API Reference
Class
GpoAclUpdater
Provides update operations for the ACL (DACL + owner) of a GPO groupPolicyContainer object.
Inheritance
- Object
- GpoAclUpdater
Methods
public static Boolean AddPermission(String domainName, Guid gpoId, String identity, GpoPermissionRight rights) #Returns:
BooleanAdds (ensures) a permission entry for the specified identity on the target GPO.
Parameters
- domainName System.String
- gpoId System.Guid
- identity System.String
- rights ADPlayground.Gpo.GpoPermissionRight
public static Boolean RemovePermission(String domainName, Guid gpoId, String identity) #Returns:
BooleanRemoves all explicit ACEs for the specified identity from the target GPO.
Parameters
- domainName System.String
- gpoId System.Guid
- identity System.String
public static Boolean RestoreDefault(String domainName, Guid gpoId) #Returns:
BooleanRestores a baseline/default ACL on the specified GPO (Domain Admins, Enterprise Admins, SYSTEM, Authenticated Users).
Parameters
- domainName System.String
- gpoId System.Guid
public static Boolean SetPermission(String domainName, Guid gpoId, String identity, GpoPermissionRight rights) #Returns:
BooleanSets (replaces) the effective permission level for a single identity.
Parameters
- domainName System.String
- gpoId System.Guid
- identity System.String
- rights ADPlayground.Gpo.GpoPermissionRight
public static Boolean SetPermissions(String domainName, Guid gpoId, IEnumerable<GpoAclEntry> entries) #Returns:
BooleanApplies desired ACL entries to a GPO (best-effort, applies entries grouped by SID).
Parameters
- domainName System.String
- gpoId System.Guid
- entries System.Collections.Generic.IEnumerable{ADPlayground.Gpo.GpoAclEntry}