API Reference
GpoPermissionAdministrativeRow
Represents an assessment of administrative management permissions on a GPO. Intended to mirror GPOZaurr's "GPOPermissionsAdministrative" focus: ensuring Domain Admins and Enterprise Admins retain GpoEditDeleteModifySecurity on every GPO.
Inheritance
- Object
- GpoPermissionAdministrativeRow
Constructors
public GpoPermissionAdministrativeRow() #Inherited Methods
Properties
public String DomainName { get; set; } #Owning DNS domain name.
public String GpoName { get; set; } #GPO display name.
public Guid GpoId { get; set; } #GPO GUID identifier.
public String GpoDistinguishedName { get; set; } #GPO distinguished name.
public DateTime Created { get; set; } #Creation timestamp (UTC).
public DateTime Modified { get; set; } #Last modification timestamp (UTC).
public String DomainAdminsSid { get; set; } #Computed Domain Admins SID for DomainName, when resolvable.
public String EnterpriseAdminsSid { get; set; } #Computed Enterprise Admins SID (forest root), when resolvable.
public Nullable<GpoPermissionRight> DomainAdminsPermission { get; set; } #Permission found for Domain Admins (Allow entry), when present.
public Nullable<GpoPermissionRight> EnterpriseAdminsPermission { get; set; } #Permission found for Enterprise Admins (Allow entry), when present.
public Boolean IsCompliant { get; set; } #True when Domain Admins and Enterprise Admins are present with GpoEditDeleteModifySecurity.
public String Error { get; set; } #Optional error message when the row could not be evaluated.