Get-ADPrincipalGroupMembership question

PowerShell Help
1

Hello all,

First thanks for taking the time to read this.

I would like to modify this script to remove all of an AD users group memberships but exclude deleting 2 groups 1st named “Archive” and 2nd named “domain Users”.

Is this possible?

Get-ADPrincipalGroupMembership -Identity $User | % {Remove-ADPrincipalGroupMembership -Identity $User -MemberOf $_ -Confirm:$False}

thanks,
Wayne

2

Yup:

Get-ADPrincipalGroupMembership -Identity $User |  Where{$_.Name -ne "Archive" -or $_.Name -ne "Domain Users"} | foreach {Remove-ADPrincipalGroupMembership -Identity $User -MemberOf $_ -Confirm:$False -WhatIf}

Added a -WhatIf to Remove-ADPrincipalGroupMembership to make sure you are actually deleting what you expect.

3

Thanks Rob! I tested this this morning and it seems to not like the -or so I tried an -and

that seemed to work

You made my life a whole lot easier. thank you!