Organizational Research By

Surprising Reserch Topic

how to list ad group membership for ad users using input list using -'powershell,active-directory,membership'


how to list ad group membership for ad users using input list  using -'powershell,active-directory,membership'

I'm fairly new PS user... Looking for some assistance with a powershell script to obtain list of security groups user is member of.

To describe what I need:


I have input list (txt file) with many users (samaccountnames). Every name is on a new line.
I need the script to search these names in AD - whole forest, not just one single domain
output should look like "samaccountname" and list of groups this account is member of in one line, so I can sort it in excel


This is the script I have:

$users = Get-Content C:\users.txt

ForEach ($User in $users) {
$getmembership = Get-ADUser $User.Users -Properties MemberOf | Select -ExpandProperty memberof
$getmembership | Out-File -Append c:\membership.txt
}


but it throws me an error:

Get-ADUser : Cannot validate argument on parameter 'Identity'. The argument is null. Supply a non-null argument and try the command again.
At line:4 char:28
+ $getmembership = Get-ADUser <<<<  $User.Users -Properties MemberOf | Select -ExpandProperty memberof
    + CategoryInfo          : InvalidData: (:) [Get-ADUser], ParameterBindingValidationException
    + FullyQualifiedErrorId : ParameterArgumentValidationError,Microsoft.ActiveDirectory.Management.Commands.GetADUser


Anyway, this script wouldn't search the whole forest.

Sample input list:

username1
username2
username3
username4... etc


Sample output list

username1;group1;group2;group3
username2;group1;group2;group3;group4... etc or something similar


Any help would be greatly appreciated.
    
asked Sep 7, 2015 by rajesh
0 votes
4 views



Related Hot Questions



Government Jobs Opening


...