feat: Add script to add user to a local ad group with license check

This commit is contained in:
Björn Benouarets
2025-07-16 10:01:12 +02:00
parent 775e04ebb9
commit be78b4327b

View File

@@ -0,0 +1,29 @@
$dn = "DC=secnex,DC=local"
# Object with all license and sub groups
$license_groups = @{
"E3" = "Subgroup E3"
"F3" = "Subgroup F3"
}
$application_group = "Application Group"
$user = "User"
# Check if user is member of one of the license groups
foreach ($license_group in $license_groups.Keys) {
$user_is_member = Get-ADGroupMember -Identity $license_group -SearchBase $dn -Filter {SamAccountName -eq $user}
if ($user_is_member) {
Write-Host "User is already a member of the license group! Adding user to sub group..."
Add-ADGroupMember -Identity $license_groups[$license_group] -Members $user -Confirm:$false
} else {
Write-Host "User is not a member of the license group!"
}
}
# Check if user is member of application group
$user_is_member = Get-ADGroupMember -Identity $application_group -SearchBase $dn -Filter {SamAccountName -eq $user}
if ($user_is_member) {
Write-Host "User is already a member of the application group!"
} else {
Write-Host "User is not a member of the application group! Adding user to application group..."
}