC=companyname,DC=com”) the user belongs to. I believe it’s just the direct groups, not nested but I haven’t confirmed.

Having said the above, I recommend you approach this from the other end, i.e find the members that belong to a particular group rather than filter out all the other groups a user belongs to. For this you would use Get-ADGroupMember:

$groupNames = "E-mail Sign", "E-mail Sign w Pic"

$usersWithGroups = [System.Collections.ArrayList]::new()

foreach ($groupName in $groupNames) {
    $groupMembers = Get-ADGroupMember -Identity $groupName
    foreach ($member in $groupMembers) {
        $userWithGroup = [PSCustomObject]@{
            User  = $member.SamAccountName;
            Group = $groupName 
        }
        $usersWithGroups.Add($userWithGroup)
    }
}

Export-Csv "Users with signature group.csv" -InputObject $usersWithGroups -NoTypeInformation

DoctorDNS · 2019-04-27T08:27:48.000Z

What specifically do you want the CSV to look liike.

In general, a CSV is a flat store - each line is a separate occurrence when you import the CSV, In side each line, you would have attributes of a user such as name, sam account name, etc. The issue is when you have a repeating group (ie the groups the users is a member of). You can of course create a repeating group inside a csv row, but is that what you really want?

spiceuser-mfmvr · 2019-04-27T10:11:25.000Z

Would like the CSV to look like the following.

User Group

Bob Smith E-mail Sign

Jane Doe E-mail Sign with Pic

spiceuser-mfmvr · 2019-04-27T10:32:45.000Z

Thank you for replying tulioarends, I gave it a shot and here is what I got. Within PowerShell it just started counting and then in the spreadsheet it has this.

Capacity Count IsFixedSize IsReadOnly IsSynchronized SyncRoot

256 144 FALSE FALSE FALSE System.Object

Here is my code, there are a lot of groups:

$groupNames = "E-mail Sign - Ext - Cell - Pic", "E-mail Sign - Cell", "E-mail Sign - Direct Phone - Pic - Direct Fax", "E-mail Sign - Direct Phone", "E-mail Sign - Multi-Unit Sales", "E-mail Sign - Direct Phone - Cell - Pic - Direct Fax", "E-mail Sign - Direct Phone - Cell - Direct Fax", "E-mail Sign - Direct Phone - Cell - Pic", "E-mail Sign - Direct Phone - Pic", "E-mail Sign - Direct Phone - Cell", "E-mail Sign - Warehouse", "E-mail Sign - Direct Phone - Ext - Direct Fax", "E-mail Sign Full - Cell", "E-mail Sign Full - Direct Phone - Cell", "E-mail Sign Full - Direct Phone - Cell - Pic", "E-mail Sign Full - Direct Phone - Ext - Direct Fax", "E-mail Sign Full - Direct Phone - Pic", "E-mail Sign Full - Ext - Cell - Pic", "E-mail Sign Full - Ext - Multi-Unit Sales", "E-mail Sign Full - Warehouse", "E-mail Sign Full - Direct phone - Cell - Direct Fax", "E-mail Sign Full - Direct Phone", "E-mail Sign Full - Ext - Pic", "E-mail Sign - Ext - Pic", "E-mail Sign Full - Direct Phone - Pic - Direct Fax", "E-mail Sign Full - Direct Phone - Cell - Pic - Direct Fax", "E-mail Sign Full - Direct Phone - Direct Fax", "E-mail Sign - Direct Phone - Direct Fax", "E-mail Sign - Test", "E-mail Sign - Test with Pic", "E-mail Sign - Survey - Cell"

$usersWithGroups = [System.Collections.ArrayList]::new()

foreach ($groupName in $groupNames) {
    $groupMembers = Get-ADGroupMember -Identity $groupName
    foreach ($member in $groupMembers) {
        $userWithGroup = [PSCustomObject]@{
            User = $member.SamAccountName;
            Group = $groupName 
        }
        $usersWithGroups.Add($userWithGroup)
    }
}

Export-Csv "Users with signature group.csv" -InputObject $usersWithGroups -NoTypeInformation

@tulioarends

tulioarends · 2019-04-27T11:46:54.000Z

Replace the last line with

$usersWithGroups |Export-Csv "Users with signature group.csv"  -NoTypeInformation

spiceuser-mfmvr · 2019-04-29T14:15:18.000Z

This in total was the final answer

$groupNames = "E-mail Sign - Ext - Cell - Pic", "E-mail Sign - Cell", "E-mail Sign - Direct Phone - Pic - Direct Fax", "E-mail Sign - Direct Phone", "E-mail Sign - Multi-Unit Sales", "E-mail Sign - Direct Phone - Cell - Pic - Direct Fax", "E-mail Sign - Direct Phone - Cell - Direct Fax", "E-mail Sign - Direct Phone - Cell - Pic", "E-mail Sign - Direct Phone - Pic", "E-mail Sign - Direct Phone - Cell", "E-mail Sign - Warehouse", "E-mail Sign - Direct Phone - Ext - Direct Fax", "E-mail Sign Full - Cell", "E-mail Sign Full - Direct Phone - Cell", "E-mail Sign Full - Direct Phone - Cell - Pic", "E-mail Sign Full - Direct Phone - Ext - Direct Fax", "E-mail Sign Full - Direct Phone - Pic", "E-mail Sign Full - Ext - Cell - Pic", "E-mail Sign Full - Ext - Multi-Unit Sales", "E-mail Sign Full - Warehouse", "E-mail Sign Full - Direct phone - Cell - Direct Fax", "E-mail Sign Full - Direct Phone", "E-mail Sign Full - Ext - Pic", "E-mail Sign - Ext - Pic", "E-mail Sign Full - Direct Phone - Pic - Direct Fax", "E-mail Sign Full - Direct Phone - Cell - Pic - Direct Fax", "E-mail Sign Full - Direct Phone - Direct Fax", "E-mail Sign - Direct Phone - Direct Fax", "E-mail Sign - Test", "E-mail Sign - Test with Pic", "E-mail Sign - Survey - Cell"

$usersWithGroups = [System.Collections.ArrayList]::new()

foreach ($groupName in $groupNames) {
    $groupMembers = Get-ADGroupMember -Identity $groupName
    foreach ($member in $groupMembers) {
        $userWithGroup = [PSCustomObject]@{
            User = $member.SamAccountName;
            Group = $groupName 
        }
        $usersWithGroups.Add($userWithGroup)
    }
}

$usersWithGroups |Export-Csv "Users with signature group.csv"  -NoTypeInformation