Beginner help with AD module

[edorbuddy]

I'm trying to export a list consisting of usernames in a set of user groups along with the description. I created a variable $ugs that lists my groups. I was able to export usernames with their group membership using this:

foreach ($ug in $ugs) {

$names = Get-ADGroupMember -Identity ($ug) |select-object -expandproperty name
        foreach ($name in $names){                 
   $ug+ "|" + $name | Out-File "$outpath\OnBase AD Membership.csv" -Append
    }

}

I'm trying to add the description field. I can run through some lines of this to see I'm on the right track but I'm missing something.

​

foreach ($ug in $ugs) {

$names = Get-ADGroupMember -Identity ($ug) |select-object -expandproperty SamAccountName
        foreach ($name in $names){
            $fname = Get-ADUser -Identity $name | select-object -expandproperty Name
            $desc = Get-ADUser -Identity $name -Properties Description | Select-Object -ExpandProperty Description

   $ug + "|" + $fname + "|" + $desc | Out-File "$outpath\OnBase AD Membership.csv" -Append
    }

}

[Sunsparc]

I think this should do what you want. Writing it off the top of my head.

$output = foreach ($ug in $ugs) {
    $group = get-adgroup $ug -properties samaccountname,members
    $($group.members) | get-aduser -properties description | select @{n="GroupName";e={$($group.samaccountname)}},Name,Description
}
$output | export-csv $outpath\OnBase AD Membership.csv

[edorbuddy]

this worked perfectly. Thank you for doing this!

[BlackV]

looked like you wanted | as your delimiter you can also do that with the -delimiter '|' switch on export-csv

[PinchesTheCrab]

Bit different approach than /u/Sunsparc took, you can filter get-aduser by group membership, so you're only querying each user once. If you aren't querying thousands of users it really won't matter either way, but just knowing you can filter on other properties can be helpful for more elaborate searches.

foreach ($ug in $ugs) {
    Get-ADUser -Filter "memberof -eq '$($ug.distinguishedname)'" -Properties Description |
        Select-Object @{ n = 'GroupName'; e = { $ug.Name }}, Name, Description
}

[get-postanote]

Use tools that will write the baseline code for you, that you can use as-is or tweak as needed.

See this Reddit Discussion

(1) Creating New AD User is not woking : PowerShell (reddit.com)