$ 0 0 BTW, I wrote a blog post with updated code: https://www.sysadmins.lv/blog-en/how-to-read-adcs-enrollment-agentcertificate-manager-rights-in-powershell.aspx