adus | Android Debug Utility Suite | Code Inspection library

The likable cause of your error is a typo on $us = $User.user and the referencing $User in the Get-ADUser call instead of $us. As for -PipelineVariable User, you could replace it for $_ (also known as $PSItem) to refer to the current object being passed through the pipeline:

The problem is that you pipe to Format-Table before you pipe to Export-Csv. Only use Format-Table for displaying things on screen. The fix is to just remove that.

There are 2 problems with your code, the first one, $UserName is defined and only exists in the scope of your function Show-Menu, to correct this, you can have the call to Read-Host inside your function but don't have it assigned to any variable so we can capture the user name on each function call ($userName = Show-Menu). The second problem is your use of the automatic variable $input on until ($input -eq 'q').

The (positionally implied) -Property parameter of the Select-Object cmdlet (whose built-in alias is select) interprets its arguments as wildcard expressions.

Therefore, RoleUserA* looks for existing properties on the input objects whose name starts with RoleUserA - and simply adds none to the output objects if no existing property matches; a simple example:

You can construct a [pscustomobject] that houses the expanded values in distinct properties:

I believe you could do it this way using -LDAPFilter, first you need to query the OU to Exclude and get it's DistinguishedName then you can query all users and filter them where their DistinguishedName does not contain the OU to exclude.

NOTE: This assumes there is only 1 OU with Name Disabled Users. If there are more OUs with the same I would recommend you to hardcode the DistinguishedName of the excluded OU in $ouDN.

It's also worth noting that querying all attributes (-Properties *) for all users is highly inefficient, you should always query only the attributes of interest (-Properties attrib1, attrib2, etc).

This is quite tricky. It looks to me that there are two issues:

1. Your Mock isn't firing because the -ParameterFilter isn't matching the invocation of Get-ADUser.
2. You need your tests to Mock Get-ADUser in 2 different ways, so that when first used it returns a result but when invoked the 2nd time it returns nothing.

I've created what I think is a working solution, but because getting -ParameterFilter to work well with Get-ADUser's -Filter parameter seems to be very difficult, I changed your function so that for one of the Get-ADUser calls it includes the -Properties parameter, so that I could differentiate the use based on that. An alternative approach might be to create two wrapper functions around Get-ADUser for when you use it the first vs 2nd time.

Here's my solution. I also had to edit your function as I was missing the part where you set $BaseSam. This passes for Bruce Wayne but not for Clark Kent as it doesn't handle the foreign characters.

I'm assuming you want the permissions to the group itself (for example, who is allowed to modify the group).

You can use Get-Acl (ACL stands for Access-Control List), which is used for getting permissions from files as well. To direct it to AD, you use the AD: drive, along with the distinguished name of the AD object. For example:

Set-ADUser expects you to use -Replace or -Add :