Monitor Computer members [Feature Request]

[bsteingraber]

I would love the ability to use this script to monitor those AD Groups that have Computers (not users) as members. That was as computers are added/removed from groups, email notifications can be sent. This would help automate change notifications when external systems cannot integrate with AD.

[pompushko]

with computers script got errors)))

VERBOSE: [Monitor-ADGroupMemberShip.ps1][PROCESS] GROUP: CN=ITDepartmentComputers,OU=Migrated Groups,OU=Groups,OU=Office,DC=domain,DC=com - Querying Membership (AD Module) get-aduser : Cannot find an object with identity: 'CN=SHJFDSHDSFSGHJSDF1,OU=SHHSHSH,OU=Computers,OU=Office,DC=domain,DC=com' under: 'DC=domain,DC=com'. At C:\Scripts\Monitor-ADGroupMemberShip.ps1:641 char:29

•                     $Members = $members | get-aduser -Properties PasswordExpired  | Select-Obj ...
  

•                                           ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  

  • CategoryInfo : ObjectNotFound: (CN=DFFJKDFJJK,O...C=domain,DC=com:ADUser) [Get-ADUser], ADIdentityNotFoundException
  • FullyQualifiedErrorId : ActiveDirectoryCmdlet:Microsoft.ActiveDirectory.Management.ADIdentityNotFoundException,Microsoft.ActiveDirectory.Management.Commands.GetADUser