Copy Group Memberships from One AD User to Another

Executive Summary:

Using the Microsoft Management Console (MMC) Active Directory Users and Computer snap-in to copy group memberships in Microsoft Active Directory can be very time-consuming. To save time, you can use CopyMembership.vbs to automatically copy group membership from one Microsoft Active Directory user to another. CopyMembership.vbs uses Microsoft Active Directory Service Interfaces (ADSI) and Windows Script Host (WSH) 5.6.

My company's Security ID Admin team manages more than 5,000 employees. When a new employee is hired, the human resources (HR) department notifies us and we quickly create an employee object in Active Directory (AD). The HR department doesn't know the application or group memberships that should be assigned to the new employee, so we just assign the sAMAccountName (i.e., username) and don't include any membership information. After the new employee starts work, his or her department manager tells the Security ID Admin team to assign global-group roles based on the group memberships of existing employees in the department. . . .