PowerShell To Set Folder Permissions

Question

I am trying to use the  default  options in applying folder permissions  by that  I mean that using the  Full Controll  Write  Read  etc  in the  Properties  for a folder   The following script works to add the user in  but it applies  Special Permissions  - not the ones with the tick boxes for the ones visible in the properties menu of the folder    Acl   Get-Acl    R9N2WRN Share    Ar   New-Object System Security AccessControl FileSystemAccessRule   user   FullControl   Allow     Acl SetAccessRule  Ar  Set-Acl    R9N2WRN Share   Acl   What am I doing wrong please

User · Answer

In case you had to deal with a lot of subfolders contatining subfolders and other recursive stuff. Small improvment of @Mike L'Angelo:

$mypath = "path_to_folder"
$myacl = Get-Acl $mypath
$myaclentry = "username","FullControl","Allow"
$myaccessrule = New-Object System.Security.AccessControl.FileSystemAccessRule($myaclentry)
$myacl.SetAccessRule($myaccessrule)
Get-ChildItem -Path "$mypath" -Recurse -Force | Set-Acl -AclObject $myacl -Verbose

Verbosity is optional in the last line

User · Answer

Specifying inheritance in the FileSystemAccessRule   constructor fixes this  as demonstrated by the modified code below  notice the two new constuctor parameters inserted between  quot FullControl quot  and  quot Allow quot     Acl   Get-Acl  quot   R9N2WRN Share quot    Ar   New-Object System Security AccessControl FileSystemAccessRule  quot user quot    quot FullControl quot    quot ContainerInherit ObjectInherit quot    quot None quot    quot Allow quot     Acl SetAccessRule  Ar  Set-Acl  quot   R9N2WRN Share quot   Acl  According to this topic   quot when you create a FileSystemAccessRule the way you have  the InheritanceFlags property is set to None   In the GUI  this corresponds to an ACE with the Apply To box set to  quot This Folder Only quot   and that type of entry has to be viewed through the Advanced settings  quot   I have tested the modification and it works  but of course credit is due to the MVP posting the answer in that topic

User · Answer

path    C  DemoFolder   acl   Get-Acl  path  username    System Security Principal WindowsIdentity   GetCurrent   Name  Attribs    username   FullControl    ContainerInherit ObjectInherit    None    Allow   AccessRule   New-Object System Security AcessControl FileSystemAccessRule  Attribs   acl SetAccessRule  AccessRule   acl   Set-Acl  path Get-ChildItem -Path   path  -Recourse -Force   Set-Acl -aclObject  acl -Verbose

User · Answer

Another example using PowerShell for set permissions  File   Directory    Verify permissions Get-Acl  quot C  file txt quot    fl    Apply full permissions for everyone  acl   Get-Acl  quot C  file txt quot   accessRule   New-Object System Security AccessControl FileSystemAccessRule  quot everyone quot   quot FullControl quot   quot Allow quot    acl SetAccessRule  accessRule   acl   Set-Acl  quot C  file txt quot   Screenshots    Hope this helps

User · Answer

Referring to Gamaliel  s answer   args is an array of the arguments that are passed into a script at runtime - as such cannot be used the way Gamaliel is using it   This is actually working    myPath    C  whatever file    get actual Acl entry  myAcl   Get-Acl   myPath   myAclEntry    Domain User   FullControl   Allow   myAccessRule   New-Object System Security AccessControl FileSystemAccessRule  myAclEntry    prepare new Acl  myAcl SetAccessRule  myAccessRule   myAcl   Set-Acl   MyPath    check if added entry present Get-Acl   myPath    fl

[file-permissions] PowerShell To Set Folder Permissions

Examples related to file-permissions

Examples related to powershell-3.0