Viewing the Permissions of a Group

Viewing the Permissions of a Group

This topic explains how to use the Active Directory module for Windows PowerShell to view the permissions of a group.

Example

The following example demonstrates how to view the permissions of the group ManagedGroups in the Fabrikam.com domain:

Note
You must run the following command from the AD:\> drive, and the drive must be connected to the domain where the group exists. For more information about providers, see about providers (http://go.microsoft.com/fwlink/?LinkId=150334).

Get-ACL (Get-ADGroup ManagedGroups) | fl * -f

Additional information

In addition to the standard Lightweight Directory Access Protocol (LDAP) attributes, you can retrieve the following extended properties of the Get-ADGroup cmdlet by using the -Properties parameter:

• GroupCategory
  
• GroupScope
  
• EmailAddress
  
• Members
  

For a full explanation of the parameters that you can pass to Get-ADGroup or Get-ACL, at the Active Directory module command prompt, type Get-Help Get-ADGroup –detailed or Get-Help Get-ACL –detailed, and then press ENTER.