You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I am using this module with great success, it is a tremendous help!
There is a hickup I ran into: When I want to see the ACL set on a user object, I get an error because the DN of the User contains a komma.
e.g. 'CN=Doe, John,OU=bar,OU=foo,DC=kmk,DC=intern'
Get-Acl : The object name has bad syntax
At C:\Program Files\WindowsPowerShell\Modules\cActiveDirectorySecurity\cActiveDirectorySecurity.psm1:268 char:29
+ ... $Permissions = (Get-Acl -Path $Identity.DistinguishedName).Access
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Providing an ObjectGUID or piping an Object from Get-AdUser does not help, I still get the same error.
Looks like there need to be some escaping of the komma, but I don't know how you would go about this.
Cheers!
The text was updated successfully, but these errors were encountered:
Hi Martin. Glad you are finding the module useful. This is a strange one as I thought it would have been something I would have tested at the time as it is a relatively common naming convention (for displayName if not always CN). It appears to be a bug introduced in either Get-Acl or ActiveDirectory (1.0.1.0), rather than in the module itself and appears to behave differently on different versions of Windows and PowerShell. For me it works from PowerShell Core (7.2.5) on Windows 10 20H2; but not from PowerShell 5.1 on the same machine. It does however work from PowerShell 5.1 on an old Windows 2012 R2 machine. Would the PowerShell Core option work for you - as don't know if I am going to have time to investigate a workaround anytime soon?
Hello,
I am using this module with great success, it is a tremendous help!
There is a hickup I ran into: When I want to see the ACL set on a user object, I get an error because the DN of the User contains a komma.
e.g. 'CN=Doe, John,OU=bar,OU=foo,DC=kmk,DC=intern'
Providing an ObjectGUID or piping an Object from Get-AdUser does not help, I still get the same error.
Looks like there need to be some escaping of the komma, but I don't know how you would go about this.
Cheers!
The text was updated successfully, but these errors were encountered: