Get-ADXACL

Namespace ADPlayground.PowerShell

Inputs

System.DirectoryServices.ActiveDirectorySecurity System.DirectoryServices.DirectoryEntry System.String

Outputs

ADPlayground.Acl.AclInfo

Retrieves access control entries from an Active Directory security descriptor or entry.

Examples

Authored help example

Example 1: List ACEs on a delegated workstation OU


Get-ADXACL -ADObject 'OU=Workstations,OU=Managed,DC=contoso,DC=com' | Format-Table IdentityReference, ActiveDirectoryRights, AccessControlType, IsInherited -AutoSize

Example 2: Inspect only explicit rules on an AdminSDHolder-protected object


Get-ADXACL -ADObject 'CN=AdminSDHolder,CN=System,DC=contoso,DC=com' | Where-Object { -not $_.IsInherited }

Common Parameters

This command supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable.

For more information, see about_CommonParameters.

Syntax

Get-ADXACL -Security <ActiveDirectorySecurity> [<CommonParameters>]

Parameter set: By Security

Parameters

Security ActiveDirectorySecurity requiredposition: 0pipeline: true (ByValue, ByPropertyName): ActiveDirectorySecurity instance to read.

Outputs

ADPlayground.Acl.AclInfo

Get-ADXACL -Entry <DirectoryEntry> [<CommonParameters>]

Parameter set: By Entry

Parameters

Entry DirectoryEntry requiredposition: 0pipeline: true (ByValue, ByPropertyName): DirectoryEntry object to read.

Outputs

ADPlayground.Acl.AclInfo

Get-ADXACL -ADObject <string> [<CommonParameters>]

Parameter set: By ADObject

Parameters

ADObject string requiredposition: 0pipeline: true (ByValue, ByPropertyName): Distinguished name of the object to read.

Outputs

ADPlayground.Acl.AclInfo