rayterrill.com

A place to share technical learnings, etc.

View My GitHub Profile

aws | jekyll | github | apigateway | serverless | ad | powershell | windows | webdev | nodejs | terraform | consul | nomad | jenkins | traefik | azuread |

3 January 2019

Auditing AD Permissions for an OU and Group

Like many people, we have an AD implementation that has undergone a number of refactorings over the years, resulting in permissions delegated and applied at various levels. Troubleshooting things like what permissions a user or group has access to always seems like a pain - the AD GUI it not great at showing a quick summary of the discrete permissions for a particular account.

I put together a quick PowerShell script that takes an OU and a user/group as parameters, and shows the permissions applied to that user/group on that particular OU. Hopefully someone else will find it useful!

tags: ad - powershell - windows