Powershell

---

AD Group Membership (Member(s) and Member of)

AD Group Membership (Member(s) and Member of) #powershell script to pull AD Group Membership using traditional ADSI method Will collect both Members and Member of Run the script in this format: .\ListGroupMembers.ps1 -DomainName mydomain.com -GroupName “Domain admins”

AD Group Membership

PowerShell

<# .Synopsis List/Export Group Members of a Given Group From Domain .EXAMPLE .\ListGroupMembers.ps1 -DomainName mydomain.com -GroupName "Domain admins" .Author Murali M Palla .Contact contact@muralipalla.com .Version v1 - March-12,2015 v2 - March-31,2015 - Added getting Member of list #> [CmdletBinding()] param( [parameter(Mandatory=$TRUE,Position=0,ValueFromPipeline=$False)] [String] $DomainName, [parameter(Mandatory=$TRUE,Position=1,ValueFromPipeline=$False)] [String] $GroupName ) clear function DN2CN([__ComObject] $object,[String] $method, $parameters) { $object.GetType().InvokeMember($method,"InvokeMethod", $NULL, $object, $parameters) } $ScriptStart = Get-Date -Format dd-MMM-yyyy-hh-mm-ss $Report = "$($GroupName)_$ScriptStart.csv" $error.Clear() $ADS_NAME_INITTYPE_GC = 3 $ADS_NAME_TYPE_NT4 = 3 $ADS_NAME_TYPE_1779 = 1 $ADS_NAME_TYPE_Display = 4 $GetLDAPDN = New-Object System.DirectoryServices.DirectoryEntry("LDAP://$DomainName") -ErrorAction SilentlyContinue $Domain = $GetLDAPDN.distinguishedName if ($Domain) { write-host "Domain Name: $Domain" $searcher = New-Object System.DirectoryServices.DirectorySearcher($GetLDAPDN) $searcher.Filter = "(&(objectCategory=Group)(name=$($GroupName)))" [System.DirectoryServices.SearchResult]$result = $searcher.FindOne() if($result) { $MemberCount = ($result.Properties.member).count $MemberOfCount = ($result.Properties.memberof).count Write-Host "$GroupName has $MemberCount members, and is part of $MemberOfCount Groups" $GroupCollection = @() foreach ($member in $result.Properties.member) { $dn = $member $TranslateOBJ = New-Object -ComObject "NameTranslate" DN2CN $TranslateOBJ "Init" ($ADS_NAME_INITTYPE_GC, "") DN2CN $TranslateOBJ "Set" ($ADS_NAME_TYPE_1779,$DN) $loginName = DN2CN $TranslateOBJ "Get" ($ADS_NAME_TYPE_NT4) try {$error.Clear();$displayName = DN2CN $TranslateOBJ "Get" ($ADS_NAME_TYPE_Display)} catch {if($error.Count){};$displayName=""} $GroupObject = New-Object -TypeName psobject Add-Member -InputObject $GroupObject -MemberType NoteProperty -Name Domain -Value "$DomainName" Add-Member -InputObject $GroupObject -MemberType NoteProperty -Name GroupName -Value "$GroupName" Add-Member -InputObject $GroupObject -MemberType NoteProperty -Name Member -Value "$loginName" Add-Member -InputObject $GroupObject -MemberType NoteProperty -Name MemberOf -Value "" Add-Member -InputObject $GroupObject -MemberType NoteProperty -Name DisplayName -Value "$displayName" Add-Member -InputObject $GroupObject -MemberType NoteProperty -Name Location -Value "$member" $GroupCollection += $GroupObject } foreach ($member in $result.Properties.memberof) { $dn = $member $TranslateOBJ = New-Object -ComObject "NameTranslate" DN2CN $TranslateOBJ "Init" ($ADS_NAME_INITTYPE_GC, "") DN2CN $TranslateOBJ "Set" ($ADS_NAME_TYPE_1779,$DN) $loginName = DN2CN $TranslateOBJ "Get" ($ADS_NAME_TYPE_NT4) try {$error.Clear();$displayName = DN2CN $TranslateOBJ "Get" ($ADS_NAME_TYPE_Display)} catch {if($error.Count){};$displayName=""} $GroupObject = New-Object -TypeName psobject Add-Member -InputObject $GroupObject -MemberType NoteProperty -Name Domain -Value "$DomainName" Add-Member -InputObject $GroupObject -MemberType NoteProperty -Name GroupName -Value "$GroupName" Add-Member -InputObject $GroupObject -MemberType NoteProperty -Name Member -Value "" Add-Member -InputObject $GroupObject -MemberType NoteProperty -Name MemberOf -Value "$loginName" Add-Member -InputObject $GroupObject -MemberType NoteProperty -Name DisplayName -Value "$displayName" Add-Member -InputObject $GroupObject -MemberType NoteProperty -Name Location -Value "$member" $GroupCollection += $GroupObject } } else {Write-Host "$GroupName not found" -ForegroundColor Red } } else {Write-Host "Unable to Query $DomainName, if you are sure that the Name is Correct, Please try in a different fromat" -ForegroundColor Red } $GroupCollection | Export-Csv -Path $Report -NoTypeInformation

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88

<# .Synopsis    List/Export Group Members of a Given Group From Domain .EXAMPLE    .\ListGroupMembers.ps1 -DomainName mydomain.com -GroupName "Domain admins" .Author    Murali M Palla .Contact     contact@muralipalla.com .Version     v1 - March-12,2015     v2 - March-31,2015 - Added getting Member of list #> [CmdletBinding()] param(   [parameter(Mandatory=$TRUE,Position=0,ValueFromPipeline=$False)]     [String] $DomainName,   [parameter(Mandatory=$TRUE,Position=1,ValueFromPipeline=$False)]     [String] $GroupName ) clear function DN2CN([__ComObject] $object,[String] $method, $parameters) {   $object.GetType().InvokeMember($method,"InvokeMethod", $NULL, $object, $parameters) } $ScriptStart = Get-Date -Format dd-MMM-yyyy-hh-mm-ss $Report = "$($GroupName)_$ScriptStart.csv" $error.Clear() $ADS_NAME_INITTYPE_GC = 3 $ADS_NAME_TYPE_NT4 = 3 $ADS_NAME_TYPE_1779 = 1 $ADS_NAME_TYPE_Display = 4 $GetLDAPDN = New-Object System.DirectoryServices.DirectoryEntry("LDAP://$DomainName") -ErrorAction SilentlyContinue $Domain = $GetLDAPDN.distinguishedName if ($Domain) {     write-host "Domain Name: $Domain"     $searcher = New-Object System.DirectoryServices.DirectorySearcher($GetLDAPDN)     $searcher.Filter = "(&(objectCategory=Group)(name=$($GroupName)))"     [System.DirectoryServices.SearchResult]$result = $searcher.FindOne()     if($result)     {         $MemberCount = ($result.Properties.member).count         $MemberOfCount = ($result.Properties.memberof).count         Write-Host "$GroupName has $MemberCount members, and is part of $MemberOfCount Groups"         $GroupCollection = @()         foreach ($member in $result.Properties.member)         {             $dn = $member                   $TranslateOBJ = New-Object -ComObject "NameTranslate"             DN2CN $TranslateOBJ "Init" ($ADS_NAME_INITTYPE_GC, "")             DN2CN $TranslateOBJ "Set" ($ADS_NAME_TYPE_1779,$DN)                         $loginName = DN2CN $TranslateOBJ "Get" ($ADS_NAME_TYPE_NT4)             try {$error.Clear();$displayName = DN2CN $TranslateOBJ "Get" ($ADS_NAME_TYPE_Display)}             catch {if($error.Count){};$displayName=""}             $GroupObject = New-Object -TypeName psobject             Add-Member -InputObject $GroupObject -MemberType NoteProperty -Name Domain -Value "$DomainName"             Add-Member -InputObject $GroupObject -MemberType NoteProperty -Name GroupName -Value "$GroupName"             Add-Member -InputObject $GroupObject -MemberType NoteProperty -Name Member -Value "$loginName"             Add-Member -InputObject $GroupObject -MemberType NoteProperty -Name MemberOf -Value ""             Add-Member -InputObject $GroupObject -MemberType NoteProperty -Name DisplayName -Value "$displayName"             Add-Member -InputObject $GroupObject -MemberType NoteProperty -Name Location -Value "$member"             $GroupCollection += $GroupObject         }         foreach ($member in $result.Properties.memberof)         {             $dn = $member                   $TranslateOBJ = New-Object -ComObject "NameTranslate"             DN2CN $TranslateOBJ "Init" ($ADS_NAME_INITTYPE_GC, "")             DN2CN $TranslateOBJ "Set" ($ADS_NAME_TYPE_1779,$DN)                         $loginName = DN2CN $TranslateOBJ "Get" ($ADS_NAME_TYPE_NT4)             try {$error.Clear();$displayName = DN2CN $TranslateOBJ "Get" ($ADS_NAME_TYPE_Display)}             catch {if($error.Count){};$displayName=""}             $GroupObject = New-Object -TypeName psobject             Add-Member -InputObject $GroupObject -MemberType NoteProperty -Name Domain -Value "$DomainName"             Add-Member -InputObject $GroupObject -MemberType NoteProperty -Name GroupName -Value "$GroupName"             Add-Member -InputObject $GroupObject -MemberType NoteProperty -Name Member -Value ""             Add-Member -InputObject $GroupObject -MemberType NoteProperty -Name MemberOf -Value "$loginName"             Add-Member -InputObject $GroupObject -MemberType NoteProperty -Name DisplayName -Value "$displayName"             Add-Member -InputObject $GroupObject -MemberType NoteProperty -Name Location -Value "$member"             $GroupCollection += $GroupObject         }     }     else {Write-Host "$GroupName not found" -ForegroundColor Red } }   else {Write-Host "Unable to Query $DomainName, if you are sure that the Name is Correct, Please try in a different fromat" -ForegroundColor Red } $GroupCollection | Export-Csv -Path $Report -NoTypeInformation

  1,394 total views, no views today

1,394 total views, no views today

---

List Remote Domain(s) Trusts & Functional Levels – Powershell Script

Powershell Script to List Multiple Remote Domain(s) Trusts and Functional Levels including the Trust Status. Copy all the Domains you wish to get this report run on a text file and name it “domains.txt” Place it in the same location as the script and run […]

1,816 total views, no views today

---

Audit Server Reboots (Powershell Script)

As an extension to my article on how to Audit Server Reboots, I have put forth a small script that might come handy. I consciously choose implementing WMI rather than inbuilt command lets as there were several Legacy OS’s still in our enterprise and using […]

1,347 total views, 1 views today

---

Check and Delete .BLG Files in “C:\PerfLogs\Admin” folder that are older than 2 days

Last night I was approached to script a tool that can Check and Delete .BLG Files in “C:\PerfLogs\Admin” folder that are older than 2 days. I choose #PowerShell for obvious reasons and here is something I put in real quick.. This script can be modified to […]

2,505 total views, no views today

---