API Reference
Class
GpoPermissionReporter
Provides methods for reporting detailed ACL information for Group Policy Objects.
Inheritance
- Object
- GpoPermissionReporter
Methods
GetAces 2 overloads
public static List<GpoAceInfo> GetAces(String gpoDistinguishedName) #Returns:
List<GpoAceInfo>Retrieves ACE details for the specified GPO distinguished name.
Parameters
- gpoDistinguishedName System.String
public static List<GpoAceInfo> GetAces(Guid gpoId) #Returns:
List<GpoAceInfo>Retrieves ACE details for a GPO by GUID.
Parameters
- gpoId System.Guid
public static IEnumerable<GpoAceInfo> GetModifyDeleteAces(IEnumerable<GpoAceInfo> aces) #Returns:
IEnumerable<GpoAceInfo>Filters ACEs granting modify or delete permissions.
Parameters
- aces System.Collections.Generic.IEnumerable{ADPlayground.Gpo.GpoPermissionReporter.GpoAceInfo}
GetModifyDeleteRecommendations 4 overloads
public static IEnumerable<String> GetModifyDeleteRecommendations(IEnumerable<GpoAceInfo> aces, String gpoName) #Returns:
IEnumerable<String>Generates remediation recommendations for ACEs with modify or delete rights.
Parameters
- aces System.Collections.Generic.IEnumerable{ADPlayground.Gpo.GpoPermissionReporter.GpoAceInfo}
- Collection of ACEs.
- gpoName System.String
- Display name or distinguished name of the GPO.
Returns
Recommendations describing risky permissions.
public static IEnumerable<String> GetModifyDeleteRecommendations(String sddl, String gpoName) #Returns:
IEnumerable<String>Convenience overload that parses an SDDL string.
Parameters
- sddl System.String
- Security descriptor for the GPO.
- gpoName System.String
- Display name or distinguished name of the GPO.
public static IEnumerable<String> GetModifyDeleteRecommendations(String gpoDistinguishedName) #Returns:
IEnumerable<String>Retrieves modify/delete recommendations for a specific GPO.
Parameters
- gpoDistinguishedName System.String
- Distinguished name of the GPO.
public static IEnumerable<String> GetModifyDeleteRecommendations(Guid gpoId) #Returns:
IEnumerable<String>Retrieves modify/delete recommendations for a GPO by GUID.
Parameters
- gpoId System.Guid
- GPO GUID.
public static GpoModifyDeleteSummary GetSummary(String domainName) #Returns:
GpoModifyDeleteSummaryGets a summary of modify/delete ACE counts for a domain.
Parameters
- domainName System.String
- Domain name to analyze.
Returns
Summary with total modify/delete ACE count.
public static List<GpoAceInfo> ParseAces(String sddl) #Returns:
List<GpoAceInfo>Parses ACEs from an SDDL string.
Parameters
- sddl System.String
public static Void ReportDomain(String domainName) #Returns:
VoidReports permissions for all GPOs in the specified domain.
Parameters
- domainName System.String