Remove all former employees from ALL distribution groups

Question

So, today I was assigned the task of removing all former domain employees (they have their own folder in AD) from all their DLs. Is there a way to do this quickly or at least faster than checking each separately and going to member> delete all?

thanks

Edit to add more information:

There are 822 users who need an updated member tab to remove them from all mailing lists. This would require my team of 5 (customer support) to sift for about a week on top of our already large workload. Rough path to the folder with all former employees:

BusinessName.local \ MyBusiness \ Users \ Ex-employees \

If any other information is needed, I would be more than happy to provide it.

Edit 2: There are over 250 DL in the system, so I cannot provide a list for both confidentiality and funcationality considerations.

Answer 1

Added Script If you want to use Powershell scripts, here is the code

Add-Type -AssemblyName System.DirectoryServices.AccountManagement $directorySearcher = New-Object System.DirectoryServices.DirectorySearcher $directorySearcher.SearchRoot = "LDAP://OU=YourOU,DC=YourDomain,DC=com" $directorySearcher.PageSize = 1000 $directorySearcher.Filter = "(&(objectCategory=User))" $directorySearcher.SearchScope = "Subtree" $directorySearcher.PropertiesToLoad.Add("name") $searchResults = $directorySearcher.FindAll() foreach ($result in $searchResults) {$objItem = $result.Properties "Name: " + $objItem.name $contextType = [System.DirectoryServices.AccountManagement.ContextType]::Domain $userPrincipal = [System.DirectoryServices.AccountManagement.UserPrincipal]::FindByIdentity($contextType,$objItem.name) $userGroups = $userPrincipal.GetGroups() foreach($userGroup in $userGroups){ if ($userGroup.IsSecurityGroup -eq 0) #Distribution Group Only { "Removing - " + $userGroup.SamAccountName $userGroup.Members.Remove($userPrincipal) $userGroup.Save() } } } 

for .Net is code

 using System; using System.Collections; using System.Linq; using System.Text; using System.DirectoryServices; using System.DirectoryServices.AccountManagement; namespace RemoveFromDistributionGroups { class Program { private static string sDomain; private static string sDefaultOU; private static string sServiceUser; private static string sServicePassword; static void Main(string[] args) { try { Console.Write("Type your Domain (ie: yourcompany.com) "); sDomain = Console.ReadLine(); Console.Write("Type the OU you want to use: (ie: OU=yourou,DC=yourcompany,DC=com)"); sDefaultOU = Console.ReadLine(); Console.Write(@"Username: (ie: YOURDOMAIN\Raymund )"); sServiceUser = Console.ReadLine(); Console.Write("Password: "); sServicePassword = Console.ReadLine(); foreach (UserPrincipal user in GetAllUsers()) { Console.WriteLine("Processing User : " + user.Name); foreach (GroupPrincipal group in GetUserGroups(user)) { if (group.IsSecurityGroup == false) //Distribution Group { group.Members.Remove(user); group.Save(); } } } Console.WriteLine("Done! Press a key to exit"); Console.ReadLine(); } catch (Exception ex) { Console.WriteLine("Error Encountered : " + ex.Message); Console.WriteLine("Press a key to exit"); Console.ReadLine(); } } public static PrincipalContext GetPrincipalContext(string sOU) { PrincipalContext oPrincipalContext = new PrincipalContext(ContextType.Domain, sDomain, sOU, ContextOptions.Negotiate, sServiceUser, sServicePassword); return oPrincipalContext; } public static ArrayList GetAllUsers() { ArrayList myItems = new ArrayList(); PrincipalSearcher oPrincipalSearcher = new PrincipalSearcher(); UserPrincipal oUserPrincipal = new UserPrincipal(GetPrincipalContext(sDefaultOU)); oUserPrincipal.SamAccountName = "*"; oUserPrincipal.Enabled = true; oPrincipalSearcher.QueryFilter = oUserPrincipal; ((DirectorySearcher)oPrincipalSearcher.GetUnderlyingSearcher()).PageSize = 5000; PrincipalSearchResult<Principal> oPrincipalSearchResults = oPrincipalSearcher.FindAll(); foreach (Principal oResult in oPrincipalSearchResults) { myItems.Add(oResult); } return myItems; } public static ArrayList GetUserGroups(UserPrincipal oUserPrincipal) { ArrayList myItems = new ArrayList(); PrincipalSearchResult<Principal> oPrincipalSearchResult = oUserPrincipal.GetGroups(); foreach (Principal oResult in oPrincipalSearchResult) { myItems.Add(oResult); } return myItems; } } } 

Also note that in $directorySearcher.SearchRoot or sDefaultOU you need to use the OU (or what you call the folder) where your former employees are located, I think in your case it is "LDAP://OU=Ex-Employees,OU=Users,OU=MyBusiness,DC=BusinessName,DC=local" if it is used in Powershell or "OU=Ex-Employees,OU=Users,OU=MyBusiness,DC=BusinessName,DC=local" if used in .Net code