Here are a few functions I've created based on the findings in this Blog posting that may prove useful to others.
This first function Gathers all Remote Desktop Services Profile Paths in Active Directory for reporting use.
Function Get-ADUserProfiles {
[cmdletbinding()]
Param (
[parameter(ValueFromPipeline)]
[Microsoft.ActiveDirectory.Management.ADUser]$Identity
)
Process {
$ADUser = Get-ADUser $Identity -Properties * | select -ExpandProperty disting*
$ADUser = [ADSI]”LDAP://$ADUser”
$ADUserProfile = New-Object -TypeName PSObject
$ADUserProfile | Add-Member -MemberType NoteProperty -Name Username -Value $($ADUser.sAMAccountName)
$ADUserProfile | Add-Member -MemberType NoteProperty -Name GUID -Value $($ADUser.GUID)
$ADUserProfile | Add-Member -MemberType NoteProperty -Name DisplayName -Value $($ADUser.displayName)
$ADUserProfile | Add-Member -MemberType NoteProperty -Name ProfilePath -Value $($ADUser.ProfilePath)
try{$terminalservicesprofilepath = $ADUser.psbase.InvokeGet(“terminalservicesprofilepath”)} catch {$terminalservicesprofilepath = $null}
$ADUserProfile | Add-Member -MemberType NoteProperty -Name RDSProfilePath -Value $terminalservicesprofilepath
try{$allowlogon = $ADUser.psbase.InvokeGet(‘allowlogon’)} catch {$allowlogon = "Not Configured"}
$ADUserProfile | Add-Member -MemberType NoteProperty -Name RDSAllowLogon -Value $allowlogon
Return $ADUserProfile
}
}
$report = Get-ADUser -filter * | Get-ADUserProfiles
This second function will allow you to pipe output from your first gather function into it to process like this:
Function Set-ADUserRDSProfilePath {
[cmdletbinding()]
Param (
[parameter(ValueFromPipeline)]
[Microsoft.ActiveDirectory.Management.ADUser]$Identity,
[string]$RDSProfilePath
)
Process {
$ADUser = Get-ADUser $Identity -Properties * | select -ExpandProperty disting*
$ADUser = [ADSI]”LDAP://$ADUser”
$ADUser.psbase.Invokeset("terminalservicesprofilepath",$RDSProfilePath)
$ADUser.setinfo()
Return $ADUserProfile
}
}
# Runs through and removes any RDS paths. It's configured so you can can change a path
#too and with a little modification you could base this by AD group membership.
ForEach ($User in $($report |? {$_.RDSProfilePath -like "\\*"})) {
Get-ADUser $User.Username | Set-ADUserRDSProfilePath -RDSProfilePath $null
}
This posting is provided "AS IS" with no warranties, and confers no rights. Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question.
This can be beneficial to other community members reading the thread.
