Getting top down org view with PowerShell

[Steven Presley]

Does anyone have any quick code samples that can return a list of all
reports to a manager and below? I'm looking to make some distribution
groups based on a manager and all their reports (direct and otherwise).

Thanks!

[Chris Dent]

If you're using LDAP Filters using LDAP_MATCHING_RULE_IN_CHAIN should
return all reports of a given manager. For example:

(manager:1.2.840.113556.1.4.1941:=CN=Manager,OU=Somewhere,DC=domain,DC=com)

Then you only have to specify the highest level manager.

If you're using Quest's CmdLets that can become:

Get-QADUser -LdapFilter
"(manager:1.2.840.113556.1.4.1941:=CN=Manager,OU=Somewhere,DC=domain,DC=com)"

Any use?

Chris

[Steven Presley]

This does indeed seem to work..thanks a ton!

Thanks!

[Cameron]

Well if you are using PowerShell v2 RTM on Windows 2008R2 or Windows 7 then
this works great:

get-aduser -Properties directreports -filter * | ?{$_.directreports.count
-ne 0} | select name, directreports | sort name | ft
--
cameron

"Steven Presley" wrote:

> .
>

[Steven Presley]

I'll give that a whirl as well..thanks for the suggestion...I'll have to
see which is more efficient (speedy).

[Cameron]

The following one-liner outputs like this:

Manager1
------------------------
Employee1
Employee2

Manager2
------------------------
Employee3
Employee4

Get-ADUser -filter * -Properties samaccountname, displayname, manager |
group {if($_.manager -ne $null){(Get-ADObject $_.manager -Properties
displayname).displayname}else{"UNKNOWN"}} | sort name | %{$_.Name;
"-------------------"; ($_.Group | %{if($_.displayname -ne
$null){"`t$($_.displayname)"}else{"`t$($_.samaccountname)"}}); "`n"}

--
Cameron

"Steven Presley" wrote:

> .
>