asked on

vbs script to read list of users and export a file with the groups they belong to

I would like to take a txt file that contains the list of multiple user accounts. Then have it look at the domain and tell me what groups the user is in and export that info to a txt or csv file. Below is an example but only allows you to enter one username and then gives you a text file with the groups that one user belongs to. I need to remove that and allow it to read mulitple users.

On Error Resume Next
Const ForWriting = 2

UserName = InputBox("Enter Username","Enter Username")

Set objUser = GetObject("LDAP://" & SearchDistinguishedName(UserName))
For Each strGroup in objUser.memberOf
Set objGroup = GetObject("LDAP://" & strGroup)
Report = Report & objGroup.CN & vbCrLf
Next
Set fso = CreateObject("Scripting.FileSystemObject")
Set ts = fso.CreateTextFile (UserName & "GroupMembership.txt", ForWriting)
ts.Write Report
WScript.Echo "Done"

Public Function SearchDistinguishedName(ByVal vSAN)
' Function: SearchDistinguishedName
' Description: Searches the DistinguishedName for a given SamAccountName
' Parameters: ByVal vSAN - The SamAccountName to search
' Returns: The DistinguishedName Name
Dim oRootDSE, oConnection, oCommand, oRecordSet

Set oRootDSE = GetObject("LDAP://rootDSE")
Set oConnection = CreateObject("ADODB.Connection")
oConnection.Open "Provider=ADsDSOObject;"
Set oCommand = CreateObject("ADODB.Command")
oCommand.ActiveConnection = oConnection
oCommand.CommandText = "<LDAP://" & oRootDSE.get("defaultNamingContext") & _
">;(&(objectCategory=User)(samAccountName=" & vSAN & "));distinguishedName;subtree"
Set oRecordSet = oCommand.Execute
On Error Resume Next
SearchDistinguishedName = oRecordSet.Fields("DistinguishedName")
On Error GoTo 0
oConnection.Close
Set oRecordSet = Nothing
Set oCommand = Nothing
Set oConnection = Nothing
Set oRootDSE = Nothing
End Function

RobSampson

Hi, this should work.

Regards,

Rob,

Set objFSO = CreateObject("Scripting.FileSystemObject")
Set objFile = objFSO.CreateTextFile("Users_And_Their_Group_Memberships.csv", True)

'set connection to active directory      
Set adConnection = CreateObject("ADODB.Connection")
adConnection.Provider = "ADsDSOObject"
adConnection.Open("Ads Provider")
 
Set rsUsers = CreateObject("ADODB.Recordset")                                        
Set objRootDSE = GetObject("LDAP://RootDSE")
 
strFilter = "(&(objectCategory=user)(objectClass=person))"
strCmd = "<LDAP://" & objRootDSE.Get("defaultNamingContext") & ">;" & strFilter & ";adsPath;subtree"
 
'create recordset containing all active directory users
Set rsUsers = adConnection.Execute(strCmd)            
                 
While Not rsUsers.EOF
	Set objUser = GetObject(rsUsers.fields("adsPath"))
	If TypeName(objUser.MemberOf) = "Empty" Then
		strMemberOf = "<NONE>"
	ElseIf TypeName(objUser.MemberOf) = "String" Then
		strMemberOf = objUser.MemberOf
	ElseIf TypeName(objUser.MemberOf) = "Variant()" Then
		strMemberOf = Join(objUser.MemberOf, ";")
	End If
	objFile.WriteLine """" & objUser.samAccountName & """,""" & strMemberOf & """"
	rsUsers.MoveNext
Wend
rsUsers.Close
adConnection.Close

objFile.Close
Set objFile = Nothing
MsgBox "Done"

Open in new window

zanderkid

ASKER

I think this is searching all the users in th entire domain. I'm looking for the script to read a list of specific users. I ran this script and got the following:
The size limit for this request was exceeded.

RobSampson

Oops. Sorry...I missed the input file part. Try this.

Regards,

Rob.

On Error Resume Next
Const ForReading = 1
Const ForWriting = 2

Set fso = CreateObject("Scripting.FileSystemObject")

Set objInput = fso.OpenTextFile("usernames.txt", ForReading, False)
Set objOutput = fso.CreateTextFile("GroupMemberships.txt", True)
While objInput.AtEndOfStream
	UserName = Trim(objInput.ReadLine)
	If UserName <> "" Then
		Set objUser = GetObject("LDAP://" & SearchDistinguishedName(UserName))
		strLine = objUser.samAccountName
		If TypeName(objUser.MemberOf) = "Empty" Then
			strLine = strLine & ",<<NONE>>"
		ElseIf TypeName(objUser.MemberOf) = "String" Then
			strLine = strLine & "," & objUser.MemberOf
		Else
			For Each strGroup in objUser.memberOf
				strLine = strLine & "," & strGroup
			Next 
		End If
		objOutput.WriteLine strLine
	End If
Wend
objInput.Close
objOutput.Close

WScript.Echo "Done"


Public Function SearchDistinguishedName(ByVal vSAN)
    ' Function:     SearchDistinguishedName
    ' Description:  Searches the DistinguishedName for a given SamAccountName
    ' Parameters:   ByVal vSAN - The SamAccountName to search
    ' Returns:      The DistinguishedName Name
    Dim oRootDSE, oConnection, oCommand, oRecordSet

    Set oRootDSE = GetObject("LDAP://rootDSE")
    Set oConnection = CreateObject("ADODB.Connection")
    oConnection.Open "Provider=ADsDSOObject;"
    Set oCommand = CreateObject("ADODB.Command")
    oCommand.ActiveConnection = oConnection
    oCommand.CommandText = "<LDAP://" & oRootDSE.get("defaultNamingContext") & _
        ">;(&(objectCategory=User)(samAccountName=" & vSAN & "));distinguishedName;subtree"
    Set oRecordSet = oCommand.Execute
    On Error Resume Next
    SearchDistinguishedName = oRecordSet.Fields("DistinguishedName")
    On Error GoTo 0
    oConnection.Close
    Set oRecordSet = Nothing
    Set oCommand = Nothing
    Set oConnection = Nothing
    Set oRootDSE = Nothing
End Function

Open in new window

zanderkid

ASKER

The Last code posted does complete without error however it does not have any data.

RobSampson

Can you comment out the On Error Resume Next line and run it again? Maybe you're getting an error you can't see.

Regards,

Rob.

zanderkid

ASKER

I comment ou the On Error Resume next and the script still completed without error but no data in the output file

ASKER CERTIFIED SOLUTION

RobSampson

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial