Safeguard NTFS AD group reuse

This commit is contained in:
Meik
2026-07-16 15:43:00 +02:00
parent c4efc41c4b
commit c1e26ba615
4 changed files with 266 additions and 54 deletions

View File

@@ -57,6 +57,8 @@ namespace C4IT_IAM_SET
public Func<string, bool> CanManageTraversePermissionsForPath;
public string traverseBoundaryPath;
public bool forceStrictAdGroupNames;
public SecurityGroupReuseMode adGroupReuseMode = SecurityGroupReuseMode.Safe;
public bool adGroupMarkerBackfill;
public string groupNameSanitizeReplacement = Helper.DefaultGroupNameSanitizeReplacement;
public bool preserveAdGroupNameCase;
public bool WhatIf;
@@ -323,7 +325,9 @@ namespace C4IT_IAM_SET
effectiveDomainController = effectiveDomainController,
password = password,
ForceStrictAdGroupNames = forceStrictAdGroupNames,
PreserveAdGroupNameCase = preserveAdGroupNameCase
PreserveAdGroupNameCase = preserveAdGroupNameCase,
ReuseMode = adGroupReuseMode,
MarkerBackfill = adGroupMarkerBackfill
};
}
@@ -934,7 +938,9 @@ namespace C4IT_IAM_SET
Name = traverseNameTemplate.ReplaceLoopTag(loop),
description = traverseDescriptionTemplate.ReplaceLoopTag(loop),
technicalName = "CN=" + traverseNameTemplate.ReplaceLoopTag(loop) + "," + groupOUPath,
Scope = traverseGroupTemplate.Scope
securityGroupType = SecurityGroupType.Traverse,
Scope = traverseGroupTemplate.Scope,
MarkerPath = parent.FullName
};
DefaultLogger.LogEntry(LogLevels.Debug, $"Erstellte TraverseGroup: {newTraverseGroup.Name} (Loop: {loop})");
loop++;