$M365Groups = Get-ADGroup -Filter {Name -like "*-O365-E3"} #$VPNGroups = Get-ADGroup -Filter {Name -like "*VPN*"} $UsersToAdd=@() [int]$TotalUsers=0 ForEach($M365Group in $M365Groups) { $user = $null $users = $null $Users = Get-ADGroupMember -Identity $M365Group.SamAccountName $TotalUsers += $Users.count $AllUsers += $Users Write-Warning -Message ([string](Get-Date) + " Group: " + $M365Group.SamAccountName) Write-Warning -Message ([string](Get-Date) + " User count " + $Users.count) Foreach($User in $Users) { $ADUser = Get-ADUser -Identity $User -Properties EmailAddress,Company,Department,CanonicalName $UserMemberOf = (Get-ADUser -Identity $User -Properties MemberOf).MemberOf | Sort-Object $UserMemberOfVPN = $UserMemberOf | Where-Object {$_ -like "*VPN*"} If(@($UserMemberOfVPN).count -eq 0) { $UsersToAdd += $ADUser } } Write-Warning -Message ([string](Get-Date) + " UsersToAdd Total count " + $UsersToAdd.count) } $UsersToAdd | Export-Csv D:\UsersToAdd.csv #Add-ADGroupMember -Identity ITD-COVID19-SSLVPN -Members $UsersToAdd -Credential $AdminCred Add-ADGroupMember -Identity ITD-COVID19-SSLVPN -Members (Import-Csv D:\UsersToAdd-Enabled.csv).SamAccountName -Credential $AdminCred