TestimoX

API Reference

Class

GpoAclAnalyzer

Edit on GitHub
Namespace ADPlayground.Gpo
Assembly ADPlayground
Source ADPlayground/Gpo/GpoAclAnalyzer.cs:21

Provides methods to analyze GPO ACLs for non-administrative write access.

Inheritance

  • Object
  • GpoAclAnalyzer

Constructors

public GpoAclAnalyzer(Func<String, IEnumerable<GpoAclFinding>> fetchFindings = null, Func<IEnumerable<String>> enumerateDomains = null) #
ADPlayground/Gpo/GpoAclAnalyzer.cs:21

Initializes a new instance of the GpoAclAnalyzer class.

Parameters

fetchFindings System.Func{System.String,System.Collections.Generic.IEnumerable{ADPlayground.Gpo.GpoAclFinding}} = null optionalposition: 0
Delegate returning ACL findings for a domain.
enumerateDomains System.Func{System.Collections.Generic.IEnumerable{System.String}} = null optionalposition: 1
Delegate returning domain names in the forest.

Methods

public IEnumerable<GpoAclFinding> AnalyzeDomain(String domainName) #
ADPlayground/Gpo/GpoAclAnalyzer.cs:34
Returns: IEnumerable<GpoAclFinding>

Retrieves ACL findings for the specified domain.

Parameters

domainName System.String requiredposition: 0
Target domain name.

Returns

Enumeration of ACL entries.

public IEnumerable<GpoAclFinding> AnalyzeForest() #
Returns: IEnumerable<GpoAclFinding>

Retrieves ACL findings for every domain in the current forest.

Returns

Enumeration of ACL entries.

public Void CheckDomain(String domainName = null) #
ADPlayground/Gpo/GpoAclAnalyzer.cs:54
Returns: Void

Logs warnings for the specified domain.

Parameters

domainName System.String = null optionalposition: 0
Domain name or null for the current domain.
public Void CheckForest() #
ADPlayground/Gpo/GpoAclAnalyzer.cs:70
Returns: Void

Logs warnings for every domain in the forest.