P
Team,
I have made some head way, but what I need to know is how do I call the function "MyADGroups" in my script. not sure if the below script is correct, but what it needs to do is check who has access to the parent folder and all the children folders only, if its inherited I do not want to know, which the script does :). but if it is a Group it needs to expand the group and show me the users only.
I have done a function but I am not sure if it is correct and it will output the data I need.
$exclude = @(
'CREATOR OWNER'
'NT AUTHORITY\SYSTEM'
'BUILTIN\Administrators'
'HTBPLC\Domain Admins'
)
Function Get-MYADGroups($GroupsAD){
Return Get-ADGroupMember -Identity $GroupsAD -Recursive | Where {objectClass -eq "User"}
}
# Get-ADGroupMember -Identity -Recursive | Get-ADUser -Property DisplayName | Select Name,ObjectClass,DisplayName?
$credentials = Get-Credential
Get-ADUser -Credential $credentials -Filter * -Properties DisplayName,EmailAddress,memberof,DistinguishedName,Enabled | % {
$RootPath = "\\XYZ.net\users\GP\DEPT\IT\"
$folders = [array](Get-Item -Path $RootPath)
$folders += Get-ChildItem -Path $RootPath -Recurse -Directory
$acls = foreach ($Folder in $Folders){
get-acl $Folder.fullname |
Select-Object -ExpandProperty Access |
Where-Object {
-not $_.IsInherited -and
$exclude -notcontains $_.IdentityReference
} |
Select-Object -Property *,@{
'Name' = 'Folder'
'Expression' = {
$Folder.FullName
}}
}}
$acls | Export-Csv -NoTypeInformation -Path C:\NTFS\DEPARTMENTS1.csv
@DustinB3403 @dafyre can you maybe help me out on this one, should be a quick fix, just need to know if I am on the right tracks.
Thanks
