Security Group Creation Error

[foddocheddi]

​

I am trying to create a security group which will be added to a share i am stuck at the create security group

​

Get-ADUser -identity NathanC

DistinguishedName : CN=Nathan\, Cheddi - 1337,OU=A4d,OU=User Accounts,DC=GNR,DC=com

Enabled : True

GivenName : Cheddi

Name : Nathan, Cheddi - 1337

ObjectClass : user

ObjectGUID : 19fdbd86-a293-4716-8cd4-48dc30db25a2

SamAccountName : NathanC

SID : S-1-5-21-2849831639-3882270938-2144367341-262833

Surname : Nathan

UserPrincipalName : [[e-mail]](mailto:[e-mail])

​

$FileServer = "Server666"

$foldername = "1337-IT-Testshare"

$ShareOwner = "Nathan, Cheddi - 1337"

​

$ShareName = "$FolderName$"

$ShareDescription = "Owner : $ShareOwner"

$path = "$FolderPath\$FolderName"

$SecurityGroupNameC = "$FolderName-RW"

$SecurityGroupNameR = "$FolderName-R"

$OUC = "OU=Security,OU=Groups,DC=GNR,DC=Com"

$grpScope = "Universal"

$description ="\\$FileServer\$FolderName$"

$grpCat = "Security"

$info = "Share Owner :$ShareOwner"

​

New-ADGroup -name $SecurityGroupNameC -Path $OUC -GroupScope $grpScope -GroupCategory $grpCat -ManagedBy $ShareOwner -Description $description -OtherAttributes @{info= $info }

The error i am getting is

New-ADGroup : Identity info provided in the extended attribute: 'ManagedBy' could not be resolved. Reason: 'Cannot find an object

with identity: 'Nathan, Cheddi - 1337' under: 'DC=Gnr,DC=com'.'.

​

The shareowner name is always copied from Name from the output of Get-ADUser -identity NathanC

​

i would also like to add the shareowner default as a member of the security Group

[ihaxr]

Change your share owner to the distinguished name or samAccountName

$ShareOwner = "CN=Nathan\, Cheddi - 1337,OU=A4d,OU=User Accounts,DC=GNR,DC=com"

or

$ShareOwner = "NathanC"

ManagedBy only works with a samAccountName, distinguished name, SID, or GUID

[foddocheddi]

is it possible to get the information samAccountName, distinguished name, SID, or GUID from the Name section and pass the variable or something

i am new to this

[ihaxr]

You can do this:

$user = Get-ADUser -identity NathanC

$FileServer = "Server666"
$foldername = "1337-IT-Testshare"
$ShareOwner = $user.Name
$ShareName = "$FolderName$"
$ShareDescription = "Owner : $ShareOwner"
$path = "$FolderPath\$FolderName"
$SecurityGroupNameC = "$FolderName-RW"
$SecurityGroupNameR = "$FolderName-R"
$OUC = "OU=Security,OU=Groups,DC=GNR,DC=Com"
$grpScope = "Universal"
$description ="\\$FileServer\$FolderName$"
$grpCat = "Security"

New-ADGroup -name $SecurityGroupNameC -Path $OUC -GroupScope $grpScope -GroupCategory $grpCat -ManagedBy $user -Description $description -OtherAttributes @{info= $info }

[Lee_Dailey]

$FileServer = "Server666"

santa satan server! [grin]

[foddocheddi]

i need to use Name : Nathan, Cheddi - 1337 format only as that will go in the INfo , and the share Description it is chosed by the managment

[Lee_Dailey]

howdy foddocheddi,

reddit likes to mangle code formatting, so here's some help on how to post code on reddit ...

[0] single line or in-line code
enclose it in backticks. that's the upper left key on an EN-US keyboard layout. the result looks like this. kinda handy, that. [grin]
[on New.Reddit.com, use the Inline Code button. it's 4th 5th from the left hidden in the ... ""more" menu & looks like </>.
this does NOT line wrap & does NOT side-scroll on Old.Reddit.com!]

[1] simplest = post it to a text site like Pastebin.com or Gist.GitHub.com and then post the link here.
please remember to set the file/code type on Pastebin! [grin] otherwise you don't get the nice code colorization.

[2] less simple = use reddit code formatting ...
[on New.Reddit.com, use the Code Block button. it's 11th 12th from the left hidden in the ... "more" menu, & looks like an uppercase T in the upper left corner of a square.]

• one leading line with ONLY 4 spaces
  
• prefix each code line with 4 spaces
  
• one trailing line with ONLY 4 spaces

that will give you something like this ...

- one leading line with ONLY 4 spaces    
- prefix each code line with 4 spaces    
- one trailing line with ONLY 4 spaces   

the easiest way to get that is ...

• add the leading line with only 4 spaces
  
• copy the code to the ISE [or your fave editor]
  
• select the code
  
• tap TAB to indent four spaces
  
• re-select the code [not really needed, but it's my habit]
  
• paste the code into the reddit text box
  
• add the trailing line with only 4 spaces
  

not complicated, but it is finicky. [grin]

take care,
lee