API Reference
Class
GpoDelegationAnalyzer
Convenience analyzer for GPO delegation breadth and non-admin exposure. Provides filtered views to avoid duplicating logic in callers.
Inheritance
- Object
- GpoDelegationAnalyzer
Methods
public static GpoDelegationView GetEveryoneApplyView(String domainName) #Returns:
GpoDelegationViewReturns a typed view of GPOs where Everyone has Apply Group Policy permission.
Parameters
- domainName System.String
- DNS domain name.
public static IReadOnlyList<GpoAclExposureRecord> GetIndirectGroupWriteRecords(String domainName) #Returns:
IReadOnlyList<GpoAclExposureRecord>Returns non-admin write records where the identity is a group (indirect exposure).
Parameters
- domainName System.String
- DNS domain name.
public static GpoDelegationView GetIndirectGroupWriteView(String domainName) #Returns:
GpoDelegationViewReturns a typed view of group-based non-admin write records.
Parameters
- domainName System.String
public static Int32 GetNonAdminWriteCount(String domainName) #Returns:
Int32Counts non-admin write records.
Parameters
- domainName System.String
- DNS domain name.
public static IReadOnlyList<GpoAclExposureRecord> GetNonAdminWriteRecords(String domainName) #Returns:
IReadOnlyList<GpoAclExposureRecord>Returns GPO ACL exposure records where non-privileged identities have write permissions.
Parameters
- domainName System.String
- DNS domain name.
public static GpoDelegationView GetNonAdminWriteView(String domainName) #Returns:
GpoDelegationViewReturns a typed view of non-admin write records.
Parameters
- domainName System.String