TestimoX

API Reference

Class

View (DirectoryAclInventoryService)

Namespace ADPlayground.Acl.DirectoryAclInventoryService
Assembly ADPlayground
Modifiers sealed

ACL posture inventory view for a domain.

Inheritance

  • Object
  • View

Constructors

Properties

public String DomainName { get; set; } #

Domain name evaluated.

public Boolean CollectionSucceeded { get; set; } #

True when collection succeeded.

public String CollectionError { get; set; } #

Collection error text when CollectionSucceeded is false.

public Boolean DomainSidResolved { get; set; } #

True when domain SID was resolved.

public String DomainSidResolutionWarning { get; set; } #

Optional domain SID resolution warning.

public Int32 MaxObjects { get; set; } #

Max object cap used during collection.

public Int32 MaxFindings { get; set; } #

Max finding cap used during collection lists.

public Boolean IncludeInherited { get; set; } #

Whether inherited ACEs were included in analysis.

public Boolean IncludePrivilegedTrustees { get; set; } #

Whether privileged trustees were included in exception outputs.

public Boolean ExcludeDefaultSchemaDelegations { get; set; } #

Whether default schema ACEs were excluded from exception outputs.

public Int32 ObjectsScanned { get; set; } #

Object count scanned.

public Int32 ExplicitAceCount { get; set; } #

Total explicit ACE count observed.

public Int32 NonCanonicalCount { get; set; } #

Count of objects with non-canonical ACLs.

public Int32 InheritanceDisabledCount { get; set; } #

Count of objects with inheritance disabled.

public Int32 NonAdminOwnerCount { get; set; } #

Count of objects owned by non-privileged principals.

public Int32 UnknownTrusteeCount { get; set; } #

Unknown trustee finding count.

public Int32 DelegationExceptionCount { get; set; } #

Delegation exception finding count.

public IReadOnlyList<ObjectRow> Objects { get; set; } #

All scanned object rows.

public IReadOnlyList<ObjectRow> NonCanonicalObjects { get; set; } #

Objects with non-canonical ACLs.

public IReadOnlyList<ObjectRow> InheritanceDisabledObjects { get; set; } #

Objects with inheritance disabled.

public IReadOnlyList<ObjectRow> NonAdminOwners { get; set; } #

Objects with non-admin owners.

public IReadOnlyList<UnknownTrusteeRow> UnknownTrustees { get; set; } #

Unknown trustee ACE rows.

public IReadOnlyList<DelegationExceptionRow> DelegationExceptions { get; set; } #

Delegation exception rows.

public IReadOnlyList<TrusteeSummaryRow> TrusteeIndex { get; set; } #

Delegation exceptions grouped by trustee.