Public/Group/Get-DistributionGroupMembership.ps1
|
function Get-DistributionGroupMembership { <# .SYNOPSIS Determines the Groups that a recipient is a member of. Either recursively or not. Original function developed my Mark Kraus. https://www.reddit.com/r/PowerShell/comments/5ndp4n/get_all_distribution_groups_for_a_user_with/ Check out his blog here: https://get-powershellblog.blogspot.com .DESCRIPTION Determines the Groups that a recipient is a member of. Either recursively or not. .PARAMETER Recurse Reveals nested group membership .PARAMETER Processed Parameter used internally by function to hold those that have been processed (loopback detection) .EXAMPLE "john@contoso.com" | Get-DistributionGroupMembership -Recurse -Verbose #> [CmdletBinding(SupportsShouldProcess = $true)] param( [Parameter(Mandatory = $true, ValueFromPipeline = $True, ValueFromPipelineByPropertyName = $True)] [string[]]$Identity, [Parameter()] [switch]$Recurse, [Parameter()] [string[]]$Processed ) begin { if (-not $processed) { $Processed = @() } } process { foreach ($CurIdentity in $Identity) { if (-not $PSCmdlet.ShouldProcess($CurIdentity)) { continue } Write-Verbose "Looking up memberships for '$CurIdentity'." try { $Recipient = Get-Recipient -Identity $CurIdentity -ErrorAction Stop } catch { $ErrorMessage = $_.exception.message $Message = "Unable to find recipient '{0}': {1}" -f $CurIdentity, $ErrorMessage Write-Error $Message continue } Write-Verbose "Adding '$($Recipient.PrimarySmtpAddress)' to processed list" $Processed += $Recipient.PrimarySmtpAddress $Results = @() $Filter = "members -eq '{0}'" -f $Recipient.DistinguishedName Get-Group -ResultSize Unlimited -filter $Filter | Where-Object {$_.WindowsEmailAddress -notin $Processed} | ForEach-Object { if ($_.RecipientTypeDetails -notin 'NonUniversalGroup', 'GroupMailbox', 'RoleGroup') { $_ $Results += $_ } } if (-not $Recurse) { continue } Foreach ($Result in $Results) { #Skip "Office 365 Groups" as they fail recipient checks and cannot be members of other groups if ($Result.RecipientTypeDetails -in 'NonUniversalGroup', 'GroupMailbox', 'RoleGroup') { Continue } Write-Verbose "Start recursing for '$($Result.WindowsEmailAddress)'." Get-DistributionGroupMembership -Identity $Result.Guid.ToString() -Recurse -Processed $Processed Write-Verbose "Done recursing for '$($Result.WindowsEmailAddress)'." }#End Foreach result } #End Foreach Identity } #End Process } #End Function |