Last active
February 15, 2024 20:17
-
-
Save darrenjrobinson/1a55456a4d1a55bbd459 to your computer and use it in GitHub Desktop.
Microsoft Identity Manager Home Drive Provisioning Associated Blog https://blog.darrenjrobinson.com/provisioning-home-directories-for-active-directory-users-with-fim-mim-using-the-granfeldt-powershell-management-agent/
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
param ( | |
$Username, | |
$Password, | |
$OperationType, | |
[bool] $usepagedimport, | |
$pagesize | |
) | |
#Needs reference to .NET assembly used in the script. | |
Add-Type -AssemblyName System.DirectoryServices.Protocols | |
$CookieFile = "C:\PROGRA~1\MICROS~4\2010\SYNCHR~1\EXTENS~2\HomeDir\homefolder\hdcookie.bin" | |
#Getting Cookie from file | |
If (Test-Path $CookieFile –PathType leaf) { | |
[byte[]] $Cookie = Get-Content -Encoding byte –Path $CookieFile | |
} else { | |
$Cookie = $null | |
} | |
#region User | |
$Properties = @("objectGuid","sAMAccountName","homeDirectory","homeDrive","isDeleted") | |
#Running as FIM MA Account | |
$Credentials = New-Object System.Net.NetworkCredential($username,$password) | |
$RootDSE = [ADSI]"LDAP://RootDSE" | |
$LDAPDirectory = New-Object System.DirectoryServices.Protocols.LdapDirectoryIdentifier($RootDSE.dnsHostName) | |
$LDAPConnection = New-Object System.DirectoryServices.Protocols.LDAPConnection($LDAPDirectory, $Credentials) | |
$Request = New-Object System.DirectoryServices.Protocols.SearchRequest($RootDSE.defaultNamingContext, "(&(objectClass=user)(sAMAccountName=U*))", "Subtree", $Properties) | |
#Defining the object type returned from searches for performance reasons. | |
[System.DirectoryServices.Protocols.SearchResultEntry]$entry = $null | |
if ($OperationType -eq "Full") | |
{ | |
$Cookie = $null | |
} | |
else | |
{ | |
# delta run and we should use the cookie we already found | |
} | |
$DirSyncRC = New-Object System.DirectoryServices.Protocols.DirSyncRequestControl($Cookie, [System.DirectoryServices.Protocols.DirectorySynchronizationOptions]::IncrementalValues, [System.Int32]::MaxValue) | |
$Request.Controls.Add($DirSyncRC) | Out-Null | |
$MoreData = $true | |
$Guids = @() | |
while ($MoreData) { | |
$Response = $LDAPConnection.SendRequest($Request) | |
ForEach($entry in $Response.Entries){ | |
#Check if this GUID already been handled to avoid adding duplicate objects | |
If($Guids -contains ([GUID] $entry.Attributes["objectguid"][0]).ToString()){continue} | |
# we always add objectGuid and objectClass to all objects | |
$obj = @{} | |
$obj.Add("objectGuid", ([GUID] $entry.Attributes["objectguid"][0]).ToString()) | |
$obj.Add("objectClass", "user") | |
if ( $entry.distinguishedName.Contains("CN=Deleted Objects")) | |
{ | |
# this is a deleted object, so we return a changeType of 'delete'; default changeType is 'Add' | |
$obj.Add("changeType", "Delete") | |
} | |
else | |
{ | |
# we need to get the directory entry to get the additional | |
$DirEntry = New-Object System.DirectoryServices.DirectoryEntry "LDAP://$($entry.distinguishedName)" | |
# setting the values for attributes that have changed | |
$obj.Add("accountName",$DirEntry.Properties["sAMAccountName"][0]) | |
if ($DirEntry.Properties["homeDirectory"][0]){$obj.Add("homeFolderPath",$DirEntry.Properties["homeDirectory"][0])} | |
if ($DirEntry.Properties["homeDrive"][0]){$obj.Add("homeDrive",$DirEntry.Properties["homeDrive"][0])} | |
} | |
#Add Guid to list of processed guids to avoid duplication | |
$Guids += ,([GUID] $entry.Attributes["objectguid"][0]).ToString() | |
#Return the object to the MA | |
$obj | |
} | |
ForEach ($Control in $Response.Controls) { | |
If ($Control.GetType().Name -eq "DirSyncResponseControl") { | |
$Cookie = $Control.Cookie | |
$MoreData = $Control.MoreData | |
} | |
} | |
$DirSyncRC.Cookie = $Cookie | |
} | |
#Saving cookie file | |
Set-Content -Value $Cookie -Encoding byte –Path $CookieFile | |
$global:RunStepCustomData = [System.Convert]::ToBase64String($Cookie) | |
#endregion |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment