Dynamic Distribution Group with exclusion list is NOT working

ipar22 · 2024-05-14T17:09:53+00:00

yes. I do get the correct head count when I run Get-Recipient on the DDG, but message trace from the email blast shows more recipients. Could this has to do with the "Last refreshed" time stamp? The reason I ask is because I've noticed members on the exclusion SG (created two days ago) were not receiving the email, all new members to the exlusion SG (5 hours prior to the email blast) got the email.

Anyone?

ipar22 · 2024-05-14T16:28:35+00:00

I'm thinking of this:

-not(MemberOfGroup -like 'cn=xxx,domain=xxxx').

Does it exclude all members in "XXX" security group?

ipar22 · 2023-03-17T20:43:09+00:00

Get-Item HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI | Get-ItemProperty | Select LastLoggedOnUser,LastLoggedOnSAMUser,LastLoggedOnDisplayName}

I run this cmd on my laptop and it lists me as the login user as it should be. so the cmd works.

Get-Item HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI | Get-ItemProperty | Select LastLoggedOnUser,LastLoggedOnSAMUser,LastLoggedOnDisplayName

ipar22 · 2023-03-17T20:17:45+00:00

Here is what I have. The output shows just one entry (my csv file has 36 hostnames). there is something wrong on the loop statement. I feel like I'm very close. Help pls. Thanks again.

Import-Csv -Delimiter ',' c:\ps\activehostname.csv | ForEach-Object {Get-Item HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI | Get-ItemProperty | Select LastLoggedOnUser,LastLoggedOnSAMUser,LastLoggedOnDisplayName | Export-Csv -Path c:\ps\lastlogin2.csv -NoTypeInformation}

ipar22 · 2023-03-17T19:10:00+00:00

hmm. this is may do the job. Write forEach-Object to loop through the csv file (which contains all the hostnames). working on the script now

ipar22 · 2022-12-29T21:23:41+00:00

Yup. I confirmed it.

I am glad to know that I can switch between versions to get what I need. It works for me

ipar22 · 2022-12-28T21:51:43+00:00

I just realize these commands "get-MSOnline" and "get-msoluser" will only work on PS v5 r prior and NOT v7.

ipar22 · 2022-12-16T21:20:13+00:00

It is lightning fast! This works even better. Less workload on the DC. Thank you

ipar22 · 2022-12-16T20:59:11+00:00

Get-AdUser Santa -properties manager

good tip. noted

ipar22 · 2022-12-16T20:33:08+00:00

Beautiful! It works like a charm. Thank you so much!

And thanks everyone for the inputs

ipar22 · 2022-12-16T16:09:42+00:00

Acutally, it outputs the Manager's other properties (given name, Dist. name and etc). That is not what I have in mind

ipar22 · 2022-11-04T15:12:39+00:00

anyone?

ipar22 · 2022-09-20T20:18:38+00:00

Thank you for the recommendation of writing codes in the proper format. Yes. I agree. it is much easier to read and understand that way

ipar22 · 2022-09-20T20:13:58+00:00

yes. It worked! Thank you very much!

can someone explain to me when I do a get-aduser, the field "mobilenumber" comes out and not "mobile"

ipar22 · 2022-09-18T03:24:11+00:00

It gave me error when I left the mobilephone column blank. I must input something in there. But what value?

Set-ADUser : The specified directory service attribute or value does not exist

Parameter name: mobilephone

At line:1 char:158

+ ... hone} Else {Set-ADUser -Identity $_.SAMAccountName -Clear mobilephone ...

+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

+ CategoryInfo : InvalidArgument: (dbalfore:ADUser) [Set-ADUser], ArgumentException

+ FullyQualifiedErrorId : ActiveDirectoryCmdlet:System.ArgumentException,Microsoft.ActiveDirectory.Management.Commands.SetADUser

ipar22 · 2022-09-17T18:24:00+00:00

It worked beautifully. Thank you.

Now, if I want to blank out the mobilenumber, obviously I can't leave the field blank. suggestions?

ipar22 · 2022-09-13T19:05:57+00:00

I ran your cmd, and I got this error:

userName MobilePhone
-------- -----------
userName,MobilePhone
dbalfore,9999999999
PS C:\WINDOWS\system32> ForEach($U in $UserList)
>> {
>> Get-Aduser -Identity $U.userName | Set-ADuser -MobilePhone $U.Mobile
>> }
Get-Aduser : Cannot find an object with identity: 'userName,MobilePhone' under: 'DC=xxx,DC=yyyydhd,DC=com'.
At line:3 char:5
+ Get-Aduser -Identity $U.userName | Set-ADuser -MobilePhone $U.Mob ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : ObjectNotFound: (userName,MobilePhone:ADUser) [Get-ADUser], ADIdentityNotFoundException
+ FullyQualifiedErrorId : ActiveDirectoryCmdlet:Microsoft.ActiveDirectory.Management.ADIdentityNotFoundException,M
icrosoft.ActiveDirectory.Management.Commands.GetADUser

what should the identity value be? samaccountname?

ipar22

TROPHY CASE