Find a userA who has GenericAll rights over the userB using Active Directory Recon

active-directory powershell

Solution 1:

Get-ObjectAcl -SamAccountName joe.blane | ?{$_.ActiveDirectoryRights -eq "GenericAll"}

then

Convert-SidToName <SID>

Related

How to convert an epoch time in millisecond into an ISO like string according to local time?
Google Spreadsheet importing CSV with arbitrary date formatting?
How is the time complexity of the following while loop will be O(logn)?
Are any programs not safe to uninstall?
How do I access a hard drive from a live CD? [duplicate]
Uninstalling Skype 4.1 from 12.10
apt-get does not install dependencies
How to configure Evolution to use DavMail's LDAP contacts?
Why do many GNOME application packages depend on `libunity9`?
What is GSettings and what does Unity use it for?
Transmission causes internet to stop working - log off required to make it work again
Whisker menu missing