What's Changed
First release of ADEffectiveAccess. This module brings Get-ADEffectiveAccess, a better way to dig into Active Directory ACLs without needing the Active Directory module. It’s been rewritten in C# for speed and packed with new features. Here’s what’s new:
-
C# Rewrite: Moved from the original PowerShell version to C# for faster, cleaner code.
-
New Features: Added support for LDAP searches (
-LdapFilter), audit rules (-Audit), deleted objects (-IncludeDeletedObjects) and more. Check out the Parameters section for the full list! -
Smart Caching: Built a per-session, per-domain cache for translating
ObjectTypeandInheritedObjectTypeGUIDs into readable names, cutting down LDAP queries. This caching makes repeated queries lightning quick, saving you time in busy AD environments:# First run: 691ms (initial query) PS /> Measure-Command { Get-ADEffectiveAccess john.galt } TotalMilliseconds : 691.6496 # Second run: 8ms (cached, super fast!) PS /> Measure-Command { Get-ADEffectiveAccess john.galt } TotalMilliseconds : 8.5416
If you hit any issues, don’t hesitate to submit them at https://github.com/santisq/ADEffectiveAccess/issues.
Full Changelog: https://github.com/santisq/ADEffectiveAccess/commits/v1.0.0