Forum Discussion

Diego13's avatar
Diego13
Copper Contributor
Nov 09, 2022

Get nested AD groups from bulk user or OU

Hi,   I would like to export in a csv file all groups and nested groups from bulk AD user or OU. Example: Users Groups NestedGroups                   User1 Group1 NestedGroup1 ...
Windows PowerShell
Diego13's avatar
Diego13
Copper Contributor
Nov 10, 2022
Hi Alan, thanks for the powershell provided.
Is it possible to export the results as requested please ?
Alan2022's avatar
Alan2022
Iron Contributor
Nov 11, 2022

Diego13 

Hi,

 

Yes you can just save them in a variable like $result. Then use export to csv ps script.

$result | Export-Csv c:\temp\test.csv -NoTypeInformation

 

  • Diego13's avatar
    Diego13
    Copper Contributor
    Nov 11, 2022
    Hi,

    I have this error now when adding "$result | Export-Csv c:\temp\test.csv -NoTypeInformation" at the end of the script:
    Get-ADGroupMember : Cannot find an object with identity: 'GroupName' under: 'DC=...'
    • Diego13's avatar
      Diego13
      Copper Contributor
      Nov 11, 2022
      Complete error:
      Get-ADGroupMember : Cannot find an object with identity: 'GroupName' under: 'DC=...,DC=...'.
      At line:6 char:1
      + Get-ADGroupMember -Identity 'GroupName' -Recursive | Select-Object -P ...
      + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
      + CategoryInfo : ObjectNotFound: (GroupName:ADGroup) [Get-ADGroupMember], ADIdentityNotFoundException
      + FullyQualifiedErrorId : ActiveDirectoryCmdlet:Microsoft.ActiveDirectory.Management.ADIdentityNotFoundException,Microsoft.ActiveDirectory.Management.Commands.GetADGroupMember

      Get-ADGroup : Cannot validate argument on parameter 'Identity'. The argument is null. Provide a valid value for the argument, and then try running the command again.
      At line:7 char:23
      + Get-ADGroup -identity $item.GroupName | select name | Export-csv -pat ...
      + ~~~~~~~~~~~~~~~
      + CategoryInfo : InvalidData: (:) [Get-ADGroup], ParameterBindingValidationException
      + FullyQualifiedErrorId : ParameterArgumentValidationError,Microsoft.ActiveDirectory.Management.Commands.GetADGroup
      • Diego13's avatar
        Diego13
        Copper Contributor
        Nov 11, 2022
        Please, forgot the last 2 posts and take this post into account:

        Script:
        # Filter Groups in AD based on OU
        $searchBase = "OU=...,OU=...,DC=...,DC=..."
        Get-ADGroup -Filter * -SearchBase $searchBase -Property * | Sort-Object Name

        # Get List of Members base on Group Name
        Get-ADGroupMember -Identity 'GroupName' -Recursive | Select-Object -Property @{n="Members"; e={ $_.Name }} | Sort-Object Members
        $result | Export-Csv c:\temp\test.csv -NoTypeInformation

        Complete error:
        Get-ADGroupMember : Cannot find an object with identity: 'GroupName' under: 'DC=...,DC=...'.
        At line:6 char:1
        + Get-ADGroupMember -Identity 'GroupName' -Recursive | Select-Object -P ...
        + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo : ObjectNotFound: (GroupName:ADGroup) [Get-ADGroupMember], ADIdentityNotFoundException
        + FullyQualifiedErrorId : ActiveDirectoryCmdlet:Microsoft.ActiveDirectory.Management.ADIdentityNotFoundException,Microsoft.ActiveDirectory.Management.Commands.GetADGroupMember

        Get-ADGroup : Cannot validate argument on parameter 'Identity'. The argument is null. Provide a valid value for the argument, and then try running the command again.
        At line:7 char:23
        + Get-ADGroup -identity $item.GroupName | select name | Export-csv -pat ...
        + ~~~~~~~~~~~~~~~
        + CategoryInfo : InvalidData: (:) [Get-ADGroup], ParameterBindingValidationException
        + FullyQualifiedErrorId : ParameterArgumentValidationError,Microsoft.ActiveDirectory.Management.Commands.GetADGroup

Resources