How Can I Add All the Users from an Existing Active Directory Group to a New Group?

re: How Can I Add All the Users from an Existing Active Directory Group to a New Group?

Al — Thu, 08 Nov 2012 11:28:36 GMT

This fails on line 6 for me -

Windows Script Host

---------------------------

Script: \\server\share\GroupCopy.vbs

Line: 6

Char: 1

Error: Unspecified error

Code: 80004005

Source: (null)

---------------------------

I know this is quite an old post - but any chance of an update? Trying to run this on a 2008 R2 DC.

re: How Can I Add All the Users from an Existing Active Directory Group to a New Group?

JeremyEngelWork — Tue, 07 Feb 2012 20:36:57 GMT

Here is a script I wrote to do this in PowerShell. Note: it doesn't handle groups with more than 1500 members. I haven't had to do such a transfer, so I never accounted for it.

function Transfer-GroupMembership {

Param([string]$SourceGroup,[string]$TargetGroup)

$objADSearch = New-Object System.DirectoryServices.DirectorySearcher

$objADSearch.PageSize = 1000

$objADSearch.SearchScope = "Subtree"

$objADSearch.SearchRoot = New-Object System.DirectoryServices.DirectoryEntry

$objADSearch.Filter = "(&(objectClass=group)(cn=$SourceGroup))"

if(!($result = $objADSearch.FindOne())) { Write-Host "ERROR: No such group [$SourceGroup] found." -ForeGroundColor Red; return }

$members = $result.Properties["member"]

$objADSearch.Filter = "(&(objectClass=group)(cn=$TargetGroup))"

if(!($result = $objADSearch.FindOne())) { Write-Host "ERROR: No such group [$TargetGroup] found." -ForeGroundColor Red; return }

$group = $result.GetDirectoryEntry()

$group.member += $members

$group.CommitChanges()

Write-Host "The $($members.Count) members from $SourceGroup were successfully added to $TargetGroup."

}

re: How Can I Add All the Users from an Existing Active Directory Group to a New Group?

Laura S. — Tue, 07 Feb 2012 19:43:43 GMT

This works great if there are at least 2 users in the "Old" group. If there are not, there are problems. This is what I used to get around that issue:

' oGroup1 = "Old" group, oGroup2 = "New" group

cMembers = oGroup1.Member

' If there are no members in the group, you will receive an error because no collection exists.

If IsEmpty(cMembers) Then

WScript.Echo "Group " & oGroup1.Name & " is empty."

' If there is only one member, it will be a string instead of a collection

ElseIf TypeName(cMembers) = "String" Then

oGroup2.Add "LDAP://" & oGroup1.Member

Else

For Each oUser In oGroup1.Member

oGroup2.Add "LDAP://" & oUser

End If