Script to remove a group of users from AD Group

PowerShell Help
1

Dears,

Is there anyway to remove users from all AD groups except Domain Users, after export the group membership information to a text file ?

 

Thanks

Rajesh

2

Something like this should work. Not tested, make sure you try in test environment first.
[pre]
$users = ‘smith01’, ‘miller01’

foreach ($user in $users) {
$groups = (Get-ADUser $user -Properties MemberOf).MemberOf
Add-Content -Path C:\TEMP$user.txt -Value $groups
foreach ($group in $groups) {
Remove-ADGroupMember $group -member $user -WhatIf
}
}
[/pre]

3

I should have pointed out that Domain Users will not be listed in the MemberOf collection.

4

Thanks a lot. The script created the text outputs with Groups information however users were not removed from the groups.

5

Remove the -WhatIf switch from Remove-AdGroupMember. Should work after that.

6

You have to remove -Whatif. If you don’t know what is whatif, please read it here

7

Hi Rajesh,

You can try below script which i use daily

[pre]

$users = Get-Content c:\users.txt

foreach ($u in $users){

$u

$User = [ADSI]“LDAP://$u”

ForEach ($GroupDN In $User.memberOf){

$Group = [ADSI](“LDAP://” + $GroupDN)

$Group.Remove($User.ADsPath)

}

}

[/pre]

8

As others have mentioned, you need to remove the -WhatIf.
Unsolicited advice, don’t just take scripts and run them, take time to read it and understand it. I put the -WhatIf in there on purpose as you should be testing.

9

Thanks a lot, Script is working fine.