Do you need to attach that to the object? So you want two columns. One
with the user, contact, or group name and one with the OU that object is in?
On Wed, Feb 26, 2014 at 10:54 AM, Carneiro, Smita A. <carne...@purdue.edu>wrote:
> Can't you do something like, get a list of all OUs, for each, if a user
> or contact or group or... exist, pipe this OU name into a list.
>
> Then you can look at this list of OU names and target them with QAD
> Migration tools.
>
>
>
> Smita
>
>
>
> *From:* listsad...@lists.myitforum.com [mailto:
> listsad...@lists.myitforum.com] *On Behalf Of *Lai, Jerry
> *Sent:* Wednesday, February 26, 2014 10:37 AM
> *To:* 'scripting@lists.myitforum.com'
> *Subject:* RE: [scripting] RE: Script to list all AD OUs that conatin
> certain object types
>
>
>
> I actually don't really know or need to know the numbers, I just need the
> OU that the object belongs to.
>
>
>
> Example; I run these commands:
>
>
>
> Get-ADObject -filter {(objectClass -eq "User") -and (ObjectCategory -eq
> "Person")} | Export-csv C:\Temp\ADUsers.csv
>
> Get-ADObject -filter {(ObjectClass -eq "Contact")} | Export-csv
> C:\Temp\ADContacts.csv
>
> Get-ADObject -filter {(ObjectClass -eq "Group")} | Export-csv
> C:\Temp\ADGroups.csv
>
> Get-ADObject -filter {(ObjectClass -eq "PrintQueue")} | Export-csv
> C:\Temp\ADPrinters.csv
>
> Get-ADObject -filter {(ObjectCategory -eq "Volume")} | Export-csv
> C:\Temp\ADSharedFolders.csv
>
>
>
> Now I need to go into these csv files and manually clean them up to
> identify the different OUs listed within the DN column of each returned
> object.
>
> I want to cut through that manual work.
>
>
>
>
>
> *From:* listsad...@lists.myitforum.com [
> mailto:listsad...@lists.myitforum.com <listsad...@lists.myitforum.com>] *On
> Behalf Of *Jeremy Brown
>
> *Sent:* Wednesday, 26 February 2014 2:35 PM
> *To:* scripting@lists.myitforum.com
> *Subject:* Re: [scripting] RE: Script to list all AD OUs that conatin
> certain object types
>
>
>
> How many users, groups, and contacts do you expect it to return? This
> sounds like it is going to be a very intensive, time consuming query. I
> don't know that you will be able to run it once and it work. There is a
> default 2 minute timeout on your commands in powershell, I believe. Also,
> I am not a fan of using cmdlets that have to be installed uniquely on a
> machine. If you wanted to use builtin powershell cmdlets you could issue
> something like this:
>
>
>
> Get-ADObject -SearchBase "ou=<TopLevelOU>,dc=domain,dc=extension"
> -LDAPFilter "(|(objectCategory=user)(objectCategory=group))"
>
>
>
> On Wed, Feb 26, 2014 at 8:49 AM, elsalvoz <elsal...@gmail.com> wrote:
>
> I Use powerGUI it should be able gather everything for you. Free
>
> On Feb 26, 2014 1:18 AM, "Lai, Jerry" <jerry....@hsf.com> wrote:
>
> Thanks for the reply Aakash. I'll have to look into the Quest cmdlet.
>
>
>
> My task is actually related to objects published in AD, so abything
> outside of AD I am not really concerned about. It's an information
> gathering task for the purpose of migrating to a new domain. We are using
> Quest Migration Tools to target OUs (that contain the highlighted objects)
> to copy/sync over to the new domain and that's why I need to identify those
> OUs.
>
>
>
> I have very little scripting skills and can only write very basic commands
> and was hoping someone had a script similar to what I was trying to find
> out.
>
>
>
> Thanks.
>
>
>
> *From:* listsad...@lists.myitforum.com [mailto:
> listsad...@lists.myitforum.com] *On Behalf Of *Aakash Shah
>
>
> *Sent:* Wednesday, 26 February 2014 5:09 AM
> *To:* scripting@lists.myitforum.com
>
> *Subject:* [scripting] RE: Script to list all AD OUs that conatin certain
> object types
>
>
>
> The groups, contacts and users should be pretty simple. You can use the
> Quest cmdlets to gather this information using *get-qadobject*. This
> will return a "Type" and you can further filter from here.
>
>
>
> The printers may be harder since unless you chosen to publish them in the
> directory, AD has no idea about them afaik (but someone please correct me
> if I'm wrong). However, one possible approach may be to target the Group
> Policies that are used to deploy the printers to specific OUs, and then
> query those GPs. I've never done this, so I don't have any information
> about this.
>
>
>
> The shares are also not guaranteed to be in AD since unless you've chosen
> to publish them in the directory, they won't be there. Depending on how
> your file server is setup, it may be possible to query the GPs for this
> information too, but since shares are not tied to OUs, I'm not sure how to
> do this definitely.
>
>
>
> -Aakash Shah
>
>
>
> *From:* listsad...@lists.myitforum.com [
> mailto:listsad...@lists.myitforum.com <listsad...@lists.myitforum.com>] *On
> Behalf Of *Lai, Jerry
> *Sent:* Tuesday, February 25, 2014 8:18 PM
> *To:* 'scripting@lists.myitforum.com'
> *Subject:* [scripting] Script to list all AD OUs that conatin certain
> object types
>
>
>
> So I've been tasked to find all OUs that contain specific types of
> objects, them being; users, groups, printers, shares and contacts.
>
>
>
> I have a few powershell command lines that can output all objects to a csv
> file, which will then require quite a bit of manual tidy up.
>
>
>
> Does anyone have a script that can do something similar or is there a
> better way of finding this info?
>
>
>
> Thanks,
>
> Jerry
>
>
>
>
>
>
>
> Herbert Smith Freehills LLP and its subsidiaries and Herbert Smith
> Freehills, an Australian Partnership, are separate member firms of the
> international legal practice known as Herbert Smith Freehills.
>
>
>
> This message is confidential and may be covered by legal professional
> privilege. If you are not the intended recipient you must not disclose or
> use the information contained in it. If you have received this email in
> error please notify us immediately by return email or by calling our main
> switchboard on +612 9225 5000 and delete the email.
>
>
>
>
>
> Further information is available from www.herbertsmithfreehills.com.
>
>
>
>
>
>
>
>
>
>
>
>
>
> --
> Regards,
> Jeremy Brown
> ITECS Systems
> NCSU
>
>
>
>
>
>
--
Regards,
Jeremy Brown
ITECS Systems
NCSU
