Set-GroupToSecure

2.0

Modifies an Active Directory Group's ACL to match 'ADMINSDHOLDER' to effectively lockdown the group, disabling inheritance, so only Domain Admins and Enterprise Admins can modify membership.  This helps secure high risk custom RBAC groups such as a 'Server Admins' group.

NOTE - Requires ActiveDirectory module to be installed on the system executing the script.  Also
Modifies an Active Directory Group's ACL to match 'ADMINSDHOLDER' to effectively lockdown the group, disabling inheritance, so only Domain Admins and Enterprise Admins can modify membership.  This helps secure high risk custom RBAC groups such as a 'Server Admins' group.

NOTE - Requires ActiveDirectory module to be installed on the system executing the script.  Also requires the executer of the script to have Domain Admin credentials available.


Show more

Installation Options

Copy and Paste the following command to install this package using PowerShellGet More Info

Install-Script -Name Set-GroupToSecure

Copy and Paste the following command to install this package using Microsoft.PowerShell.PSResourceGet More Info

You can deploy this package directly to Azure Automation. Note that deploying packages with dependencies will deploy all the dependencies to Azure Automation. Learn More

Manually download the .nupkg file to your system's default download location. Note that the file won't be unpacked, and won't include any dependencies. Learn More

Owners

Copyright

All rights reserved.

Package Details

Author(s)

  • Peter Remstad

Dependencies

This script has no dependencies.

FileList

Version History

Version Downloads Last updated
2.0 (current version) 49 6/23/2021
1.0 32 8/11/2020