Solved

vbs script to read list of users and export a file with the groups they belong to

Posted on 2012-03-29
7
520 Views
Last Modified: 2012-08-19
I would like to take a txt file that contains the list of multiple user accounts.  Then have it look at the domain and tell me what groups the user is in and export that info to a txt or csv file.  Below is an example but only allows you to enter one username and then gives you a text file with the groups that one user belongs to.  I need to remove that and allow it to read mulitple users.  


On Error Resume Next
Const ForWriting = 2

UserName = InputBox("Enter Username","Enter Username")

Set objUser = GetObject("LDAP://" & SearchDistinguishedName(UserName))
For Each strGroup in objUser.memberOf
        Set objGroup = GetObject("LDAP://" & strGroup)
        Report = Report & objGroup.CN & vbCrLf
Next
Set fso = CreateObject("Scripting.FileSystemObject")
Set ts = fso.CreateTextFile (UserName & "GroupMembership.txt", ForWriting)
ts.Write Report
WScript.Echo "Done"


Public Function SearchDistinguishedName(ByVal vSAN)
    ' Function:     SearchDistinguishedName
    ' Description:  Searches the DistinguishedName for a given SamAccountName
    ' Parameters:   ByVal vSAN - The SamAccountName to search
    ' Returns:      The DistinguishedName Name
    Dim oRootDSE, oConnection, oCommand, oRecordSet

    Set oRootDSE = GetObject("LDAP://rootDSE")
    Set oConnection = CreateObject("ADODB.Connection")
    oConnection.Open "Provider=ADsDSOObject;"
    Set oCommand = CreateObject("ADODB.Command")
    oCommand.ActiveConnection = oConnection
    oCommand.CommandText = "<LDAP://" & oRootDSE.get("defaultNamingContext") & _
        ">;(&(objectCategory=User)(samAccountName=" & vSAN & "));distinguishedName;subtree"
    Set oRecordSet = oCommand.Execute
    On Error Resume Next
    SearchDistinguishedName = oRecordSet.Fields("DistinguishedName")
    On Error GoTo 0
    oConnection.Close
    Set oRecordSet = Nothing
    Set oCommand = Nothing
    Set oConnection = Nothing
    Set oRootDSE = Nothing
End Function
0
Comment
Question by:zanderkid
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
7 Comments
 
LVL 65

Expert Comment

by:RobSampson
ID: 37785040
Hi, this should work.

Regards,

Rob,

Set objFSO = CreateObject("Scripting.FileSystemObject")
Set objFile = objFSO.CreateTextFile("Users_And_Their_Group_Memberships.csv", True)

'set connection to active directory      
Set adConnection = CreateObject("ADODB.Connection")
adConnection.Provider = "ADsDSOObject"
adConnection.Open("Ads Provider")
 
Set rsUsers = CreateObject("ADODB.Recordset")                                        
Set objRootDSE = GetObject("LDAP://RootDSE")
 
strFilter = "(&(objectCategory=user)(objectClass=person))"
strCmd = "<LDAP://" & objRootDSE.Get("defaultNamingContext") & ">;" & strFilter & ";adsPath;subtree"
 
'create recordset containing all active directory users
Set rsUsers = adConnection.Execute(strCmd)            
                 
While Not rsUsers.EOF
	Set objUser = GetObject(rsUsers.fields("adsPath"))
	If TypeName(objUser.MemberOf) = "Empty" Then
		strMemberOf = "<NONE>"
	ElseIf TypeName(objUser.MemberOf) = "String" Then
		strMemberOf = objUser.MemberOf
	ElseIf TypeName(objUser.MemberOf) = "Variant()" Then
		strMemberOf = Join(objUser.MemberOf, ";")
	End If
	objFile.WriteLine """" & objUser.samAccountName & """,""" & strMemberOf & """"
	rsUsers.MoveNext
Wend
rsUsers.Close
adConnection.Close

objFile.Close
Set objFile = Nothing
MsgBox "Done"

Open in new window

0
 

Author Comment

by:zanderkid
ID: 37785261
I think this is searching all the users in th entire domain.  I'm looking for the script to read a list of specific users. I ran this script and got the following:
The size limit for this request was exceeded.
0
 
LVL 65

Expert Comment

by:RobSampson
ID: 37785276
Oops.  Sorry...I missed the input file part.  Try this.

Regards,

Rob.

On Error Resume Next
Const ForReading = 1
Const ForWriting = 2

Set fso = CreateObject("Scripting.FileSystemObject")

Set objInput = fso.OpenTextFile("usernames.txt", ForReading, False)
Set objOutput = fso.CreateTextFile("GroupMemberships.txt", True)
While objInput.AtEndOfStream
	UserName = Trim(objInput.ReadLine)
	If UserName <> "" Then
		Set objUser = GetObject("LDAP://" & SearchDistinguishedName(UserName))
		strLine = objUser.samAccountName
		If TypeName(objUser.MemberOf) = "Empty" Then
			strLine = strLine & ",<<NONE>>"
		ElseIf TypeName(objUser.MemberOf) = "String" Then
			strLine = strLine & "," & objUser.MemberOf
		Else
			For Each strGroup in objUser.memberOf
				strLine = strLine & "," & strGroup
			Next 
		End If
		objOutput.WriteLine strLine
	End If
Wend
objInput.Close
objOutput.Close

WScript.Echo "Done"


Public Function SearchDistinguishedName(ByVal vSAN)
    ' Function:     SearchDistinguishedName
    ' Description:  Searches the DistinguishedName for a given SamAccountName
    ' Parameters:   ByVal vSAN - The SamAccountName to search
    ' Returns:      The DistinguishedName Name
    Dim oRootDSE, oConnection, oCommand, oRecordSet

    Set oRootDSE = GetObject("LDAP://rootDSE")
    Set oConnection = CreateObject("ADODB.Connection")
    oConnection.Open "Provider=ADsDSOObject;"
    Set oCommand = CreateObject("ADODB.Command")
    oCommand.ActiveConnection = oConnection
    oCommand.CommandText = "<LDAP://" & oRootDSE.get("defaultNamingContext") & _
        ">;(&(objectCategory=User)(samAccountName=" & vSAN & "));distinguishedName;subtree"
    Set oRecordSet = oCommand.Execute
    On Error Resume Next
    SearchDistinguishedName = oRecordSet.Fields("DistinguishedName")
    On Error GoTo 0
    oConnection.Close
    Set oRecordSet = Nothing
    Set oCommand = Nothing
    Set oConnection = Nothing
    Set oRootDSE = Nothing
End Function

Open in new window

0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 

Author Comment

by:zanderkid
ID: 37789092
The Last code posted does complete without error however it does not have any data.
0
 
LVL 65

Expert Comment

by:RobSampson
ID: 37790596
Can you comment out the On Error Resume Next line and run it again? Maybe you're getting an error you can't see.

Regards,

Rob.
0
 

Author Comment

by:zanderkid
ID: 37805817
I comment ou the On Error Resume next and the script still completed without error but no data in the output file
0
 
LVL 65

Accepted Solution

by:
RobSampson earned 500 total points
ID: 37809100
Oh I see what the problem is.  Change this line:
While objInput.AtEndOfStream

to this
While Not objInput.AtEndOfStream


Rob.
0

Featured Post

Ready to get started with anonymous questions?

It's easy! Check out this step-by-step guide for asking an anonymous question on Experts Exchange.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I met Paul Devereux (@pdevereux) today when I responded to his tweet asking “Anybody know how to automate adding files from disk to a folder in #outlook  ?”.  I replied back and told Paul that using automation, in this case scripting, to add files t…
This is pretty cool.  The purpose of this VB Script is to help you document where JAR (Java ARchive) files and specifically java class files are located so that you can address issues seen with a client or that you can speak intelligently with a dev…
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…

632 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question