Powershell: How to compare AD user accounts to CSV record row

$adusers = Get-ADUser -filter * -properties Department,Title |
 Select sAMAccountName,Surname,givenName,Title,Department  #this Select statement isn't necessarily needed, but could be used to filter unwanted properties or use calculated properties
$list = Import-CSV employees.csv
Compare-Object $adusers $list -property sAMAccountName,surName,givenName,Title,Department -passthru |
 Where {$_.SideIndicator -eq "=>"} |
 ForEach { `
 Set-ADUser -identity $_.sAMAccountName `
   -surName $_.surName `
   -givenName $_.givenName `
   -Title $_.Title `
   -Department $_.Department `
 }

Select allOpen in new window

#Split csv employee file into "Terminated" and "Non-Terminated" employee 
#records. "Employment_Status" has two values; 1) Active and 2) Terminated.
#Get "Non-terminated" employees.
$RawNonTerminatedEmployeeRecords = @(Import-CSV -Path $HR_Employee_Feed_File | 
? {$_.Employment_Status -ne "Terminated"})
#I omitted this function on purpose.
$NonTerminatedEmployeeRecords = Load-UniqueValueToFile $RawNonTerminatedEmployeeRecords
#
#Get "Terminated" employees.
$TerminatedEmployeeRecords = @(Import-CSV -Path $HR_Employee_Feed_File | 
? {$_.Employment_Status -eq "Terminated"})
#
#Determine new employees.
$NewEmployee_Records = @($NonTerminatedEmployeeRecords | % {
	#Determine if the employee's UNIQUEID exists in AD.
	if(!$ADUsers[$_.UNIQUE_ID])
	{
		#If not found, the employee must be new.
		$_
	}
} | Select-Object *)
#
#Check each employee record information against its corresponding AD account to
#determine modified employees.
$EmployeeRecordsToUpdate = @($NonTerminatedEmployeeRecords | % {
	#reset value
	$EmployeeHasChanged = $null	
	#Determine if the employee's UNIQUEID exists in AD.
	if($ADUsers[$_.UNIQUE_ID])
	{
		#Build a custom object for comparison
		$HR_Record_Obj = New-Object PSObject -Property @{
			TITLE = (Validate-Data $_.TITLE)
			EMPLOYEE_NUMBER = (Validate-Data $_.EMPLOYEE_NUMBER)
		}
		
		#Convert AD attributes to HR column names
		$ADUser_Obj = $ADUsers[$_.UNIQUE_ID] | 
		Select-Object @{Label="TITLE";Expression={$_.Title}},`
		@{Label="EMPLOYEE_NUMBER";Expression={$_.EmployeeNumber}}
				
		#Compare employee record in CSV file and AD user account.
		# Reference object is the employee's HR employee record, and the 
		# Difference objct is te AD use account. '<=' indicates that a difference
		# was found in the HR employee record.
		$EmployeeHasChanged = Compare-Object -ReferenceObject $HR_Record_Obj -DifferenceObject $ADUser_Obj -Property TITLE,EMPLOYEE_NUMBER |
		Where-Object {$_.SideIndicator -eq "<="}
		
		#Get employee record to update.
		if ($EmployeeHasChanged -ne $null)
		{
			$_
		}
	}
} | Select-Object *)
#Merge new and terminated employees.
$EmployeeRecordsToProcess = $TerminatedEmployeeRecords + $NewEmployee_Records
$EmployeeRecordsToProcess = $EmployeeRecordsToProcess + $EmployeeRecordsToUpdate

Select allOpen in new window

# This generates a custom object
$File = Import-Csv C:\temp\data.csv

$NewRecords = $File | % {
     #some condition
     if ($_.uniqueid -ne $null) {
         $_
      }
} | Select-Object *

#While this generates an array
$File = Import-Csv C:\temp\data.csv

$NewRecords = @($File | % {
     #some condition
     if ($_.uniqueid -ne $null) {
         $_
      }
} | Select-Object *)

Select allOpen in new window

function Validate-Data
{
	Param
	(
		[Parameter(Mandatory=$true,
					Position=0)]
		[AllowEmptyString()]
		[string]
		$strData
	)
	Process
	{
		if($strData.Trim() -ne $script:DBNull)
		{
			return $strData
		} else {
			return $null
		}
	}
}#END FUNCTION:  Validate-Data
#-------------------------------------------------------------------------------

$filter = "(&(objectCategory=person)(objectclass=user)(uniqueid=*))"

$ADUsers = Get-QADUser -SearchRoot "dc=mydomain,dc=local" `
-Enabled `
-DontUseDefaultIncludedProperties `
-IncludedProperties UniqueID,EmployeeNumber,JobCodeId,FacilityId,Area,Market,Title `
-LdapFilter $filter `
-Service "LDAPSERVER.mydomain.local" `
-SizeLimit 0 | Group-Object -Property UNIQUEID -AsHashTable
$script:DBNull = [System.DBNull]::Value

$HR_Employee_Feed_File = "c:\EmployeeData.csv"

#Get "Non-terminated" employees.
$NonTerminatedEmployeeRecords = @(Import-CSV -Path $HR_Employee_Feed_File | 
? {$_.Employment_Status -ne "Terminated"})

#Get "Terminated" employees.
$TerminatedEmployeeRecords = @(Import-CSV -Path $HR_Employee_Feed_File | 
? {$_.Employment_Status -eq "Terminated"})


#Determine if the employee's UNIQUEID exists in AD. If not found, the employee 
#must be new.
$NewEmployeeRecords = @($NonTerminatedEmployeeRecords | % {	
	if(!$ADUsers[$_.UNIQUE_ID]) { $_  } 
	})

#Check each employee record information against its corresponding AD account to
#determine modified employees.
$EmployeeRecordsToUpdate = @($NonTerminatedEmployeeRecords | % {
	#Determine if the employee's UNIQUEID exists in AD.
	if($ADUsers[$_.UNIQUE_ID])
	{
		#Expand AD user account information from hashtable.
		$ADUser = $ADUsers[$_.UNIQUE_ID] | Select-Object Title,EmployeeNumber,`
		JobCodeId,FacilityId,Area,Market,Description,FirstName,LastName,`
		StreetAddress,City,PostalCode,StateOrProvince
		
		$EmployeeAddress = if ((Validate-Data $_.LINE_TWO) -ne $null)
		{
			(Validate-Data $_.LINE_ONE) + " " + (Validate-Data $_.LINE_TWO)
		} else {
			(Validate-Data $_.LINE_ONE)
		}
		#Compare employee record in CSV file and AD user account.
		if (((Validate-Data $_.TITLE) -ne $ADUser.Title) -or `
		((Validate-Data $_.TITLE) -ne $ADUser.Description) -or `
		((Validate-Data $_.FIRST_NAME) -ne $ADUser.FirstName) -or `
		((Validate-Data $_.LAST_NAME) -ne $ADUser.LastName) -or `
		((Validate-Data $_.EMPLOYEE_NUMBER) -ne $ADUser.EmployeeNumber) -or `
		((Validate-Data $_.JOB_CODE) -ne $ADUser.JobCodeId) -or `
		((Validate-Data $_.FACILITY_ID) -ne $ADUser.FacilityId) -or `
		((Validate-Data $_.AREA_NAME) -ne $ADUser.Area) -or `
		((Validate-Data $_.MARKET_NAME) -ne $ADUser.Market) -or `
		($EmployeeAddress -ne $ADUser.StreetAddress) -or `
		((Validate-Data $_.CITY) -ne $ADUser.City) -or `
		((Validate-Data $_.ZIPCODE) -ne $ADUser.PostalCode) -or `
		((Validate-Data $_.STATE) -ne $ADUser.StateOrProvince))
		{ $_ }
	}
})

#Merge new and terminated employees.
$EmployeeRecordsToProcess = $TerminatedEmployeeRecords + $NewEmployeeRecords + $EmployeeRecordsToUpdate

#Get employee records, and sort them so that records with "Terminated" are at top.
$EmployeeRecordsToProcess = $EmployeeRecordsToProcess | Sort-Object EMPLOYMENT_STATUS -Descending

Select allOpen in new window

Gamgee,Samwise,,,,,,sgamgee
Gamgee,Samwise

Select allOpen in new window

<#  This function can be used to convert the values of Properties that are
    created by the Import-CSV cmdlet when a field is empty
    This can be helpful when comparing to AD attributes that are null.
 Usage:
    $list = Import-CSV userlist.csv
    $list | ForEach { ConvertPropTo-Null $_ }
 or:
    $list | ConvertPropTo-Null
#>

function ConvertPropTo-Null
{
  [CmdletBinding()]
  Param (
    [Parameter(Mandatory=$true,
              ValueFromPipeline=$true)]
    $obj
    )

  Process
  {
    $obj |
     Get-Member -MemberType NoteProperty |
     Select -ExpandProperty Name |
     ForEach `
     {
       If ($obj.$_ -eq "")
       { $obj.$_ = $null }
     }
  }
}

Select allOpen in new window