TestimoX

API Reference

Class

GpoAclMapper

Edit on GitHub
Namespace ADPlayground.Gpo
Assembly ADPlayground
Source ADPlayground/Gpo/GpoAclMapper.cs:25
Modifiers static

Maps raw GPO ACLs (DirectoryEntry security descriptor) to high-level permission entries. Aggregates rights per SID and computes the closest GPMC-like permission label.

Inheritance

  • Object
  • GpoAclMapper

Methods

public static IReadOnlyList<GpoAclEntry> Map(DirectoryEntry gpo) #
ADPlayground/Gpo/GpoAclMapper.cs:25
Returns: IReadOnlyList<GpoAclEntry>

Aggregates the ACL of a GPO container into permission entries per SID.

Parameters

gpo System.DirectoryServices.DirectoryEntry requiredposition: 0
DirectoryEntry pointing to a groupPolicyContainer object.

Returns

List of permission entries including Allow/Deny and computed rights.