Sstrutt: Added "Compare Group Members"

2013-06-21T13:24:28Z

Added "Compare Group Members"

@@ Line 35: / Line 35: @@
+     }
+}
 </source>
 [[Category:PowerShell]]
 [[category:Active Directory]]

Sstrutt: Initial creation

2013-06-21T09:48:45Z

Initial creation

New page

== Group Member Deduplication ==
This script is for use when you want to remove users/members from one group that also exist in another. It gets a list of users from both groups and then compares, removing duplicates from one of the groups.

<source lang="powershell">
$RefGroupName = "Group A" # Reference group (which isn't touched)
$ModGroupName = "Group B" # Group to have users removed from if they exist in the above group

$MakeChanges = $true # Set to $false to see what would be done

$cred = Get-Credential -Message "Domain Admin user/pass"

Import-Module ActiveDirectory

$RefGroup = Get-ADGroup $RefGroupName
$RefGroupMembers = Get-ADGroupMember $RefGroup

$ModGroup = Get-ADGroup $ModGroupName
$ModGroupMembers = Get-ADGroupMember $ModGroupName

foreach ($user in $ModGroupMembers) {
if ($user.objectClass -ne "user") {
Write-Host ("Skipping non-user " + $user.Name)
Continue
}

if ($RefGroupMembers | ?{$_.SamAccountName -eq $user.SamAccountName}) {
Write-Host ($user.SamAccountName + " (" + $user.Name + ") exists in both groups")
if ($MakeChanges) {
Remove-ADGroupMember -Identity $ModGroup -Members $user -Confirm:$false -Credential $cred
Write-Host ($user.SamAccountName + " (" + $user.Name + ") removed from $ModGroupName")
}

} else {
Write-Host ($user.SamAccountName + " (" + $user.Name + ") exists in only $ModGroupName")
}
}
</source>

[[Category:PowerShell]]
[[category:Active Directory]]

AD Groups Script Examples (PowerShell) - Revision history

Sstrutt: Added "Compare Group Members"

Sstrutt: Initial creation