vbs script to read list of users and export a file with the groups they belong to

I would like to take a txt file that contains the list of multiple user accounts.  Then have it look at the domain and tell me what groups the user is in and export that info to a txt or csv file.  Below is an example but only allows you to enter one username and then gives you a text file with the groups that one user belongs to.  I need to remove that and allow it to read mulitple users.  


On Error Resume Next
Const ForWriting = 2

UserName = InputBox("Enter Username","Enter Username")

Set objUser = GetObject("LDAP://" & SearchDistinguishedName(UserName))
For Each strGroup in objUser.memberOf
        Set objGroup = GetObject("LDAP://" & strGroup)
        Report = Report & objGroup.CN & vbCrLf
Next
Set fso = CreateObject("Scripting.FileSystemObject")
Set ts = fso.CreateTextFile (UserName & "GroupMembership.txt", ForWriting)
ts.Write Report
WScript.Echo "Done"


Public Function SearchDistinguishedName(ByVal vSAN)
    ' Function:     SearchDistinguishedName
    ' Description:  Searches the DistinguishedName for a given SamAccountName
    ' Parameters:   ByVal vSAN - The SamAccountName to search
    ' Returns:      The DistinguishedName Name
    Dim oRootDSE, oConnection, oCommand, oRecordSet

    Set oRootDSE = GetObject("LDAP://rootDSE")
    Set oConnection = CreateObject("ADODB.Connection")
    oConnection.Open "Provider=ADsDSOObject;"
    Set oCommand = CreateObject("ADODB.Command")
    oCommand.ActiveConnection = oConnection
    oCommand.CommandText = "<LDAP://" & oRootDSE.get("defaultNamingContext") & _
        ">;(&(objectCategory=User)(samAccountName=" & vSAN & "));distinguishedName;subtree"
    Set oRecordSet = oCommand.Execute
    On Error Resume Next
    SearchDistinguishedName = oRecordSet.Fields("DistinguishedName")
    On Error GoTo 0
    oConnection.Close
    Set oRecordSet = Nothing
    Set oCommand = Nothing
    Set oConnection = Nothing
    Set oRootDSE = Nothing
End Function
zanderkidAsked:
Who is Participating?
 
RobSampsonConnect With a Mentor Commented:
Oh I see what the problem is.  Change this line:
While objInput.AtEndOfStream

to this
While Not objInput.AtEndOfStream


Rob.
0
 
RobSampsonCommented:
Hi, this should work.

Regards,

Rob,

Set objFSO = CreateObject("Scripting.FileSystemObject")
Set objFile = objFSO.CreateTextFile("Users_And_Their_Group_Memberships.csv", True)

'set connection to active directory      
Set adConnection = CreateObject("ADODB.Connection")
adConnection.Provider = "ADsDSOObject"
adConnection.Open("Ads Provider")
 
Set rsUsers = CreateObject("ADODB.Recordset")                                        
Set objRootDSE = GetObject("LDAP://RootDSE")
 
strFilter = "(&(objectCategory=user)(objectClass=person))"
strCmd = "<LDAP://" & objRootDSE.Get("defaultNamingContext") & ">;" & strFilter & ";adsPath;subtree"
 
'create recordset containing all active directory users
Set rsUsers = adConnection.Execute(strCmd)            
                 
While Not rsUsers.EOF
	Set objUser = GetObject(rsUsers.fields("adsPath"))
	If TypeName(objUser.MemberOf) = "Empty" Then
		strMemberOf = "<NONE>"
	ElseIf TypeName(objUser.MemberOf) = "String" Then
		strMemberOf = objUser.MemberOf
	ElseIf TypeName(objUser.MemberOf) = "Variant()" Then
		strMemberOf = Join(objUser.MemberOf, ";")
	End If
	objFile.WriteLine """" & objUser.samAccountName & """,""" & strMemberOf & """"
	rsUsers.MoveNext
Wend
rsUsers.Close
adConnection.Close

objFile.Close
Set objFile = Nothing
MsgBox "Done"

Open in new window

0
 
zanderkidAuthor Commented:
I think this is searching all the users in th entire domain.  I'm looking for the script to read a list of specific users. I ran this script and got the following:
The size limit for this request was exceeded.
0
Get expert help—faster!

Need expert help—fast? Use the Help Bell for personalized assistance getting answers to your important questions.

 
RobSampsonCommented:
Oops.  Sorry...I missed the input file part.  Try this.

Regards,

Rob.

On Error Resume Next
Const ForReading = 1
Const ForWriting = 2

Set fso = CreateObject("Scripting.FileSystemObject")

Set objInput = fso.OpenTextFile("usernames.txt", ForReading, False)
Set objOutput = fso.CreateTextFile("GroupMemberships.txt", True)
While objInput.AtEndOfStream
	UserName = Trim(objInput.ReadLine)
	If UserName <> "" Then
		Set objUser = GetObject("LDAP://" & SearchDistinguishedName(UserName))
		strLine = objUser.samAccountName
		If TypeName(objUser.MemberOf) = "Empty" Then
			strLine = strLine & ",<<NONE>>"
		ElseIf TypeName(objUser.MemberOf) = "String" Then
			strLine = strLine & "," & objUser.MemberOf
		Else
			For Each strGroup in objUser.memberOf
				strLine = strLine & "," & strGroup
			Next 
		End If
		objOutput.WriteLine strLine
	End If
Wend
objInput.Close
objOutput.Close

WScript.Echo "Done"


Public Function SearchDistinguishedName(ByVal vSAN)
    ' Function:     SearchDistinguishedName
    ' Description:  Searches the DistinguishedName for a given SamAccountName
    ' Parameters:   ByVal vSAN - The SamAccountName to search
    ' Returns:      The DistinguishedName Name
    Dim oRootDSE, oConnection, oCommand, oRecordSet

    Set oRootDSE = GetObject("LDAP://rootDSE")
    Set oConnection = CreateObject("ADODB.Connection")
    oConnection.Open "Provider=ADsDSOObject;"
    Set oCommand = CreateObject("ADODB.Command")
    oCommand.ActiveConnection = oConnection
    oCommand.CommandText = "<LDAP://" & oRootDSE.get("defaultNamingContext") & _
        ">;(&(objectCategory=User)(samAccountName=" & vSAN & "));distinguishedName;subtree"
    Set oRecordSet = oCommand.Execute
    On Error Resume Next
    SearchDistinguishedName = oRecordSet.Fields("DistinguishedName")
    On Error GoTo 0
    oConnection.Close
    Set oRecordSet = Nothing
    Set oCommand = Nothing
    Set oConnection = Nothing
    Set oRootDSE = Nothing
End Function

Open in new window

0
 
zanderkidAuthor Commented:
The Last code posted does complete without error however it does not have any data.
0
 
RobSampsonCommented:
Can you comment out the On Error Resume Next line and run it again? Maybe you're getting an error you can't see.

Regards,

Rob.
0
 
zanderkidAuthor Commented:
I comment ou the On Error Resume next and the script still completed without error but no data in the output file
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.