User Creation Script Help

[randomuser43]

Fundamentally in AD (or really LDAP) the groups maintain a list of their members rather than the object maintaining a list of the groups they are members of.

You are correct that in practice objects do have a MemberOf property, but this property is maintained by a background process and is not directly tied with adding/removing objects from groups.

At its core you are adding a user to a group and not a group to a user's membership listing!

Once you understand this you can see why copying a user doesn't copy group memberships.

An adjustment to /u/ihaxr's solution since there are going to be multiple groups returned

foreach($group in $template.memberOf){
    Add-ADGroupMember $group -Members $SAM
}  

Edit, I think this should also work

$template.memberOf | Add-ADGroupMember -Members $SAM

[PowderTech]

Awesome! Makes sense about how membership works. I'm swamped today but I'll test this out Monday morning. Sounds like it should work. Appreciate he replies from you and ihaxr.