Compare commits
No commits in common. "master" and "a95bd7ba8a8f62f04d2d29af07c0878841cabec9" have entirely different histories.
master
...
a95bd7ba8a
124
ADX/ADX.psm1
124
ADX/ADX.psm1
@ -1,124 +0,0 @@
|
|||||||
|
|
||||||
Import-Module ActiveDirectory
|
|
||||||
|
|
||||||
<#
|
|
||||||
.SYNOPSIS
|
|
||||||
Sync all DC in a Forest
|
|
||||||
.DESCRIOTION
|
|
||||||
Sync all sites and services in a domain
|
|
||||||
.INPUTS
|
|
||||||
No Input needed
|
|
||||||
.OUTPUTS
|
|
||||||
Return a list of last sync elements
|
|
||||||
.EXAMPLE
|
|
||||||
PS> Replicate-ADSitesAndServices
|
|
||||||
Server LastReplicationSuccess
|
|
||||||
------ ----------------------
|
|
||||||
DC01.dev.intra 14.02.2022 09:07:48
|
|
||||||
DC01.dev.intra 14.02.2022 09:07:47
|
|
||||||
DC02.dev.intra 14.02.2022 09:07:53
|
|
||||||
DC02.dev.intra 14.02.2022 09:07:44
|
|
||||||
DC03.dev.intra 14.02.2022 09:07:41
|
|
||||||
DC03.dev.intra 14.02.2022 09:07:56
|
|
||||||
|
|
||||||
#>
|
|
||||||
function Replicate-ADSitesAndServices {
|
|
||||||
(Get-ADDomainController -Filter *).Name | ForEach-Object {
|
|
||||||
repadmin /syscall $_ (Get-ADDomain).DistinguishedName /e /A | Out-Null
|
|
||||||
}
|
|
||||||
Start-Sleep 10;
|
|
||||||
Get-ADReplicationPartnerMetadata -Target "$env:USERDNSDOMAIN" -Scope Domain | Select-Object Server,LastReplicationSuccess
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
function Get-ADObjectTypeGUID{
|
|
||||||
|
|
||||||
param(
|
|
||||||
[Parameter(
|
|
||||||
Mandatory = $true,
|
|
||||||
ParameterSetName="ObjectType",
|
|
||||||
Position = 0,
|
|
||||||
ValueFromPipeline = $true
|
|
||||||
)]
|
|
||||||
[string]$GUID
|
|
||||||
)
|
|
||||||
|
|
||||||
if($Global:adObjectTypeGUID -eq $null){
|
|
||||||
$ObjectTypeGUID = @{}
|
|
||||||
|
|
||||||
$GetADObjectParameter=@{
|
|
||||||
SearchBase=(Get-ADRootDSE).SchemaNamingContext
|
|
||||||
LDAPFilter='(SchemaIDGUID=*)'
|
|
||||||
Properties=@("Name", "SchemaIDGUID")
|
|
||||||
}
|
|
||||||
|
|
||||||
$SchGUID=Get-ADObject @GetADObjectParameter
|
|
||||||
Foreach ($SchemaItem in $SchGUID){
|
|
||||||
$ObjectTypeGUID.Add([GUID]$SchemaItem.SchemaIDGUID,$SchemaItem.Name)
|
|
||||||
}
|
|
||||||
|
|
||||||
$ADObjExtPar=@{
|
|
||||||
SearchBase="CN=Extended-Rights,$((Get-ADRootDSE).ConfigurationNamingContext)"
|
|
||||||
LDAPFilter='(ObjectClass=ControlAccessRight)'
|
|
||||||
Properties=@("Name", "RightsGUID")
|
|
||||||
}
|
|
||||||
|
|
||||||
$SchExtGUID=Get-ADObject @ADObjExtPar
|
|
||||||
ForEach($SchExtItem in $SchExtGUID){
|
|
||||||
$ObjectTypeGUID.Add([GUID]$SchExtItem.RightsGUID,$SchExtItem.Name)
|
|
||||||
}
|
|
||||||
$Global:adObjectTypeGUID=$ObjectTypeGUID
|
|
||||||
}
|
|
||||||
return $Global:adObjectTypeGUID[[GUID]$($GUID)]
|
|
||||||
|
|
||||||
}
|
|
||||||
|
|
||||||
function Get-ADObjectPermission{
|
|
||||||
param(
|
|
||||||
[Parameter(
|
|
||||||
Mandatory = $true,
|
|
||||||
ParameterSetName="Identity",
|
|
||||||
Position = 0,
|
|
||||||
ValueFromPipeline = $true
|
|
||||||
)]
|
|
||||||
[string]$Identity,
|
|
||||||
[string]$Reference ="*"
|
|
||||||
)
|
|
||||||
(Get-Acl "AD:$($Identity)").access | Where-Object IdentityReference -Like $Reference | ForEach-Object{
|
|
||||||
$object=$_
|
|
||||||
|
|
||||||
switch($object.InheritanceType)
|
|
||||||
{
|
|
||||||
"None" {$object | Add-Member -Force -NotePropertyName InheritanceTypeName -NotePropertyValue "This Object Only"}
|
|
||||||
"All" {$object | Add-Member -Force -NotePropertyName InheritanceTypeName -NotePropertyValue "This object and all descendant objects"}
|
|
||||||
"Descendents" {$object | Add-Member -Force -NotePropertyName InheritanceTypeName -NotePropertyValue "All descendant objects"}
|
|
||||||
"Children" {$object | Add-Member -Force -NotePropertyName InheritanceTypeName -NotePropertyValue "Only apply this permission to objects and/or containers within this container"}
|
|
||||||
"SelfAndChildren" {$object | Add-Member -Force -NotePropertyName InheritanceTypeName -NotePropertyValue "Only apply this permission to objects and/or containers within this container"}
|
|
||||||
}
|
|
||||||
|
|
||||||
switch($object.PropagationFlags )
|
|
||||||
{
|
|
||||||
"None" {$object | Add-Member -Force -NotePropertyName PropagationFlags -NotePropertyValue "no inheritance"}
|
|
||||||
"InheritOnly" {$object | Add-Member -Force -NotePropertyName PropagationFlags -NotePropertyValue "inheritance child items only"}
|
|
||||||
"NoPropagateInherit" {$object | Add-Member -Force -NotePropertyName PropagationFlags -NotePropertyValue "Only Apply this permission to objects and/or containers within this container is selected"}
|
|
||||||
}
|
|
||||||
|
|
||||||
if( $object.ObjectType -eq [GUID]"00000000-0000-0000-0000-000000000000"){
|
|
||||||
$objectTypeName="all properties"
|
|
||||||
}else{
|
|
||||||
$objectTypeName= Get-ADObjectTypeGUID -GUID $object.ObjectType
|
|
||||||
}
|
|
||||||
$object | Add-Member -Force -NotePropertyName ObjectTypeName -NotePropertyValue $objectTypeName
|
|
||||||
|
|
||||||
if( $object.InheritedObjectType -eq [GUID]"00000000-0000-0000-0000-000000000000"){
|
|
||||||
$InheritedObjectType="all objects"
|
|
||||||
}else{
|
|
||||||
$InheritedObjectType= Get-ADObjectTypeGUID -GUID $object.InheritedObjectType
|
|
||||||
}
|
|
||||||
$object | Add-Member -Force -NotePropertyName InheritedObjectTypeName -NotePropertyValue $InheritedObjectType
|
|
||||||
|
|
||||||
Write-Output $object
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
Export-ModuleMember -Function Replicate-ADSitesAndServices,Get-ADObjectPermission
|
|
||||||
@ -1,94 +0,0 @@
|
|||||||
Import-Module ActiveDirectory
|
|
||||||
|
|
||||||
function Get-ADObjectTypeGUID{
|
|
||||||
|
|
||||||
param(
|
|
||||||
[Parameter(
|
|
||||||
Mandatory = $true,
|
|
||||||
ParameterSetName="ObjectType",
|
|
||||||
Position = 0,
|
|
||||||
ValueFromPipeline = $true
|
|
||||||
)]
|
|
||||||
[string]$GUID
|
|
||||||
)
|
|
||||||
|
|
||||||
if($Global:adObjectTypeGUID -eq $null){
|
|
||||||
$ObjectTypeGUID = @{}
|
|
||||||
|
|
||||||
$GetADObjectParameter=@{
|
|
||||||
SearchBase=(Get-ADRootDSE).SchemaNamingContext
|
|
||||||
LDAPFilter='(SchemaIDGUID=*)'
|
|
||||||
Properties=@("Name", "SchemaIDGUID")
|
|
||||||
}
|
|
||||||
|
|
||||||
$SchGUID=Get-ADObject @GetADObjectParameter
|
|
||||||
Foreach ($SchemaItem in $SchGUID){
|
|
||||||
$ObjectTypeGUID.Add([GUID]$SchemaItem.SchemaIDGUID,$SchemaItem.Name)
|
|
||||||
}
|
|
||||||
|
|
||||||
$ADObjExtPar=@{
|
|
||||||
SearchBase="CN=Extended-Rights,$((Get-ADRootDSE).ConfigurationNamingContext)"
|
|
||||||
LDAPFilter='(ObjectClass=ControlAccessRight)'
|
|
||||||
Properties=@("Name", "RightsGUID")
|
|
||||||
}
|
|
||||||
|
|
||||||
$SchExtGUID=Get-ADObject @ADObjExtPar
|
|
||||||
ForEach($SchExtItem in $SchExtGUID){
|
|
||||||
$ObjectTypeGUID.Add([GUID]$SchExtItem.RightsGUID,$SchExtItem.Name)
|
|
||||||
}
|
|
||||||
$Global:adObjectTypeGUID=$ObjectTypeGUID
|
|
||||||
}
|
|
||||||
return $Global:adObjectTypeGUID[[GUID]$($GUID)]
|
|
||||||
|
|
||||||
}
|
|
||||||
|
|
||||||
function Get-ADObjectPermission{
|
|
||||||
param(
|
|
||||||
[Parameter(
|
|
||||||
Mandatory = $true,
|
|
||||||
ParameterSetName="Identity",
|
|
||||||
Position = 0,
|
|
||||||
ValueFromPipeline = $true
|
|
||||||
)]
|
|
||||||
[string]$Identity,
|
|
||||||
[string]$Reference ="*"
|
|
||||||
)
|
|
||||||
(Get-Acl "AD:$($Identity)").access | Where-Object IdentityReference -Like $Reference | ForEach-Object{
|
|
||||||
$object=$_
|
|
||||||
|
|
||||||
switch($object.InheritanceType)
|
|
||||||
{
|
|
||||||
"None" {$object | Add-Member -Force -NotePropertyName InheritanceTypeName -NotePropertyValue "This Object Only"}
|
|
||||||
"All" {$object | Add-Member -Force -NotePropertyName InheritanceTypeName -NotePropertyValue "This object and all descendant objects"}
|
|
||||||
"Descendents" {$object | Add-Member -Force -NotePropertyName InheritanceTypeName -NotePropertyValue "All descendant objects"}
|
|
||||||
"Children" {$object | Add-Member -Force -NotePropertyName InheritanceTypeName -NotePropertyValue "Only apply this permission to objects and/or containers within this container"}
|
|
||||||
"SelfAndChildren" {$object | Add-Member -Force -NotePropertyName InheritanceTypeName -NotePropertyValue "Only apply this permission to objects and/or containers within this container"}
|
|
||||||
}
|
|
||||||
|
|
||||||
switch($object.PropagationFlags )
|
|
||||||
{
|
|
||||||
"None" {$object | Add-Member -Force -NotePropertyName PropagationFlags -NotePropertyValue "no inheritance"}
|
|
||||||
"InheritOnly" {$object | Add-Member -Force -NotePropertyName PropagationFlags -NotePropertyValue "inheritance child items only"}
|
|
||||||
"NoPropagateInherit" {$object | Add-Member -Force -NotePropertyName PropagationFlags -NotePropertyValue "Only Apply this permission to objects and/or containers within this container is selected"}
|
|
||||||
}
|
|
||||||
|
|
||||||
if( $object.ObjectType -eq [GUID]"00000000-0000-0000-0000-000000000000"){
|
|
||||||
$objectTypeName="all properties"
|
|
||||||
}else{
|
|
||||||
$objectTypeName= Get-ADObjectTypeGUID -GUID $object.ObjectType
|
|
||||||
}
|
|
||||||
$object | Add-Member -Force -NotePropertyName ObjectTypeName -NotePropertyValue $objectTypeName
|
|
||||||
|
|
||||||
if( $object.InheritedObjectType -eq [GUID]"00000000-0000-0000-0000-000000000000"){
|
|
||||||
$InheritedObjectType="all objects"
|
|
||||||
}else{
|
|
||||||
$InheritedObjectType= Get-ADObjectTypeGUID -GUID $object.InheritedObjectType
|
|
||||||
}
|
|
||||||
$object | Add-Member -Force -NotePropertyName InheritedObjectTypeName -NotePropertyValue $InheritedObjectType
|
|
||||||
|
|
||||||
Write-Output $object
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
Export-ModuleMember -Function Get-ADObjectPermission
|
|
||||||
@ -1,4 +0,0 @@
|
|||||||
$ModulePath="$($env:windir)\system32\WindowsPowerShell\v1.0\Modules\"
|
|
||||||
Get-ChildItem $PSScriptRoot -Directory | ForEach-Object{
|
|
||||||
Copy-Item -Recurse -Force $_.FullName $ModulePath
|
|
||||||
}
|
|
||||||
Loading…
Reference in New Issue
Block a user