[Script of Nov.14] Checking For Protected ACLs in Active Directory (PowerShell)

  • Article

Script Download: 21766.zip
https://gallery.technet.microsoft.com/scriptcenter/Checking-For-Protected-ddfaddbf

This script demo shows how to get protected ACL from a specified base scope.

Exchange Server setup grants permissions to various groups at various places in the domain and configuration contexts of Active Directory. Since Exchange relies on these permissions in order for everything to work properly, from time to time we see cases where something is not working, and we eventually track it down to the fact that an object has been set to NOT inherit permissions from its parent. This is called a protected ACL, because it is protected from inheriting permissions from the parent. 

image image
image

You can find more All-In-One Script Framework script samples at https://aka.ms/onescriptingallery