Enumerating Groups of users and properties with Powershell ADSI

So the other day it was brought up to give a user access to see what users are in a specific set of groups in a specific OU.
I did not want to install the admin tools just so they could use the ActiveDirectory modules, so i had to write this script using only ADSI.

using ADSI only requires the end user to have read access to the objects.

Here ya go have fun.

# Group enumerator script by Jeramy Thompson
# Downloaded from http://jeramythompson.blogspot.com/
# Change $ouPath to the path of groups you want to enumerate
# To popluate different user properties
# change $userCN.mail to $userCN.(property) for example
# if you wanted the samaccount name change it to
# $userCN.sAMAccountName
#
#
#
$ouPath = "OU=OUNAME,DC=netbiosdomain,DC=domain,DC=com"




[void][System.Reflection.Assembly]::LoadWithPartialName("System.Windows.Forms")
[void][System.Reflection.Assembly]::LoadWithPartialName("System.Drawing")
$Form1 = New-Object System.Windows.Forms.Form
$Form1.ClientSize = New-Object System.Drawing.Size(407, 390)
$form1.topmost = $true
$comboBox1 = New-Object System.Windows.Forms.ComboBox
$comboBox1.Location = New-Object System.Drawing.Point(25, 55)
$comboBox1.Size = New-Object System.Drawing.Size(350, 310)
$ouLDAP = "LDAP://" + $ouPath
$ou = [ADSI] $ouLDAP
foreach ($child in $ou.psbase.Children )
{
if ($child.ObjectCategory -like '*group*') {
write-host $child.name
$nm=$child.name
$comboBox1.Items.add($nm[0])}}
$richtextbox1 = New-Object System.Windows.Forms.Richtextbox
$richtextbox1.Location = New-Object System.Drawing.Point(25,100)
$richtextbox1.Size = New-Object System.Drawing.Size(260,260)
$richtextbox1.text = ""
$richtextbox1.Readonly = $True
$Form1.Controls.Add($comboBox1)
$Form1.Controls.Add($richtextbox1)
$ComboBox1_SelectedIndexChanged={
$richtextbox1.text = ""
$Group = [ADSI]("LDAP://CN="+$ComboBox1.Text + "," + $ouPath)
foreach ($group.member in $Group){
$cb1val = $Combobox1.Text
$GM = $group.member
foreach ($memberuser in $GM){
$userCN = [ADSI]("LDAP://$memberuser")
$richtextbox1.text = $richtextbox1.text + $userCN.mail + "`n"
}}}
$ComboBox1.add_SelectedIndexChanged($ComboBox1_SelectedIndexChanged)
[void]$form1.showdialog()