11/17/2023 0 Comments Active directory ou permissions report![]() ![]() From that we can use the base type to get the names associated with our type. The BaseType is System.Enum, and the FullName is. So the important things here are the BaseType and FullName properties. We'll want the full name, which we can get like this: $()|Format-List GetType() method on the property to see that it is the type, but that's not sufficient to get what we want. ![]() Let's look at what that property's type is to see if we can get a list of what it considers to be valid values. Here's what you can do to figure that bit out:įrom what you have it looks like the ActiveDirectoryRights property is what's going to tell you what rights the given rule is affecting. ![]() So here's the thing, the PowerShell ACL is only going to show you some of the things in that list. The only thing Ive been able to extract out of that list is the value itself and im not even sure which item if any of these might contain the items/values I want. Then single out one of the entries: AD:\> $acl.Audit I get to that Auditing page by doing this:ĪD:\> $acl = get-acl 'DC=domain,DC=company,DC=com' -Audit I want to list those items and their values via Powershell. On that page you will see the Principal, Type, and Applies To fields at the top and on the bottom section, the Permissions and Properties being audited, checked or unchecked. I am trying to get a report out of Powershell and AD that will show me the list of items on this property page from Active Directory –įrom ADUC, right click your Root Domain OU -> properties->Security tab->Advanced->Auditing-> Select/Open one of the auditing entries. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |