Active Directory Scripts

[water]

This error codes are described in the header of each function. For _AD_GetObjectsInOU it means: Specified OU does not exist.

[BigNoter]

I checked the path and it was OK!

Global $sOU = "LDAP://OU=OUName2,OU=OUName1,OU=OUName0,DC=1,DC=2,DC=3" ; OU to process

Is this the write way of FQDN?

TIA

[water]

Should be the FQDN of the OU:

Global $sOU = "OU=OUName2,OU=OUName1,OU=OUName0,DC=1,DC=2,DC=3" ; OU to process

 

[BigNoter]

So why I'm getting this error?

TIA

[water]

You did notice that I stripped off " LDAP:// "?

[BigNoter]

Sorry,

[BigNoter]

20 hours ago, water said:

Untested! Please make sure to test on a test system only!!

#include <AD.au3>
Global $sOU = "" ; OU to process
Global $aObjects, $aGroups

; Open Connection to the Active Directory
_AD_Open()
If @error Then Exit MsgBox(16, "AD", "Function _AD_Open encountered a problem. @error = " & @error & ", @extended = " & @extended)

; Get a list of users in the specified OU (subtree)
$aObjects = _AD_GetObjectsInOU($sOU, "(&(objectcategory=person)(objectclass=user))", 2, "sAMAccountName,memberof")
If @error > 0 Then Exit MsgBox(16, "AD", "Function _AD_GetObjectsInOU encountered a problem. @error = " & @error & ", @extended = " & @extended)

; Process all users
For $i = 1 To $aObjects[0][0]
    $aGroups = StringSplit($aObjects[$i][1], "|")
    For $j = 1 To $aGroups[0]
        ; Remove User from group
        _AD_RemoveUserFromGroup($aGroups[$j], $aObjects[$i][0]) 
        If @error > 0 Then Exit MsgBox(16, "AD", "Function _AD_RemoveUserFromGroup encountered a problem. @error = " & @error & ", @extended = " & @extended)
    Next
    ; Add User to new groups (repeat the statement for each group to be added)
    _AD_AddUserToGroup(">>Set groupname here<<", $aObjects[$i][0]) 
    If @error > 0 Then Exit MsgBox(16, "AD", "Function _AD_AddUserToGroup encountered a problem. @error = " & @error & ", @extended = " & @extended)
Next

_AD_Close()

 

It worked...

Without any change.

Thnx

[water]

I'm a genius
It happened for the first time that a script worked without any modification

[BigNoter]

One more question, does it modify the users in sub OUs as well?

TIA

[water]

Sure. Parameter 3 in _AD_GetObjectsInOU defines where to search: 0 = base, 1 = one-level, 2 = sub-tree (default)