$usersid = get-domainuser | select -exp objectsid; "Got user SIDS";$computeracls = Get-DomainComputer | select -exp dnshostname | get-domainobjectacl; "Got computer ACLs"; "Search through acls for RBCD..."; foreach ($acl in$computeracls) { foreach($sid in$usersid) { acl | ?{.SecurityIdentifier -eq $sid -and ($.ActiveDirectoryRights -Like 'GenericAll' -or $_.ActiveDirectoryRights -Like '*GenericWrite*' -or$_.ActiveDirectoryRights -Like 'WriteOwner')} } }

Get all SIDS, all computer object ACLs, and find RBCD

$groupsid =$groups = Get-DomainGroup | Where-Object {$_.SamAccountName -ne "Domain Admins" -and$.SamAccountName -ne "Account Operators" -and $_.SamAccountName -ne "Enterprise Admins" -and$.SamAccountName -ne "Administrators" -and $_.SamAccountName -ne "DnsAdmins" -and$.SamAccountName -ne "Schema Admins" -and $_.SamAccountName -ne "Key Admins" -and$.SamAccountName -ne "Enterprise Key Admins" -and _.SamAccountName -ne "Storage Replica Administrators"} | select -exp objectsid; "Got group SIDS"; computeracls = Get-DomainComputer | select -exp dnshostname | get-domainobjectacl; "Got computer ACLs"; "Search through acls for RBCD..."; foreach ($acl in$computeracls) { foreach($sid in$groupsid) { acl | ?{.SecurityIdentifier -eq $sid -and ($.ActiveDirectoryRights -Like 'GenericAll' -or $_.ActiveDirectoryRights -Like '*GenericWrite*' -or$_.ActiveDirectoryRights -Like 'WriteOwner')} } }

Get all computer object SIDS, all computer object ACLs, and find RBCD

$computersid = get-domaincomputer | select -exp objectsid; "Got computer SIDS";$computeracls = Get-DomainComputer | select -exp dnshostname | get-domainobjectacl; "Got computer ACLs"; "Search through acls for RBCD..."; foreach ($acl in$computeracls) { foreach($sid in$computersid) { acl | ?{.SecurityIdentifier -eq $sid -and($.ActiveDirectoryRights -Like 'GenericAll' -or $_.ActiveDirectoryRights -Like '*GenericWrite*' -or$_.ActiveDirectoryRights -Like 'WriteOwner')} } }