API Reference
GpoAclFinding
Represents a finding of non-admin write access on a GPO.
Inheritance
- ValueType
- GpoAclFinding
Usage
This type appears in these public API surfaces even when no hand-authored example is attached directly to the page.
Returned or exposed by
- Method GpoAclAnalyzer.AnalyzeDomain
- Method GpoAclAnalyzer.AnalyzeDomain
- Method GpoAclAnalyzer.AnalyzeForest
Accepted by parameters
Constructors
public GpoAclFinding(String gpoName, String identity, String sid, ActiveDirectoryRights rights, IdentityType identityType, Boolean isInherited, Boolean isApplyGroupPolicy) #Initializes a new instance of the GpoAclFinding struct.
Parameters
- gpoName System.String
- GPO display name.
- identity System.String
- Resolved identity (DN or SID).
- sid System.String
- SID with write rights.
- rights System.DirectoryServices.ActiveDirectoryRights
- Granted rights.
- identityType ADPlayground.Identity.IdentityType
- Type of account.
- isInherited System.Boolean
- Indicates whether the ACE is inherited.
- isApplyGroupPolicy System.Boolean
- True when the principal also has the Apply Group Policy right on the GPO link scope.
public GpoAclFinding(String gpoName, String identity, String sid, ActiveDirectoryRights rights, IdentityType identityType, Boolean isInherited, Boolean isApplyGroupPolicy, Nullable<Guid> objectTypeGuid, String objectTypeName) #Initializes a new instance with extended-right/object-type context.
Parameters
- gpoName System.String
- identity System.String
- sid System.String
- rights System.DirectoryServices.ActiveDirectoryRights
- identityType ADPlayground.Identity.IdentityType
- isInherited System.Boolean
- isApplyGroupPolicy System.Boolean
- objectTypeGuid System.Nullable{System.Guid}
- objectTypeName System.String
Inherited Methods
public override Boolean Equals(Object obj) #BooleanParameters
- obj Object
Properties
public String Identity { get; } #Gets the identity SID granted access.
public String Sid { get; } #Gets the SID that was granted access.
public ActiveDirectoryRights Rights { get; } #Gets the granted rights.
public IdentityType IdentityType { get; } #Gets the type of account.
public Boolean IsInherited { get; } #Gets a value indicating whether the ACE is inherited.
public Boolean IsApplyGroupPolicy { get; } #True when the ACE grants the "Apply Group Policy" extended right.
public Nullable<Guid> ObjectTypeGuid { get; } #When present, indicates the objectType GUID the ACE targets (schema attribute/extended right).
public String ObjectTypeName { get; } #Resolved friendly name for ObjectTypeGuid from schema/extended rights.
public String GpoDistinguishedName { get; set; } #GPO distinguished name.
public String OwnerSid { get; set; } #Owner SID of the GPO object.
public String OwnerName { get; set; } #Owner friendly name of the GPO object.
public Boolean OwnerTrusted { get; set; } #True when the owner is a trusted/expected GPO owner (e.g., Domain Admins, GPCO, BUILTIN\Administrators).