TestimoX

API Reference

Class

GpoDenyScanner

Edit on GitHub
Namespace ADPlayground.Delegation
Assembly ADPlayground
Source ADPlayground/Delegation/GpoDenyScanner.cs:46
Modifiers static

Scans GPO containers for Deny ACEs (Apply Group Policy or broad write/control) to surface potentially risky or intentional denials that affect policy processing and admin workflows.

Inheritance

  • Object
  • GpoDenyScanner

Methods

public static IReadOnlyList<GpoDenyRow> List(String domainName) #
ADPlayground/Delegation/GpoDenyScanner.cs:46
Returns: IReadOnlyList<GpoDenyRow>

Enumerates Deny ACEs across GPOs in a domain and returns a flat list suitable for reporting.

Parameters

domainName System.String requiredposition: 0