Is it possible to convert an exiting security group to a dynamic group using powershell?

Question

Hey.

We have a number of normal security group in our AD (most of them empty) that we'd like to convert to dynamic groups with membership rules. Is it possible to convert them using the PowerShell? Also, if possible, what it the exiting group already contained members, can they be rolled over in in to the dynamic group?

Many thanks,

SJ

lewis alexander · Answer

Yes, you can use PowerShell to convert existing groups. Here are a couple of things we found on the topic: 
 Create Dynamic Group in PowerShell - Wiki - Active Roles Community - One Identity Community 
 Powershell list all dynamic groups with its membership rules? - Forum - Active Roles Community - One Identity Community 
 
 I'm not strong with Power Shell. However, this was enough info to get us going. We were able to convert a large number of existing groups in this way and added multiple rules to each of different types. We leveraged a virtual attribute on each group to that allowed us to insert the custom criteria for each one. 
 If you want to include the existing members, you'll have to make sure your rules encompass those users. This can be explicitly including them (see my 2nd link for the rule type) or just otherwise making sure they meet the criteria you are setting. I'm sure there is a way to read in the list of users and define your explicit additions in each rule, but I think that would be more a Power Shell thing.

Is it possible to convert an exiting security group to a dynamic group using powershell?

Top Replies