API Reference
Class
GpoDenyRow
Simple scanner that lists Deny ACEs on GPO containers for awareness (e.g., Deny Apply Group Policy).
Inheritance
- Object
- GpoDenyRow
Constructors
public GpoDenyRow() #Methods
Inherited Methods
Properties
public String DomainName { get; set; } #DNS domain name.
public String GpoDistinguishedName { get; set; } #GPO distinguished name.
public String Sid { get; set; } #Trustee SID on the Deny ACE.
public String DisplayName { get; set; } #Resolved friendly name for Sid.
public String Rights { get; set; } #Raw rights string from the ACE.
public Boolean IsApplyGroupPolicy { get; set; } #True when the Deny ACE targets the Apply Group Policy extended right.
public String Reason { get; set; } #Short classification reason (e.g., "Deny Apply Group Policy" or "Deny write/control").