Add Get-UserProperties

[jorgex7]

Function will retrieve AD user's properties and group memberships. It will then export and log the results. Could be used when changing permissions on an account or before disabling it.

            function Get-ADUserProperties {

            param (
            [Parameter(mandatory = $True, ValueFromPipeline = $true)]
            [ValidateNotNullOrEmpty()]
            [string]$Username
            )

            Log file location ex:
            $Logfilename = 'c:\reports\temp' + $Username + ($TimeStamp = Get-Date -Format '_yyyy_MM_dd_HH-mm-ss') + '.txt'

            $User = Get-ADUser -LDAPFilter "(sAMAccountName=$Username)"
            if($User -ne $Null){ Write-Host "Processing"
            $uprop1 = Get-ADUser $Username -Properties * -ErrorAction Stop
            $managerDetails = Get-ADUser (Get-ADUser $Username -properties manager).manager -properties displayName
            $uprop2 = Get-ADPrincipalGroupMembership -Identity $Username | Get-ADGroup -Properties * | select name, description

	                $prop1 = [ordered]@{
		                "Name" = $uprop1.name
                            "User ID" = $uprop1.samaccountname
		                "Email Address" = $uprop1.emailaddress
		                "Title" = $uprop1.title
		                "Description" = $uprop1.Description
		                "Department" = $uprop1.Department
                        "Manager" = $managerDetails.Name
                        "Office Phone" = $uprop1.officephone
                        "Mobile" = $uprop1.mobile
                        "Account Created" = $uprop1.Created
                        "Password Last Changed" = $uprop1.PasswordLastSet
                        # End of $prop1
	                }
		

                    $4userinfo += $prop1 | FT -AutoSize | Out-String
                    $4userinfo += $uprop2 | FT -AutoSize | Out-String
                    $4userinfo |  Out-File -FilePath $Logfilename
                    Write-host "Completed"

            }
            else {Write-Host "User not found: $Username" -ForegroundColor Red  }
            }

[steviecoaster]

I have something in the works. It's in commit 980654b if you'd want to check it over for me. I don't store Manager in AD, so it's commented out. I am probably going to circle back to this and build the hashtable of properties dynamically so I can check for nulls.

[jorgex7]

I'm still developing my scripting skills, so I'm always trying different things. I have slightly different version of the script.

            function Get-ADUserProperties {
            ### Start of Function ###
                [CmdletBinding()]
            param (
                    [Parameter(mandatory = $True, ValueFromPipeline = $true,
                    Helpmessage = "Enter User Name" , position = 0)]
	                [ValidateNotNullOrEmpty()]
	                [string]$Username,
	                [Parameter(Mandatory = $false,
                    Helpmessage = "Select Enabled or Disabled", position = 1)]
	                [Validateset('Enabled','Disabled')]
	                [string ]$Logging = "Disabled"
    
                )


            <#
            Example:

            Get-ADUserProperties -Username jwayne -Logging Enabled
            - will export results to c:\reports\temp


            Get-ADUserProperties -Username bwayne
            - will write output to console


            #>

            # Log file/name
            $logfilepath = 'c:\reports\temp\'
            $TimeStamp = Get-Date -Format '_yyyy_MM_dd_HH-mm-ss'
            $Logfilename = $logfilepath + $Username + $TimeStamp + '.txt'

                    $User = Get-ADUser -LDAPFilter "(sAMAccountName=$Username)"
                # Main If
                if($User -ne $Null){
    
                        $uprop1 = Get-ADUser $Username -Properties * -ErrorAction Stop
                        $uprop2 = Get-ADPrincipalGroupMembership -Identity $Username   | Get-ADGroup -Properties * | select name, description | Sort-Object name
                        # Check if the manager field is not empty
                        if ($uprop1.Manager -ne $Null) {
                                $managerDetails2 = Get-ADUser (Get-ADUser $Username -properties manager).manager -properties displayName
                               }

                        $prop1 = [ordered]@{
			                "Name" = $uprop1.name
                             "User ID" = $uprop1.samaccountname
			                "Email Address" = $uprop1.emailaddress
			                "Title" = $uprop1.title
			                "Description" = $uprop1.Description
			                "Department" = $uprop1.Department
                            # Commnet out Manger if field is not being used
                            "Manager" = $managerDetails2.Name
                            "Office Phone" = $uprop1.officephone
                            "Mobile" = $uprop1.mobile
                            "Account Created" = $uprop1.Created
                            "Password Last Changed" = $uprop1.PasswordLastSet
                            # End of $prop1
			                }
			

                       $4userinfo += $prop1 | FT -AutoSize | Out-String
                       $4userinfo += $uprop2 | FT -AutoSize | Out-String
       



                        # Check Logging Status 
                        if (($logging) -eq "Enabled") 
                            {  

                            Write-Host "See log file" -ForegroundColor Yellow
                            Write-Host $Logfilename
                            $4userinfo |  Out-File -FilePath $Logfilename

                            } 

                        if (($logging) -eq "Disabled") 
                            { 
                            Write-Host $4userinfo 
                            } 

                      }
                    # Main Else
                else {
                    Write-warning "User not found: $Username" 
                    Write-warning "Verify User ID " 
                    Write-Error $_.Exception.Message 

                   }

            }