QMM Quest Migration Manager for AD – Checking Directory Synchronization DSA

I was looking for a possibility to check and supervise the synchronization of user-objects with Quest Migration Manager for Active Directory.

In addition, I was missing a good overview to answer the question:
Were new user-accounts created in the target-domain?

Both problems could be solved with a little Powershell script.

QMM Powershell Commandlets – ActiveRoles Management Shell

For support, I installed the freely accessible Powershell Commandlets by Quest: ActiveRoles Management Shell for Active Directory. These provide you with a really good and easy possibility to work with Active Directory. You can download them from the following website:   http://www.quest.com/powershell/activeroles-server.aspx

The script step by step with comments

About the script: I followed through with my idea by counting all user objects of the source- and target-domain which were created on a certain day. Naturally, the amount should be the same. To count those user objects you could use the attribute [whenCreated]. It contains the [Creation Date] of the object and is saved in the notation [YYYYMMDDHHMMSS.OZ]. Firstly, I had to convert the date into this notation:

Example: $ldapdate=”20110927000000.0Z” With the Quest Commandlet [connect-qadservice] a connection to the Active Directory Domain can be created.

Into the Quest Commandlet [get-QadUser] user accounts can be read with the help of a [-ldapfilter].

All user accounts created at daytime [$ldapdate] in the source domain, are listed in the variable $SRC. Do the same with the target domain:

You can get the counted amount of objects with the operation [.count].

Powershell: QMM – Directory Synchronization DSA

The complete script: