Assistance with Get-qadgroupmember - PowerShellCommunity.org - Windows PowerShell Discussion Forums - Using PowerShell

Assistance with Get-qadgroupmember

Last Post 23 Jan 2012 10:24 AM by Porthos. 2 Replies.

Sort:

	Prev Next
You are not authorized to post a reply.

Author

Messages

Porthos

New Member
Posts:2
Avatar

23 Jan 2012 09:54 AM
Hi everyone, Been racking my brain over this one for while...I grabbed this code off a different post here on these boards $csv = get-content "d:\script\input.csv" $result = $csv \| foreach-object { $group=$_ get-qadgroupmember "$_" -sizelimit 0 -indirect \| select-object firstname,initials,lastname,logonname,title,department,company,P.O.Box,@{n="GroupName";e={$group}} } $result \| export-csv d:\script\rebtest12.csv -notype I am trying to get a complete listing of members in a group and all its nested groups. The problem I am having is the following... say I have the following group structure and memberships... Group1 User1 -----NestedGroup1 User1 -----NestedGroup2 -----NestedGroup3 The script that I pasted lists all the members, however it strips out all but one instance of each user. So if a user is a member of Group1 and Nested1, the script only returns the user as a member of Nested1. I need to know when a user has redundant access. Thaks in Advance, Im pretty new to powershell and may be overlooking something simple.

Scott Garrett User is Offline

New Member
Posts:32
Avatar

23 Jan 2012 10:19 AM
Not exactly what you are looking for but it's close. http://www.blackops.ca/cms/blog/?p=251 This looks for all the groups that a user is a member of, and warns if the user is a member of a group more than once because of other group membership. Might give you some ideas, or you can run this per user? This is the bit that gives the warning #If we have already processed the group once then just report and remove it from the input arraywrite-Host -ForegroundColor Red $spacer([ADSI]("LDAP://"+ ($InputArray[0]))).name "- Already a member"$InputArray.remove($InputArray[0])

http://www.blackops.ca/cms/blog/

Porthos

New Member
Posts:2
Avatar

23 Jan 2012 10:24 AM
Thanks but I couldnt use that, I would be running this script for auditing purposes and need the results to be based off of the group instead of a user

You are not authorized to post a reply.

Active Forums 4.3