We help IT Professionals succeed at work.

get-acl for AD securtiy group permissions

pma111
pma111 asked
on
78 Views
1 Endorsement
Last Modified: 2019-02-14
what would the correct get-acl syntax be for getting the ACL on who can manage an AD security group. I've only used get-acl for folder permissions, e.g. get-acl \\server\share - But I have read you can use it for checking permissions on AD objects to, so knowing the correct format for that would be useful to check for delegations etc.
Comment
Watch Question

CERTIFIED EXPERT
Most Valuable Expert 2019
Most Valuable Expert 2018
Commented:
This one is on us!
(Get your first solution completely free - no credit card required)
UNLOCK SOLUTION
Michael B. SmithManaging Consultant
CERTIFIED EXPERT

Commented:
oBdA is accurate enough.

I would suggest using dsacls.exe. It is uniquely designed for returning Directory Services ACLs.
Unlock the solution to this question.
Join our community and discover your potential

Experts Exchange is the only place where you can interact directly with leading experts in the technology field. Become a member today and access the collective knowledge of thousands of technology experts.

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.