This is the quick snippet to be executed in the context of a Domain Administrator:

# copyGroupMemberships.ps1
# version 0.0.2
# This updated version would distinguish between groups and users and proceed accordingly

$fromIdentity='TESTPRINCIPLE'
$toIdentity="TESTPRINCIPLE2"

function copyGroupMemberships($fromIdentity,$toIdentity){
  function copyUserToUserGroupMemberships($fromIdentity,$toIdentity){
    $ErrorActionPreference='stop'
    try{
      Import-module activedirectory
      $groupNames=(Get-ADPrincipalGroupMembership $fromIdentity).Name     
      $groupNames|%{try{Add-ADGroupMember -Identity "$_" -Members $toIdentity -ea SilentlyContinue}catch{}}
      $currentMemberships=(Get-ADPrincipalGroupMembership $toIdentity).Name
      write-host "User '$env:USERDOMAIN\$toIdentity' now has these memberships:`r`n---------------------------------`r`n$($currentMemberships|out-string)"
      return $true
    }catch{
      write-warning $_
      return $false
    }
  }
  function copyGroupToGroup($fromGroup,$toGroup){
    try{
      $members=Get-ADGroupMember $fromGroup
      Add-ADGroupMember -identity $toGroup -Members $members
      return $true
    }catch{
      write-warning $_
      return $false
    }
  }
  function copyUserToGroup($fromUser,$toGroup){
    try{
      $groupNames=(Get-ADPrincipalGroupMembership $fromUser).Name 
      Add-ADGroupMember -identity $toGroup -Members $groupNames
      return $true
    }catch{
      write-warning $_
      return $false
    }    
  }
  function copyGroupToUser($fromGroup,$toUser){
    try{
      $members=Get-ADGroupMember $fromGroup
      $groupNames|%{try{Add-ADGroupMember -Identity "$_" -Members $toUser -ea SilentlyContinue}catch{}}
      return $true
    }catch{
      write-warning $_
      return $false
    }   
  }
  $isFromIdentityUserObject=try{$null=Get-ADPrincipalGroupMembership $fromIdentity;$true}catch{$false}
  $isToIdentityUserObject=try{$null=Get-ADPrincipalGroupMembership $toIdentity;$true}catch{$false}
  $isFromIdentityGroupObject=try{$null=Get-ADPrincipalGroupMembership $fromIdentity;$true}catch{$false}
  $isToIdentityGroupObject=try{$null=Get-ADPrincipalGroupMembership $toIdentity;$true}catch{$false}
  if($isFromIdentityUserObject -and $isToIdentityUserObject){
    copyUserToUserGroupMemberships $fromIdentity $toIdentity
  }elseif($isFromIdentityGroupObject -and $isToIdentityGroupObject){
    copyGroupToGroup $fromIdentity $toIdentity
  }elseif($isFromIdentityUserObject -and $isToIdentityGroupObject){
    copyUserToGroup $fromIdentity $toIdentity
  }elseif($isFromIdentityGroupObject -and $isToIdentityUserObject){
    copyGroupToUser $fromGroup $toUser
  }else{
    write-warning "Unable to process memberships of $fromIdentity to $toIdentity"
  }
}

# copyGroupMemberships.ps1
# version 0.0.1

$fromIdentity='jesters'
$toIdentity="destinationUsername"
function copyGroupMemberships($fromIdentity,$toIdentity){
   $erroractionpreference='stop'
   try{
    Import-module activedirectory
    $groupNames=(Get-ADPrincipalGroupMembership $fromIdentity).Name
    $groupNames|%{Add-ADGroupMember -Identity "$_" -Members $toIdentity -ea SilentlyContinue}
    $currentMemberships=(Get-ADPrincipalGroupMembership $toIdentity).Name
    write-host "$toIdentity now has these memberships:`r`n---------------------------------`r`n$($currentMemberships|out-string)"
    return $true
   }catch{
    write-warning $_
    return $false
   }
}

copyGroupMemberships $fromIdentity $toIdentity

# membershipcopy.bat

@echo off
cls
rem set /p AdminID=Please Input Admin UserID:
rem set / AdminPassword=Please Input Admin Password:

Set /p CopyFrom=Copy From:
Set /p CopyTo=Copy To:

FOR /f "Tokens=*" %%a in ('dsquery user -samid %CopyTo%') DO Set CopyTo=%%a
 
IF NOT DEFINED CopyTo (
    ECHO Could not find %CopyTo% in AD
    GOTO :EOF
)
 
FOR /f "Tokens=*" %%a in ('dsquery user -samid %CopyFrom%') DO Set CopyFrom=%%a
IF NOT DEFINED CopyFrom (
    ECHO Could not find %CopyFrom% in AD
    GOTO :EOF
)
 
ECHO Copying groups from user %CopyFrom% to user %CopyTo%...
ping 127.0.0.1 -n 2 > nul
ECHO ===============================================================================
ECHO Copying groups from user %CopyFrom% to user %CopyTo%...

FOR /f "Tokens=*" %%a in ('dsget user %CopyFrom% -memberof') do (
    dsmod GROUP %%a -addmbr %CopyTo% | find /i "dsmod succeeded:"
)
ECHO ===============================================================================
ping 127.0.0.1 -n 2 > nul
echo press any key to continue...
pause > nul
cls
exit
# groupCopy.ps1

import-module activedirectory
Do 
{
$fromGroup = Read-Host -Prompt 'Copy From Group:'
$toGroup =  Read-Host -Prompt 'Copy To Group:'
Add-ADGroupMember -Identity $toGroup -Members (Get-ADGroupMember -Identity $fromGroup -Recursive)
$flag = Read-Host -Promp 'Press Any Key = exit; C = Continue Copying...'
} while ($flag -match '[Cc]')
Categories: