lkarlslund / Adalanche

Active Directory ACL Visualizer and Explorer - who's really Domain Admin? (Commerical versions available from NetSection)
https://www.netsection.com
GNU Affero General Public License v3.0
1.65k stars 156 forks source link

Deselect Node and Edges filter. #24

Closed LHBL2003 closed 1 year ago

LHBL2003 commented 1 year ago

I don't find the tool bad, but sometimes I don't want the organization admins, domain admins and administrators to be displayed. To do this, I have to check off all the entries in Edges and Nodes. Is there a way to specify these at the start or to deselect all?

lkarlslund commented 1 year ago

Yes, your can do it like this:

<includequery>,<excludequery>

So as an example:

(name=MyGroup),(&(dataLoader=Active Directory)(objectCategory=Group)(|(objectSid=S-1-5-32-544)(objectSid=S-1-5-21-*-512)(objectSid=S-1-5-21-*-519)))

So now your search looks for MyGroup as the target, but will never include any of the groups you mentioned in the following node results.

Was this what you were looking for?

lkarlslund commented 1 year ago

Closed due to lack of response

LHBL2003 commented 1 year ago

Danke für den Tipp, leider konnte ich es jetzt erst testen. Tatsächlich hat mit (name=Groupname*) und die Option „Reverse“ geholfen. Denn ich wollte sehen, in welchen lokalen Gruppen meine globalen Gruppen sind. :D Ich hab halt nicht gesehen, dass ich in die falsche Richtung schaue. Vielen Dank für die schnelle Hilfe.