# Get ACL Permissions for a specific OU
(Get-ACL
“AD:$((Get-ADOrganizationalUnit
-Identity ‘OU=Computers,DC=Test,DC=LOCAL’).distinguishedname)“).access |
Select
IdentityReference,AccessControlType,ActiveDirectoryRights.IsInherited
#Other examples available from
https://www.easy365manager.com/how-to-document-ou-delegation/
https://shellgeek.com/get-ad-ou-permissions-report/