Skip to content

2. Comparison

Robin Granberg edited this page Jul 22, 2022 · 5 revisions

Create a template

The first step is to create a template file of an object to use for comparing. This will result in a CSV with a format adapted for comparing.

CLI

When using the CLI the most important parameter is the "-Output" parameter. The out put must be set to CSVTEMPLATE

.\ADACLScan.ps1 -Base "ou=mig,dc=contoso,dc=com" -Output CSVTEMPLATE

Report saved in: C:\Scripts\mig_CONTOSO_adAclOutput20220722_182746.csv

This CSV-file is now our template for comparison.

GUI

In the GUI there is option to select "CSV Template" as an output.

Start ADACLScan.ps1

Click Connect.

Select the node mig under DC=contoso,DC=com.

Select "CSV Template" in the Output Options box on the Scan Options tab.

Click Run Scan.

In the Log: you will see:

[07/22/2022] Report saved in: C:\Scripts\mig_CONTOSO_adAclOutput20220722_183924.csv

Compare using a template

To compare you must have a CSV-file in the right format. That is a CSV-file created with CSVTEMPLATE/CSV Template options.

CLI

In the CLI you select the object with -Base* and then select the CSV-file using the -Template parameter.

The following command will result in an output with the possibility to see the state of each ACE on the object compared with the CSV-template.

.\ADACLScan.ps1 -Base "ou=mig,dc=contoso,dc=com" -Template C:\Scripts\mig_CONTOSO_adAclOutput20220722_182746.csv

GUI

Start ADACLScan.ps1

Click Connect.

Select the node mig under DC=contoso,DC=com.

Select "Enable Compare" on the Compare tab.

Click Select Template and select the CSV-file.

Select "HTML" in the Output Options box on the Scan Options tab.

Click Run Scan.

This will result in a report of the state compared with the CSV-file.

Clone this wiki locally