Powershell script for security groups and users for multiple share folders

Hi scripting team,
I need your help with powershell script for the below queries
1. List out the security groups for more than one server share path and output it to a file ( csv )
For eg.
If the are are two share paths
\\servername\foldermain\folder1
\\servername\foldermain\folder2
So I needs the list of security groups for each share path
And the output needs to be under each any every path.
2. Grab the users belongs to main security groups and it nested groups for more than one security group and listed the users under each and every group. No need to display nested groups. Just users belongs to main group and users under nested.
Your teams help is much appreciated
Thank you.
Thilochana kumararatne

Hi Braham,
Thanks for your quick reply.
Are we able to do this on two stage method
1. grab the security groups from the share paths
if can grab the share path from a separate txt file than copying it to the <your path> location
so i can modify the txt file
once run the script
if can the output like below to a CSV file
\\servername\foldermain\folder1group 1group 2group 3\\servername\foldermain\folder2group 1group 2group 3then i know which groups belongs to which share paththen i can remove the duplicate groups and keep the common groups to grab the users belongs to itso with the second script same as the first copy the security groups to a txt file and the out put as below.what I needs is the users full name and the samaccount name ( user id )group 1user1user2user3
group 2user1user2user3looking forward your help on thisThank you.Thilo

Similar Messages

SSRS - Intellisense for Security (Groups and Users) and email subscriptions

When I add a new user to a SQL Server (In SSMS), I can add an AD Group or user, and SQL server will verify their login name. It will reject if wrong and let me search Active Directory and verify names. In MS Outlook I can start typing an email
address and intellisense will help me complete it.
Is there Intellisense on the Report Server, so when I make a role assignment (giving permissions like Browser to a user) it checks their login or even completes it for me.
Is there Intellisense when I add email address to a subscription?
Was wondering if this is a setting I can turn on, or if it is just not available.
Any workarounds? How do I know I am entering a user correctly, what if I misspell?
Thanks,
Mike

Hi Computermike,
According to your description, you want to check the if the e-mail address is valid when creating e-mail subscription. Right?
In Reporting Services, The report server does not validate e-mail addresses or obtain e-mail addresses from an e-mail server. You must know in advance which e-mail addresses you want to use. This is a feature by design. However, if you send a subscription
to an invalid e-mail address, the sender (your service account) will receive an e-mail which tells you the destination e-mail address is invalid.
If you really need to check the validation of the e-mail address before sending the subscription, we suggest you provide Microsoft a feature request at
https://connect.microsoft.com/SQLServer
so that we may try to expand the product features based on your needs.
Best Regards,
Simon Hou

CR - giving total transaction count for few groups and 0 for few groups.

For the column "No of First Call Resolution" I have to count no of interactions based on the Interaction Result, the formula is
COUNT(Interaction_ID) WHERE INTERACTION_RESULT = 'FCR'
For which, I wrote the below formula
If {14CICustomerInteractions_query.Interaction Result} = "FCR" then Count ({14CICustomerInteractions_query.Interaction_ID})
I have 33,232 interactions on the particular day I selected. When I try to group up and do the calculations it is giving total transaction count for few groups and 0 for few groups.
Need Solution

Hi,
What field is the report grouped on?
If you wish to find the no of interactions based on some condition and display it for every group, then here's what you need to do:
1) Create this formula and place this on the details section:
whileprintingrecords;
numbervar c;
If {14CICustomerInteractions_query.Interaction Result} = "FCR" then
c := c + 1;
2) Create another formula and place this one on the Group Footer:
whileprintingrecords;
numbervar c;
3) Create this formula to reset the variable and place this on the Group Header:
whileprintingrecords;
numbervar c := 0;
Let me know how this goes!
-Abhilash

Is there a way to create an automated job to add andupdate groups and users for Connect?

Is it possible and does anyone have experience with being able to create an automated load of new groups and users in Adobe Connect. We have an On-premise deploymentwill be setting up the application to be open outside our company to train channel partners. We have a separate database of channel partner contacts, email addresses, passwords, and training groups that they should be in based on their partner company or product knowledge. We would like to be able to create a front end database that would create a group based on the partner company or based on product knowledge. Then we would like to add users to these groups. Any knowledge of whether this is possible and if anyone has done it?

There are also size limitations or rather suggestions for particle size. If I were creating an animated 3D shape using Form or C4D and wanted to use it as a particle I would keep the size of the particle about 1/6 to 1/8 of the comp size. You would create a new comp for your particle, animate it, then nest the particle comp in your main comp, turn off visibility, and then use it as a particle in Particular.

What is the Behavior.Navigation URL for creating navigation bar links for search scopes for security group and distribution groups?

...the search scope is used to subset the SGs and DGs. The search scope itself shows expected results. The search scope filter used is: /Group[Type='Security' or Type='MailEnabledSecurity'][(Domain = 'DomainX') or (Domain = 'DomainY')]
Tried the following, with the GUID being the resource ID from the search scope for security groups:
~/identitymanagement/aspx/customized/CustomizedObjects.aspx?type=Group&searchtype=e8ed98b6-e299-4b8d-bfe5-e4b2adf1cd60
~/IdentityManagement/aspx/groups/Groups.aspx?type=Group&searchtype=e8ed98b6-e299-4b8d-bfe5-e4b2adf1cd60
Thanks

are you talking about redirect URL in search scope ? FIM will automatically add the searchtype querystring
for custom groups search scope you can use :
~/IdentityManagement/aspx/groups/AllGroups.aspx
and configure you search scope to use the same UsageKeywords as for the security groups
and restart your IIS server using the command "IISRESET"
in your case if you want to create navigation bar link to your group-type search scope use may use this format:
http://{your fim server}/IdentityManagement/aspx/groups/AllGroups.aspx?searchtype={your searchscope guid}&content=%2a
ex : http://fimserver/IdentityManagement/aspx/groups/AllGroups.aspx?searchtype=47e0a973-0ab4-46f5-815f-f5028c1af58e&content=%2a

Best Practice for managing Groups and Users

We want to create a Corporate Portal for the Department and it's Organizations. We want to have one Portal Public page as the main entry for all our users. When a user login, he will be re-direct to is Organization Portal page.
I need to find a good document, a case study if possible, on how to define my Groups in OID to achieve this. I need a document that explain how to setup and manage Groups for a Corporate Portal.
Thank you!

Hi!
The Portal Admin Guide gives a good overview about the groups administration.
I don't know about case studies that address your problem.
When you have different home pages for different groups you can administer this with the Portal Group Profile portlet in the admin section of Portal.
cu
Andreas

SharePoint 2013 Discussion items "visibility" depending on permession for specific groups and users

Hello,
I have a blank site in SharePoint 2013 in which i activated `CommunityFeature` and i created a discussion board app which is displayed in a web part.
Now, i want to be able to change the discussion visibility ... E.g. when i click on new discussion i want to have a people picker that allows me to choose people or groups that are allowed to see and reply for that discussion...
How can this be made? can anyone help me please?

Hi,
The OOTB feature “Audience Targeting” on list item will be capable of your requirement.
“List or library items can be targeted to appear only to people who are members of a particular group or audience”.
More information about
Audience Targeting:
http://office.microsoft.com/en-001/sharepoint-server-help/target-content-to-specific-audiences-HA010169053.aspx
Best regards,
Patrick
Patrick Liang
TechNet Community Support

Dn for Portal groups and users

Hi,
I have installed Oracle 9iAS release 2 on Windows NT. I need to modify the OID entries structure for Authentication.
Instead of the existing structure :
dc=xxx
- dc=yyyy
- cn=Users
- cn=Groups
I have a structure like this :
dc=xxx
- dc=yyyy
- cn=Users
- cn=InternetUsers
- cn=User1
- cn=User2
- cn=IntranetUsers
- cn=User3
- cn=User4
Can I configure Portal to use this structure/data for authentication,instead of the default DIT?
Thanks,
Shipra Surendra

yes you can do it...
go to the you
dc=xxx
-dc=yyy
--cn=oraclecontext
---cn=products
----cn=common
here replace the both dn for the user and group lookins.... and give same acl as to the new one as of default... that's it

Powershell script to Scan Active Directory Attributes for Country and Department ,Then add to Sales Group then add to Distribution list based on Region

Hey Scripting Guys,
I have been in and out of Powershell last few years, not that great at it tbh !!! I'm looking for advice on how I can as in Title, Create a Powershell script to Scan Active Directory Attributes for Country and Department ,Then add to Group then add to Distribution
list based on Region/Country
I was thinking along the lines of get-aduser -LDAPFilter "(department=SALES France) and adding a where clause for country.
Any help would be great.
Dec

So I have tried a few variations but get errors on both
get-aduser -LDAPFilter "(&(department=SALES)(c=us))" | Add-ADPrincipalGroupMembership -MemberOf "testgroup"
get-aduser -LDAPFilter "(&(department=SALES)(c=fr))" | Add-ADGroupMember -identity "testgroup"
Add-ADPrincipalGroupMembership : Object reference not set to an instance of an
object.
At line:1 char:86
+ get-aduser -LDAPFilter "(&(department=SALES)(c=fr))" | Add-ADPrincipalGroupMe
mbership <<<< -MemberOf "testgroup"
+ CategoryInfo : NotSpecified: (:) [Add-ADPrincipalGroupMembershi
p], NullReferenceException
+ FullyQualifiedErrorId : Object reference not set to an instance of an ob
ject.,Microsoft.ActiveDirectory.Management.Commands.AddADPrincipalGroupMem
bership

Set logon hours for security groups that will access RDS 2012

Hi All,
We have the following hardware for our RD Web solution:
1 Server – RD Gateway, RD Licensing, RD Web Access, RD Connection Broker
1 Server – RD Session Host 1
1 Server – RD Session Host 2
Our environment consists of the following:
1 Windows Server 2012 R2 domain controller at the main office, 4 additional 2003 R2 domain controllers scattered
throughout our 4 remote offices. Domain functional level of 2003. This all works under one flat domain called company.business.com
We have RDS up and running, and all of our users are able to access it through the internet either from home or directly from their remote office. Our next step is to focus on restricting
access.
In Active Directory, we have accounts for Support Staff, and accounts for Sales People. They will all have access to RDS in
the following ways:
Support Staff will use it from 8am to 5pm throughout the day so that they may connect to the Mickey Mouse 2000 software that is located in the main office
Sales People will use it 24/7 for all intended purposes
How do we set it so that Support Staff can only access it internally but not externally when they are outside of the
office while still providing 24/7 access to the Sales People?
Can this be accomplished using security groups or logon hours? All input is greatly appreciated, thank you!

Hi,
Thank you for posting in Windows Server Forum.
Based on your description seems you want to have user to get access your software by RemoteApp. You can achieve your desired solution with below steps.
• Support Staff will use it from 8am to 5pm throughout the day so that they may connect to the Mickey Mouse 2000 software that is located in the main office
• Sales People will use it 24/7 for all intended purposes
For above one, you can restrict the access to particular user\group from the “ADUC>Users properties>Account>Logon Hours” where need to specify the time limit for user to Logon or denied logon.
How do we set it so that Support Staff can only access it internally but not externally when they are outside of the office while still providing 24/7 access to the Sales People?
When you have setup your environment, you have configured RD RAP and RD CAP; right? You can try not to include the user group that you don’t want to have outside environment. Please check following article for information.
Checklist: Make RemoteApp Programs Available from the Internet
http://technet.microsoft.com/en-in/library/cc772415.aspx
Hope it helps!
Thanks.
Dharmesh Solanki
TechNet Community Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Would Like to Get Report of Daily Emails In and Out from Members to a DL Exchange version : 2007 I am the supervisor for the group and want to quantify this information. I do not need to see the content, just quantity is it possible ?

Would Like to Get Report of Daily Emails In and Out from Members to a DL
Exchange version : 2007
I am the supervisor for the group and want to quantify this information. I do not need to see the content, just quantity
is it possible ?

Well, distribution groups don't really have a concept of "in" or "out". They only serve to distribute messages sent to them -- unless you're asking to know who was a member of the distribution group at the time a message was sent to the DL.
Message tracking logs hold the information you want, though. You'd have to look for EXPAND events that reference the distribution group and take the sender's e-mail address from that event. If the DL is a simple one that's not a member of any other groups
you could also look for RECEIVE events sent to the e-mail address of the group and get the sender's name from that event.
You can use Powershell extract the rows of data from the logs, but you'll have to write the code to get the data out of those rows and into a format you want. Perhaps LogParser could be useful in place of Powershell?
--- Rich Matheisen MCSE&I, Exchange MVP

Can a workflow steps and users for the steps be controlled by contributors?

Is it possible to have a workflow that allows contributors to select list of steps and users in the steps? The universal set of steps and users for steps can be defined in the designer mode. But the contributors can decide for a particular content item what steps need to be skipped and the users for the step. But atleast one approver step is mandatory. This is some strange requirement that our client is expecting. Is this possible?
Regards,
Pratap

Hi Pratap,
Short answer: Yes. This has been possible since the Stellent 5.x days (and possibly earlier). We can help you with this if you need services - see our Workflow offerings here: http://bit.ly/b2Ydv6
Or you can do it yourself. For the details you should see "Setting Up Ad Hoc Step Users" in the workflow admin guide (pp 147, section 9-13) http://download.oracle.com/docs/cd/E10316_01/cs/cs_doc_10/documentation/admin/workflow_guide_10gr3en.pdf
Remember that a "step" is just a container for a certain group of users to take action on certain kinds of content. So you can have one step but if you loop over it 3 times with a different set of users each time you have a defacto 3 step workflow.
You need 2 things:
1) the workflow plumbing for the selection of the next "step" (and/or group of users) in the workflow (tokens and subworkflows typically)
2) a UI for the end users / contributors to actually make the selections.
For 1) you use tokens that will ultimately resolve to a list of user names who should take action. You might use names (e.g. bcripe) or aliases (e.g. The Legal Team) or other concepts that make sense to the end users who will be participating (e.g. capital expenditure review). Whatever you do the tokens will ultimately yield one or more user ids which become the step users.
For 2) you can use anything that will make those plumbing values available to the UCM workflow engine. Most common is using metadata fields. They're easy, can be displayed only during workflows (using rules and profiles), and fairly intuitive for most UCM users (if there are not too many!!!). However, you can just as easily write web services, BPEL tasks, or CIS integrations that take form or other triggered input from the user and pass those parameters back to the workflow engine. For more complex workflows this is often a good idea especially if you are dealing with people who are only casual users of UCM or who are interacting with content through another primary UI.
Either way, let us know what we can do to help. Workflows are a special passion to us here at Fishbowl and we've got supported software to prove it. http://bit.ly/95Rocu
Warmly,
Billy Cripe
Fishbowl Solutions

Security Approach and Plan for single logon for Essbase and Reports.

Please any one can suggest me, how can I do the Security Approach and Plan for single logon for Essbase and Reports by using Maxl or Administrator.If any one have code,please forward to my email Id: [email protected]

Once you are logged in to the "Hyperion Portal" as you call it, your user credentials are automatically passed among all the components. Therefore, a lot of the logic you created to pass credentials between BQY files in a desktop environment are no longer needed.

HT5312 i am in Iraq right now and i cannot make any schedule for having a call with your support team , however, i forgot the answer for security questions , and also previously i have not summited a rescue Email address is there any way to reset my accou

i am in Iraq right now and i cannot make any schedule for having a call with your support team , however, i forgot the answer for security questions , and also previously i have not summited a rescue Email address is there any way to reset my account?

Please be aware that you are not communicating with Apple when you post in these forums. These are user-to-user support forums, so in almost all cases the only people who will reply to your posts are, like me, your fellow users.
As to whether you can work with Apple via email on this issue I can't say for sure, but you can contact them via this web page:
http://www.apple.com/support/appleid/contact/
and see if they can help. It's mostly going to be an issue of you being able to prove to them that you are the account owner.
Regards.

Digital Signature - Setup User master record for Particular group of user

I already setup Electronic signature for RR and UD. but having problem to complete transaction.
When a Digital signature is executed, the system should copies the signatory name from the user master record to the signed document. However, the name has not been maintained completely in user master record and for this reason, i cannot execute the signature. So how can i setup User master record for Particular group of user?
Regards,
NP

It is actuly comes under QM module to save the test record, but before saving it, we need to have authorization.
For authorization, we are having digital signature.
So i need to assign user group for particular those authorization digital signature. so i thought, might be IDM can help on that?
How would i do that? so are you guys able to help me on that ?
Thank you
NP

Powershell script for security groups and users for multiple share folders

Similar Messages

Maybe you are looking for