Public/Miscellaneous/Remove-PreWin2000FromOU.ps1
|
Function Remove-PreWin2000FromOU { <# .SYNOPSIS Remove Pre-Windows 2000 Compatible Access built-in group from the specified OU. .DESCRIPTION Remove the built-in group Pre-Windows 2000 Compatible Access from the specified OU. .EXAMPLE Remove-PreWin2000FromOU -LDAPPath "OU=Users,OU=XXXX,OU=Sites,DC=EguibarIT,DC=local" .PARAMETER LDAPpath [String] Distinguished Name of the object .NOTES Used Functions: Name | Module ---------------------------------------|-------------------------- Set-AclConstructor6 | EguibarIT.Delegation Get-AttributeSchemaHashTable | EguibarIT.Delegation .NOTES Version: 1.1 DateModified: 29/Sep/2016 LasModifiedBy: Vicente Rodriguez Eguibar vicente@eguibar.com Eguibar Information Technology S.L. http://www.eguibarit.com #> [CmdletBinding(SupportsShouldProcess = $true, ConfirmImpact = 'Medium')] [OutputType([void])] param ( # PARAM1 STRING for the Object Name [Parameter(Mandatory = $true, ValueFromPipeline = $true, ValueFromPipelineByPropertyName = $true, HelpMessage = 'Object Distinguished Name', Position = 0)] [ValidateNotNullOrEmpty()] [ValidateScript({ Test-IsValidDN -ObjectDN $_ })] [Alias('DN', 'DistinguishedName')] [String] $LDAPpath ) begin { Write-Verbose -Message '|=> ************************************************************************ <=|' Write-Verbose -Message (Get-Date).ToShortDateString() Write-Verbose -Message (' Starting: {0}' -f $MyInvocation.Mycommand) Write-Verbose -Message ('Parameters used by the function... {0}' -f (Get-FunctionDisplay $PsBoundParameters -Verbose:$False)) ############################## # Variables Definition [Hashtable]$Splat = [hashtable]::New() Write-Verbose -Message 'Checking variable $Variables.GuidMap. In case is empty a function is called to fill it up.' Get-AttributeSchemaHashTable } #end Begin process { try { # Remove inheritance, otherwise is not possible to remove Set-AdInheritance -LDAPPath $PSBoundParameters['LDAPpath'] -RemoveInheritance $true -RemovePermissions $true # Remove the List Children $Splat = @{ Id = 'Pre-Windows 2000 Compatible Access' LDAPPath = $PSBoundParameters['LDAPpath'] AdRight = 'ListChildren' AccessControlType = 'Allow' ObjectType = $Constants.guidNull AdSecurityInheritance = 'All' RemoveRule = $true } If ($Force -or $PSCmdlet.ShouldProcess($PSBoundParameters['Group'], 'Remove "Pre-Windows 2000 Compatible Access"?')) { Set-AclConstructor5 @Splat } #end If # Remove inetOrgPerson $Splat = @{ Id = 'Pre-Windows 2000 Compatible Access' LDAPPath = $PSBoundParameters['LDAPpath'] AdRight = 'ReadProperty', 'ListObject', 'ReadControl' AccessControlType = 'Allow' ObjectType = $Constants.guidNull AdSecurityInheritance = 'Descendents' InheritedObjectType = $Variables.GuidMap['inetOrgPerson'] RemoveRule = $true } If ($Force -or $PSCmdlet.ShouldProcess($PSBoundParameters['Group'], 'Remove "Pre-Windows 2000 Compatible Access"?')) { Set-AclConstructor5 @Splat } #end If # Remove Group $Splat = @{ Id = 'Pre-Windows 2000 Compatible Access' LDAPPath = $PSBoundParameters['LDAPpath'] AdRight = 'ReadProperty', 'ListObject', 'ReadControl' AccessControlType = 'Allow' ObjectType = $Constants.guidNull AdSecurityInheritance = 'Descendents' InheritedObjectType = $Variables.GuidMap['group'] RemoveRule = $true } If ($Force -or $PSCmdlet.ShouldProcess($PSBoundParameters['Group'], 'Remove "Pre-Windows 2000 Compatible Access"?')) { Set-AclConstructor5 @Splat } #end If # Remove User $Splat = @{ Id = 'Pre-Windows 2000 Compatible Access' LDAPPath = $PSBoundParameters['LDAPpath'] AdRight = 'ReadProperty', 'ListObject', 'ReadControl' AccessControlType = 'Allow' ObjectType = $Constants.guidNull AdSecurityInheritance = 'Descendents' InheritedObjectType = $Variables.GuidMap['user'] RemoveRule = $true } If ($Force -or $PSCmdlet.ShouldProcess($PSBoundParameters['Group'], 'Remove "Pre-Windows 2000 Compatible Access"?')) { Set-AclConstructor5 @Splat } #end If } catch { throw } } #end Process end { Write-Verbose -Message "Function $($MyInvocation.InvocationName) removed Pre-Windows 2000 Compatible Access from OU." Write-Verbose -Message '' Write-Verbose -Message '--------------------------------------------------------------------------------' Write-Verbose -Message '' } #end END } |