Uncategorized

Topics not-yet categorized.

Enable AD Object Inheritance using Powershell

An easy way to enable AD object inheritance using Powershell. This can be used for enabling (or disabling) inheritance on multiple AD objects. #$users = Get-ADUser -ldapfilter “(objectclass=user)” -searchbase “DC=domain,DC=local” $users = get-aduser JohnDo #test with a single user first ForEach($user in $users) { $dn= [ADSI](“LDAP://” + $user) $acl= $dn.psbase.objectSecurity if ($acl.get_AreAccessRulesProtected()) { $isProtected = …

Enable AD Object Inheritance using Powershell Read More »