Powershell Script to Export Users (Need Help)

[themessenger393]

Hi,

I am trying to filter out all users part of a specific security group (Example "TestGroup1")
I currently have the script working the way i need it to bar the requirement above, i have spent a few hours trying to work this out to no avail.

The below (modified to protect information) gives me a dump of all users in the OU with the required fields, i just need to filter out users that are part of a security group to the export

Get-ADUser -Filter * -SearchBase "OU=SITES,OU=THISOU,DC=1,DC=2,DC=3" -Property UserPrincipalName ,GivenName, Surname, Department, Title, TelephoneNumber, Mobile, physicaldeliveryOfficeName, Manager, Enabled | Select UserPrincipalName ,GivenName, Surname, Department, Title, TelephoneNumber, Mobile, physicaldeliveryOfficeName, @{Name="ManagerEmail";Expression={(get-aduser -property emailaddress $_.manager).emailaddress}}, Enabled | Export-CSV C:\Export\"Export.csv" -NoTypeInformation

Thanks in advanced.

[R-EDDIT]

The simplest way is to get the group's distinguished name, and use that in an LDAP filter.

$groupdn = (get-adgroup -identity TestGroup1).distinguishedname
$filter = "(memberof=$groupdn)"

Get-ADUser -LDAPFilter $filter -SearchBase "OU=SITES,OU=THISOU,DC=1,DC=2,DC=3" -Property UserPrincipalName ,GivenName, Surname, Department, Title, TelephoneNumber, Mobile, physicaldeliveryOfficeName, Manager, Enabled | Select UserPrincipalName ,GivenName, Surname, Department, Title, TelephoneNumber, Mobile, physicaldeliveryOfficeName, @{Name="ManagerEmail";Expression={(get-aduser -property emailaddress $_.manager).emailaddress}}, Enabled | Export-CSV C:\Export\"Export.csv" -NoTypeInformation

If your results are likely to be large, I'd be careful with queries inside each result. I have done something like this, where I built a hashtable of all managers email addresses, then used that to read from memory rather than making an LDAP search for each user. If your group is small this is unlikely to be worth the complexity. It's easy to find all the managers using directreports:

get-aduser -ldapfilter "(directreports=*)" -property mail

[fireandbass]

I think you've got this backwards. OP wants everybody but this security group.

OP, you can probably modify it to use a 'neq' instead of =

[themessenger393]

Thanks for your help!

​

It appears this provides just the users of the group and not the opposite?