You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
When you're not using the pre-defined target groups of "Domain Controllers" or "Domain Computers" the resulting subscription that's loaded can't be opened in the UI (error screen shot attached).
This is because the resulting XML tag "AllowedSourceDomainComputers" ends up containing the name of the target group instead of the group SID. Adjusting the line in the script per below converts the group name to a SID and results in the problem being "fixed"
Very true. I did not even look at the GitHub Issues page when I had this issue, and fixed it like this on my test environment.
Looking at it, yours might be more elegant.
When you're not using the pre-defined target groups of "Domain Controllers" or "Domain Computers" the resulting subscription that's loaded can't be opened in the UI (error screen shot attached).
This is because the resulting XML tag "AllowedSourceDomainComputers" ends up containing the name of the target group instead of the group SID. Adjusting the line in the script per below converts the group name to a SID and results in the problem being "fixed"
Default{$xmlWriter.WriteElementString("AllowedSourceDomainComputers","O:NSG:BAD:P(A;;GA;;;"+([System.Security.Principal.NTAccount]($Channel.TargetGroup)).Translate([System.Security.Principal.SecurityIdentifier]).Value+")S:")}
The text was updated successfully, but these errors were encountered: