|
| 1 | +--- |
| 2 | +description: Queries Active Directory (AD) to find principals that have been granted permission to read Windows Local Administrator Password Solution (LAPS) password attributes. |
| 3 | +external help file: lapspsh.dll-Help.xml |
| 4 | +Module Name: LAPS |
| 5 | +online version: https://learn.microsoft.com/powershell/module/laps/find-lapsadextendedrights?view=windowsserver2019-ps&wt.mc_id=ps-gethelp |
| 6 | +schema: 2.0.0 |
| 7 | +Locale: en-US |
| 8 | +ms.date: 04/10/2023 |
| 9 | +title: Find-LapsADExtendedRights |
| 10 | +--- |
| 11 | + |
| 12 | +# Find-LapsADExtendedRights |
| 13 | + |
| 14 | +## SYNOPSIS |
| 15 | +Queries Active Directory (AD) to find principals that have been granted permission to read Windows |
| 16 | +Local Administrator Password Solution (LAPS) password attributes. |
| 17 | + |
| 18 | +## SYNTAX |
| 19 | + |
| 20 | +``` |
| 21 | +Find-LapsADExtendedRights [-Credential <PSCredential>] -Identity <String[]> [-Domain <String>] |
| 22 | + [-DomainController <String>] [-IncludeComputers] [<CommonParameters>] |
| 23 | +``` |
| 24 | + |
| 25 | +## DESCRIPTION |
| 26 | + |
| 27 | +The `Find-LapsADExtendedRights` cmdlet is used by administrators to query which principals have |
| 28 | +been granted permissions to read the LAPS password attributes. |
| 29 | + |
| 30 | +## EXAMPLES |
| 31 | + |
| 32 | +### Example 1 |
| 33 | + |
| 34 | +```powershell |
| 35 | +Find-LapsADExtendedRights -Identity LapsTestOU |
| 36 | +``` |
| 37 | + |
| 38 | +```Output |
| 39 | +ObjectDN ExtendedRightHolders |
| 40 | +-------- -------------------- |
| 41 | +OU=LapsTestOU,DC=laps,DC=com {NT AUTHORITY\SYSTEM, LAPS\Domain Admins, LAPS\LapsAdmins} |
| 42 | +``` |
| 43 | + |
| 44 | +This example shows how to run the cmdlet. |
| 45 | + |
| 46 | +## PARAMETERS |
| 47 | + |
| 48 | +### -Credential |
| 49 | + |
| 50 | +Specifies the credentials to use when updating AD. If not specified, the current |
| 51 | +user's credentials are used. |
| 52 | + |
| 53 | +```yaml |
| 54 | +Type: System.Management.Automation.PSCredential |
| 55 | +Parameter Sets: (All) |
| 56 | +Aliases: |
| 57 | + |
| 58 | +Required: False |
| 59 | +Position: Named |
| 60 | +Default value: None |
| 61 | +Accept pipeline input: False |
| 62 | +Accept wildcard characters: False |
| 63 | +``` |
| 64 | +
|
| 65 | +### -Domain |
| 66 | +
|
| 67 | +Specifies the name of the domain to connect to. |
| 68 | +
|
| 69 | +```yaml |
| 70 | +Type: System.String |
| 71 | +Parameter Sets: (All) |
| 72 | +Aliases: |
| 73 | + |
| 74 | +Required: False |
| 75 | +Position: Named |
| 76 | +Default value: None |
| 77 | +Accept pipeline input: False |
| 78 | +Accept wildcard characters: False |
| 79 | +``` |
| 80 | +
|
| 81 | +### -DomainController |
| 82 | +
|
| 83 | +Specifies the name of the domain controller to connect to. |
| 84 | +
|
| 85 | +```yaml |
| 86 | +Type: System.String |
| 87 | +Parameter Sets: (All) |
| 88 | +Aliases: |
| 89 | + |
| 90 | +Required: False |
| 91 | +Position: Named |
| 92 | +Default value: None |
| 93 | +Accept pipeline input: False |
| 94 | +Accept wildcard characters: False |
| 95 | +``` |
| 96 | +
|
| 97 | +### -Identity |
| 98 | +
|
| 99 | +Specifies the name of the OU to query. |
| 100 | +
|
| 101 | +This parameter accepts several different name formats that influence the criteria used in the |
| 102 | +resultant AD search. The supported name formats are as follows: |
| 103 | +
|
| 104 | +- distinguishedName (begins with a `CN=`) |
| 105 | +- name (for all other inputs) |
| 106 | + |
| 107 | +```yaml |
| 108 | +Type: System.String[] |
| 109 | +Parameter Sets: (All) |
| 110 | +Aliases: |
| 111 | +
|
| 112 | +Required: True |
| 113 | +Position: Named |
| 114 | +Default value: None |
| 115 | +Accept pipeline input: True (ByPropertyName, ByValue) |
| 116 | +Accept wildcard characters: False |
| 117 | +``` |
| 118 | + |
| 119 | +### -IncludeComputers |
| 120 | + |
| 121 | +Specify this parameter to also check computer objects for the permissions. |
| 122 | + |
| 123 | +```yaml |
| 124 | +Type: System.Management.Automation.SwitchParameter |
| 125 | +Parameter Sets: (All) |
| 126 | +Aliases: |
| 127 | +
|
| 128 | +Required: False |
| 129 | +Position: Named |
| 130 | +Default value: None |
| 131 | +Accept pipeline input: False |
| 132 | +Accept wildcard characters: False |
| 133 | +``` |
| 134 | + |
| 135 | +### CommonParameters |
| 136 | + |
| 137 | +This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, |
| 138 | +-InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, |
| 139 | +-WarningAction, and -WarningVariable. For more information, see |
| 140 | +[about_CommonParameters](http://go.microsoft.com/fwlink/?LinkID=113216). |
| 141 | + |
| 142 | +## INPUTS |
| 143 | + |
| 144 | +### System.String[] |
| 145 | + |
| 146 | +## OUTPUTS |
| 147 | + |
| 148 | +### System.Object |
| 149 | + |
| 150 | +## NOTES |
| 151 | + |
| 152 | +## RELATED LINKS |
| 153 | + |
| 154 | +[Windows LAPS Overview](https://go.microsoft.com/fwlink/?linkid=2233901) |
0 commit comments