We use cookies to improve your experience.
By your continued use of this site you accept such use.
For more details please see our privacy policy and cookies policy.

Script Repository

Check whether AD object is member of business unit

February 25, 2021 Views: 2150

The script can be used to create a condition that checks whether an AD object on which it is executed is a member of a specific business unit. To add such a condition to a business rule, custom command or scheduled task, use the If PowerShell script returns true condition type.


  • $businessUnitName - specifies the name of the business unit.
Edit Remove
$businessUnitName = "My Unit" # TODO: modify me

# Search business units
$Context.ConditionIsMet = $False
$businessUnitsPath = $Context.GetWellKnownContainerPath("BusinessUnits")
$searcher = $Context.BindToObject($businessUnitsPath)
$searcher.SearchFilter = "(&(objectCategory=adm-BusinessUnit)(name=$businessUnitName))"
$searcher.SearchScope = "ADS_SCOPE_SUBTREE"
$searcher.PageSize = 500
$searcher.ReferralChasing = "ADS_CHASE_REFERRALS_NEVER"

    $searchResult = $searcher.ExecuteSearch()
    $units = $searchResult.FetchAll()
    if ($units.Count -eq 0)
        $Context.LogMessage("A business unit with name '$businessUnitName' was not found", "Warning")
    foreach ($unit in $units)
        # Bind to the Business Unit
        $unitObject = $Context.BindToObject($unit.AdsPath)

        # Check whether the target object is a member
        if ($unitObject.IsMember($Context.TargetObject))
            $Context.ConditionIsMet = $True

    # Release resources used by the search

Comments 0
Leave a comment

Got questions?

Support Questions & Answers