Powershell Moving Users between OUs based on conditions

veyderx · 2019-06-17T10:25:50.000Z

Hi, I am just starting out writing powershell scripts. I want to know a good approach to use to tackle a script that will conditionally move users between OUs based on vacation dates (namely a Departure and Return date).

I was thinking of using the extensionAttributes to store the dates.

The script should capture the user’s original OU and input it in the Users Description.
Moves to and from the designated OUs should depend on dates i.e Departure/Return
On the Leave Departure Date the account should be moved to the Transient/Vacation OU
On the Return Date the script should wait 5 days and then move the user back to their original OU.
The Information in the Display name should be copied to the Description field upon return to the original OU.
The relevant extensionAttributes used in this process should be cleared after the object is place back in the original OU.

I really want to write this, but I could use a good push in the right direction or to know if this is even possible.

Neally · 2019-06-17T13:02:25.000Z

What have you tried? Where are you stuck?

Since you have seemingly all the requirements already defined, write code that does what each point lists?

If you need help, post the code you have and we’ll go from there.

If you post code, please use the ‘Insert Code’ button. Please and thank you!

PLEASE READ BEFORE POSTING! Read if you're new to the PowerShell forum! Programming & Development

Hi, and welcome to the PowerShell forum! Don’t apologize for being a “noob” or “newbie” or “n00b.” There’s just no need – nobody will think you’re stupid, and the forums are all about asking questions. Just ask! Use a descriptive subject. Don't say "Need help" or "PowerShell Help", actually summarize what the problem is. It helps the rest of us keep track of which problem is which. Don’t post massive scripts. We’re all volunteers and we don’t have time to read all that, nor will we copy, past…

Evan7191 · 2019-06-17T13:17:33.000Z

VeyderX:

Powershell Moving Users between OUs based on conditions

Hi, I am just starting out writing powershell scripts. I want to know a good approach to use to tackle a script that will conditionally move users between OUs based on vacation dates (namely a Departure and Return date).

I was thinking of using the extensionAttributes to store the dates.

The script should capture the user’s original OU and input it in the Users Description.

Moves to and from the designated OUs should depend on dates i.e Departure/Return

On the Leave Departure Date the account should be moved to the Transient/Vacation OU

On the Return Date the script should wait 5 days and then move the user back to their original OU.

The Information in the Display name should be copied to the Description field upon return to the original OU.

The relevant extensionAttributes used in this process should be cleared after the object is place back in the original OU.

I really want to write this, but I could use a good push in the right direction or to know if this is even possible.

You can use Get-ADUser to retrieve the user and pipe it to Select-Object -ExpandProperty distinguishedName, which will give you the full path to the user account. You can parse the distinguishedName to get the OU, and then you can use Set-ADUser to write it to the Description property.
You can use a Switch statement or If statement for logic to determine where the accounts should be moved.
and 4. You can use an If statement to compare the dates. You can retrieve the current date with Get-Date.
See #1.
You can use Set-ADUser to write an empty string to the extensionAttributes property.

patrickdeno2 · 2019-06-18T12:55:04.000Z

Here’s a fully annotated script I wrote and posted about a year ago that has some of the functionality you want. It’s a good place to start.

Disable, Change, Mark (old path), Strip (with export), Move AD user profile, and disable email account

veyderx · 2019-06-19T12:14:32.000Z

$ous = 'OU=Printing,OU=Toronto,DC=domain,DC=com'

$ous | ForEach {Get-ADUser -Filter {(extensionattribute14 -not "*")}

}

I just wrote a simple query to see if I could pull users with a value in the extensionattribute14 attribute. lt is pulling everyone in the OU, but I have only entered text in 2 accounts, the rest of the accounts do not have a set value. What have I done wrong?

I am thinking that the script should check extensionattribute14 and extensionattribute15 for a date value, if the date is not null then it should compare the dates with the current date to determine if and where/ the account should be moved. (Example if the vacation departure date (extensionattribute14) has not occurred yet then the script should not move the account, however, if the vacation departure date has occurred or passed, and the return date (extensionattribute15) has not occurred or passed then the account should move to the transient OU after capturing the accounts original OU information and input it in the Users Description along with a message indicating the user is on vacation with the leave dates. For any accounts in the transient OU where the vacation return date has expired then the script should wait 5 days before moving the user back to their original OU and clearing out both attributes 14&15 the Display name should be copied to the Description field upon return to the original OU . Finally if Like I said I am very new to powershell, I created a variable for OUs so I could potentially run this against multiple OUs.

I am steadily researching how to get this done and any input with explanations is highly welcomed. Thank you Guys!

Neally · 2019-06-19T15:20:54.000Z

VeyderX:

$ous = 'OU=Printing,OU=Toronto,DC=domain,DC=com'

$ous | ForEach {Get-ADUser -Filter {(extensionattribute14 -not "*")}

}  
I just wrote a simple query to see if I could pull users with a value in the extensionattribute14

You are using a wildcard ( * ) so you should try ‘-notlike’ not ‘-not’