API Reference
Class
GpoAclExposureSnapshot
Provides a reusable view of GPO ACL assignments for security analysis.
Inheritance
- Object
- GpoAclExposureSnapshot
Usage
This type appears in these public API surfaces even when no hand-authored example is attached directly to the page.
Returned or exposed by
Constructors
public GpoAclExposureSnapshot() #Inherited Methods
public override Boolean Equals(Object obj) #Returns:
BooleanInherited from Object
Parameters
- obj Object
Properties
public String DomainName { get; set; } #Domain name for which the snapshot was collected.
public IReadOnlyList<GpoAclExposureRecord> Findings { get; set; } #All ACL findings discovered on GPOs within the domain.
public IReadOnlyList<GpoAclExposureRecord> AnonymousAssignments { get; set; } #Findings where the ANONYMOUS LOGON SID holds write permissions.
public IReadOnlyList<GpoAclExposureRecord> EveryoneAssignments { get; set; } #Findings where the Everyone well-known SID holds write permissions.
public IReadOnlyList<GpoAclExposureRecord> AuthenticatedUsersAssignments { get; set; } #Findings where Authenticated Users hold write permissions.
public IReadOnlyList<GpoAclExposureRecord> AnonymousApplyAssignments { get; set; } #Findings where ANONYMOUS LOGON is granted the Apply Group Policy extended right.
public IReadOnlyList<GpoAclExposureRecord> EveryoneApplyAssignments { get; set; } #Findings where Everyone is granted the Apply Group Policy extended right.