{"id":17391,"date":"2010-08-18T00:01:00","date_gmt":"2010-08-18T00:01:00","guid":{"rendered":"https:\/\/blogs.technet.microsoft.com\/heyscriptingguy\/2010\/08\/18\/sort-an-active-directory-user-groups-members-by-using-powershell\/"},"modified":"2010-08-18T00:01:00","modified_gmt":"2010-08-18T00:01:00","slug":"sort-an-active-directory-user-groups-members-by-using-powershell","status":"publish","type":"post","link":"https:\/\/devblogs.microsoft.com\/scripting\/sort-an-active-directory-user-groups-members-by-using-powershell\/","title":{"rendered":"Sort an Active Directory User Group’s Members by Using PowerShell"},"content":{"rendered":"

<\/b>\n<\/b>\nSummary<\/b>: Sorting lists of data in VBScript often involved writing complex code. The Sort<\/b> cmdlet in Windows PowerShell makes that task easier.\n \n\"Hey,\nHey, Scripting Guy! I need to be able to use Windows PowerShell to list the members of a group in Active Directory Domain Services (AD DS) in alphabetical order. The reason for this is I would like to compare the memberships of a couple of different groups, and if the members are not in alphabetical order, it makes the comparison more difficult.\n— TM\n\"Hey,\nHello TM,\nMicrosoft Scripting Guy Ed Wilson here. Today is a road trip day. My significant other and I woke before dawn and began our preparations for departure. It seems, at times, that NASA space missions are more impromptu than our road trips. We packed my laptop, power adapter, camera, a feedbag<\/a>, and three Zunes (his, hers, and ours). We headed for open spaces.\nIt seems that at times the Windows PowerShell team deliberately made Windows PowerShell easy to use. This does not mean that Windows PowerShell is simple. It can get quite complex, but when you learn the basic concepts, you can do some really powerful things quite easily. Sorting is one of those really simple types of things.\nThe How Can I List the Members of a Group in Alphabetical Order<\/a> Hey, Scripting Guy! Blog post from November 2004 illustrates one of the more common approaches to sorting data in VBScript—a bubble sort. (The other common technique was to use a recordset<\/b> and is illustrated in this script<\/a> from the Scripting Guys Script Repository.)The VBScript from that article is shown here.<\/p>\n

SortGroupMembersAlphabetically.vbs<\/strong><\/p>\n

<\/strong><\/p>\n

Dim<\/span> <\/span>arrNames()<\/span>
<\/span>intSize<\/span> <\/span>=<\/span> <\/span>0<\/span>
<\/span>Set<\/span> <\/span>objGroup<\/span> <\/span>=<\/span> <\/span>GetObject(<\/span>“LDAP:\/\/cn=hsgTestGroup,ou=HSG_TestOU,dc=nwtraders,dc=com”<\/span>)<\/span>
<\/span>For<\/span> <\/span>Each<\/span> <\/span>strUser<\/span> <\/span>in<\/span> <\/span>objGroup.Member<\/span>
<\/span>Set<\/span> <\/span>objUser<\/span> <\/span>=<\/span> <\/span>GetObject(<\/span>“LDAP:\/\/” <\/span>&<\/span> <\/span>strUser)<\/span>
<\/span>ReDim<\/span> <\/span>Preserve<\/span> <\/span>arrNames(intSize)<\/span>
<\/span>arrNames(intSize)<\/span> <\/span>=<\/span> <\/span>objUser.CN<\/span>
<\/span>intSize<\/span> <\/span>=<\/span> <\/span>intSize<\/span> <\/span>+<\/span> <\/span>1<\/span>
<\/span>Next<\/span>
<\/span>For<\/span> <\/span>i<\/span> <\/span>=<\/span> <\/span>(UBound(arrNames)<\/span> <\/span>–<\/span> <\/span>1<\/span>)<\/span> <\/span>to<\/span> <\/span>0<\/span> <\/span>Step<\/span> <\/span>-1<\/span>
<\/span>For<\/span> <\/span>j<\/span>=<\/span> <\/span>0<\/span> <\/span>to<\/span> <\/span>i<\/span>
<\/span>If<\/span> <\/span>UCase(arrNames(j))<\/span> <\/span>><\/span> <\/span>UCase(arrNames(j+1))<\/span> <\/span>Then<\/span>
<\/span>strHolder<\/span> <\/span>=<\/span> <\/span>arrNames(j+1)<\/span>
<\/span>arrNames(j+1)<\/span> <\/span>=<\/span> <\/span>arrNames(j)<\/span>
<\/span>arrNames(j)<\/span> <\/span>=<\/span> <\/span>strHolder<\/span>
<\/span>End<\/span> <\/span>If<\/span>
<\/span>Next<\/span>
<\/span>Next<\/span> 
<\/span>For<\/span> <\/span>Each<\/span> <\/span>strName<\/span> <\/span>in<\/span> <\/span>arrNames<\/span>
<\/span>Wscript.<\/span>Echo<\/span> <\/span>strName<\/span>
<\/span>Next<\/span> <\/div>\n<\/blockquote>\n

The hsgTestGroup<\/b>, viewed in the Active Directory Users and Computers administration tool, is shown in the following image.\n\"Image\nWhen the SortGroupMembersAlphabetically.vbs script runs, the output appears that is shown in the following image. I know the picture says Windows PowerShell—this is actually one of my favorite tricks. I run VBScript inside Windows PowerShell. Because of the way the script is written, it would produce several popup dialog boxes, each of which would have to be individually closed. To avoid that, VBScript scripts that use wscript.echo<\/b> to produce output are commonly run using Cscript. To do this, you normally open a command prompt, type cscript, and provide the path to the script. You can do the same thing using Windows PowerShell: Type cscript and provide the path to the script. I use the Windows PowerShell console for all my command-line needs, and I have not opened a command prompt for more than a year. If it is nothing else, Windows PowerShell is a better command prompt.\n\"Image\nUsing the ADSI type accelerator, it requires two lines of code to retrieve the group membership and sort the list. The script first makes a connection to the group in Active Directory Domain Services (AD DS), and retrieves the member<\/b> property. The members are piped to the Foreach-Object<\/b> cmdlet where a connection is made to each of the groups. The result is piped to the Sort-Object<\/b> cmdlet (alias is sort<\/b>) and then the name is selected by the Select-Object<\/b> cmdlet (alias is select<\/b>). The Get-SortedGroupMembership.ps1 script is shown here.<\/p>\n

Get-SortedGroupMembership.ps1<\/strong><\/p>\n

([adsi]<\/span>“LDAP:\/\/cn=hsgTestGroup,ou=HSG_TestOU,dc=nwtraders,dc=com”<\/span>).member<\/span> <\/span>|<\/span> <\/p>\n

<\/span>ForEach-Object<\/span> <\/span>{[adsi]<\/span>“LDAP:\/\/$_”<\/span>}<\/span> <\/span>|<\/span> <\/span>sort<\/span> <\/span>name<\/span> <\/span>|<\/span> <\/span>select<\/span> <\/span>name<\/span> <\/p>\n<\/blockquote>\n

When the Get-SortedGroupMembership.ps1 script runs inside the Windows PowerShell ISE, the result appears that is shown in the following image.\n\"Image\nOne reason for using the ADSI type accelerator would be if you do not have access to a domain that contains a domain controller that is running Windows Server 2008 R2.\nFor more information about the different approaches to working with AD DS, refer to Monday’s Hey Scripting Guy! Blog post<\/a>.\nIf you do have access to a Windows Server 2008 R2, you have access to the Active Directory Windows PowerShell module. After that module is loaded, you can use the Get-ADGroupMember<\/b> cmdlet to retrieve the group. The good thing about using the Get-ADGroupMember<\/b> cmdlet is you do not have to type the entire distinguished name of the group as was done in the two previous scripts. After you have the group membership, you can sort by using the Sort-Object<\/b> cmdlet, and even create a nice table with the name<\/b>, sid<\/b>, and objectclass<\/b> of the object. The Windows PowerShell command is shown here:<\/p>\n

Get-ADGroupMember<\/span> <\/span>hsgtestgroup<\/span> <\/span>-Recursive<\/span> <\/span>|<\/span> <\/span>sort<\/span> <\/span>name<\/span> <\/span>|<\/span> <\/span>ft<\/span> <\/span>name,<\/span> <\/span>sid,<\/span> <\/span>objectClass<\/span> <\/span>-a<\/span> <\/p>\n<\/blockquote>\n

When the command runs, the output appears that is shown in the following image.\n\"Image\nTM, that is all there is to using Windows PowerShell to sort the members of a group found in AD DS. User Management Week will continue tomorrow when we will talk about adding a domain user to the local administrators group.\nWe invite you follow us on Twitter<\/a> and Facebook<\/a>. If you have any questions, send email to us at scripter@microsoft.com<\/a>, or post them on the Official Scripting Guys Forum.<\/a>. See you tomorrow. Until then, peace.\n <\/p>\n

Ed Wilson and Craig Liebendorfer, Scripting Guys<\/b><\/p>\n","protected":false},"excerpt":{"rendered":"

Summary: Sorting lists of data in VBScript often involved writing complex code. The Sort cmdlet in Windows PowerShell makes that task easier.   Hey, Scripting Guy! I need to be able to use Windows PowerShell to list the members of a group in Active Directory Domain Services (AD DS) in alphabetical order. The reason for […]<\/p>\n","protected":false},"author":595,"featured_media":87096,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[7,3,8,20,45],"class_list":["post-17391","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-scripting","tag-active-directory","tag-scripting-guy","tag-searching-active-directory","tag-user-accounts","tag-windows-powershell"],"acf":[],"blog_post_summary":"

Summary: Sorting lists of data in VBScript often involved writing complex code. The Sort cmdlet in Windows PowerShell makes that task easier.   Hey, Scripting Guy! I need to be able to use Windows PowerShell to list the members of a group in Active Directory Domain Services (AD DS) in alphabetical order. The reason for […]<\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts\/17391","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/users\/595"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/comments?post=17391"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts\/17391\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/media\/87096"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/media?parent=17391"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/categories?post=17391"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/tags?post=17391"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}