Created
January 25, 2016 01:41
-
-
Save darrenjrobinson/1a15db531b200697d41e to your computer and use it in GitHub Desktop.
MIMExchPSMA-Import
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
param ( | |
$Username, | |
$Password, | |
$OperationType, | |
[bool] $usepagedimport, | |
$pagesize | |
) | |
#Needs reference to .NET assembly used in the script. | |
Add-Type -AssemblyName System.DirectoryServices.Protocols | |
$CookieFile = "C:\PROGRA~1\MICROS~4\2010\SYNCHR~1\EXTENS~2\Exchange\Exchange\ExchCookie.bin" | |
#Getting Cookie from file | |
If (Test-Path $CookieFile –PathType leaf) { | |
[byte[]] $Cookie = Get-Content -Encoding byte –Path $CookieFile | |
} else { | |
$Cookie = $null | |
} | |
#region User | |
$Properties = @("objectGuid","sAMAccountName","msExchMailboxGuid","userPrincipalName","mail","isDeleted") | |
#Running as FIM MA Account as passed from the MA | |
$Credentials = New-Object System.Net.NetworkCredential($username,$password) | |
$RootDSE = [ADSI]"LDAP://RootDSE" | |
$LDAPDirectory = New-Object System.DirectoryServices.Protocols.LdapDirectoryIdentifier($RootDSE.dnsHostName) | |
$LDAPConnection = New-Object System.DirectoryServices.Protocols.LDAPConnection($LDAPDirectory, $Credentials) | |
$Request = New-Object System.DirectoryServices.Protocols.SearchRequest($RootDSE.defaultNamingContext, "(&(objectClass=user)(sAMAccountName=U*))", "Subtree", $Properties) | |
#Defining the object type returned from searches for performance reasons. | |
[System.DirectoryServices.Protocols.SearchResultEntry]$entry = $null | |
if ($OperationType -eq "Full") | |
{ | |
$Cookie = $null | |
} | |
else | |
{ | |
# delta run and we should use the cookie we already found | |
} | |
$DirSyncRC = New-Object System.DirectoryServices.Protocols.DirSyncRequestControl($Cookie, [System.DirectoryServices.Protocols.DirectorySynchronizationOptions]::IncrementalValues, [System.Int32]::MaxValue) | |
$Request.Controls.Add($DirSyncRC) | Out-Null | |
$MoreData = $true | |
$Guids = @() | |
while ($MoreData) { | |
$Response = $LDAPConnection.SendRequest($Request) | |
ForEach($entry in $Response.Entries){ | |
#Check if this GUID already been handled to avoid adding duplicate objects | |
If($Guids -contains ([GUID] $entry.Attributes["objectguid"][0]).ToString()){continue} | |
# we always add objectGuid and objectClass to all objects | |
$obj = @{} | |
$obj.Add("objectGuid", ([GUID] $entry.Attributes["objectguid"][0]).ToString()) | |
$obj.Add("objectClass", "user") | |
if ( $entry.distinguishedName.Contains("CN=Deleted Objects")) | |
{ | |
# this is a deleted object, so we return a changeType of 'delete'; default changeType is 'Add' | |
$obj.Add("changeType", "Delete") | |
} | |
else | |
{ | |
# we need to get the directory entry to get the additional attributes | |
$DirEntry = New-Object System.DirectoryServices.DirectoryEntry "LDAP://$($entry.distinguishedName)" | |
# importing attribute values if they exist | |
$obj.Add("accountName",$DirEntry.Properties["sAMAccountName"][0]) | |
if ($DirEntry.Properties["userPrincipalName"][0]){$obj.Add("upn",$DirEntry.Properties["userPrincipalName"][0])} | |
if ($DirEntry.Properties["msExchMailboxGuid"][0]){$obj.Add("msExchMailboxGuid",$DirEntry.Properties["msExchMailboxGuid"][0])} | |
if ($DirEntry.Properties["mail"][0]){$obj.Add("mail",$DirEntry.Properties["mail"][0])} | |
if ($DirEntry.Properties["msExchHomeServerName"][0]){$obj.Add("msExchHomeServerName",$DirEntry.Properties["msExchHomeServerName"][0])} | |
if ($DirEntry.Properties["homeMDB"][0]){$obj.Add("homeMDB",$DirEntry.Properties["homeMDB"][0])} | |
if ($DirEntry.Properties["mailNickname"][0]){$obj.Add("mailNickname",$DirEntry.Properties["mailNickname"][0])} | |
} | |
#Add Guid to list of processed guids to avoid duplication | |
$Guids += ,([GUID] $entry.Attributes["objectguid"][0]).ToString() | |
#Return the object to the MA | |
$obj | |
} | |
ForEach ($Control in $Response.Controls) | |
{ | |
If ($Control.GetType().Name -eq "DirSyncResponseControl") | |
{ | |
$Cookie = $Control.Cookie | |
$MoreData = $Control.MoreData | |
} | |
} | |
$DirSyncRC.Cookie = $Cookie | |
} | |
#Saving cookie file | |
Set-Content -Value $Cookie -Encoding byte –Path $CookieFile | |
$global:RunStepCustomData = [System.Convert]::ToBase64String($Cookie) | |
#endregion |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment