Editing Group Permissions

Hey everyone, I did a little search, but couldn’t find much.

But let’s say that I wanted to edit the permissions on a groupr, how would i go about doing that? In this case i’m specifically talking about the security tab of that group when you search on it in ADUC.

I’m not sure how close i am, but the closest that I’ve come is has just been trying to LOOK UP the contents of the security tab using …

Get-ADGroup 'Random Group name' -Properties ntsecuritydescriptor | select -ExpandProperty ntsecuritydescriptor | select -ExpandProperty access 

When I run that, i think i’m getting a returned object of each listing (and it’s permissions) in that security tab.

Example:

ActiveDirectoryRights : CreateChild, Self, WriteProperty, ExtendedRight, Delete, GenericRead, WriteDacl, WriteOwner InheritanceType : All ObjectType : 00000000-0000-0000-0000-000000000000 InheritedObjectType : 00000000-0000-0000-0000-000000000000 ObjectFlags : None AccessControlType : Allow IdentityReference : BUILTINAdministrators IsInherited : True InheritanceFlags : ContainerInherit PropagationFlags : None 

Ideally i want to be able to add / modify / remove permissions via a script, and I’m not getting much luck with that.

Any ideas?