The vast majority of active directory powershell cmdlets don’t need any enhancement but there is one in particular that I felt could use an alteration: Get-ADGroupMember. When using this command it will return [Microsoft.ActiveDirectory.Management.ADObject] types which can be thrown to a switch statement depending on objectclass and you will get the object’s home AD info. However, when […]
Yet another solution for grabbing Parent OU paths
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 |
$userArr = Get-ADuser -f * -prop CanonicalName foreach($user in $userArr) { if($matches){$matches.Clear()} $user.CanonicalName -match '.*(?=\/)' | Out-Null $user | Add-Member -MemberType NoteProperty -Name 'custom_ParentCN' -Value $matches[0] -Force if($matches){$matches.Clear()} $user.DistinguishedName -match '(?<=,).*' | Out-Null $user | Add-Member -MemberType NoteProperty -Name 'custom_ParentDN' -Value $matches[0] -Force } $userArr | sort surname | select surname,givenname,custom* | ft -a |
The inspiration for this post came from my OpenVPN AWS instance and recent experience testing Server 2016 ADFS. I wanted to stretch my legs beyond the simple flat certs I used for ADFS and sort of re-create a root CA signing event. The OpenVPN Access Server was a great platform as it expects a CA bundle, […]
I needed something quick to report on all O365 tenant role group members and ran into a minor annoyance when I found the role GUID is needed to list role members. The following will get, sort, and display all tenant role members
|
1 2 3 |
Get-MsolRole | % {$x=$_.name; Get-MsolRoleMember -RoleObjectId $_.objectID.guid | select @{n='RoleName';e={$x}},DisplayName,EmailAddress} | sort RoleName,Displayname |
In a follow up to the O365 powershell module install post I added a new script on Github to connect to the various services. The initial version is pretty light on validation but it will get you connected to 5 different O365 providers assuming the various prereqs have been installed and your admin account has […]
I hope MS will consolidate the O365 Powershell modules in the future. As it stands today your best bet is to find this page, follow the links to download four Powershell modules, and establish connections to the various MS online providers. Or run the following if you have a minute. Certain assumptions are made below, like Skype […]
Might as well have a recursive function in the first post eh? I stumbled across this script to discover circular Active Directory group memberships but was inspired to get a more visual representation after reading the FAQ section. Group membership details used for demonstration: Script output comparison: The script will pull in all AD groups […]