Get AD User and Group Membership and export to CSV

PowerShell Help
1

Hello all,

I have been a sysadmin for years now, but just got into powershell in the last few months or so, and I find that it is very useful for many small tasks that I have. I usually search for scripts online and change them up to make them work for me. Recently, I was able to get one to work that found all the AD users in my domain, and all of their group memberships, and exported them to a CSV file. The user first and last names were in column A and all of the groups they are members of were in column B (column B was pretty messy; I had to do a lot of clean up with find/replace in Excel), but it worked.

I then made the rookie mistake of losing the script, and I have not been able to recreate it successfully. If anyone out there can help, I would greatly appreciate it. I can say that I was able to do a one-liner script, and I remember using Get-ADUser -SearchBase “DC=xxxx, DC=local” (I think). I just cannot get it to make the file like I made before. Thanks all in advance.

-Danial

2

How would you like to have the groups? All to column B? The groups are in distinguishedname format, but of course in output we can show only group names.

Edit1: It could be something funky like

[pre]
get-aduser -Filter * -Properties memberOf,displayName | select samAccountName,displayName,@{N=‘memberOf’;e={($.memberof | foreach {$.split(‘,’)[0].split(‘=’)[1]}) -join ‘;’}} | export-csv -NoTypeInformation -Encoding UTF8 -Path test-export.csv
[/pre]

3

Hello, here is the script I’m using.

Get-ADUser -LDAPFilter “(name=*)” -SearchScope Subtree `
-SearchBase “OU=xxx,OU=xxx,DC=xxx,DC=xxx,DC=xxx” | %{
$user = $_
$user | Get-ADPrincipalGroupMembership |
Select-Object @{N=“User”;E={$user.sAMAccountName}},@{N=“Group”;E={$_.Name}}
} | Select-Object User,Group | Export-Csv C:\temp\report.csv -

Have a nice day,

Laurent.