export angepasst
This commit is contained in:
@@ -9,54 +9,60 @@ param (
|
||||
[string]$LogPath = (Join-Path $PSScriptRoot ("export_log_" + (Get-Date -Format 'yyyyMMdd_HHmmss') + ".txt"))
|
||||
)
|
||||
|
||||
Add-Type -AssemblyName System.Windows.Forms
|
||||
Add-Type -AssemblyName System.Drawing
|
||||
[System.Windows.Forms.Application]::EnableVisualStyles()
|
||||
|
||||
# ---------------------------------------------------------------------------
|
||||
# Ensure ActiveDirectory module is available
|
||||
# Ensure AD module is loaded — called lazily before first AD operation
|
||||
# ---------------------------------------------------------------------------
|
||||
function Initialize-ADModule {
|
||||
if (Get-Module -Name ActiveDirectory) { return $true }
|
||||
|
||||
if (-not (Get-Module -Name ActiveDirectory -ListAvailable)) {
|
||||
$isAdmin = ([Security.Principal.WindowsPrincipal][Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole([Security.Principal.WindowsBuiltInRole]::Administrator)
|
||||
$isAdmin = ([Security.Principal.WindowsPrincipal][Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole(
|
||||
[Security.Principal.WindowsBuiltInRole]::Administrator)
|
||||
if (-not $isAdmin) {
|
||||
Write-Error "ActiveDirectory module not found. Please run this script as Administrator to install it automatically, or install RSAT manually."
|
||||
exit 1
|
||||
[System.Windows.Forms.MessageBox]::Show(
|
||||
"Das ActiveDirectory-Modul wurde nicht gefunden.`nBitte das Skript als Administrator starten.",
|
||||
"Modul fehlt", "OK", "Error") | Out-Null
|
||||
return $false
|
||||
}
|
||||
|
||||
Write-Host "ActiveDirectory module not found. Attempting to install..." -ForegroundColor Yellow
|
||||
$os = (Get-CimInstance Win32_OperatingSystem).Caption
|
||||
|
||||
if ($os -match "Server") {
|
||||
try {
|
||||
$os = (Get-CimInstance Win32_OperatingSystem).Caption
|
||||
if ($os -match "Server") {
|
||||
Import-Module ServerManager -ErrorAction Stop
|
||||
Add-WindowsFeature RSAT-AD-PowerShell -ErrorAction Stop | Out-Null
|
||||
Write-Host "ActiveDirectory module installed via Add-WindowsFeature." -ForegroundColor Green
|
||||
} catch {
|
||||
Write-Error "Failed to install ActiveDirectory module on Server: $_"
|
||||
exit 1
|
||||
}
|
||||
} else {
|
||||
try {
|
||||
$feature = Get-WindowsCapability -Name "Rsat.ActiveDirectory*" -Online -ErrorAction Stop |
|
||||
Where-Object State -ne Installed | Select-Object -First 1
|
||||
if ($feature) {
|
||||
Add-WindowsCapability -Name $feature.Name -Online -ErrorAction Stop | Out-Null
|
||||
Write-Host "ActiveDirectory module installed via Add-WindowsCapability." -ForegroundColor Green
|
||||
}
|
||||
}
|
||||
} catch {
|
||||
Write-Error "Failed to install ActiveDirectory module on Windows client: $_"
|
||||
exit 1
|
||||
}
|
||||
[System.Windows.Forms.MessageBox]::Show(
|
||||
"RSAT konnte nicht installiert werden:`n$_", "Fehler", "OK", "Error") | Out-Null
|
||||
return $false
|
||||
}
|
||||
}
|
||||
|
||||
try {
|
||||
Import-Module ActiveDirectory -ErrorAction Stop
|
||||
Import-Module ActiveDirectory -ErrorAction Stop -WarningAction SilentlyContinue
|
||||
return $true
|
||||
} catch {
|
||||
Write-Error "ActiveDirectory module could not be loaded: $_"
|
||||
exit 1
|
||||
[System.Windows.Forms.MessageBox]::Show(
|
||||
"ActiveDirectory-Modul konnte nicht geladen werden:`n$_", "Fehler", "OK", "Error") | Out-Null
|
||||
return $false
|
||||
}
|
||||
}
|
||||
|
||||
Add-Type -AssemblyName System.Windows.Forms
|
||||
Add-Type -AssemblyName System.Drawing
|
||||
|
||||
[System.Windows.Forms.Application]::EnableVisualStyles()
|
||||
# ---------------------------------------------------------------------------
|
||||
# Script-scope state for the recursive export
|
||||
# ---------------------------------------------------------------------------
|
||||
$script:visitedGroups = $null
|
||||
$script:exportResults = $null
|
||||
$script:exportAdParams = $null
|
||||
|
||||
# ---------------------------------------------------------------------------
|
||||
# Helpers
|
||||
@@ -84,35 +90,13 @@ function Write-OutputLine {
|
||||
[System.Windows.Forms.Application]::DoEvents()
|
||||
}
|
||||
|
||||
function Start-Export {
|
||||
param([string]$GroupName, [string]$OutputPath, [string]$Server)
|
||||
|
||||
$script:btnExport.Enabled = $false
|
||||
$script:rtbOutput.Clear()
|
||||
|
||||
$adParams = @{}
|
||||
if ($Server) { $adParams['Server'] = $Server }
|
||||
|
||||
# Validate group
|
||||
try {
|
||||
$null = Get-ADGroup -Identity $GroupName -ErrorAction Stop @adParams
|
||||
Write-Log "Gruppe gefunden: $GroupName"
|
||||
} catch {
|
||||
Write-Log "Gruppe '$GroupName' nicht gefunden: $_" -Level ERROR
|
||||
$script:btnExport.Enabled = $true
|
||||
return
|
||||
}
|
||||
|
||||
$visitedGroups = [System.Collections.Generic.HashSet[string]]::new([System.StringComparer]::OrdinalIgnoreCase)
|
||||
$results = [System.Collections.Generic.List[PSCustomObject]]::new()
|
||||
|
||||
function Get-NestedMembers {
|
||||
param([string]$Group, [string]$SourceGroup)
|
||||
|
||||
if (-not $visitedGroups.Add($Group)) { return }
|
||||
if (-not $script:visitedGroups.Add($Group)) { return }
|
||||
|
||||
try {
|
||||
$members = Get-ADGroupMember -Identity $Group -ErrorAction Stop @adParams
|
||||
$members = Get-ADGroupMember -Identity $Group -ErrorAction Stop @script:exportAdParams
|
||||
} catch {
|
||||
Write-Log "Gruppe '$Group' konnte nicht abgerufen werden: $_" -Level WARN
|
||||
return
|
||||
@@ -126,17 +110,18 @@ function Start-Export {
|
||||
DisplayName, EmailAddress, Title, Department, Company,
|
||||
Enabled, LastLogonDate, PasswordLastSet, PasswordNeverExpires,
|
||||
Manager, telephoneNumber, DistinguishedName `
|
||||
-ErrorAction Stop @adParams
|
||||
-ErrorAction Stop @script:exportAdParams
|
||||
|
||||
$managerName = ''
|
||||
if ($user.Manager) {
|
||||
try {
|
||||
$mgr = Get-ADUser -Identity $user.Manager -Properties DisplayName -ErrorAction Stop @adParams
|
||||
$mgr = Get-ADUser -Identity $user.Manager -Properties DisplayName `
|
||||
-ErrorAction Stop @script:exportAdParams
|
||||
$managerName = $mgr.DisplayName
|
||||
} catch {}
|
||||
}
|
||||
|
||||
$results.Add([PSCustomObject]@{
|
||||
$script:exportResults.Add([PSCustomObject]@{
|
||||
SourceGroup = $SourceGroup
|
||||
MemberOfGroup = $Group
|
||||
SamAccountName = $user.SamAccountName
|
||||
@@ -161,30 +146,57 @@ function Start-Export {
|
||||
}
|
||||
}
|
||||
'group' {
|
||||
Write-Log "Verschachtelte Gruppe: $($member.Name)" -Level INFO
|
||||
Write-Log "Verschachtelte Gruppe: $($member.Name)"
|
||||
Get-NestedMembers -Group $member.distinguishedName -SourceGroup $SourceGroup
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
Write-Log "Starte Export für Gruppe '$GroupName' (inkl. verschachtelter Gruppen)..."
|
||||
function Start-Export {
|
||||
param([string]$GroupName, [string]$OutputPath, [string]$Server)
|
||||
|
||||
$script:btnExport.Enabled = $false
|
||||
$script:rtbOutput.Clear()
|
||||
|
||||
if (-not (Initialize-ADModule)) {
|
||||
$script:btnExport.Enabled = $true
|
||||
return
|
||||
}
|
||||
|
||||
$script:exportAdParams = @{}
|
||||
if ($Server) { $script:exportAdParams['Server'] = $Server }
|
||||
|
||||
try {
|
||||
$null = Get-ADGroup -Identity $GroupName -ErrorAction Stop @script:exportAdParams
|
||||
Write-Log "Gruppe gefunden: $GroupName"
|
||||
} catch {
|
||||
Write-Log "Gruppe '$GroupName' nicht gefunden: $_" -Level ERROR
|
||||
$script:btnExport.Enabled = $true
|
||||
return
|
||||
}
|
||||
|
||||
$script:visitedGroups = [System.Collections.Generic.HashSet[string]]::new(
|
||||
[System.StringComparer]::OrdinalIgnoreCase)
|
||||
$script:exportResults = [System.Collections.Generic.List[PSCustomObject]]::new()
|
||||
|
||||
Write-Log "Starte Export für '$GroupName' (inkl. verschachtelter Gruppen)..."
|
||||
Get-NestedMembers -Group $GroupName -SourceGroup $GroupName
|
||||
|
||||
if ($results.Count -eq 0) {
|
||||
if ($script:exportResults.Count -eq 0) {
|
||||
Write-Log "Keine Benutzer in Gruppe '$GroupName' gefunden." -Level WARN
|
||||
$script:btnExport.Enabled = $true
|
||||
return
|
||||
}
|
||||
|
||||
$unique = $results | Sort-Object SamAccountName -Unique
|
||||
$unique = $script:exportResults | Sort-Object SamAccountName -Unique
|
||||
|
||||
try {
|
||||
$unique | Export-Csv -Path $OutputPath -NoTypeInformation -Encoding UTF8 -Delimiter ';' -ErrorAction Stop
|
||||
$summary = "Export abgeschlossen. Benutzer: {0} | Gruppen durchsucht: {1} | Datei: {2}" -f `
|
||||
$unique.Count, $visitedGroups.Count, $OutputPath
|
||||
Write-Log $summary -Level INFO
|
||||
Write-OutputLine $summary ([System.Drawing.Color]::LightGreen)
|
||||
$msg = "Export abgeschlossen. Benutzer: {0} | Gruppen: {1} | Datei: {2}" -f `
|
||||
$unique.Count, $script:visitedGroups.Count, $OutputPath
|
||||
Write-Log $msg
|
||||
Write-OutputLine $msg ([System.Drawing.Color]::LightGreen)
|
||||
} catch {
|
||||
Write-Log "Fehler beim Schreiben der CSV: $_" -Level ERROR
|
||||
}
|
||||
@@ -235,12 +247,13 @@ $btnLoadGroups.FlatAppearance.BorderSize = 0
|
||||
$form.Controls.Add($btnLoadGroups)
|
||||
|
||||
$btnLoadGroups.Add_Click({
|
||||
if (-not (Initialize-ADModule)) { return }
|
||||
$btnLoadGroups.Text = "Lädt..."
|
||||
$btnLoadGroups.Enabled = $false
|
||||
[System.Windows.Forms.Application]::DoEvents()
|
||||
try {
|
||||
$adP = @{}
|
||||
if ($txtServer.Text.Trim()) { $adP['Server'] = $txtServer.Text.Trim() }
|
||||
if ($txtServer.Tag) { $adP['Server'] = $txtServer.Tag }
|
||||
$groups = Get-ADGroup -Filter * @adP | Select-Object -ExpandProperty Name | Sort-Object
|
||||
$cmbGroup.Items.Clear()
|
||||
$cmbGroup.Items.AddRange($groups)
|
||||
@@ -252,7 +265,7 @@ $btnLoadGroups.Add_Click({
|
||||
$btnLoadGroups.Enabled = $true
|
||||
})
|
||||
|
||||
# --- Output file row ---
|
||||
# --- CSV output row ---
|
||||
$lblOut = New-Object System.Windows.Forms.Label
|
||||
$lblOut.Text = "CSV Datei:"
|
||||
$lblOut.Location = New-Object System.Drawing.Point($pad, 58)
|
||||
@@ -265,7 +278,7 @@ $txtOut.Size = New-Object System.Drawing.Size(436, 22)
|
||||
$txtOut.BackColor = [System.Drawing.Color]::FromArgb(45, 45, 45)
|
||||
$txtOut.ForeColor = [System.Drawing.Color]::White
|
||||
$txtOut.BorderStyle = "FixedSingle"
|
||||
$txtOut.Text = (Join-Path $PSScriptRoot "export.csv")
|
||||
$txtOut.Text = if ($PSScriptRoot) { Join-Path $PSScriptRoot "export.csv" } else { "export.csv" }
|
||||
$form.Controls.Add($txtOut)
|
||||
|
||||
$btnBrowse = New-Object System.Windows.Forms.Button
|
||||
@@ -283,9 +296,7 @@ $btnBrowse.Add_Click({
|
||||
$sfd.Filter = "CSV files (*.csv)|*.csv|All files (*.*)|*.*"
|
||||
$sfd.Title = "CSV-Datei speichern"
|
||||
$sfd.FileName = "export.csv"
|
||||
if ($sfd.ShowDialog() -eq "OK") {
|
||||
$txtOut.Text = $sfd.FileName
|
||||
}
|
||||
if ($sfd.ShowDialog() -eq "OK") { $txtOut.Text = $sfd.FileName }
|
||||
})
|
||||
|
||||
# --- Server row ---
|
||||
@@ -299,21 +310,22 @@ $txtServer = New-Object System.Windows.Forms.TextBox
|
||||
$txtServer.Location = New-Object System.Drawing.Point(104, 94)
|
||||
$txtServer.Size = New-Object System.Drawing.Size(436, 22)
|
||||
$txtServer.BackColor = [System.Drawing.Color]::FromArgb(45, 45, 45)
|
||||
$txtServer.ForeColor = [System.Drawing.Color]::White
|
||||
$txtServer.BorderStyle = "FixedSingle"
|
||||
$txtServer.Tag = ''
|
||||
$txtServer.Text = 'Domänencontroller (leer = Standard)'
|
||||
$txtServer.ForeColor = [System.Drawing.Color]::Gray
|
||||
$txtServer.Text = "Domänencontroller (leer = Standard)"
|
||||
$form.Controls.Add($txtServer)
|
||||
|
||||
$txtServer.Add_GotFocus({
|
||||
if ($txtServer.ForeColor -eq [System.Drawing.Color]::Gray) {
|
||||
if ($txtServer.Tag -eq '') {
|
||||
$txtServer.Text = ''
|
||||
$txtServer.ForeColor = [System.Drawing.Color]::White
|
||||
}
|
||||
})
|
||||
$txtServer.Add_LostFocus({
|
||||
if ([string]::IsNullOrWhiteSpace($txtServer.Text)) {
|
||||
$txtServer.Text = "Domänencontroller (leer = Standard)"
|
||||
$txtServer.Tag = $txtServer.Text.Trim()
|
||||
if ($txtServer.Tag -eq '') {
|
||||
$txtServer.Text = 'Domänencontroller (leer = Standard)'
|
||||
$txtServer.ForeColor = [System.Drawing.Color]::Gray
|
||||
}
|
||||
})
|
||||
@@ -340,14 +352,16 @@ $form.Controls.Add($script:btnExport)
|
||||
$script:btnExport.Add_Click({
|
||||
$groupName = $cmbGroup.Text.Trim()
|
||||
$outputPath = $txtOut.Text.Trim()
|
||||
$server = if ($txtServer.ForeColor -ne [System.Drawing.Color]::Gray) { $txtServer.Text.Trim() } else { '' }
|
||||
$server = $txtServer.Tag
|
||||
|
||||
if (-not $groupName) {
|
||||
[System.Windows.Forms.MessageBox]::Show("Bitte eine AD-Gruppe eingeben oder auswählen.", "Validierung", "OK", "Warning") | Out-Null
|
||||
[System.Windows.Forms.MessageBox]::Show(
|
||||
"Bitte eine AD-Gruppe eingeben oder auswählen.", "Validierung", "OK", "Warning") | Out-Null
|
||||
return
|
||||
}
|
||||
if (-not $outputPath) {
|
||||
[System.Windows.Forms.MessageBox]::Show("Bitte einen Speicherpfad für die CSV angeben.", "Validierung", "OK", "Warning") | Out-Null
|
||||
[System.Windows.Forms.MessageBox]::Show(
|
||||
"Bitte einen Speicherpfad für die CSV angeben.", "Validierung", "OK", "Warning") | Out-Null
|
||||
return
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user