Skip to content

Latest commit

 

History

History
50 lines (32 loc) · 1.55 KB

README.md

File metadata and controls

50 lines (32 loc) · 1.55 KB
Raw

Get-EffectiveAccess

Description

PowerShell function that tries to give a friendly translation of Get-Acl into human readable data. The function is designed exclusively for Active Directory, and requires the ActiveDirectory Module.

Examples

  • Get the Effective Access of the Organizational Unit named ExampleOU:
Get-ADOrganizationalUnit -Filter "Name -eq 'ExampleOU'" |
    Get-EffectiveAccess | Out-GridView
  • Same as above but using the OU's DistinguishedName attribute:
Get-EffectiveAccess -Identity 'OU=ExampleOU,DC=domainName,DC=com' | Out-GridView
  • Get the Effective Access of the Organizational Unit named ExampleOU on a Trusted Domain:
Get-ADOrganizationalUnit -Filter "Name -eq 'ExampleOU'" -Server trustedDomain |
    Get-EffectiveAccess -Server trustedDomain | Out-GridView
  • Store the Effective Access of the group named exampleGroup in a variable:
$effectiveAccess = Get-ADGroup exampleGroup | Get-EffectiveAccess
  • Get the Effective Access of the first 10 OUs found in the Domain:
Get-ADOrganizationalUnit -Filter * | Select -First 10 |
    Get-EffectiveAccess | Out-GridView

Sample output with Out-GridView

exampleoutput

Requirements

  • PowerShell v5.1+
  • ActiveDirectory PS Module