Link to home
Start Free TrialLog in
Avatar of Pau Lo
Pau Lo

asked on

get-acl for AD securtiy group permissions

what would the correct get-acl syntax be for getting the ACL on who can manage an AD security group. I've only used get-acl for folder permissions, e.g. get-acl \\server\share - But I have read you can use it for checking permissions on AD objects to, so knowing the correct format for that would be useful to check for delegations etc.
Avatar of oBdA

Link to home
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
oBdA is accurate enough.

I would suggest using dsacls.exe. It is uniquely designed for returning Directory Services ACLs.