Two updates for the tool in a week? Yes! It is so!
At the behest of my good friend Darryl and one of his customer's needs, I have updated the the AAD Connect Advanced Permissions tool with the following:
- Allow the underscore ("_") character to be used in an OU name path
- Allow CN= to be used as part of the OU filter name path, since some organizations may want to try to scope permissions specifically to CN=Users.
As always, the tool is available on the TechNet Gallery: https://gallery.technet.microsoft.com/AD-Advanced-Permissions-49723f74
To see previous updates about the tool: