Ldap filter for edsaDGOriginatingService

Question

Hello All, 
 I don't see a way to do a ldapfilter for edsaDGOriginatingService. It seems to not work. I can use some virtual attribute to do ldap filter but this one is not working. 
 We have over 8k Dynamic groups and I need to just filter those that have a specific one. I know i can do a where but it takes forever with -Dynamic $true having so many of them. 
 Lu

Stu.Pollock · Accepted Answer

Hi lrigs 
 The script below should do something similar to what your trying 
 Clear-host
$DisallowedARSServer = @('ARS001.Domain.Com','ARS002.Domain.Com','ARS003.Domain.Com')

$NewARSServer = "ARS004.Domain.Com"

$SearchRoot = "DC=Domain,DC=Com"
$SizeLimit = 0
$Groups = $null

$DGGroups = Get-QADGroup -DontUseDefaultIncludedProperties -searchRoot $SearchRoot -SizeLimit $SizeLimit -Dynamic $true -Proxy -IncludedProperties edsaDGOriginatingService

ForEach($DGGroup in $DGGroups)
{
 if($DGGroup.edsaDGOriginatingService -in $DisallowedARSServer)
 {
 Write-Host "$($DGGroup.name) is pointed to `'$($DGGroup.edsaDGOriginatingService)`'"
 Set-QADGroup -Identity $DGGroup.DN -proxy -ObjectAttributes @{'edsaDGOriginatingService'="$NewARSServer"} | Out-Null
 }
 
} 
 The other option might be to use a workflow, to intercept the convertion to a DG, and change the value of edsaDGOriginatingService to a fix value

Ldap filter for edsaDGOriginatingService

Top Replies