This is the second post in my AD without Quest series. I am covering individual functions that can be combine to produce a wide variety of scripts. Today I am going to be covering how to connect to AD to read an object ADSPath. The ADSPath is basically the LDAP string to connect to that object. Once you have an object\u2019s LDAP path it is very easy to work with the object.<\/p>\n
When searching in AD all you need to do is use the directory searcher object and continue to narrow down the filter. There are some slight changes between searching for a user, computer and group, so I\u2019ll cover each.<\/p>\n
On the line with So as you can see, a couple of small changes will convert the function for use with computers instead of users. One final function converts this again for use with groups.<\/p>\n So there they are, but what can you do with them? There is a great variable type in PowerShell defined with the ADSI tag. Once a LDAP string is defined as and ADSI variable you can interact directly with that object by reading any property you want, and even changing them.<\/p>\n This is the second post in my AD without Quest series. I am covering individual functions that can be combine to produce a wide variety of scripts. Today I am going to be covering how to connect to AD to read an object ADSPath. The ADSPath is basically the LDAP string to connect to that […]<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_mi_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[6,4],"tags":[],"_links":{"self":[{"href":"http:\/\/www.Get-Blog.com\/index.php?rest_route=\/wp\/v2\/posts\/164"}],"collection":[{"href":"http:\/\/www.Get-Blog.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.Get-Blog.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.Get-Blog.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.Get-Blog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=164"}],"version-history":[{"count":0,"href":"http:\/\/www.Get-Blog.com\/index.php?rest_route=\/wp\/v2\/posts\/164\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.Get-Blog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=164"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.Get-Blog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=164"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.Get-Blog.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=164"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}$Results<\/span>[<\/span>0<\/span>]<\/span>.properties.adspath<\/span><\/code> it is important to note that the \u201cadspath\u201d portion is case sensitive. I really have no clue why that is the case. If you know, drop me a comment to help me out!<\/p>\n
\n Param<\/span>(<\/span>[<\/span>STRING<\/span>]<\/span>$Computer<\/span>)<\/span>
\n
\n $Searcher<\/span>=<\/span>New-Object<\/span> System.DirectoryServices.DirectorySearcher
\n $Searcher<\/span>.Filter<\/span>=<\/span>\u201d(<\/span>&<\/span>(<\/span>CN=<\/span>$Computer<\/span>)<\/span>(<\/span>objectcategory=<\/span>computer)<\/span>)<\/span>\u201d
\n $Searcher<\/span>.PageSize =<\/span> 1000<\/span>
\n $Results<\/span>=<\/span>$Searcher<\/span>.FindAll(<\/span>)<\/span>
\n If<\/span>(<\/span>!<\/span>$?<\/span>)<\/span>{<\/span>"AD searcher failed on $Computer"<\/span>}<\/span>
\n
\n If<\/span> (<\/span>$Results<\/span>.Count -eq<\/span> 1<\/span>)<\/span>{<\/span>
\n $Results<\/span>[<\/span>0<\/span>]<\/span>.properties.adspath
\n }<\/span>Else<\/span>{<\/span>
\n Return<\/span> $false<\/span>
\n }<\/span>
\n}<\/span><\/div><\/div>\n
\n Param<\/span>(<\/span>[<\/span>STRING<\/span>]<\/span>$Group<\/span>)<\/span>
\n
\n $Searcher<\/span>=<\/span>New-Object<\/span> System.DirectoryServices.DirectorySearcher
\n $Searcher<\/span>.Filter<\/span>=<\/span>\u201d(<\/span>&<\/span>(<\/span>CN=<\/span>$Group<\/span>)<\/span>(<\/span>objectcategory=<\/span>group<\/span>)<\/span>)<\/span>\u201d
\n $Searcher<\/span>.PageSize =<\/span> 1000<\/span>
\n $Results<\/span>=<\/span>$Searcher<\/span>.FindAll(<\/span>)<\/span>
\n If<\/span>(<\/span>!<\/span>$?<\/span>)<\/span>{<\/span>"AD searcher failed on $Group"<\/span>}<\/span>
\n
\n If<\/span> (<\/span>$Results<\/span>.Count -eq<\/span> 1<\/span>)<\/span>{<\/span>
\n $Results<\/span>[<\/span>0<\/span>]<\/span>.properties.adspath
\n }<\/span>Else<\/span>{<\/span>
\n Return<\/span> $false<\/span>
\n }<\/span>
\n}<\/span><\/div><\/div>\n
\n$UserLDAP<\/span>.extensionAttribute1
\n><\/span>MyOldValue
\n$UserLDAP<\/span>.Put(<\/span>\u201cextensionAttribute1\u201d,<\/span>\u201dMyNewValue\u201d)<\/span>
\n$UserLDAP<\/span>.SetInfo(<\/span>)<\/span>
\n$UserLDAP<\/span>.extensionAttribute1
\n><\/span>MyNewValue<\/div><\/div>\n","protected":false},"excerpt":{"rendered":"