Here's a (slow) version with where-object. I tried to use an ldap filter but it gives me an error, Andrey? :

foreach($user in Get-QADUser){
  $user | select name, @{n="PrimaryGroup";e={ (Get-QADGroup | where {$_.PrimaryGroupToken -eq $user.PrimaryGroupId}).Name}}
}

PS > Get-QADGroup -ldapFilter '(PrimaryGroupToken=513)'
Get-QADGroup : Inappropriate matching.
At line:1 char:13
+ Get-QADGroup <<<<   -ldapFilter '(PrimaryGroupToken=513)'

Oh... I run the original one and got this:


PS > get-qaduser  | select name, @{n="PrimaryGroup";e={get-qadgroup $_.PrimaryGroupSid.ToString()}}

Select-Object : You cannot call a method on a null-valued expression.
At line:1 char:22
+ get-qaduser  | select <<<<  name, @{n="PrimaryGroup";e={get-qadgroup $_.PrimaryGroupSid.ToString()}}

Name                                                        PrimaryGroup
----                                                        ------------
User1
Select-Object : You cannot call a method on a null-valued expression.
At line:1 char:22
+ get-qaduser  | select <<<<  name, @{n="PrimaryGroup";e={get-qadgroup $_.PrimaryGroupSid.ToString()}}

User2
Select-Object : You cannot call a method on a null-valued expression.
At line:1 char:22

(...)



Also, I can't find the PrimaryGroupSid on my user account:

PS > (Get-QADUser ShayL).PrimaryGroupSid
# gives nothing




PS > Get-QADUser ShayL -IncludeAllProperties | fl pri*

primaryInternationalISDNNumber :
primaryTelexNumber             :
PrimaryGroupId                 : 513

Thanks Andrey, it works if I remove the user part in $_.User.Sid (e.g $_.Sid).

Sean, to get the group name instead of its DN:

Get-QADUser  | select name, @{n="PrimaryGroup";e={(get-qadgroup "$($_.Sid.AccountDomainSid)-$($_.PrimaryGroupId)").name}}