Hi.
Im new to powershell.
Im looking for a PS script that will send me a notification when users is added/removed from Domain Admins group.
I have been looking for a long time for such a script. I have made this but its nok working:
# Load Quest AD CmdLets (for simplicity):
http://www.quest.com/powershell/act...erver.aspx Add-PsSnapIn Quest.ActiveRoles.ADManagement
# The group name to run for
$GroupName = "Domain Admins"
# The report is sent here (if something changes)
$Email =
pech@secret.com$SmtpServer = "10.1.4.30"
# Store group members in this file:
$StateFile = "C:\Scripts\Groupmembers\groupmembers.csv"
# Current Membership
$Members = Get-QADGroupMember $GroupName -Indirect | Select-Object Name, SamAccountName, DN
# If the file doesn't exist, assume we've not got a record to refer to, then make it
If (!(Test-Path $StateFile)) { $Members | Export-Csv $StateFile -NoTypeInformation }
# Now get current membership and start comparing it to the last lot we recorded
# catching changes to membership (additions / removals)
$Changes = Compare-Object $Members $(Import-Csv $StateFile) -Property Name, SamAccountName, DN |
Select-Object Name, SamAccountName, DN,
@{n='State';e={ If ($_.SideIndicator -eq "=>") { "Removed" } Else { "Added" } }}
# If we have some changes, mail them to $Email If ($Changes) { Send-MailMessage -From $Email -To $Email -Subject "$GroupName membership change" `
-BodyAsHtml -Body $($Changes | ConvertTo-Html | Out-String) -SmtpServer $SmtpServer