Need Assistance with Terminated Employee Script

donmy · 2020-10-05T17:05:10.000Z

Hello, I am extremely new to PS and was looking for assistance with my script below. The script works as it should but I want to make a couple adjustments and I don’t know how. For the Delete Mobile device part, is there a way to remove there mobile devices without knowing their IDs? Is the a script that can just detect that they have a phone and remove?

Also, I am looking to add to this script on how to remove from all Cloud Based 365 Groups. We are in a hybrid environment and I have another script that already removes the On Prem DLs and Security Groups. This script doesn’t include cloud base groups so I am looking to see if there’s a way to add that step to my existing script. Can it just remove them from the cloud DLs that they are only a member of? Any help is appreciated!!! Down below is my script.

#Connect to Exchange Online using your Office 365 administrative credentials
$Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://outlook.office365.com/powershell-liveid/ -Credential $UserCredential -Authentication Basic -AllowRedirection
Import-PSSession $Session
Connect-MsolService

#Asks for users email and manager to forward emails to
$Terminate = Read-Host -Prompt ‘Input terminated users email’
$Forwarding = Read-Host -Prompt ‘Input email to be forwarded too’

#sets forwarding address
Set-Mailbox $Terminate -ForwardingAddress $Forwarding
write-host "* " $Terminate “email is being forwarded to the manager”

#Deletes Mobile Device
Remove-MobileDevice $Terminate -Confirm:$false
Write-Host "* "$Terminate “mobile devices have been removed”

#Disable Active Sync and OWA
Set-CASMailbox $Terminate -OWAEnabled $False -ActiveSyncEnabled $False -OWAforDevicesEnabled $False
Write-Host "* "$Terminate “mobile device and OWA has been deactivated”

#Convert Mailbox to Shared
Set-Mailbox $Terminate -Type Shared
Write-Host "* “$Terminate " has been converted to shared”

#Remove E3 License
Set-MsolUserLicense -UserPrincipalName $Terminate -RemoveLicenses “ag:ENTERPRISEPACK”
Write-Host "* "$Terminate “E3 License has been removed”

write-host "*** " $Terminate “OWA, Mobile Device, Email Forwarding, Shared and License Strip have been completed ***”

Neally · 2020-10-05T17:14:07.000Z

If you post code, please use the ‘Insert Code’ button. Please and thank you!

PLEASE READ BEFORE POSTING! Read if you're new to the PowerShell forum! Programming & Development

Hi, and welcome to the PowerShell forum! Don’t apologize for being a “noob” or “newbie” or “n00b.” There’s just no need – nobody will think you’re stupid, and the forums are all about asking questions. Just ask! Use a descriptive subject. Don't say "Need help" or "PowerShell Help", actually summarize what the problem is. It helps the rest of us keep track of which problem is which. Don’t post massive scripts. We’re all volunteers and we don’t have time to read all that, nor will we copy, past…

donmy · 2020-10-05T17:20:40.000Z

@alexw Thanks so much for the info. I will keep that in mind!

Neally · 2020-10-05T17:23:54.000Z

spicehead-2j7lo:

Can it just remove them from the cloud DLs that they are only a member of?

AFAIK yes.

Run whatever applicable command to see if a user is member of a group (e.g. on prem it would be Get-ADPrincipalGroupMembership)

I don’t have access to o365 right now, it might be that you have to go one time through all the groups to catch all the members and then you can write a foreach to removed that specific one.

donmy · 2020-10-05T17:37:13.000Z

Neally:

spicehead-2j7lo:

Can it just remove them from the cloud DLs that they are only a member of?

Ok, got you but just wondering if there’s a script that can see this employees cloud group membership and remove it that way. We have over a thousand groups so I know looking through each one will take some time I bet. Thanks for your speedy response as well. Much appreciated!

o0matte0o · 2020-10-06T05:23:16.000Z

This will give you what a user is a member of, but if your using a hybrid you might have azure AD sync enabled which makes it a little difficult removing groups directly on Office 365.

$Office365GroupsMember = Get-UnifiedGroup | where { (Get-UnifiedGroupLinks $_.Alias -LinkType Members | foreach {$_.name}) -contains $mailbox.Alias}