Experience with Set-QADObject for groups?

I am trying to convert all of our global distribution groups to universal
groups, but PS is giving me a hard time in this. What I have so far is:

get-qadgroup -sizelimit 0 | where {($_.grouptype -eq "Distribution") -and
($_.groupscope -eq "Global")} | set-qadobject $_.dn -objectattributes
@{groupscope='Universal'}

The problem is that I can't seem to SET it this way. I know that in ADSI
"GroupType" should be 8 for a Universal Distribution group, but when I look
at the get-member on the object, the grouptype and groupscope seem to be a
Quest implemented .NET representation of the data with no real way back to
set it. Even $_.psbase doesn't give me the info I need from ADSI.

Does anyone have a potential solution to access the ADSI data withOUT the
..NET representation layer? Many thanks!

--

Kevin N. Kidder
----------------------------------------
"If at first you don't succeed, failure may be your style."

Kevin N. Kidder wrote: Sorry, can't help, but the Quest guys usually hang out at
www.powergui.org (in the discussion forums) if you want to still try to
find a solution with the Quest AD cmdlets.

Marco

--
----------------
PowerGadgets MVP
http://www.powergadgets.com/mvp

Blog:
http://marcoshaw.blogspot.com

Can you try this?


"Kevin N. Kidder" <kkidder@xxxxxx> wrote in message
news:0D056FAC-8BB0-4160-802B-56A83CD44A0C@xxxxxx

Can you try this? In a lab of course

####################
Param($domain)
$root = [ADSI]"LDAP://$Domain"
$filter = "(&(objectcategory=group)(groupType=2))"
$ds = new-object System.DirectoryServices.DirectorySearcher($root,$filter)
$groups = $ds.findall()

foreach($group in $groups)
{
$grp = $group.GetDirectoryEntry()
$grp.psbase.properties.grouptype
$grp.PutEx(2,'groupType',@(8))
$grp.setinfo()
}

"Kevin N. Kidder" <kkidder@xxxxxx> wrote in message
news:0D056FAC-8BB0-4160-802B-56A83CD44A0C@xxxxxx

I will give this a try,
Thanks!


"Brandon Shell" <tshell.mask@xxxxxx> wrote in message
news:uXaM9p3$HHA.4592@xxxxxx

Kevin,

Try this:

get-qadgroup -sizelimit 0 | where {($_.grouptype -eq "Distribution") -and
($_.groupscope -eq "Global")} | set-qadobject $_.dn -ObjectAttributes
@{groupType=8}

It is basically assigning that group type by using the native value - 8. In
the future we will at some point have Set-QADGroup with more intuitive
syntax, but for now this should keep you going.

Hope this helps!

--
Dmitry Sotnikov
http://dmitrysotnikov.wordpress.com


"Kevin N. Kidder" wrote:

I copy/pasted your line without giving it much thought. Here's a better
one-liner:

Get-QADGroup -SizeLimit 0 -GroupType Distribution -GroupScope Global |
Set-QADObject -ObjectAttributes @{grouptype=8}

It has a couple of corrections:

1. You don't need to pass $_.DN to the Set cmdlets because you already use
pipeline to pass the objects.

2. You are retrieving all groups and then using where to filter the ones you
need. This is inefficient because the filtering is being done on the client.
Including GroupType and GroupScope into the Get-QADGroup makes the cmdlet
adds these into the LDAP query and thus only the objects you need get
retrieved - much more efficient!


--
Dmitry Sotnikov
http://dmitrysotnikov.wordpress.com


"Dmitry Sotnikov" wrote:

try to use next command:

Get-QADGroup -sl 0 -GroupType Distribution -GroupScope global |
set-qadobject -oa @{grouptype=8}

Dmitry.. I'm a little curious... why do you pass the attribute as a
hashtable?

"Dmitry Sotnikov" <DSotnikovREMOVETHIS@xxxxxx> wrote in message
news:98AEABB8-A840-429C-B123-A691E426130D@xxxxxx