API Reference
Class
AdminSdHolder
Helper methods for working with the AdminSDHolder object's access control list.
Inheritance
- Object
- AdminSdHolder
Methods
public static ValueTuple<List<AclEntryInfo>, List<AclEntryInfo>> CompareWithDefault(IEnumerable<AclEntryInfo> current) #Returns:
ValueTuple<List<AclEntryInfo>, List<AclEntryInfo>>Compares a collection of ACEs with the default AdminSDHolder ACL.
Parameters
- current System.Collections.Generic.IEnumerable{ADPlayground.Acl.AclEntryInfo}
- Current ACE collection.
Returns
Lists of missing and additional ACEs.
public static List<AclEntryInfo> GetAces(String domainDistinguishedName, Boolean includeInherited) #Returns:
List<AclEntryInfo>Retrieves ACEs from the AdminSDHolder object.
Parameters
- domainDistinguishedName System.String
- Root domain distinguished name, e.g. DC=contoso,DC=com.
- includeInherited System.Boolean
- Whether to include inherited ACEs.
Returns
List of AclEntryInfo objects.
public static ValueTuple<List<AclEntryInfo>, List<AclEntryInfo>> GetDifferences(String domainDistinguishedName, Boolean includeInherited = false) #Returns:
ValueTuple<List<AclEntryInfo>, List<AclEntryInfo>>Retrieves the AdminSDHolder ACL from the specified domain and compares it with the defaults.
Parameters
- domainDistinguishedName System.String
- Root domain distinguished name.
- includeInherited System.Boolean = false
- Whether to include inherited ACEs.
Returns
Lists of missing and additional ACEs.
public static List<AclEntryInfo> GetExplicitAces(String domainDistinguishedName) #Returns:
List<AclEntryInfo>Retrieves explicit (non-inherited) ACEs from the AdminSDHolder object.
Parameters
- domainDistinguishedName System.String
public static List<AclEntryInfo> GetInheritedAces(String domainDistinguishedName) #Returns:
List<AclEntryInfo>Retrieves inherited ACEs from the AdminSDHolder object.
Parameters
- domainDistinguishedName System.String
public static List<AclEntryInfo> ParseAces(String sddl) #Returns:
List<AclEntryInfo>Parses ACEs from an SDDL string.
Parameters
- sddl System.String
- Security descriptor in SDDL form.
Inherited Methods
Fields
public const String DefaultSddl #Default security descriptor for the AdminSDHolder object as returned by a clean domain.
Value:
O:BAG:SYD:(A;;RPWPCRCCDCLCLORCWOWDSDSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDSW;;;EA)(A;;RPWPCRCCDCLCLORCWOWDSDSW;;;ED)(A;;RPWPCRCCDCLCLORCWOWDSDSW;;;PA)(A;;CCDCLCSWRPWPDTLOSDRCWDWO;;;SY)(A;;CCDCLCSWRPWPDTLOSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOSDRCWDWO;;;DA)(A;;CCDCLCSWRPWPDTLOSDRCWDWO;;;EA)(A;;CCDCLCSWRPWPDTLOSDRCWDWO;;;ED)(A;;CCDCLCSWRPWPDTLOSDRCWDWO;;;PA)(A;;LCRPLORC;;;AU)