Audit Delegation of Control On Windows Server AD
If you wants the Audit Delegation of Control that previously granted Delegation of Control rights such as Reset Password or Join Domain, you can refer to the following steps: Using Active Directory Users and Computers (GUI) Open Active Directory Users and Computers (ADUC). These custom permissions are typically the result of Delegation of Control wizard assignments. if you want to remove Using PowerShell Script you can use some cmdlet like Get-ADOrganizationalUnit / Get-Acl or Get-ADPermission etc. to grap data and visualize Using dsacls.exe You can use the dsacls.exe command-line tool to view permissions on individual OUs: Use AD ACL Scanner Reference:
