netwrix / pingcastle

PingCastle - Get Active Directory Security at 80% in 20% of the time
https://www.pingcastle.com
Other
2.35k stars 292 forks source link

ACL scanner #187

Closed thaneye closed 10 months ago

thaneye commented 1 year ago

Can you enable a default execution of aclcheck scanner or at least allow the users to be added as rguments?

Currently if you execute PingCastle.exe --scanner aclcheck an extra step needed to include users.

An-dir commented 1 year ago

I would like to suggest to add the parameter --scmode-file (like smb scanner) to the code that may contain a separated list of names or SIDs one per line. If --scmode-default with an empty value is given it could switch to default (everyone, ...). Both options should skip interactive mode.

clamoune commented 1 year ago

The other way to do it, is to create a txt file with a carriage return save it. Launch the command : pingcastle --server %server_name% --scanner aclcheck < txt_file

vletoux commented 10 months ago

the alternative is to run: echo. | pingcastle --server %server_name% --scanner aclcheck Important: no space between echo and dot