-
Notifications
You must be signed in to change notification settings - Fork 204
/
Copy pathSet-ADGroupProperties.ps1
158 lines (137 loc) · 5.27 KB
/
Set-ADGroupProperties.ps1
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
#Requires -Version 5.0
#Requires -Modules ActiveDirectory
<#
.SYNOPSIS
Sets the properties of the Active Directory group.
Only parameters with value are set
.DESCRIPTION
.NOTES
This PowerShell script was developed and optimized for ScriptRunner. The use of the scripts requires ScriptRunner.
The customer or user is authorized to copy the script from the repository and use them in ScriptRunner.
The terms of use for ScriptRunner do not apply to this script. In particular, ScriptRunner Software GmbH assumes no liability for the function,
the use and the consequences of the use of this freely available script.
PowerShell is a product of Microsoft Corporation. ScriptRunner is a product of ScriptRunner Software GmbH.
© ScriptRunner Software GmbH
.COMPONENT
Requires Module ActiveDirectory
.LINK
https://github.com/scriptrunner/ActionPacks/tree/master/ActiveDirectory/Groups
.Parameter OUPath
AD path
[sr-de] Active Directory Pfad
.Parameter GroupName
DistinguishedName or SamAccountName of the Active Directory group
[sr-de] SAMAccountName oder Distinguished-Name der Gruppe
.Parameter DomainAccount
Active Directory Credential for remote execution on jumphost without CredSSP
[sr-de] Active Directory-Benutzerkonto für die Remote-Ausführung ohne CredSSP
.Parameter DisplayName
Display name of the group
[sr-de]Anzeigename
.Parameter Description
Description of the group
[sr-de]Beschreibung der Gruppe
.Parameter HomePage
Home page of the group
[sr-de] Homepage der Gruppe
.Parameter Scope
Scope of the group
[sr-de] Gruppenbereich der Gruppe an
.Parameter Category
Category of the group
[sr-de] Kategorie der Gruppe
.Parameter DomainName
Name of Active Directory Domain
[sr-de] Name der Active Directory Domäne
.Parameter AuthType
Authentication method to use
[sr-de] Gibt die zu verwendende Authentifizierungsmethode an
#>
param(
[Parameter(Mandatory = $true,ParameterSetName = "Local or Remote DC")]
[Parameter(Mandatory = $true,ParameterSetName = "Remote Jumphost")]
[string]$OUPath,
[Parameter(Mandatory = $true,ParameterSetName = "Local or Remote DC")]
[Parameter(Mandatory = $true,ParameterSetName = "Remote Jumphost")]
[string]$GroupName,
[Parameter(Mandatory = $true,ParameterSetName = "Remote Jumphost")]
[PSCredential]$DomainAccount,
[Parameter(ParameterSetName = "Local or Remote DC")]
[Parameter(ParameterSetName = "Remote Jumphost")]
[string]$DisplayName,
[Parameter(ParameterSetName = "Local or Remote DC")]
[Parameter(ParameterSetName = "Remote Jumphost")]
[string]$Description,
[Parameter(ParameterSetName = "Local or Remote DC")]
[Parameter(ParameterSetName = "Remote Jumphost")]
[string]$HomePage,
[Parameter(ParameterSetName = "Local or Remote DC")]
[Parameter(ParameterSetName = "Remote Jumphost")]
[ValidateSet('DomainLocal', 'Global', 'Universal')]
[string]$Scope,
[Parameter(ParameterSetName = "Local or Remote DC")]
[Parameter(ParameterSetName = "Remote Jumphost")]
[ValidateSet('Distribution', 'Security')]
[string]$Category,
[Parameter(ParameterSetName = "Local or Remote DC")]
[Parameter(ParameterSetName = "Remote Jumphost")]
[string]$DomainName,
[Parameter(ParameterSetName = "Local or Remote DC")]
[Parameter(ParameterSetName = "Remote Jumphost")]
[ValidateSet('Basic', 'Negotiate')]
[string]$AuthType = "Negotiate"
)
Import-Module ActiveDirectory
try{
$Script:Grp
[hashtable]$cmdArgs = @{'ErrorAction' = 'Stop'
'AuthType' = $AuthType
}
if($null -ne $DomainAccount){
$cmdArgs.Add("Credential", $DomainAccount)
}
if([System.String]::IsNullOrWhiteSpace($DomainName)){
$cmdArgs.Add("Current", 'LocalComputer')
}
else {
$cmdArgs.Add("Identity", $DomainName)
}
$Domain = Get-ADDomain @cmdArgs
$cmdArgs = @{'ErrorAction' = 'Stop'
'Server' = $Domain.PDCEmulator
'AuthType' = $AuthType
'Identity' = $GroupName
}
if($null -ne $DomainAccount){
$cmdArgs.Add("Credential", $DomainAccount)
}
$Grp = Get-ADGroup @cmdArgs
$cmdArgs.Add('Confirm',$false)
if($PSBoundParameters.ContainsKey('Scope') -eq $true){
$cmdArgs.Add('GroupScope',$Scope)
}
if($PSBoundParameters.ContainsKey('Category') -eq $true){
$cmdArgs.Add('GroupCategory',$Category)
}
if($PSBoundParameters.ContainsKey('Description') -eq $true){
$cmdArgs.Add('Description', $Description)
}
if($PSBoundParameters.ContainsKey('DisplayName') -eq $true){
$cmdArgs.Add('DisplayName', $DisplayName)
}
if($PSBoundParameters.ContainsKey('HomePage') -eq $true){
$cmdArgs.Add('HomePage',$HomePage)
}
$null = Set-ADGroup @cmdArgs
if($null -ne $SRXEnv) {
$SRXEnv.ResultMessage = "Group $($GroupName) changed"
}
else{
Write-Output "Group $($GroupName) changed"
}
}
catch{
throw
}
finally{
}