Ah, it might not be exactly what you think: I see lots of scripts to give me the members of a group.
I don't see any at the moment that allow me to list what group memberships a particular account has, write them to a file and then to remove the account from those groups. I have the latest Quest commandlets, which includes 'get-qadmemberof' and 'remove-qadmemberof', but I have a small problem with them: Get-QADMemberOf doesn't seem to return the full name of a longish group - it returns a max of 28 characters, then appends '...' to the end of it. This seems to happen so that it can accommodate a long DN, as well. At least, it truncated the group name when I tried it at the command line, and also when I piped the output to a file. It would also be good to be able to clear the manager attribute, then export and delete the mailbox from the account, but I can save that for later. Anyone have something like that? Exchange 2003 and AD 2003 R2, if that makes a difference - and I've just downloaded PowerShell 2.0, too, but haven't had a chance to play with it. Kurt ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
