Posted On March 31, 2019

Sync AD OU Containers with Group Memberships

kimconnect 0 comments
blog.KimConnect.com >> Codes >> Sync AD OU Containers with Group Memberships
Script to Add Group Membership:
for /f "tokens=*" %A IN ('dsquery user %PATH_TO_OU%') DO dsmod user %A -addmbr %PATH_TO_GROUP%

PowerShell:
dsquery computer "ou=computers,dc=MyDomain,dc=com" | dsmod group "cn=Test Group,ou=test computers,dc=MyDomain,dc=com" -chmbr

PowerShell Full Script:
----
Import-Module ActiveDirectory
$groupname = PseudoDynamicGroup
$users = Get-ADUser -Filter * -SearchBase "ou=OU_Container,dc=DOMAIN_NAME,dc=local"
foreach($user in $users)
{
Add-ADGroupMember -Identity $groupname -Member $user.samaccountname -ErrorAction SilentlyContinue
}
$members = Get-ADGroupMember -Identity $groupname
foreach($member in $members)
{
if($member.distinguishedname -notlike "*ou=desiredUsers,dc=domain,dc=tld*")
{
Remove-ADGroupMember -Identity $groupname -Member $member.samaccountname
}
}

Leave a Reply

Your email address will not be published. Required fields are marked *

Related Post

PowerShell: Update Local Windows Using COM Objects – Legacy Compatible

Although this function requires 'interactive' or console sessions, it can be trigged by Windows Scheduled…

PowerShell Script to Copy Members of One Group to Another

#Author: Kim Doan#Please tell me this code suck so that I can improve # Adding…

Servers Reboot Script

rem method 1: machines that are part of the domainsc \\DOMINO01 stop "Lotus Domino Server…
Other project: DragonCoin.com