Restore-ADXACLDefault

Namespace ADPlayground.PowerShell

Inputs

System.DirectoryServices.ActiveDirectorySecurity System.DirectoryServices.DirectoryEntry System.String

Restores the default security descriptor on an Active Directory object.

Examples

Authored help example

Example 1: Preview restoring default ACLs on a service-account OU


Restore-ADXACLDefault -ADObject 'OU=Service Accounts,OU=Tier0,DC=contoso,DC=com' -WhatIf

Example 2: Restore default ACLs and remove inherited rules from a test OU


Restore-ADXACLDefault -ADObject 'OU=Delegation-Lab,DC=contoso,DC=com' -RemoveInheritedAccessRules

Common Parameters

This command supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable.

For more information, see about_CommonParameters.

Syntax

Restore-ADXACLDefault -Security <ActiveDirectorySecurity> -DefaultSecurityDescriptor <string> [-RemoveInheritedAccessRules] [<CommonParameters>]

Parameter set: By DefaultSecurityDescriptor + Security

Parameters

Security ActiveDirectorySecurity requiredposition: 0pipeline: true (ByValue, ByPropertyName): ActiveDirectorySecurity instance to reset.
DefaultSecurityDescriptor string requiredposition: 1pipeline: false: Default security descriptor SDDL string.
RemoveInheritedAccessRules SwitchParameter optionalposition: namedpipeline: false: If set, removes inherited access rules.

Restore-ADXACLDefault -Entry <DirectoryEntry> [-RemoveInheritedAccessRules] [<CommonParameters>]

Parameter set: By Entry

Parameters

Entry DirectoryEntry requiredposition: 0pipeline: true (ByValue, ByPropertyName): DirectoryEntry object to reset.
RemoveInheritedAccessRules SwitchParameter optionalposition: namedpipeline: false: If set, removes inherited access rules.

Restore-ADXACLDefault -ADObject <string> [-RemoveInheritedAccessRules] [<CommonParameters>]

Parameter set: By ADObject

Parameters

ADObject string requiredposition: 0pipeline: true (ByValue, ByPropertyName): Distinguished name of the object to reset.
RemoveInheritedAccessRules SwitchParameter optionalposition: namedpipeline: false: If set, removes inherited access rules.