ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Powershell - AD permissions all users

    Developer Discussion
    powershell csv
    4
    37
    9.3k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • DashrenderD
      Dashrender
      last edited by

      Sounds like something like this would suit him

      snip.PNG

      This would be very involved though. You'd need to enumerate every group for each user, creating an x or o based upon if they are or are not a member.

      then you could short this by username and see what they are and aren't members of.

      Good luck.

      1 Reply Last reply Reply Quote 0
      • P
        pally
        last edited by

        Thanks @DustinB3403 that is exactly what I am trying to do, if anyone @DustinB3403 has tried and said it cannot be done, if it can be done and someone can shed some light I would be very grateful.

        Thanks

        1 Reply Last reply Reply Quote 0
        • DashrenderD
          Dashrender
          last edited by

          Is this what you want?

          snip.PNG

          1 Reply Last reply Reply Quote 0
          • P
            pally
            last edited by

            @Dashrender that is exactly what I need. is it possible to do?

            DashrenderD 1 Reply Last reply Reply Quote 0
            • DashrenderD
              Dashrender
              last edited by

              Adding the Administrator group to a new user would change it to look like this
              snip.PNG

              1 Reply Last reply Reply Quote 1
              • P
                pally
                last edited by

                that would be ideal, if this is possible please let me know how 🙂 @Dashrender

                1 Reply Last reply Reply Quote 0
                • DashrenderD
                  Dashrender @pally
                  last edited by Dashrender

                  @pally said:

                  @Dashrender that is exactly what I need. is it possible to do?

                  Sure, it's possible, don't ask me how I'm not a scripter, but I do understand the basic logic now.

                  you create a loop that reads in the first user, then looks a list of known groups and sees if it's a member or not, if not, you leave a blank (for the cell) and the close marker for that cell, then check against the next group.

                  So you end up with two nested loops, the outer loop is going through all users, the inner loop goes through all groups.

                  1 Reply Last reply Reply Quote 0
                  • P
                    pally
                    last edited by

                    if anyone thanks to @Dashrender and of course @DustinB3403 can make this happen, you will make me a happy guy :).

                    1 Reply Last reply Reply Quote 0
                    • DashrenderD
                      Dashrender
                      last edited by Dashrender

                      Here is a very rudimentary sudo code
                      snip.PNG

                      1 Reply Last reply Reply Quote 0
                      • DashrenderD
                        Dashrender
                        last edited by

                        Pally, if you understand the scripts you have in front of you, you might be able to change them yourself to follow the logic I wrote up.

                        1 Reply Last reply Reply Quote 0
                        • DashrenderD
                          Dashrender
                          last edited by

                          Also @pally I ask that you don't post my sudo code on any other sites. You are more than welcome to direct people to this thread, but don't repost.

                          1 Reply Last reply Reply Quote 0
                          • P
                            pally
                            last edited by

                            i understand the code but i am far from a scripter. i understand the logic but would not be able to put this as a powershell.

                            DashrenderD 1 Reply Last reply Reply Quote 0
                            • DashrenderD
                              Dashrender @pally
                              last edited by

                              @pally said:

                              i understand the code but i am far from a scripter. i understand the logic but would not be able to put this as a powershell.

                              Now sounds like a great time to learn.

                              1 Reply Last reply Reply Quote 0
                              • DashrenderD
                                Dashrender
                                last edited by

                                You're probably not going to find someone here who's willing to write you a script for free. Perhaps you can offer a fee for service?

                                Or @ntg could give you a quote for making it.

                                1 Reply Last reply Reply Quote 1
                                • P
                                  pally
                                  last edited by

                                  you probably right, @Dashrender unfortunately, this would be coming out of my own pocket and not the companies which is why I cannot go ahead.

                                  Thanks again for all the input team, been a brilliant help. until the next time 🙂

                                  1 Reply Last reply Reply Quote 0
                                  • dafyreD
                                    dafyre
                                    last edited by

                                    Some of us enjoy a challenge... How about something like this:

                                    upload-d103d6b9-5b27-456a-aded-50284ddb4537

                                    It shows the Share, and the users. If a user is a member of a group, then it puts an X in the columns of the groups they are a member of.

                                    Not exactly the way you want it done, but this is a first draft.

                                    1 Reply Last reply Reply Quote 0
                                    • P
                                      pally
                                      last edited by pally

                                      thanks @dafyre looks good, but I have been doing a bit of reading online and I think I will change the output to make it output the data as rows with each user named with what member they are part of next to there name. two columns. in other words the output would be "Transpose" and then I would use a pivot table to do the rest.

                                      still working on it, but if anyone knows of an easy way please do share 🙂

                                      again thank @dafyre

                                      1 Reply Last reply Reply Quote 1
                                      • 1
                                      • 2
                                      • 2 / 2
                                      • First post
                                        Last post