Then a separate query is required for each user to retrieve the sAMAccountName from either the UPN or the email address. The Get-ADUser cmdlet can be used with the -Filter parameter. The Remove-ADGroupMember cmdlet does not support the -Filter parameter.
To be safe, I would make sure just one user is found, whether by UPN or email. I suggest code similar to below (not tested):
$Users = Import-Csv "ListOfUsers.csv" -Header users
ForEach ($User In $Users)
{
$Email = $User.users
# Retrieve the sAMAccountName of the user with the specified email address in the CSV file.
$SamName = (Get-ADUser -Filter {EmailAddress -eq $Email}).sAMAccountName
# Make sure there is just one user found.
Switch ($SamName.Count)
{
0 {Write-Host "User with EmailAddress $Email not found"}
1 {Remove-ADGroupMember -Identity "GroupName" -Members $SamName}
Default {Write-Host "More than one user found with EmailAddress $Email"}
}
}
I assumed the CSV has email addresses. Similar code can be used if the CSV file has userPrincipalName values.
Richard Mueller - MVP Enterprise Mobility (Identity and Access)
