I posted a question earlier about how to remove permissions for a specific user/group from an Active Directory OU. Based on the help I got here, I was able to come up with a script. Now my script creates a log like this (Please see attached csv shot. Note: I kept the headers the same name as I get in the ACL object).
The first column basically tells me if the remove permission operation on the ACL was successful or not. If it was it would be True and it would be False if it was unsuccessful.
However, I'm supposed to create another script to ensure we have means to do a rollback. Essentially I have to use whats in that csv file to create the ACE and add it back to the OUs ACL (in case we need to roolback).
The issue is this. On MSDN, there are like six constructors for creating an ACE. http://msdn.microsoft.com/en-us/library/system.directoryservices.activedirectoryaccessrule(v=vs.110).aspx
So my question is this. Which constructor I should use as there are six of them.
