More on Get-Acl with Active Directory

In June I posted about searching Active Directory for principals that have the “Write Members” permission on a Distribution List. I had a follow-up question, from an internal source, about deciphering each Access Control Entry (ACE) returned by Get-Acl against the Active Directory PS drive. I thought I’d convey the same information to the outside…

1

Active Directory Object GUID Conversion Larks!

What fun I have in the hotel of an evening! Gym, meal and then Active Directory object conversion larks and laughs! Here’s my latest evening escapade… Let’s get the GUID of an Active Directory computer object. $b = (Get-ADComputer -Identity “CN=HALOCLI1001,OU=Clients,DC=HALO,DC=NET”).ObjectGUID   Now, convert it to a byte array. $c = $b.ToByteArray(); $c -join “”,…

1