-
Notifications
You must be signed in to change notification settings - Fork 162
2. Comparison
The first step is to create a template file of an object to use for comparing. This will result in a CSV with a format adapted for comparing.
When using the CLI the most important parameter is the "-Output" parameter. The out put must be set to CSVTEMPLATE
.\ADACLScan.ps1 -Base "ou=mig,dc=contoso,dc=com" -Output CSVTEMPLATE
Report saved in: C:\Scripts\mig_CONTOSO_adAclOutput20220722_182746.csv
This CSV-file is now our template for comparison.
In the GUI there is option to select "CSV Template" as an output.
Start ADACLScan.ps1
Click Connect.
Select the node mig under DC=contoso,DC=com.
Select "CSV Template" in the Output Options box on the Scan Options tab.
Click Run Scan.
In the Log: you will see:
[07/22/2022] Report saved in: C:\Scripts\mig_CONTOSO_adAclOutput20220722_183924.csv
To compare you must have a CSV-file in the right format. That is a CSV-file created with CSVTEMPLATE/CSV Template options.
In the CLI you select the object with -Base* and then select the CSV-file using the -Template parameter.
The following command will result in an output with the possibility to see the state of each ACE on the object compared with the CSV-template.
.\ADACLScan.ps1 -Base "ou=mig,dc=contoso,dc=com" -Template C:\Scripts\mig_CONTOSO_adAclOutput20220722_182746.csv
Start ADACLScan.ps1
Click Connect.
Select the node mig under DC=contoso,DC=com.
Select "Enable Compare" on the Compare tab.
Click Select Template and select the CSV-file.
Select "HTML" in the Output Options box on the Scan Options tab.
Click Run Scan.
This will result in a report of the state compared with the CSV-file.