[google-apps-apis] Simple Account / Disable based on group access

[David Marchbanks]

I was recently asked to make a program that will handle group inheritance 
to activate or disable accounts based on group membership.

So with a little research I wrote this program in C# to disable any account 
on a particular domain that is not a member of a group. This will also 
travel through other groups recursively that are a member of the main group.

You need to reference the Google API SDK when compiling and modify the 
information in the main function for your domain. It will dump out who has 
been disabled and who has been enabled per user, and give a count of each 
change.

I hope this can be of help to someone and maybe Google will implement this 
idea server side someday.

-- 
You received this message because you are subscribed to the Google Groups 
"Google Apps Domain Information and Management APIs" group.
To view this discussion on the web visit 
https://groups.google.com/d/msg/google-apps-mgmt-apis/-/ESHm93gFZV8J.
To post to this group, send email to google-apps-mgmt-apis@googlegroups.com.
To unsubscribe from this group, send email to 
google-apps-mgmt-apis+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/google-apps-mgmt-apis?hl=en.


?/*
 * 
 * The purpose of this program is to disable any account that is not a member of the 
 * group ActiveStudents. This program only affects students due to domain name login url.
 * 
 * There are no paramaters to set.
 * 
 * This application was written by David Marchbanks 2012.
 * http://www.ptsoft.org
 * da...@ptsoft.org
 * dmarchba...@davisonschools.org
 * 
 * */

using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using Google.GData.Apps;
using Google.GData.Client;
using Google.GData.Extensions;
using Google.GData.Apps.Groups;

namespace Google_AccountDisables {
    class Program {

        private static String[] GetUsers(AppsService service, string GroupId) {
            List<String> ret = new List<String>();

            foreach (MemberEntry member in service.Groups.RetrieveAllMembers(GroupId).Entries) {
                if (member.MemberType.CompareTo("Group") == 0) {
                    foreach (String v in GetUsers(service, member.MemberId)) {
                        ret.Add(v);
                    }
                } else {
                    ret.Add(member.MemberId);
                }
            }

            return ret.ToArray();
        }

        static void Main(string[] args) {
            String domain = "<domain>";
            String username = "<admin user>";
            String password = "<password>";
            String Group = "GroupName";

            List<String> Users = new List<String>();

            int Enabled = 0;
            int Disabled = 0;
            int Managed = 0;

            AppsService service = new AppsService(domain,username,password);

            foreach (GroupEntry group in service.Groups.RetrieveAllGroups().Entries) {
                if (group.GroupName.CompareTo(Group) == 0) {
                    foreach (String v in GetUsers(service, group.GroupId))
                        Users.Add(v);
                }
            }

            foreach (UserEntry user in service.RetrieveAllUsers().Entries) {
                Managed++;
                bool inGroup = false;
                foreach (String v in Users) {
                    if (v.Contains(user.Login.UserName)) {
                        inGroup = true;
                        break;
                    }
                }
                try {
                    if (inGroup) {
                        user.Login.Suspended = false;
                        service.UpdateUser(user);
                        Console.WriteLine("Enabled: " + user.Login.UserName);
                        Enabled++;
                    } else
                        if (!user.Login.Suspended) {
                            user.Login.Suspended = true;
                            service.UpdateUser(user);
                            Console.WriteLine("Suspended: " + user.Login.UserName);
                            Disabled++;
                        }
                } catch (Exception ex) {
                    Console.WriteLine("Error on " + user.Login.UserName);
                    Console.WriteLine(ex.Message);
                }
            }
            Console.WriteLine("Disabled: " + Disabled + ", Enabled: " + Enabled + ", Managed: "+Managed);
            Console.WriteLine("DONE");

        }
    }
}