Copy groups from existing user to new user excluding all distribution groups

Question

I've looked at https://www.adaxes.com/script-repository/copy-group-membership-from-specified-user-s590.htm. is there away to change from group names to a group type? Like exclude all distribution groups?

Comments

Hello Derek,

Sorry for the confusion, but we are not sure which of the three scripts from the article you mean.

Do we understand correctly that you need the script to just skip distribution groups? Please, describe the desired behavior in all the possible details.

---

yes we have a lot of distibution groups and i do not want to have to list them all. i was wondering if i could just exclude the group type distribution.

the one with the following code:

$groupNamesToSkip = @("Group1", "Group2", "Group3*") # TODO: modify me

function SkipGroup($patterns, $sAMAccountName) { foreach ($pattern in $patterns) { if ($sAMAccountName -like $pattern) { return $True } }

---

Hello Derek,

There are two scripts in the article containing exactly the code you provided. Please, specify which of the two (i.e. Using a custom command parameter and Only copy Azure AD groups) you need updated.

---

Using a custom command parameter

Answer 1

Hello Derek,

Thank you for specifying. You can copy the updated script below.

$sourceUserDNParamName = "param-User" # TODO: modify me
$replaceGroups = $False # TODO: modify me
$groupNamesToSkip = @("Group1", "Group2", "Group3*") # TODO: modify me

function SkipGroup($patterns, $sAMAccountName)
{
    foreach ($pattern in $patterns)
    {
        if ($sAMAccountName -like $pattern)
        {
            return $True
        }
    }

    return $False
}

# Bind to the source user
$sourceUserDN = $Context.GetParameterValue($sourceUserDNParamName)
$sourceUser = $Context.BindToObjectByDN($sourceUserDN)

# Get groups to add
$groupGuidsToAdd = New-Object "System.Collections.Generic.HashSet[System.Guid]"
$sourceUser.GetEx("adm-DirectMemberOfGuid") | %%{[void]$groupGuidsToAdd.Add([Guid]$_)}

# Get current groups
$currentGroupGuids = New-Object "System.Collections.Generic.HashSet[System.Guid]"
$Context.TargetObject.GetEx("adm-DirectMemberOfGuid") | %%{[void]$currentGroupGuids.Add([Guid]$_)}

# Update groups
foreach ($guidBytes in $groupGuidsToAdd)
{
    $guid = [Guid]$guidBytes
    if ($currentGroupGuids.Remove($guid))
    {
        continue
    }

    # Skip special groups
    $group = $Context.BindToObjectEx("Adaxes://<GUID=$guid>", $True)
    $sAMAccountName = $group.Get("sAMAccountName")
    if (($NULL -ne $groupNamesToSkip) -and 
    (SkipGroup $groupNamesToSkip $sAMAccountName))
    {
        continue
    }

    # Skip distribution groups
    [Softerra.Adaxes.Interop.Adsi.ADS_GROUP_TYPE_ENUM]$flag = "ADS_GROUP_TYPE_SECURITY_ENABLED"
    $comparison = $group.Get("groupType") -band $flag

    if ($comparison -eq 0)
    {
        continue
    }

    $group.Add($Context.TargetObject.AdsPath)
}

if ($replaceGroups)
{
    # Get the primary group ID
    $primaryGroupId = $Context.TargetObject.Get("primaryGroupID")

    foreach ($guidBytes in $currentGroupGuids)
    {
        $guid = [Guid]$guidBytes
        $group = $Context.BindToObjectEx("Adaxes://<GUID=$guid>", $True)

        # Skip the group if it is the user's Primary Group
        if ($group.Get("primaryGroupToken") -eq $primaryGroupId)
        {
            continue
        }

        $group.Remove($Context.TargetObject.AdsPath)
    }
}

Comments

Excellent. Thank You!