Pau Lo

Senior Systems Engineer

Albert Widjaja

<div>
oBdA is accurate enough.<br />
<br />
I would suggest using dsacls.exe. It is uniquely designed for returning Directory Services ACLs.
</div>


<div>
<div class="content wysiwyg-content">
what would the correct get-acl syntax be for getting the ACL on who can manage an AD security group. I've only used get-acl for folder permissions, e.g. get-acl \\server\share - But I have read you can use it for checking permissions on AD objects to, so knowing the correct format for that would be useful to check for delegations etc.
</div>
</div>


what would the correct get-acl syntax be for getting the ACL on who can manage an AD security group. I've only used get-acl for folder permissions, e.g. get-acl \\server\share - But I have read you can use it for checking permissions on AD objects to, so knowing the correct format for that would be useful to check for delegations etc.

get-acl for AD securtiy group permissions

Windows PowerShell is a task automation and configuration management framework from Microsoft, consisting of a command-line shell and associated scripting language built on the .NET Framework. PowerShell provides full access to the Component Object Model (COM) and Windows Management Instrumentation (WMI), enabling administrators to perform administrative tasks on both local and remote Windows systems as well as WS-Management and Common Information Model (CIM) enabling management of remote Linux systems and network devices.