This section is for AD FS. For AD DS questions, you can use the following forum: https://social.technet.microsoft.com/Forums/en-US/home?forum=winserverDS.
Set ACL of multiple group in AD via POWERSHELL
Hi everyone
sorry but i'm not very good with Powershell and I need to set the ACL permission for 500 security groups in AD, in particular I should give the rights of; WRITE, READ and DELETE to user TEST1 in all groups that i have exported in TXT file, I cant understand how to set the access rule .. I tried script below but I dont know if its ok
Set-Location AD:\
$groups = Get-Content c:\groups.txt
foreach ($group In $groups) {
$ace = (Get-Acl "AD:$((Get-ADgroup $group).DistinguishedName)").Access
foreach ($acl in $ace) {
$accessrule = New-Object System.Security.AccessControl.ActiceDirectoryAccessRule("domain\test1", "Allow")
$ace.AddAccessRule($accessrule)
Set-Acl -AclObject $ace $group.DistinguishedName -Verbose -Passthru
}
}
thanks
-
Pierre Audonnet - MSFT 10,191 Reputation points Microsoft Employee
2020-05-14T21:41:23.01+00:00