[PowerShell每日技巧]调用icacls.exe设置NTFS权限(20140321)

DAIC

There are many ways to add or change NTFS permissions. One is to reuse existing tools such as icacls.exe.

This function will create new folders that have default permissions. The script uses icacls.exe to explicitly add full permissions to the current user and read permisssions to local Administrators:

1. function New-Folder
   
2. {
   
3.   param
   
4.   (
   
5.     [String]
   
6.     $path,
   
7. 
   
8.     [String]
   
9.     $username = "$env:userdomain\$env:username"
   
10.   )
    
11. 
    
12.   If ( (Test-Path -Path $path) -eq $false )
    
13.   {
    
14.     New-Item $path -Type Directory | Out-Null
    
15.   }
    
16. 
    
17.   icacls $path /inheritance:r /grant '*S-1-5-32-544:(OI)(CI)R' ('{0}:(OI)(CI)F' -f $username)
    
18. }

复制代码

http://powershell.com/cs/blogs/tips/archive/2014/03/21/applying-ntfs-access-rules.aspx