Would you like to learn how to configure the GenericWrite permission on a domain user account object? In this tutorial, we will show you how to configure the GenericWrite permission on a user object in Active Directory.

• Windows 2012 R2
• Windows 2016
• Windows 2019
• Windows 2022
• Windows 10
• Windows 11

Equipment list

Here you can find the list of equipment used to create this tutorial.

This link will also show the software list used to create this tutorial.

Related tutorial - PowerShell

On this page, we offer quick access to a list of tutorials related to PowerShell.

Tutorial Powershell - Configure the GenericWrite permission to user account

Start a Powershell command-line.

Start Powershell

In our example, Bruno will receive the GenericWrite permission over Julian.

Copy to Clipboard

Get the DistinguishedName of a user account.

Copy to Clipboard

Get the user object access list.

Copy to Clipboard

Select the GenericWrite permission.

Copy to Clipboard

Select the Allow type of permission.

Copy to Clipboard

Select the inheritance type of permission.

Copy to Clipboard

Create the access list to add the GenericWrite permission.

Copy to Clipboard

Add the GenericWrite permission.

Copy to Clipboard

Apply the GenericWrite permission.

Copy to Clipboard

List the GenericWrite permission of the user object.

Copy to Clipboard

Here is the command output.

Copy to Clipboard

You must have RSAT installed or have a copy of its DLL loaded.

Copy to Clipboard

Congratulations! You are able to configure the GenericWrite permission using Powershell.