Get-AdsOrphanAce

NAME Get-AdsOrphanAce



SYNOPSIS

Returns list of all access rules that have an unresolveable identity.





SYNTAX

Get-AdsOrphanAce [-Path] <String[]> [[-ExcludeDomainSID] <String[]>] [[-IncludeDomainSID] <String[]>] [[-Server]

<String>] [[-Credential] <PSCredential>] [-EnableException] [<CommonParameters>]





DESCRIPTION

Returns list of all access rules that have an unresolveable identity.

This is aimed at identifying and help remediating orphaned SIDs in active directory.





PARAMETERS

-Path <String[]>

The full distinguished name to the object to scan.



Required? true

Position? 1

Default value

Accept pipeline input? true (ByValue)

Accept wildcard characters? false



-ExcludeDomainSID <String[]>

SIDs from the specified domain SIDs will be ignored.

Use this to safely handle one-way trust where ID resolution is impossible for some IDs.



Required? false

Position? 2

Default value

Accept pipeline input? false

Accept wildcard characters? false



-IncludeDomainSID <String[]>

If specified, only unresolved identities from the specified SIDs will be listed.

Use this to safely target only rules from your owned domains in the targeted domain.



Required? false

Position? 3

Default value

Accept pipeline input? false

Accept wildcard characters? false



-Server <String>

The server / domain to connect to.



Required? false

Position? 4

Default value

Accept pipeline input? false

Accept wildcard characters? false



-Credential <PSCredential>

The credentials to use for AD operations.



Required? false

Position? 5

Default value

Accept pipeline input? false

Accept wildcard characters? false



-EnableException [<SwitchParameter>]

This parameters disables user-friendly warnings and enables the throwing of exceptions.

This is less user friendly, but allows catching exceptions in calling scripts.



Required? false

Position? named

Default value False

Accept pipeline input? false

Accept wildcard characters? false



<CommonParameters>

This cmdlet supports the common parameters: Verbose, Debug,

ErrorAction, ErrorVariable, WarningAction, WarningVariable,

OutBuffer, PipelineVariable, and OutVariable. For more information, see

about_CommonParameters (https:/go.microsoft.com/fwlink/?LinkID=113216).



INPUTS



OUTPUTS



-------------------------- EXAMPLE 1 --------------------------



PS C:\\>Get-ADObject -LDAPFillter '(objectCategory=*)' | Get-AdsOrphanAce



Scans all objects in the current domain for orphaned access rules.











RELATED LINKS