Export-Permission

Present complex nested permissions and group memberships in a report that is easy to read

Report additional properties of each account such as Name, Description, Title, Department, Company, or any specified property

Multithreaded with in-process caching for fast results

Works as a scheduled task

Works as a custom sensor script for Paessler PRTG Network Monitor (Push sensor recommended due to execution time)

Supports:
- Active Directory domain trusts
- Unresolved SIDs for deleted or otherwise unresolvable accounts
- Service SID resolution
- Recursive group memberships via an account's Primary Group as well as its memberOf property
- ACL Owners (shown in the report as having Full Control originating from Ownership)

Does not support these scenarios:
- Unsupported SDDL Components:
   - The System Access Control List (SACL) containing ACL Auditors is not reported.
   - The Primary Group is not reported.
- File permissions (ToDo enhancement; for now only folder permissions are reported)
- Share permissions (ToDo enhancement; for now only NTFS permissions are reported)

Behavior:
- Resolves each path in the SourcePath parameter
 - Local paths become UNC paths using the administrative shares, so the computer name is shown in reports
 - DFS paths become all of their UNC folder targets, including disabled ones
 - Mapped network drives become their UNC paths
- Gets children of the resolved paths to the specified RecurseDepth
- Gets all permissions for the parent paths
- Gets non-inherited permissions for the discovered children
- Uses CIM and ADSI to get information about the accounts and groups listed in the permissions
- Uses ADSI to recursively retrieve group members
 - Retrieves group members using both the memberOf and primaryGroupId attributes
 - Members of nested groups are retrieved and returned as members of the group listed in the permissions.
     - Their hierarchy of nested group memberships is not retrieved (for performance reasons).
- Exports permissions to files of the specified File Formats, using the specified report Detail levels
- Outputs permissions to the pipeline in the specified Output Format and using the highest specified report Detail level