Private/Get-ConfigurationGroups.ps1
|
Function Get-ConfigurationGroups { <# .Synopsis Reads Groups from AD where this computer is included .Description Reads Groups with the correct prefix recursivly from AD where this computer is included. .Parameter Filter Filter for samAccoutnName of the CCM Groups. Accepts Alias 'F'. .Parameter ADServer AD which should be searched in. Accepts Alias 'AD'. .Parameter Path Path to the cache file .Parameter BaseLine Name of the baseline config which also should be returned as group and saved to cache. Accepts Alias 'B'. .Outputs System.Array. Get-LDAPGroup returns an string array with all config groups. Can return null #> [CmdletBinding()] param( [Parameter(Mandatory = $true)] [alias('F')] [string]$Filter, [Parameter(Mandatory = $true)] [alias('AD')] [string]$ADServer, [Parameter(Mandatory = $true)] [string]$Path, [Parameter(Mandatory = $true)] [alias('B')] [string]$BaseLine, [Parameter(Mandatory = $true)] [string]$UserName, [Parameter(Mandatory = $true)] [string]$Password ) begin { $Groups = New-Object System.Collections.ArrayList $isOnline = $false } process { try { #Convert secure string back to plaintext $SecureString = ConvertTo-SecureString $Password $BSTR = [System.Runtime.InteropServices.Marshal]::SecureStringToBSTR($SecureString) $Password = [System.Runtime.InteropServices.Marshal]::PtrToStringAuto($BSTR) $DirectoryObject = New-Object System.DirectoryServices.DirectoryEntry("LDAP://$($ADServer):636", $UserName, $Password) #Get distingiuished name of localhost $DNFilter = "(&(objectCategory=computer)(objectClass=computer)(cn=$env:COMPUTERNAME))" $DNSearcher = New-Object System.DirectoryServices.DirectorySearcher($DirectoryObject, $DNFilter) $DN = $DNSearcher.FindOne().Properties.distinguishedname Write-Verbose "Distinguished Name of localhost is $DN" #Search for groups with the specific filter for this computer and adds alls matches to the arraylist $GroupFilter = "(&(member:1.2.840.113556.1.4.1941:=$DN)(SamAccountName=$Filter))" $GroupSearcher = New-Object System.DirectoryServices.DirectorySearcher($DirectoryObject, $GroupFilter) $GroupStrings = $GroupSearcher.FindAll().Properties.samaccountname foreach ($String in $GroupStrings) { $GroupObject = New-Object -TypeName psobject -Property @{ Name = $String } $Groups.Add($GroupObject) | Out-Null } Write-Verbose "Computer is in the following Groups $Groups" $isOnline = $true } catch { Write-Verbose -Message $_.Exception.Message Write-Warning "Unable to get Groups from AD for this computer $Localhost" } } end { $BaseLineObject = New-Object -TypeName psobject -Property @{ Name = $BaseLine } #Adds baseline group to the arraylist $Groups.Add($BaseLineObject) | Out-Null Write-Debug $isOnline #if the there could be established a connection to the AD or the cache is not existing, the group cache will be saved. If not cache will be read if ($isOnline) { Save-GroupCache -Data $Groups -Path $Path } elseif (!(Test-Path -Path $Path)) { Save-GroupCache -Data $Groups -Path $Path } else { $Groups = Get-GroupCache -Path $Path } return $Groups } } |