Solved

query group membership using powershell.

Posted on 2014-02-07
7
1,760 Views
Last Modified: 2014-02-14
Hi,

I need a PS script that allows me to enter a AD group name and return the subgroups, members (Firstname, Lastname, samid).

I see this script from the web.  Can that be used?

Please advise.  

param
(  
    [Parameter(Mandatory=$true,position=0)]
    [String]$GroupName
)

import-module activedirectory

# optional, add a wild card..
# $groups = $groups + "*"

$Groups = Get-ADGroup -filter {Name -like $GroupName} | Select-Object Name

ForEach ($Group in $Groups)
   {write-host " "
    write-host "$($group.name)"
    write-host "----------------------------"

    Get-ADGroupMember -identity $($group.name) -recursive | Select-Object samaccountname

 }
write-host "Export Comlete"
0
Comment
Question by:nav2567
7 Comments
 
LVL 17

Expert Comment

by:Kent Dyer
ID: 39842435
Does it have to be Powershell?  Can you browse / View Active Directory Users and Computers from a member server or DC?  You should be able to check group membership there..  Or, is this for say a regular domain user or manager to check group membership?  Need to understand the audience that would be using such a script..  And is this to add/remove membership or just to simply run queries to verify membership?
0
 
LVL 3

Expert Comment

by:Tommy_Cooper
ID: 39842783
Get-ADGroupMember -Identity MyGroupName

Open in new window



Is where to start.  If this gives you subgroups, just pipe it back to Get-ADGroupMember:

Get-ADGroupMember -Identity MyGroupName |Get-ADroupMember

Open in new window


you can use Select-Object to get the name of the account that is a member and the SamAccountName:

Get-ADGroupMember -Identity MyGroupName |Select-Object Name,SamAccountName

Open in new window

0
 

Author Comment

by:nav2567
ID: 39842888
I am getting this error when trying to execute the script.  Please advise again.

The term 'Get-ADGroupMember' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again.
At C:\script\list group member\list_group_members.ps1:1 char:18
+ Get-ADGroupMember <<<<  -Identity MyGroupName |Select-Object Name,SamAccountName
    + CategoryInfo          : ObjectNotFound: (Get-ADGroupMember:String) [], CommandNotFoundException
    + FullyQualifiedErrorId : CommandNotFoundException
0
Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

 
LVL 40

Expert Comment

by:Subsun
ID: 39843212
You need windows 2008 R2 domain controller to run the AD powershell commands.. If you have it then.. load the activedirectory module before you run the code. You may use Export-csv to export he details to csv file.. And if you you need to add -Recursive switch to get the recursive membership details..
Try..
Import-Module activedirectory
Get-ADGroupMember TestGroup -Recursive | Get-ADUser -Properties * | Select sAMAccountName,givenName,SN | Export-csv C:\report.csv -nti

Open in new window

0
 

Author Comment

by:nav2567
ID: 39843585
Subsun, your script works.

Would you please show me how to have the script to prompt and input a group name and export the group members and sub-group(s)?
0
 
LVL 40

Accepted Solution

by:
Subsun earned 500 total points
ID: 39844262
Try to add parameter to script as shown in the code example which you have posted.. You need to save the code to .ps1 file format and run it from PowerShell console..
param
(  
    [Parameter(Mandatory=$true,position=0)]
    [String]$GroupName
)
Import-Module activedirectory
Get-ADGroupMember $GroupName -Recursive | Get-ADUser -Properties * | Select sAMAccountName,givenName,SN | Export-csv C:\report.csv -nti

Open in new window

Or you can Use Read-Host command..
$GroupName = Read-Host "Input the group name"
Import-Module activedirectory
Get-ADGroupMember $GroupName -Recursive | Get-ADUser -Properties * | Select sAMAccountName,givenName,SN | Export-csv C:\report.csv -nti

Open in new window

0
 

Author Closing Comment

by:nav2567
ID: 39858947
Thanks everyone.
0

Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

"Migrate" an SMTP relay receive connector to a new server using info from an old server.
The following article is intended as a guide to using PowerShell as a more versatile and reliable form of application detection in SCCM.
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…

840 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question