Sean Lister Powershell and VB scripts

[PS] Checking profile folders with account in AD

Get-childitem c:\Users\ | where {$_.Mode -like "d*"} | ForEach-Object {

$folder = $_

$ad = Get-ADuser $folder -properties samaccountname

if($ad.samaccountname -eq $folder) {

echo "$folder is valid" | out-file -filepath output.txt -append

}
else
{
echo "$folder could not be matched"| out-file -filepath output.txt -append
}

}

[PS] Pre-populating computers in AD

Get-Content computers.txt | ForEach-Object { New-ADComputer -Name $_ -Path "PathToOU" }

[PS] Clearing extension attributes from Active Directory

i've decided to create this Powershell script which can be used to clean any extension attributes but as you will see below they have been set to 1 & 2. When using this script a parameter needs to be set this can be their login name

param($user)
$user = Get-ADuser $user
Set-ADObject -identity $user.DistinguishedName -clear extensionAttribute1, extensionAttribute2

[PS] Adding domain group to local group

Powershell script to add a domain group to a local group. The script will look through a list of computers which are specified in the "computers.txt" file and cycle through the list of computers adding the group.

Get-Content c:\Users\$username$\Desktop\computers.txt | ForEach-Object {
[ADSI]$objAdmins = "WinNT://$_/Administrators"
$objAdmins.Add("WinNT://contoso/Server Administrators,group")
}

[PS] Move disabled and log location

This script is mainly to help clean up Active Directory. The script will look through Test 1 and Test 2 OUs for devices disabled in active directory and move them to an Inactive OU. The script also keeps a log of the location where the computer was moved from for easy reference.

#########################################################################
#									#
#	Script created to move disabled computer into Inactive OU.	#
#									#
#########################################################################

$list = ("OU=Test 1,DC=contoso,DC=com","OU=Test 2,DC=contoso,DC=com")

foreach($ou in $list)
	{

		$inactive = "OU=Inactive,DC=contoso,DC=com"

		Search-ADAccount -AccountDisabled -ComputersOnly -SearchBase $ou | Select name,DistinguishedName | Out-File Move-Disabled-Output.csv -append

		Search-ADAccount -AccountDisabled -ComputersOnly -searchbase $ou | Move-ADobject -TargetPath $inactive
	}

[PS] Move and disable inactive devices

This powershell script similar to the "AD clean up". This will look through certain OU and check for the last logged on. If the computer hasn't been logged on for over 90 days the computer will be moved in to the inactive OU while getting disabled. This script will also keep a record of the location and output this to a file.

#########################################################################
#									#
#	Script created to move inactive computers (90 Days) to the 	#
#		inactive OU and Disable computer account		#
#									#
#########################################################################

$list = ("OU=TestOU2,DC=contoso,DC=com")

foreach($ou in $list) 

    {

	$inactive = "OU=Inactive,DC=contoso,DC=com"
	$date = (Get-Date).adddays(-90)

	$lastSetdate = 0
	#$lastSetdate = Get-Date $date -format "dd/MM/yy HH:mm:ss"   

	$result = Get-ADComputer -Filter {lastLogondate -le $lastSetdate} -Properties lastLogondate -ResultSetSize $null -SearchBase $ou

        Get-ADComputer -Filter {lastLogondate -le $lastSetdate} -Properties lastLogondate -ResultSetSize $null -SearchBase $ou | Select name,DistinguishedName | Out-File MoveSet-Output.csv -append

        Get-ADComputer -Filter {lastLogondate -le $lastSetdate} -Properties lastLogondate -ResultSetSize $null -SearchBase $ou | Set-ADComputer -Enable $False

	Get-ADComputer -Filter {lastLogondate -le $lastSetdate} -Properties lastLogondate -ResultSetSize $null -SearchBase $ou | Move-ADobject -TargetPath $inactive 

    }