\n| \n Note<\/b>. Why? Well, as near as we can tell, the spam filter sees an email filled with “nonsensical” text (i.e., script code), and automatically marks it as spam. As you probably know, a common trick used by spammers is to compose an email filled with a random selection of words that make absolutely no sense. Because the spam filter can’t speak VBScript, Perl, or Windows PowerShell, it will occasionally deem emails with that code as being spam.<\/p>\n Incidentally, this also explains why we can’t send Hey, Scripting Guy!<\/i> out as a daily email (something a number of you have requested). Like we said, the spam filter automatically rejects any email filled with a random selection of words that make absolutely no sense.<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n Anyway, although the Scripting Games officially end on Monday, we’ll give you at least until Thursday morning to resubmit any entries. (And longer if need be.) In other words, relax: you’ll have plenty of time to correct your mistakes and get that perfect score that everyone covets so much.<\/p>\n \n<\/thead>\n\n\n| \n Note<\/b>. So does this extended deadline apply only to scripts being resubmitted for an event? Yes. Does that mean that those of us who missed the Scripting Games are out of luck until next year? Officially, yes. Unofficially, though, if you really want to participate in the Games and you can get your scripts to us by Thursday morning, well, what the heck.<\/p>\n Just don’t tell the Scripting Editor, though. She’s not going to like that idea at all.<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n <\/div>\n Unfortunately, none of the Scripting Games events require you to list all the users in an OU who are not<\/i> members of a specified Active Directory group. Why is that unfortunate? Because if there was<\/i> such an event you could simply submit the following script and call it good:<\/p>\nSet objDictionary = CreateObject(\"Scripting.Dictionary\")\n\nSet objGroup = GetObject(\"LDAP:\/\/CN=Finance Users,OU=Finance,DC=fabrikam,DC=com\")\n\nFor Each strMember in objGroup.Member\n objDictionary.Add strMember, strMember \nNext\n\nSet objOU = GetObject(\"LDAP:\/\/OU=Finance,DC=fabrikam,DC=com\")\nobjOU.Filter = Array(\"User\")\n\nFor Each objUser in objOU\n strUser = objUser.distinguishedName \n If Not objDictionary.Exists(strUser) Then\n Wscript.Echo strUser\n End If \nNext<\/pre>\nLet’s see if we can figure out how this all works. To begin with, we create an instance of the Scripting.Dictionary<\/b> object. Why? Because we’re going to store the list of group members in the Dictionary. Why? We’ll get to that in a minute. After creating the Dictionary object we then use this line of code to bind to an Active Directory group named Finance Users:<\/p>\nSet objGroup = GetObject(\"LDAP:\/\/CN=Finance Users,OU=Finance,DC=fabrikam,DC=com\")<\/pre>\nBefore we can figure out which users are not<\/i> members of the Finance Users group we need to figure out which users are<\/i> members of this group. As it turns out, each Active Directory group includes a Member<\/b> attribute; as the name implies (well, sort of) this attribute stores a list of all the group members.<\/p>\n\n<\/thead>\n\n\n| \n Note<\/b>. In that case, shouldn’t that be the Members<\/i> attribute? Probably. Apparently no one ever considered the possibility that a group might have more than one member.<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n In order to get at the group membership all we have to do is set up a For Each loop that walks through all the items (members) in the Member attribute:<\/p>\n For Each strMember in objGroup.Member<\/pre>\nInside this loop we do one thing and one thing only: we add the member’s name (technically, his or her distinguishedName<\/b>) to the Dictionary:<\/p>\nobjDictionary.Add strMember, strMember<\/pre>\nAs you can see, this is a pretty simple operation: all we do is call the Add<\/b> method, using the member’s name (stored in the loop variable strMember) as both the Dictionary key and the Dictionary item.<\/p>\n By the time the loop is finished our Dictionary object will contain a list of all the members of the Finance Users group.<\/p>\n Our next step is to retrieve a list of all the users in a specified OU (in this case, the Finance OU in fabrikam.com) and then determine if any of those users are not<\/i> members of the Finance Users group. To do that, we first bind to the OU in Active Directory, then set a Filter<\/b> on the returned data, a Filter that limits that data to user account objects:<\/p>\nobjOU.Filter = Array(\"User\")<\/pre>\nAfter that we set up another For Each loop, this one designed to walk through the collection of user accounts stored in the Finance OU. Inside this<\/i> loop we use the following line of code to retrieve the value of the user’s distinguishedName attribute, storing that value in a variable named strUser:<\/p>\nstrUser = objUser.distinguishedName<\/pre>\nGood question: why the distinguishedName attribute? Well, as you might recall, the Member attribute stores the distinguished name of each group member; in turn, that means that our Dictionary object also contains the distinguished name of each group member. How do we know if a given user is a member of the Finance Users group? That’s easy: we simply check to see if the user’s distinguished name can be found anywhere in the Dictionary. If it can then that means the user is a member of the group.<\/p>\n As a matter of fact, that’s what this line of code is for:<\/p>\n If Not objDictionary.Exists(strUser) Then<\/pre>\nHere we’re simply using the Exists<\/b> method to determine if the user’s distinguished name (stored in the variable strUser) appears in the Dictionary. If it does then we simply go back to the top of the loop and repeat the process with the next user in the Finance OU. If it doesn’t, then we echo back the user’s distinguished name:<\/p>\nWscript.Echo strUser<\/pre>\nAnd then it’s back to the top of the loop where we try again with the next user account.<\/p>\n When we’re all done we should have output that reports back the distinguished name of each user in the Finance OU who is not<\/i> a member of the Finance Users group. In other words, we should see something similar to this:<\/p>\nCN=Ken Myer,OU=Finance,DC=fabrikam,DC=com\nCN=Pilar Ackerman,OU=Finance,DC=fabrikam,DC=com\nCN=Jonathan Haas,OU=Finance,DC=fabrikam,DC=com\n<\/pre>\nWhat’s that? Well, you know, now that you mention it that is<\/i> kind of goofy-looking output, isn’t? OK, tell you what; try this modified block of code instead:<\/p>\nFor Each objUser in objOU\n strUser = objUser.distinguishedName \n strUserName = objUser.displayName \n If Not objDictionary.Exists(strUser) Then\n Wscript.Echo strUserName\n End If \nNext<\/pre>\nWe’ve done two things different here. First, we’ve added a line of code that retrieves the user’s displayName<\/b> attribute and stores that value in a variable named strUserName:<\/p>\nstrUserName = objUser.displayName<\/pre>\nSecond, inside our If statement we display this<\/i> value (the display name) rather than the distinguished name:<\/p>\nWscript.Echo strUserName<\/pre>\nWill that give us output that’s a little less goofy-looking? See for yourself:<\/p>\n Ken Myer\nPilar Ackerman\nJonathan Haas<\/pre>\nMuch better.<\/p>\n That should do it, TJ. Remember, if you or anyone else out there would like to resubmit a script for the 2008 Winter Scripting Games there’s still plenty of time to do so. And don’t worry; this is definitely not<\/i> cheating. We always have, and always will, give people a chance to fix their mistakes. After all, our goal is to help people learn something about scripting (and maybe have some fun while doing so). To tell you the truth, we’d be thrilled if everyone<\/i> ended up getting a perfect score.<\/p>\n Besides, if it was<\/i> cheating, do you think the Scripting Guys would let you get away with it?<\/p>\n OK, good point: the Scripting Guy who writes this column probably would. But the Scripting Editor? No way.<\/p>\n","protected":false},"excerpt":{"rendered":" Hey, Scripting Guy! How can I get a list of all the users in an OU who are not a member of a specified group? — TJ Hey, TJ. You know, the Scripting Guys are having so much fun with the 2008 Winter Scripting Games that we just can’t bear to see the excitement come […]<\/p>\n","protected":false},"author":595,"featured_media":87096,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[7,44,43,3,198,5],"class_list":["post-56093","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-scripting","tag-active-directory","tag-groups","tag-ous","tag-scripting-guy","tag-users","tag-vbscript"],"acf":[],"blog_post_summary":" Hey, Scripting Guy! How can I get a list of all the users in an OU who are not a member of a specified group? — TJ Hey, TJ. You know, the Scripting Guys are having so much fun with the 2008 Winter Scripting Games that we just can’t bear to see the excitement come […]<\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts\/56093","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/users\/595"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/comments?post=56093"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts\/56093\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/media\/87096"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/media?parent=56093"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/categories?post=56093"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/tags?post=56093"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
|
| |
![\"Hey,](\"https:\/\/devblogs.microsoft.com\/wp-content\/uploads\/sites\/29\/2019\/02\/q-for-powertip.jpg\" "\\"Hey,")
<\/p>\n![\"Spacer\"](\"https:\/\/devblogs.microsoft.com\/scripting\/wp-content\/uploads\/sites\/29\/2019\/05\/spacer.gif\")
![\"Hey,](\"https:\/\/devblogs.microsoft.com\/wp-content\/uploads\/sites\/29\/2019\/02\/a-for-powertip.jpg\" "\\"Hey,")
![\"Script](\"http:\/\/img.microsoft.com\/library\/media\/1033\/technet\/images\/scriptcenter\/ad.jpg\" "\\"Script")
<\/a><\/p>\n