Solved

AD User Modification PS script won't update user properties if manager ID is not available in AD

Posted on 2016-10-22
8
96 Views
Last Modified: 2016-10-24
Help required for user modification script on list of users

The script has condition that if user manager is available in AD, set the same along with other properties, if not it should update the other properties

# Start of script
Import-Module ActiveDirectory

# Import File
$Users = Import-Csv "C:\userupdate\users.csv"
#Processing each user
Foreach ($User in $Users) {
    
    try {
        $ADUser = $null

        
        $ADUser = Get-ADUser -Identity $User.Username -ErrorAction SilentlyContinue
        if ($ADUser -ne $null) {
            $Manager = $null
            $Manager = Get-ADUser -Identity $User.ManagerID -ErrorAction SilentlyContinue
            if ($Manager -ne $null) {
                Set-ADUser -Identity $ADUser -Department $User.Department -Manager $user.ManagerID `
                -EmailAddress $User.Email -Company $user.Company -MobilePhone $user.CellPhone -Title $user.Title
                                
            }
            else {
                Set-ADUser -Identity $ADUser -Department $User.Department `
                -EmailAddress $User.Email -Company $user.Company -MobilePhone $user.CellPhone -Title $user.Title
                
            }
        }
       
             "$($ADUser.sAMAccountName), User Modified Successfully" | Out-File -FilePath "C:\userupdate\result.txt" -Append -Force
    }
# Catch error if any
    catch {
        "$($ADUser.sAMAccountName), Failed" | Out-File -FilePath "C:\userupdate\result.txt" -Append -Force
        $error[0] | Out-File "C:\userupdate\errorlog.txt" -Append
    }
}

Open in new window


No matter what I do, if manager ID is not available in AD, script simply won't process that user and don,t update other properties of that user

I wanted that if manager id is not available in AD, still script should process other properties

Any help would be highly appreciated
0
Comment
Question by:Mahesh
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
8 Comments
 
LVL 40

Expert Comment

by:footech
ID: 41856186
Try modifying line 23 to
$ADUser | Set-ADUser -Department $User.Department `

Open in new window


Also, why are you setting -ErrorAction to SilentlyContinue?  It pretty much negates the purpose of the try...catch block.
0
 
LVL 81

Expert Comment

by:David Johnson, CD, MVP
ID: 41856284
Does every user in your csv have a ManagerID?
Line 18
if (($Manager -ne $null) -and ($user.ManagerID -ne $nulll) ){
0
 
LVL 37

Author Comment

by:Mahesh
ID: 41856295
Tried that

Still no luck

what should be -Erroraction ?
0
Office 365 Training for Admins

Learn how to provision tenants, synchronize on-premise Active Directory, and implement Single Sign-On with these master level course.  Only from Platform Scholar

 
LVL 37

Author Comment

by:Mahesh
ID: 41856297
yes csv has managerID defined because it is import from some other HRMS tool but those managerID may not available in AD

As soon as script did not find managerID in AD, it simply ignore that user by ignoring all conditions (if else etc)
0
 
LVL 25

Accepted Solution

by:
Coralon earned 250 total points
ID: 41856381
You might try reworking it.. something like this..
Import-Module -Name ActiveDirectory -ErrorAction SilentlyContinue

$Users = Import-Csv -Path 'C:\userupdate\users.csv'

foreach ($User in $Users)
{
	Try
	{
		$ADUser = Get-ADUser -identity $User.UserName 
		Try
		{
		Set-ADUser -Identity $ADUser -Department $User.Department -EmailAddress $User.Email -Company $user.Company -MobilePhone $user.CellPhone -Title $user.Title
		}
		catch
		{
			"$($ADUser.sAMAccountName), User Modified Successfully (base properties)" | Out-File -FilePath "C:\userupdate\result.txt" -Append -Force
		}
		$ManagerID = $User.ManagerID
		
		if ($ManagerID) 
		{
			Try
			{
				$Manager = Get-ADUser -identity $ManagerID 
				Set-ADUser -identity $ADUser -Manager $Manager 
				"$($ADUser.sAMAccountName), User Modified Successfully" | Out-File -FilePath "C:\userupdate\result.txt" -Append -Force
			}
			catch
			{
				Write-Output "The ManagerID for $($User.username) does not exist in ActiveDirectory"
			}
		}
		else
		{
			Write-Output "No ManagerID specified for $($User.UserName)"
		}
	}
	catch
	{
		"$($ADUser.sAMAccountName), Failed" | Out-File -FilePath 'C:\userupdate\result.txt' -Append -Force
        $error[0] | Out-File 'C:\userupdate\errorlog.txt' -Append
	{
	Remove-Variable ManagerID, Manager
}

Open in new window


Coralon
0
 
LVL 40

Assisted Solution

by:footech
footech earned 250 total points
ID: 41857481
I take back my comment about the -ErrorAction parameter.  I thought that Get-ADUser threw a non-terminating error, and you had to set -ErrorAction to Stop (making the error terminating) to get Try/Catch to work with it.  But I can't replicate the behavior now, so maybe my memory is faulty.  In any case, what was happening with your original code was that as soon as any error was thrown by the Get-ADUser command, whether on line 13 or 16, the catch block would be called to handle it.

I think Coralon's approach is good using multiple try/catch blocks.  Another way would be to change your Get-ADUser commands to use the -Filter parameter instead of -Identity, which won't through any errors if no matches are found.
0
 
LVL 37

Author Comment

by:Mahesh
ID: 41858038
"Get-Aduser" if identity failed / didn't exists, it will pass on to next line in csv file

Basically if I try to modify "Manager" field along with other attributes, if manager id is not available in AD, it will simply ignore user for attributes as well.

I tried "if else" loop with filter specified for manager id and it also working, but then its unable to generate error code in errorlogfile if manager id is not available in AD

Hence I moved manager id modification to new line and now its started working.
I have modified code as below

# Start of script
Import-Module ActiveDirectory -ErrorAction Stop

# Define result and error log file
$DateTime = Get-Date -Format ddMMyyyy_HHmm
$ResultLogFile = "C:\userupdate\ResultLogFile_$DateTime.txt"
$ErrorLogFile = "C:\userupdate\ErrorLogFile_$DateTime.txt"
# Import File
$Users = Import-Csv "C:\userupdate\users.csv"
#Processing each user
Foreach ($User in $Users) {
    
    try {
        $ADUser = $null

        $ADUser = Get-ADUser -Identity $User.Username -ErrorAction SilentlyContinue
        if ($ADUser -ne $null) {
                Set-ADUser -Identity $ADUser -Department $User.Department -Manager $user.ManagerID `
                -EmailAddress $User.Email -Company $user.Company -MobilePhone $user.CellPhone -Title $user.Title
		        Set-Aduser -Identity $ADUser -Manager $user.ManagerID -ErrorAction SilentlyContinue }
            											       
	"$($ADUser.sAMAccountName), User Modified Successfully" | Out-File -FilePath $ResultLogFile -Append -Force
        }
            
       
# Catch error if any
    catch {
            if($ADUser.SamAccountName -eq $null) 
                { 
                    "$($user.Username),Account does not exists in AD" | Out-File -FilePath $ResultLogFile -Append -Force 
                                                                                                                          }
            else
                    { 
                      "$($ADUser.SamAccountName),User Modified Successfully but failed to update Manager field because its not availabe in AD" | Out-File -FilePath $ResultLogFile -Append -Force 
                                                                                                                                                                                                    }
                $($ADuser.SamAccountName) + " : " + $error[0].ToString() | Out-File $ErrorLogFile -Append
    }
}

Open in new window

0
 
LVL 37

Author Closing Comment

by:Mahesh
ID: 41858039
I am awarding points to Coralon and Footech both because both have provided valid inputs which helps me to resolve the issue
0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Had a business requirement to store the mobile number in an environmental variable. This is just a quick article on how this was done.
This article is a collection of issues that people face from time to time and possible solutions to those issues. I hope you enjoy reading it.
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

732 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question