Help in creating dynamic group using powershell using Include group members

Question

Does anyone have an example of a PowerShell script of creating a dynamic group based upon the "Include by group membership" & "Include Explicit" rules? I'm able to setup groups using the Include by query rule. 
 FYI, I tried following the instruction from IEDMMembershipRule in the SDK but not luck.

Terrance.Crombie · Accepted Answer

You seem to be setting $rule1.Base to an Organizational Unit. 
 This should be set to the EDMS address of the group that you want to include members for. In your example, it would be EDMS://CN=Group2,OU=GroupsOU,DC=mydomain

Terrance.Crombie · Answer

There are six Dynamic Group rule types: 
 1: "Include by query" 2: "Exclude by query" 3: "Include explicitly" 4: "Exclude explicitly" 5: "Include group members" 6: "Exclude group members" 
 These rules are referred to internally by their numbers, as described in the above list. 
 So, the sample that you will find in the Wiki at https://www.oneidentity.com/community/active-roles/w/wiki/1040/create-dynamic-group-in-powershell is for Rule 1, "Include by query" 
 It has a "Base", a "Filter", and a "Type". 
 The Base is the search root, the filter is the LDAP filter, and the type is 1. 
 If you are explicitly specifying an object or a group, you don't need a filter. Just specify the base and the type. 
 So, like this: 
 $objGroup = [ADSI] "EDMS://CN=GroupName,OU=Dynamic Groups,DC=lab,DC=local"

$objRuleCollection = $objGroup.MembershipRuleCollection

$rule1 = New-Object -ComObject "EDSIManagedUnitCondition"

$rule1.Base = "EDMS://CN=John McTest,OU=One Account,DC=lab,DC=local"

$rule1.Type=3

$objRuleCollection.Add($rule1)

$objGroup.SetInfo()

Help in creating dynamic group using powershell using Include group members

Top Replies