API Reference
GpoAclFinding
Represents a finding of non-admin write access on a GPO.
Inheritance
- ValueType
- GpoAclFinding
Constructors
public GpoAclFinding(String gpoName, String identity, String sid, ActiveDirectoryRights rights, IdentityType identityType, Boolean isInherited, Boolean isApplyGroupPolicy) #Initializes a new instance of the GpoAclFinding struct.
Parameters
- gpoName System.String
- GPO display name.
- identity System.String
- Resolved identity (DN or SID).
- sid System.String
- SID with write rights.
- rights System.DirectoryServices.ActiveDirectoryRights
- Granted rights.
- identityType ADPlayground.Identity.IdentityType
- Type of account.
- isInherited System.Boolean
- Indicates whether the ACE is inherited.
- isApplyGroupPolicy System.Boolean
- True when the principal also has the Apply Group Policy right on the GPO link scope.
public GpoAclFinding(String gpoName, String identity, String sid, ActiveDirectoryRights rights, IdentityType identityType, Boolean isInherited, Boolean isApplyGroupPolicy, Nullable<Guid> objectTypeGuid, String objectTypeName) #Initializes a new instance with extended-right/object-type context.
Parameters
- gpoName System.String
- identity System.String
- sid System.String
- rights System.DirectoryServices.ActiveDirectoryRights
- identityType ADPlayground.Identity.IdentityType
- isInherited System.Boolean
- isApplyGroupPolicy System.Boolean
- objectTypeGuid System.Nullable{System.Guid}
- objectTypeName System.String
Inherited Methods
Properties
public String Identity { get; } #Gets the identity SID granted access.
public String Sid { get; } #Gets the SID that was granted access.
public ActiveDirectoryRights Rights { get; } #Gets the granted rights.
public IdentityType IdentityType { get; } #Gets the type of account.
public Boolean IsInherited { get; } #Gets a value indicating whether the ACE is inherited.
public Boolean IsApplyGroupPolicy { get; } #True when the ACE grants the "Apply Group Policy" extended right.
public Nullable<Guid> ObjectTypeGuid { get; } #When present, indicates the objectType GUID the ACE targets (schema attribute/extended right).
public String ObjectTypeName { get; } #Resolved friendly name for ObjectTypeGuid from schema/extended rights.
public String GpoDistinguishedName { get; set; } #GPO distinguished name.
public String OwnerSid { get; set; } #Owner SID of the GPO object.
public String OwnerName { get; set; } #Owner friendly name of the GPO object.
public Boolean OwnerTrusted { get; set; } #True when the owner is a trusted/expected GPO owner (e.g., Domain Admins, GPCO, BUILTIN\Administrators).