PrincipalRecord (LapsWindowsReadPermissionScanner)

Namespace ADPlayground.Computers.LapsWindowsReadPermissionScanner

Assembly ADPlayground

Modifiers sealed

Principal with effective read access to Windows/DSRM LAPS attributes on sampled computers.

Inheritance

public PrincipalRecord() #

public String Sid { get; set; } #

Trustee SID string.

public String Identity { get; set; } #

Resolved display name/account for the trustee.

public Int32 AffectedComputers { get; set; } #

Number of computer objects where access was observed.

public List<String> Examples { get; } #

Example computer distinguished names (up to five) where access was observed.

public Boolean WindowsLaps { get; set; } #

Family flags indicating which attribute families were observed.

public Boolean DsrmLaps { get; set; } #

True when the principal was observed to have access to DSRM LAPS attributes (msLAPS-EncryptedDSRMPassword/msLAPS-DSRMPasswordExpirationTime).