Get adgroup from user with a specific prefix

Welcome Forums General PowerShell Q&A Get adgroup from user with a specific prefix

This topic contains 2 replies, has 3 voices, and was last updated by

 
Participant
1 year ago.

  • Author
    Posts
  • #89389

    Participant
    Points: 0
    Rank: Member

    Hello all.

    This is my first post hear and I am still quite new at PS.

    I have created an Active Directory auditing script that loops through all user objects and analyzes them for compliance.

    All users have belong to one group that has the prefix ABCD. This denotes their department and establishes access to many systems.

    In the main loop there is the Variable $Aduser. This is the current user object being scanned.

    I have googled and tinkered quite a bit but with no success.

    My basic question is how to I get to here: $ABCD-Group = ?????????

    Thanks a lot!

  • #89392

    Participant
    Points: 270
    Helping Hand
    Rank: Contributor

    Hmmmm .... most of the time we are not that good with guessing. 😉 You should show the code or the code snipet you already have and the problem with it. You should format it as code please and provide error messages if you get some (Ideally formatted as code as well). 😉
    Regardless of that, what did you search for? I cannot hardly imagine that you could not find an answer for such a trivial question. I assume you arleady noticed that Get-ADUser only outputs a subset of properties by default. If you like to get some more attributes from AD you have to specify what attributes you're after. .... like this:

    Get-ADuser -Identity 'SamAccountName' -Properties MemberOf
  • #89398

    Participant
    Points: 332
    Helping Hand
    Rank: Contributor

    Ditto to what Olaf stated, but if the group is always called '$ABCD-', then you just string match.

    I have not such group, so using one I have...

    # List all group whose name starts with Lab
    Get-ADGroup -Filter * | Where Name -like 'Lab*'

    # Get all AD users and select only those with principal group membership where group name matches LabU
    ( Get-ADUser -Filter * | Get-ADPrincipalGroupMembership ) -match 'LabU'

The topic ‘Get adgroup from user with a specific prefix’ is closed to new replies.