Solved

query group membership using powershell.

Posted on 2014-02-07
7
1,730 Views
Last Modified: 2014-02-14
Hi,

I need a PS script that allows me to enter a AD group name and return the subgroups, members (Firstname, Lastname, samid).

I see this script from the web.  Can that be used?

Please advise.  

param
(  
    [Parameter(Mandatory=$true,position=0)]
    [String]$GroupName
)

import-module activedirectory

# optional, add a wild card..
# $groups = $groups + "*"

$Groups = Get-ADGroup -filter {Name -like $GroupName} | Select-Object Name

ForEach ($Group in $Groups)
   {write-host " "
    write-host "$($group.name)"
    write-host "----------------------------"

    Get-ADGroupMember -identity $($group.name) -recursive | Select-Object samaccountname

 }
write-host "Export Comlete"
0
Comment
Question by:nav2567
7 Comments
 
LVL 17

Expert Comment

by:Kent Dyer
ID: 39842435
Does it have to be Powershell?  Can you browse / View Active Directory Users and Computers from a member server or DC?  You should be able to check group membership there..  Or, is this for say a regular domain user or manager to check group membership?  Need to understand the audience that would be using such a script..  And is this to add/remove membership or just to simply run queries to verify membership?
0
 
LVL 3

Expert Comment

by:Tommy_Cooper
ID: 39842783
Get-ADGroupMember -Identity MyGroupName

Open in new window



Is where to start.  If this gives you subgroups, just pipe it back to Get-ADGroupMember:

Get-ADGroupMember -Identity MyGroupName |Get-ADroupMember

Open in new window


you can use Select-Object to get the name of the account that is a member and the SamAccountName:

Get-ADGroupMember -Identity MyGroupName |Select-Object Name,SamAccountName

Open in new window

0
 

Author Comment

by:nav2567
ID: 39842888
I am getting this error when trying to execute the script.  Please advise again.

The term 'Get-ADGroupMember' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again.
At C:\script\list group member\list_group_members.ps1:1 char:18
+ Get-ADGroupMember <<<<  -Identity MyGroupName |Select-Object Name,SamAccountName
    + CategoryInfo          : ObjectNotFound: (Get-ADGroupMember:String) [], CommandNotFoundException
    + FullyQualifiedErrorId : CommandNotFoundException
0
Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

 
LVL 40

Expert Comment

by:Subsun
ID: 39843212
You need windows 2008 R2 domain controller to run the AD powershell commands.. If you have it then.. load the activedirectory module before you run the code. You may use Export-csv to export he details to csv file.. And if you you need to add -Recursive switch to get the recursive membership details..
Try..
Import-Module activedirectory
Get-ADGroupMember TestGroup -Recursive | Get-ADUser -Properties * | Select sAMAccountName,givenName,SN | Export-csv C:\report.csv -nti

Open in new window

0
 

Author Comment

by:nav2567
ID: 39843585
Subsun, your script works.

Would you please show me how to have the script to prompt and input a group name and export the group members and sub-group(s)?
0
 
LVL 40

Accepted Solution

by:
Subsun earned 500 total points
ID: 39844262
Try to add parameter to script as shown in the code example which you have posted.. You need to save the code to .ps1 file format and run it from PowerShell console..
param
(  
    [Parameter(Mandatory=$true,position=0)]
    [String]$GroupName
)
Import-Module activedirectory
Get-ADGroupMember $GroupName -Recursive | Get-ADUser -Properties * | Select sAMAccountName,givenName,SN | Export-csv C:\report.csv -nti

Open in new window

Or you can Use Read-Host command..
$GroupName = Read-Host "Input the group name"
Import-Module activedirectory
Get-ADGroupMember $GroupName -Recursive | Get-ADUser -Properties * | Select sAMAccountName,givenName,SN | Export-csv C:\report.csv -nti

Open in new window

0
 

Author Closing Comment

by:nav2567
ID: 39858947
Thanks everyone.
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Create and license users in Office 365 in bulk based on a CSV file. A step-by-step guide with PowerShell script examples.
This article explains how to prepare an HTML email signature template file containing dynamic placeholders for users' Azure AD data. Furthermore, it explains how to use this file to remotely set up a department-wide email signature policy in Office …
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…

831 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question