Search results for '(app:forums OR groupid:24)' matching tag 'Active Directory'

Set quota on C:\ drive for a specific group

MyztiquL — Thu, 02 May 2013 05:00:00 GMT

Hey guys,

First off all, I spent a lot of time researching this on the internet and I haven't found a solution yet so I decided to make an account to finally solve it.
The situation: Windows 2008 server, I have a database filled with users, I have a script that adds certain users of a specified department to the Active Directory and creates a group and an organisational unit for those users.
I now want that group of users to have the same quota (specified by another inputbox) on the local C:\ drive of the local server where the script runs on.

I'm sorry if my question is a little vague but is there any way this is possible using Powershell?

Execute adamsync from another host

svizzero81 — Wed, 17 Apr 2013 05:00:00 GMT

Hi all,

How can I remotely execute adamsync command?

Use the following command:

Invoke-Command -ComputerName hostname -SCriptBlock {c:\Windows\ADAM\adamsync /sync hostname:389 "ou=people,dc=example,dc=com" /creds DOMAIN Administrator Password} -Credential $cred

Error Logs:

Ldap error occured. ldap_get_next_page_s: Operations Error.

Extended Info: 000004DC: LdapErr: DSID-0C0906E8, comment: In order to perform this operation a successful bind must be completed on the connection., data 0, v1db1.

If I run my script locally:

c:\Windows\ADAM\adamsync /sync hostname:389 "ou=people,dc=example,dc=com" /creds DOMAIN Administrator Password

It works correctly.

Marco

Get-QADObject Memory Issues

Sam_A — Thu, 04 Apr 2013 05:00:00 GMT

Good Afternoon,

I'm tried looking around the web for this issue, but have not been able to find a definite solution.

QUICK OVERVIEW: My company had to change email servers. In the process we migrated just under 4,000 users to the new email system. As a transition phase during the migration a contact was created for each user with the new email address. The user account was then pointed to forward mail to this contact. I wrote a Powershell 3.0 script using the Quest AD Module to delete the contacts and update the corresponding user account with the new email information. The script works excellent on a small scale, but starts throwing "Out of Memory" errors when it gets to about 600+ users. I'm not sure what I'm missing or how to catch / fix this memory leak. Any recommendations would be greatly appreciated.

ATTEMPTED SOLUTIONS: The script initually did everything under 1 function: export the contacts with all attributes (my failsafe in case something went horribly wrong), found the user account that corresponds to the contact, exported user info (again failsafe), deleted contact, updated user, export the user with the new settings. After reading on the few forums I found that were relevant, I tried implementing Clear-Variable, [GC]::Collect(), Remove-Variable throughout the script, but did not see any impact on the memory usage. Under this initial script, I was using about 1.6GB of RAM about 1/3 into the script. The code for the script I'm posint below is version 6. In this one I'm Including all properties on my queries for the export purposes. In previous versions I was only selecting the properies I needed, but then had to do another Get-QADObject/User with full properties for the export. In the end, the script crashed with the "Out of Memory" error regardless of whether I was getting all properies or only the selected ones. I also played around with different PageSize settings and setting it to 25 seemed to speed the process up the most, but had no noticeable impact on the memory consumption. In one version of the script I even tried a While (contacts exist) { process accounts with SizeLimit '250'}. During the testing phase I wasn't actually makeing the changes, just moving the contacts to another OU. In theory I though that setting the size limit would fix my issue, but it had no impact to the overall result.

I finally broke the script into functions and pipelined the whole process (see code below: code has been slightly modified to hide true variable values and condense comments and custom messages).

ERROR MESSAGES: These are the error messages I'm receiving. As you can see, the system has plenty of RAM available, but the script is using ~ 1.4GB. I'm not 100% sure what the 2nd part of the error means. I'm assuming that it resulted in the memory running out and the variable not containing any more data for that iteration of the script.

SCRIPT CODE:

#requires -version 3

## Load Quest Snappin

Add-PSSnapin Quest.ActiveRoles.ADManagement -ErrorAction silentlycontinue

## ***** Declare Variables *****

## Containers

$global:contact_OU = "ou=MIGRATION,ou=CONTACTS,ou=OFFICE,ou=DEPT,dc=SUBDOMAIN,dc=DOMAIN,dc=COM"

$global:unmatched_OU = "ou=Unmatched,ou=MIGRATION,ou=CONTACTS,ou=OFFICE,ou=DEPT,dc=SUBDOMAIN,dc=DOMAIN,dc=COM"

## Reporting Variables

$global:report_path = "C:\AD\Email Cleanup"

$global:timeStamp = Get-Date -UFormat "%H%M_%d-%m-%d-%Y"

## Get-QAD Object Splat Variables

$user_splat = @{

OrganizationalUnit = "ou=USERS,ou=DEPT,ou=COMPANY,dc=SUBDOMAIN,dc=DOMAIN,dc=COM"

LdapFilter = "(!(DisplayName=*.ADM))" ## Do not include admin accounts

IncludeAllProperties = $true

SizeLimit = "1"

ShowProgress = $true

} # end $user_splat

$contact_splat = @{

Type = "Contact"

OrganizationalUnit = $contact_OU

LdapFilter = "(mail=*@newEmail.com)"

IncludeAllProperties = $true

SearchScope = "OneLevel"

SizeLimit = "0"

PageSize = "25"

ShowProgress = $true

} # end $contact_splat

## Write-Out colors. Some color variables have been removed to shorten the code being posted.

$gc_colors = @{

ForegroundColor = "Yellow"

BackgroundColor = "DarkGreen"

} # end splat $gc_colors

cls

## ***** Get Reports *****

function Get_Reports ($obj, $fileName) {

## Export the objects

$report = $timeStamp + "_" + $fileName

$obj | Export-Csv "$report_path\$report.csv" -Append -NoTypeInformation

return $obj

} # end function Get_Reports

## ***** Update Users *****

function Process_Users ($contact) {

if (!($user = Get-QADUser @user_splat -LogonName $contact.mailNickname)) {

Write-Host "*******************************************************" @unmatched_colors

Write-Host @unmatched_colors $contact.Name " Could not be matched to a user account."

Write-Host "*******************************************************" @unmatched_colors

try {

#Write-Host "******************* Moving ************************" $contact.Name

Move-QADObject -Identity $contact.Name -NewParentContainer $unmatched_OU -ErrorAction 'Stop' -ErrorVariable $moveError

} catch [System.OutOfMemoryException] {

Write-Warning "Out of RAM"

$errorTime = Get-Date -UFormat "%d-%m-%d-%Y_%H%M"

Write-Host "Memory Error:" $errorTime | Out-File "$report_path\Function_Report_$timeStamp.txt" -Append

Throw "Memory Error"

} catch {

Write-Warning "Error moving contact"

Get_Reports $contact "Error_Unmatched_Users"

} finally {

Get_Reports $contact "Unmatched_Contacts"

} # end finally

} # end if (!(Get-QADUser)

else {

## Set variables

$new_email = $contact.PrimarySMTPAddress

## Generate Report prior to cleanup

Get_Reports $user "Pre-Cleanup_Users"

try {

## Remove contact so that the new email address can be set as the primary address for the user.

Remove-QADObject -Identity $contact.name -Force

## Process user accounts

$user | Set-QADUser -ObjectAttributes @{altRecipient=''; msExchHomeServerName=''; homeMDB=''; targetAddress="$new_email"}`

| Add-QADProxyAddress -Type "SMTP" -Address $new_email -Primary `

| Remove-QADProxyAddress -Pattern "*@oldemail1.com"`

| Remove-QADProxyAddress -Pattern "*@oldemail2.com"

} catch [System.OutOfMemoryException] {

Write-Warning "Out of RAM"

$errorTime = Get-Date -UFormat "%d-%m-%d-%Y_%H%M"

Write-Host "Memory Error:" $errorTime | Out-File "$report_path\Function_Report_$timeStamp.txt" -Append

Throw "Memory Error"

} catch {

Write-Warning "Error moving user"

Get_Reports $user "Error_Users"

} finally {

## Generate report after user changes have been applied

Get-QADUser $user.Name | % {Get_Reports $_ "Post-Cleanup_Users"}

} # end finally

} # end else

} # end function Process_Users

## Function to create pop-up message(s) with information about the script and initiate the rest of the functions if the user chooses to do so.

function Notifications {

$script_description = "This script will go through Active Directory and match ... {script description}.

Do you wish to proceed?"

$a = New-Object -ComObject wscript.shell

$proceed = $a.popup($script_description,0,"Script Description",4)

if ($proceed -eq 6) {

## Answered "Yes", proceed with script

Write-Host "YES"

Write-Host "Processing Contacts and Users"

## Process users

Get-QADObject @contact_splat | %{Get_Reports $_ "Contacts"} | % {Process_Users $_}

Invoke-Item $report_path

} # end if

else {

## Answered "NO" exit script.

Write-Host "*** Exiting Script ***"

} # end else

} # end function Notifications

## Run the notification and give the user an option to terminate program before executing.

Notifications

Import data from Powershell to SQL Server

Staggerlee011 — Tue, 12 Mar 2013 05:00:00 GMT

Hi everyone,

Not sure of this is the easist way. But id like to get a list of all the Servers in AD into a table in SQL Server. I can get the list of servers from AD in powershell. But i cant find a way to take data from powershell and put it directly into SQL. Lots of articles and blogs on importing CSV data or a txt file. but none that i can find on using the pipeline.

Any ideas on how to do it? Or if there's a better way to do it!

Thanks

Username Creation

gelmera — Thu, 21 Feb 2013 06:00:00 GMT

Team,

I am trying to develop a function for my account creation script that creates the username.

as of now this it what i have.

### Creating Username And Validation Test Function ###

[System.Reflection.Assembly]::LoadWithPartialName('Microsoft.VisualBasic') | Out-Null

$Firstname = [Microsoft.VisualBasic.Interaction]::InputBox("Enter Firstname of User")

$Lastname = [Microsoft.VisualBasic.Interaction]::InputBox("Enter Lastname of User")

$username= (($FirstName.Substring(0,1)) + ($LastName))

if ( $username.Length -gt 12) {

Write-Host "Charecter Longer than 12 charecters"

}

My dilemma is that i can not have a username longer than 12 characters for now. I am not sure how to approach this i already have to validate the username for availability in the domain and on a separate csv file for sap username.

I'm looking for a way that if the user name length is -gt 12 to be able to set it to 12 characters.

Map drives based on AD Membership from a non-trusted AD domain

neilthomas — Tue, 19 Feb 2013 06:00:00 GMT

Hi guys,

I'm fairly new to scripting and hope you can help.

I am performing data migration between 2 domains (Domain A & Domain B) that aren't trusted. I need to map drives to the new domain B based on group membership using new domain B credentials.

I have a script to map drives based on group membership which works fine in the same domain.

I am having trouble connecting to domain B from A and then running script as Domain B credentials and not not default username if that makes sense

Passing credentials bit i need help with

$cred = Get-Credential -Message "Please enter your username Domain\Username"

$networkCred = $cred.GetNetworkCredential()

Enter-PSSession –computerName server -credential $networkcred

$strName = $networkcred.username

Map drives script ( works fine in same domain)

# ====================================================

# Queries user account in AD for user group membership

# ====================================================

$strName = $env.username (changed to $networkcred.username whilst trying above)

function get-GroupMembership($DNName,$cGroup){

$strFilter = "(&(objectCategory=User)(samAccountName=$strName))"

$objSearcher = New-Object System.DirectoryServices.DirectorySearcher

$objSearcher.Filter = $strFilter

$objPath = $objSearcher.FindOne

$objUser = $objPath.GetDirectoryEntry

$DN = $objUser.distinguishedName

$strGrpFilter = "(&(objectCategory=group)(name=$cGroup))"

$objGrpSearcher = New-Object System.DirectoryServices.DirectorySearcher

$objGrpSearcher.Filter = $strGrpFilter

$objGrpPath = $objGrpSearcher.FindOne

If (!($objGrpPath -eq $Null)){

$objGrp = $objGrpPath.GetDirectoryEntry

$grpDN = $objGrp.distinguishedName

$ADVal = [ADSI]"LDAP://$DN"

if ($ADVal.memberOf.Value -eq $grpDN){

$returnVal = 1

return $returnVal = 1

}else{

$returnVal = 0

return $returnVal = 0

}

}else{

$returnVal = 0

return $returnVal = 0

}

# ====================================================

# Map network drives

# ====================================================

$result = get-groupMembership $strName "map_Z"

if ($result -eq '1') {

$(New-Object -ComObject WScript.Network).RemoveNetworkDrive("Z:");

$(New-Object -ComObject WScript.Network).MapNetworkDrive("Z:", "\\server\share");

Finding Windows server's hard disk space and availabe disk space

felbemi94 — Mon, 18 Feb 2013 06:00:00 GMT

Hello,

Looking for Power-shell script using version 2 or 3 that will compile a text file and retrieve the Windows server's (2003, 2008) hard disk and available disk space for 1000 servers.

This can be run in a Domain Controller 2003 (dev environment) I have domain admin access.

MY Boss was asked to get these reports ASAP, Please help me

vbr.mohan — Mon, 11 Feb 2013 06:00:00 GMT

1. A list of all GPOs that run a script, what the scripts name is, and what it’s function is, if you can figure it out. If the script is mapping drives, printers, or pulling files from a location we need to verify that those devices/locations/files still exist.

2. A list of all GPOs that are not linked to anything, and if possible what their function is.

How can i get the Reports of GPO's which are running Scripts ?

Please Help me

Beginner Scripter - HashTable Issue

Trey — Mon, 11 Feb 2013 06:00:00 GMT

Hello All,

I am looking for extra parameters, that can list all distribution groups and their email address ... along with their respective members and their individual primary email address. The script below, only lists Group Name / Member / Member Email. What I need is GroupName | GroupName Email | Member | Member Email.

Here's what I've been trying to work with:

$Groups = "company.com/distributionlist"

Get-QADGroup -SearchRoot $Groups -SizeLimit 0 | Foreach-Object{
$group = $_
Get-QADGroupmember $group -sizelimit 0 | `
select @{n="GroupName";e={$group}},displayname,email
} | export-Csv C:\FullDG001.csv

Can anyone please help?!

Listing User Attributes for Enabled and Disabled Users

drex — Tue, 05 Feb 2013 06:00:00 GMT

Hello.

I am having trouble trying to change the name of attributes for enabled and disabled accounts using Get-QADUser. For example, I'd like the useraccountcontrol attribute to display, "Enabled" or "Disabled" instead of 512 and 514. Essentially, I am trying to create a GUI which allows the person to select multiple attributes to be displayed in a csv file. Here is my current script without the GUI. Any ideas how I can clean this up and make it more functional? Thanks!

####
$CDays = Read-host "Created more than xx days ago"
#
$LDays = Read-Host "Logon more than xx days ago"
#
$created = (Get-Date).AddDays(-$CDays)
#
$logon = (Get-Date).AddDays(-$LDays)
#
$users = Get-QADUser 'domain\OU' -IncludeAllProperties

@(foreach($user in $users)
{
$user | Select-Object DisplayName,LogonName,description,manager,createTimeStamp,lastLogonTimestamp,userAccountControl | where {$_.lastLogonTimestamp -le $logon} | where {$_.createTimeStamp -le $created}
})| export-Csv "c:\test\report.csv" -noType
#####