add delegation activedirectory powershell - permission full control

Question

Anonymous

hello

I need to add full control permission (delegation) on OU in Active Directory to admin group

I understand that the command should be used : set-acl

But all articles write about authorization folder on a network folder and not users or groups with permission on AD

I want to use poweshell script and I did not find any articles on the subject - thank you for your help

Accepted answer

0 additional answers

Answer 1

Young Yang (Shanghai Wicresoft Co,.Ltd.) 661

Hi,

Maybe you can try this :

$ou = "AD:\OU=test,DC=test,DC=com"

$group = Get-ADGroup administrators

$sid = new-object System.Security.Principal.SecurityIdentifier $group.SID

$acl = get-acl $ou

$ace = new-object System.DirectoryServices.ActiveDirectoryAccessRule $sid,"GenericAll","Allow"

$acl.AddAccessRule($ace)

set-acl -AclObject $acl $ou

Best wishes,

Young Yang