Site Logo Image Maintenance Scripts

A repository of PowerShell Scripts to automate a variety of IT related maintenance tasks.

© 2023. All rights reserved.

Get-ElevatedUsers.ps1

Description

@GitHub Copilot - Welcome @BanterBoy, I’m your Copilot and I’m here to help you get things done faster. I can identify issues, explain and even improve code.

You can ask generic questions, but what I’m really good at is helping you with your code. For example:

Generate unit tests for my code Explain the selected code Propose a fix for the bugs in my code If you want to learn more about my capabilities and limitations, check out the Copilot documentation.

I’m powered by AI, so surprises and mistakes are possible. Make sure to verify any generated code or suggestions, and share feedback so that we can learn and improve.

@BanterBoy: - Explain what the script does and why it is useful.

@GitHub Copilot -

Script

# PowerShell function to list users in Authoritative Groups in Active Directory
# http://jeffwouters.nl/index.php/2013/11/powershell-function-to-list-users-in-authorative-groups-in-active-directory/

# Import the Modules
Import-Module ActiveDirectory

function Get-ElevatedUsers {
    $GroupType = '-2147483643'
    # A group type of -2147483643 specifies all groups with a domain local scope created by the system.
    # References:
    # - http://msdn.microsoft.com/en-us/library/windows/desktop/ms675935(v=vs.85).aspx
    # - http://blogs.technet.com/b/heyscriptingguy/archive/2004/12/21/how-can-i-tell-whether-a-group-is-a-security-group-or-a-distribution-group.aspx
    $ElevatedGroups = Get-ADGroup -Filter { grouptype -eq $GroupType } -Properties members
    $Elevatedgroups = $ElevatedGroups | Where-Object { ($_.Name -ne 'Guests') -and ($_.Name -ne 'Users') }
    foreach ($ElevatedGroup in $ElevatedGroups) {
        $Members = $ElevatedGroup | Select-Object -ExpandProperty members
        foreach ($Member in $Members) {
            $Status = $true
            try {
                $MemberIsUser = Get-ADUser $Member -ErrorAction silentlycontinue
            }
            catch { $Status = $false }
            if ($Status -eq $true) {
                $Object = New-Object -TypeName PSObject
                $Object | Add-Member -MemberType noteproperty -Name 'Group' -Value $ElevatedGroup.Name
                $Object | Add-Member -MemberType noteproperty -name 'User' -Value $MemberIsUser.Name
                $Object
            }
            else {
                $Status = $true
                try {
                    $GroupMembers = Get-ADGroup $Member -ErrorAction silentlycontinue | Get-ADGroupMember -Recursive -ErrorAction silentlycontinue
                }
                catch { $Status = $false }
                if ($Status -eq $true) {
                    foreach ($GroupMember in $GroupMembers) {
                        $Object = New-Object -TypeName PSObject
                        $Object | Add-Member -MemberType noteproperty -Name 'Group' -Value $ElevatedGroup.Name
                        $Object | Add-Member -MemberType noteproperty -Name 'User' -Value $GroupMember.Name
                        $Object
                    }
                }
            }
        }
    }
}

Get-ElevatedUsers

Back to Top

Download

Please feel free to copy parts of the script or if you would like to download the entire script, simple click the download button. You can download the complete repository in a zip file by clicking the Download link in the menu bar on the left hand side of the page.

Report Issues

You can report an issue or contribute to this site on GitHub. Simply click the button below and add any relevant notes. I will attempt to respond to all issues as soon as possible.

Issue

Back to Top