How to sort AD metadata.

[Valnurat]

Hello.

The below code creates a file with all groups an employee is member of as first requested on each line. Not sorted.

So the file contains this:

DSTSN,Share,Allround,Workday,Festi

DSKVK,Allround,Festi

How can I sort the same metadata so it looks like this:

DSTSN,Share ,Allround   ,Workday    ,Festi
DSKVK,      ,Allround   ,           ,Festi

 

#include <AD.au3>

Const $sFilePath = StringReplace(@ScriptFullPath,"au3","txt")
Global $aGroups, $aUsers, $sOU = "", $sGroups, $hFileOpen = FileOpen($sFilePath, $FO_APPEND)
; Open the file for writing (append to the end of a file) and store the handle to a variable.
If $hFileOpen = -1 Then
    MsgBox($MB_SYSTEMMODAL, "", "An error occurred whilst writing the temporary file.")
EndIf

; Open Connection to the Active Directory
_AD_Open()
If @error Then Exit MsgBox(16, "Active Directory Example Skript", "Function _AD_Open encountered a problem. @error = " & @error & ", @extended = " & @extended)

$sOU = InputBox('Get members from groups', 'Please enter OU as Fully Qualified Domain Name (FQDN)', "OU=Users,OU=so,OU=dk,OU=company,DC=ad,DC=company,DC=org")
If _AD_ObjectExists($sOU) Then
    $aUsers = _AD_GetObjectsInOU($sOU)
    _ArrayDelete($aUsers, 0)
    For $c = 0 To 10 ;UBound($aUsers)-1
        If _AD_ObjectExists($aUsers[$c]) Then
            $aGroups = _AD_GetUserGroups($aUsers[$c])
            _ArrayDelete($aGroups, 0)
            For $i = 0 to UBound($aGroups)-1
                $sGroups &= StringMid($aGroups[$i],4,StringInStr($aGroups[$i],",")-4) & ";"
            next
            $sGroups = StringTrimRight($sGroups, 1)
            FileWrite($hFileOpen, $ausers[$c] & ";" & $sGroups & @CRLF)
        EndIf
        $sGroups = ""
    Next
EndIf
FileClose($hFileOpen)

; Close Connection to the Active Directory
_AD_Close()

 

 

 

 

[water]

Why do you need to sort the groups this way?

[Valnurat]

23 hours ago, water said:

Why do you need to sort the groups this way?

Good question so I talked to the person who wanted this and we found another solution.

So just discard this issue.

[water]

If you want to compare membership in AD groups (=permissions) for multiple persons, departments etc. you could have a look at my ADAudit tool: