powershell PowerShell获取AD OU的安全访问权限

Posted 2021-05-22

$SearchBase = "OU=OUNAME,DC=your,DC=domain,DC=com"
$SysManObj = [ADSI]("LDAP://$SearchBase") #get the OU object
$t = $SysManObj.psbase.ObjectSecurity.Access
#at this point $t will contain everything, but you can drill down further to just get those devices/users that have permissions to the ou
$identities = $t | Select-Object IdentityReference
$identities | clip