AD Delegation specific rights

Welcome Forums General PowerShell Q&A AD Delegation specific rights

  • This topic has 1 reply, 2 voices, and was last updated 12 months ago by
Viewing 1 reply thread
  • Author
    • #165181
      Topics: 11
      Replies: 23
      Points: 162
      Rank: Participant

      I’m looking for the commands to control AD delegation via a powershell script which I can find a few examples on how to set full rights using special functions or set-acl to an OU as an example but nothing on how to set specific rights.  There is not a lot of good documentation or information on how to do this that I can find.

      Here are the rights I need to add to an assortment (roughly 100) of OU locations:

      Reset password
      Read/Write lockouttime
      Read/Write pwdlastset
      Read/Write UserAccountcontrol
      Write Account Restrictions
      Read MemberOf

      I have the foreach written with the OU’s but do not know how to just set the above specific rights for a AD group.


      Please help or anything you can point me to for assistance would be great.

    • #165184
      Topics: 5
      Replies: 2368
      Points: 5,987
      Helping Hand
      Rank: Community MVP
Viewing 1 reply thread
  • The topic ‘AD Delegation specific rights’ is closed to new replies.