Get-EffectiveAccess

Description

PowerShell function that tries to give a friendly translation of Get-Acl into human readable data. The function is designed exclusively for Active Directory, and requires the ActiveDirectory Module.

Examples

• Get the Effective Access of the Organizational Unit named ExampleOU:

Get-ADOrganizationalUnit -Filter "Name -eq 'ExampleOU'" |
    Get-EffectiveAccess | Out-GridView

• Same as above but using the OU's DistinguishedName attribute:

Get-EffectiveAccess -Identity 'OU=ExampleOU,DC=domainName,DC=com' | Out-GridView

• Get the Effective Access of the Organizational Unit named ExampleOU on a Trusted Domain:

Get-ADOrganizationalUnit -Filter "Name -eq 'ExampleOU'" -Server trustedDomain |
    Get-EffectiveAccess -Server trustedDomain | Out-GridView

• Store the Effective Access of the group named exampleGroup in a variable:

$effectiveAccess = Get-ADGroup exampleGroup | Get-EffectiveAccess

• Get the Effective Access of the first 10 OUs found in the Domain:

Get-ADOrganizationalUnit -Filter * | Select -First 10 |
    Get-EffectiveAccess | Out-GridView

Sample output with Out-GridView

Requirements

• PowerShell v5.1+
• ActiveDirectory PS Module