Skip to main content
Version: 2.2.1-preview

AD-GPOREP-07 - GPOs with deny ACE count should be retrievable

Michael Soule
Contributed by Michael SouleAll contributors →

Overview​

This test retrieves GPO state data and counts how many GPO reports indicate that a Deny ACE is present.

Test Metadata​

FieldValue
Test IDAD-GPOREP-07
SeverityUnknown
SuiteActive Directory
CategoryAD.GPOState
PowerShell testTest-MtAdGpoDenyAceCount
TagsAD, AD-GPOREP-07, AD.GPOState

Source​

  • Pester test: tests/ad/gpostate/Test-MtAdGpoDenyAceCount.Tests.ps1
  • PowerShell source: powershell/public/ad/gpostate/Test-MtAdGpoDenyAceCount.ps1