O R G A N I C / F E R T I L I Z E R: listing the group membership of a computer in opsmgr [part 2]

Jan 6, 2010

listing the group membership of a computer in opsmgr [part 2]

yesterday, i posted an entry about retrieving a computer’s membership through a very backwards way that i cobbled together.  after talking to pete zerger for a little while, i started poking into how to make boris’ script work.  it was initially only pulling back two groups for me.

well, i managed to increase that count to six.  however, my output and boris’ still doesn’t match up.  it could be an incorrect root class, i’m using.  either way, i wanted to post it to see if you guys could direct me to a better solution.  who knows?

since you can’t seem to use an abstract class directly in boris’ script, i modified it a bit to first get the abstract class object using get-monitoringobject and then pull out the objects into an array.  afterwards, that array is fed into the get-monitoringclass cmdlet.  at that point, we should have a pretty good set of objects we can use.

those objects are sent back down the pipe to get-monitoringobject using the criteria of $computerFQDN to create a new array called $subClasses.  that array is sent down the pipe to finally run the lines in boris’ script that handles getting the related objects of $computerFQDN.

take a look over it if you have a chance, and let me know what you see.  here’s some sample output of a domain controller using my script and the edited boris script:

my script -

Agent Managed Computer Group
All Windows Computers
Windows Server 2003 Computer Group
Windows Server Computer Group
Windows Server Instances Group


edited boris script -

AD Domain Controller Group (Windows 2003 Server)
Windows Server Instances Group
Windows Server Instances Only Group


so you see?  holes.  everywhere.  more playing to do later.  here’s the script:


$ErrorActionPreference = "SilentlyContinue"

function GetGroupNames($computerFQDN)
$containmentRel = Get-RelationshipClass -name:'Microsoft.SystemCenter.InstanceGroupContainsEntities'
$abstractClass = Get-MonitoringClass -name:"Microsoft.Windows.ComputerRole"

$subObjects = Get-MonitoringObject -monitoringClass:$abstractClass
$subObjects = $subObjects | ForEach-Object {
} | Sort-Object -Unique

$subObjects | ForEach-Object {
$subObjects += Get-MonitoringClass -name:$_

$criteria = [string]::Format("Path = '{0}'",$computerFQDN)

$subObjects | ForEach-Object {
$subClasses += Get-MonitoringObject -MonitoringClass:$_ -Criteria:$criteria

$subClasses | ForEach-Object {
$relatedObjects += $_.GetMonitoringRelationshipObjectsWhereTarget($containmentRel,`

foreach($group in ($relatedObjects | Sort-Object SourceMonitoringObject -Unique))


GetGroupNames $computerFQDN