jflyoo/Modify-ADObject.md

Last active September 3, 2022 13:54

Star () You must be signed in to star a gist
Fork () You must be signed in to fork a gist

Learn more about clone URLs
Clone this repository at <script src="https://gist.github.com/jflyoo/0bc52ec722eb41ed90c0b882c507c7a7.js"></script>
Save jflyoo/0bc52ec722eb41ed90c0b882c507c7a7 to your computer and use it in GitHub Desktop.

Powershell Active Directory Management

Raw

To delegate a principal (group or user) Full Control of an AD object from Powershell. Assume the domain is test.local Assume the name of the group to be delegated Full Control is Some Group

$ou="AD:\OU=Computers,DC=test,DC=local"
$group = Get-ADGroup "Some Group"
$sid = new-object system.security.principal.securityidentifier $group.sid
$acl= get-acl $ou
$ace= new-object system.directoryservices.activedirectoryaccessrule $sid,"GenericAll",Allow"
$acl.addaccessrule($ace)
set-acl -aclobject $acl $ou

Source https://docs.microsoft.com/en-us/answers/questions/48065/add-delegation-activedirectory-powershell-permissi.html

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment