{"id":2893,"date":"2016-01-30T03:24:44","date_gmt":"2016-01-30T03:24:44","guid":{"rendered":"https:\/\/www.wapshere.com\/missmiis\/?p=2893"},"modified":"2019-05-31T23:34:25","modified_gmt":"2019-05-31T23:34:25","slug":"script-compare-adgroups-ps1","status":"publish","type":"post","link":"https:\/\/www.wapshere.com\/missmiis\/script-compare-adgroups-ps1","title":{"rendered":"Script: Compare-ADGroups.ps1"},"content":{"rendered":"<p>I recently wanted to do some analysis of existing groups in a well established AD that has a lot of groups (more groups than users in fact). I was hoping to find groups that looked like good candidates for conversion to role-based (aka criteria-based) groups.<!--more--><\/p>\n<p>I came across\u00c2\u00a0a great script by Ashley McGlone that compares groups in AD to each other, looking for percentage membership matches: <a href=\"https:\/\/gallery.technet.microsoft.com\/PowerShell-to-Find-Stale-441759fc\">https:\/\/gallery.technet.microsoft.com\/PowerShell-to-Find-Stale-441759fc<\/a>.<\/p>\n<p>I&#8217;ve made a number of modification to this script so it now also:<\/p>\n<ul>\n<li>Compares groups in one OU to groups in another &#8211; this allows me to compare to an OU of &#8220;IAM managed&#8221; groups looking for suitable nesting candidates,<\/li>\n<li>Compares groups to a CSV of &#8220;proposed groups&#8221; to give an idea about\u00c2\u00a0whether it would help to create new role-based groups,<\/li>\n<li>Starts writing the report file as soon as results are available &#8211; the original script waited right until the end, which can be a very long wait if you have a lot of comparisons.<\/li>\n<\/ul>\n<p>My modified version is here:\u00c2\u00a0<a href=\"https:\/\/www.wapshere.com\/missmiis\/compare-adgroups-ps1\">https:\/\/www.wapshere.com\/missmiis\/compare-adgroups-ps1<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>I recently wanted to do some analysis of existing groups in a well established AD that has a lot of groups (more groups than users in fact). I was hoping to find groups that looked like good candidates for conversion to role-based (aka criteria-based) groups.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"footnotes":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false,"jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":[]},"categories":[24,22,23],"tags":[],"class_list":["post-2893","post","type-post","status-publish","format-standard","hentry","category-ad","category-groups","category-powershell"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/pkp1o-KF","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www.wapshere.com\/missmiis\/wp-json\/wp\/v2\/posts\/2893","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.wapshere.com\/missmiis\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.wapshere.com\/missmiis\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.wapshere.com\/missmiis\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.wapshere.com\/missmiis\/wp-json\/wp\/v2\/comments?post=2893"}],"version-history":[{"count":3,"href":"https:\/\/www.wapshere.com\/missmiis\/wp-json\/wp\/v2\/posts\/2893\/revisions"}],"predecessor-version":[{"id":3174,"href":"https:\/\/www.wapshere.com\/missmiis\/wp-json\/wp\/v2\/posts\/2893\/revisions\/3174"}],"wp:attachment":[{"href":"https:\/\/www.wapshere.com\/missmiis\/wp-json\/wp\/v2\/media?parent=2893"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.wapshere.com\/missmiis\/wp-json\/wp\/v2\/categories?post=2893"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.wapshere.com\/missmiis\/wp-json\/wp\/v2\/tags?post=2893"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}