https://github.com/santisq/get-effectiveaccess

https://github.com/santisq/get-effectiveaccess

active-directory powershell

Last synced: 25 days ago
JSON representation

• Host: GitHub
• URL: https://github.com/santisq/get-effectiveaccess
• Owner: santisq
• Created: 2020-12-11T14:09:14.000Z (about 4 years ago)
• Default Branch: main
• Last Pushed: 2022-09-15T17:46:23.000Z (over 2 years ago)
• Last Synced: 2023-03-12T16:21:32.665Z (almost 2 years ago)
• Topics: active-directory, powershell
• Language: PowerShell
• Homepage:
• Size: 263 KB
• Stars: 3
• Watchers: 2
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
# Get-EffectiveAccess

## Description

PowerShell function that tries to give a friendly translation of [`Get-Acl`](https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.security/get-acl?view=powershell-7.2) into human readable data. The function is designed exclusively for Active Directory, and requires the [__ActiveDirectory Module__](https://docs.microsoft.com/en-us/powershell/module/activedirectory/?view=windowsserver2022-ps).

## Examples

- Get the _Effective Access_ of the Organizational Unit named `ExampleOU`:

```powershell

Get-ADOrganizationalUnit -Filter "Name -eq 'ExampleOU'" |

    Get-EffectiveAccess | Out-GridView

```

- Same as above but using the OU's `DistinguishedName` attribute:

```powershell

Get-EffectiveAccess -Identity 'OU=ExampleOU,DC=domainName,DC=com' | Out-GridView

```

- Get the _Effective Access_ of the Organizational Unit named `ExampleOU` on a Trusted Domain:

```sh

Get-ADOrganizationalUnit -Filter "Name -eq 'ExampleOU'" -Server trustedDomain |

    Get-EffectiveAccess -Server trustedDomain | Out-GridView

```

- Store the _Effective Access_ of the group named `exampleGroup` in a variable:

```powershell

$effectiveAccess = Get-ADGroup exampleGroup | Get-EffectiveAccess

```

- Get the _Effective Access_ of the first 10 OUs found in the Domain:

```powershell

Get-ADOrganizationalUnit -Filter * | Select -First 10 |

    Get-EffectiveAccess | Out-GridView

```

## Sample output with `Out-GridView`

![exampleoutput](/Screenshot/effectiveAccess.png?raw=true)

## Requirements

- PowerShell v5.1+

- ActiveDirectory PS Module